Hardened where it counts: in live markets
Most order panels are built in sim, where fills arrive in one clip and nothing races. This one was built the other way — trading real money on prop evals through CPI prints, and fixing what the market broke.
- The rogue-order class is closed. The gap where a filled TP still reads open — the source of the infamous "surprise reverse trade" — is engineered out, with a fill-ledger and watchdog behind it.
- Partial fills price correctly. Large orders fill in clips on live; stops are priced off your intended size, so $800 of typed risk is $800 of real risk at any quantity.
- Your dollars are law. Changing quantity never silently rewrites your risk — impossible combos are blocked with the exact numbers instead.
- Clock-skew, ack-lag, and stale reads are handled. The panel never makes a decision on a number it knows can be 100ms old.
- Zero added latency. Every order call is asynchronous; the only pauses are safety gates you configure, and each names itself in the status bar.