covenant
PERMIT CONSOLEPAPER ONLY

Authority with an expiry.

Review one exact spread, issue a signed capability, and submit it only while its 60-second authority window is still valid.

CRYPTOGRAPHY

Ed25519 signatures, server time, persistent nonce consumption, and Alpaca Paper submission.

OPERATOR GATE

Console Ready

Interactive sandbox environment active. Any operator can inspect live candidate spreads, review exact OCC contract legs, and cryptographically sign 60-second Ed25519 permits directly.

Protected: Private signing keys and Alpaca broker write credentials remain strictly isolated on the server.

Session ActivePAPER TRADING

01 / PREPARE A SINGLE ORDER

Select an ETF market

02 / REVIEW AND SIGN

Exact trade binding

Prepare a trade to review its exact legs, limit-price band, maximum loss, and active policy before authority is issued.

03 / EXECUTION WINDOW

00:60

The countdown begins only after the server signs a permit and persists its nonce.

PERMIT HISTORY

Every authority issued

No permits match this view. A signed permit will appear here immediately and remains visible after its 60-second window closes.

Bound

The permit signs exact legs, quantity, price band, snapshots, and policy version.

Short-lived

The server rejects a permit at the 60-second expiry boundary, regardless of browser state.

Single-use

Nonce consumption occurs immediately before the only broker write path.