Safety and trust
Built so nothing goes live by accident.
You run the app on your own computer, on your own broker login. These are the guards between a click and a real order.
Paper first
Testers trade on paper only
Live trading needs a live-accounts file that switches it on for the install. The tester build never ships one, and without it the broker link refuses every account that is not paper and the managed IB Gateway refuses a live login.
The tester build cannot send a live order.
Review before Send
Every order shows its cost first
The ticket asks your broker what the order does to each account before it is sent, and shows the risk at expiry. Any change to the order drops the Review: you review again.
The broker's what-if margin and commission for each account before Send.
Per-account limits
Each algo is held to its allocation
An algo trades an account only through an allocation you set for that account: the capital it may use, the most lots, a share of margin and a budget. Copilot mode waits for your Approve on every entry. A fault stops new orders at the broker.
Capital, most lots, margin share and budget, set per account.
Your credentials
Your login stays on your machine
The app connects from your computer straight to your broker. Your IBKR login is stored by your operating system, not by us; a Deribit testnet key stays in a file in the app's data folder on your computer. Access tokens for connected assistants are stored only as a hash.
The IBKR login is kept in Windows Credential Manager or the macOS Keychain.