Live-Launch Hardening

Every 5 minutes, a portfolio-level monitor checks your trailing-30-day drawdown across all connected exchanges. If it crosses 20%, the breaker fires:

• All open orders are cancelled
• New orders are blocked
• A high-severity PagerDuty page is sent
• You get an email + Telegram alert

Recovery is manual — there's no auto-reset. Drawdowns past 20% mean something is structurally wrong; we want a human looking before the engine resumes.

Admin controls: current state, history of fires, manual override.

Daily at 04:15 UTC, every connected API key is scanned for withdrawal permissions. Any key with withdraw enabled is automatically revoked and you're notified.

We are non-custodial — your funds never leave your exchange. There is no scenario in which Smartbull needs withdraw permission.

Live trading walks a defined capital ladder:

• T0: $1k (cold-start, 14 days minimum)
• T1: $5k (proven — Sharpe ≥ 1 over 14d, MaxDD within bounds)
• T2: $25k (scaled — Sharpe ≥ 1.5 over 30d, cumulative PnL > 0)
• T3: $100k (institutional, 2-person approval + 24h cooling-off)

Auto-promotion runs daily 03:20 UTC. Manual override available to admins. Full runbook in docs/promotion-runbook.md.