Authority with an expiry.
Review one exact spread, issue a signed capability, and submit it only while its 60-second authority window is still valid.
Ed25519 signatures, server time, persistent nonce consumption, and Alpaca Paper submission.
OPERATOR GATE
Console Ready
Interactive sandbox environment active. Any operator can inspect live candidate spreads, review exact OCC contract legs, and cryptographically sign 60-second Ed25519 permits directly.
Protected: Private signing keys and Alpaca broker write credentials remain strictly isolated on the server.
01 / PREPARE A SINGLE ORDER
Select an ETF market
02 / REVIEW AND SIGN
Exact trade binding
03 / EXECUTION WINDOW
The countdown begins only after the server signs a permit and persists its nonce.
PERMIT HISTORY
Every authority issued
Bound
The permit signs exact legs, quantity, price band, snapshots, and policy version.
Short-lived
The server rejects a permit at the 60-second expiry boundary, regardless of browser state.
Single-use
Nonce consumption occurs immediately before the only broker write path.