Alpaca paper trading · recorded safety proof

An AI idea meets a hard safety boundary.

See exactly what happens when a proposed options trade is too risky: 13forge checks it, explains the refusal, and proves the broker was never reached.

01Recorded case
07Deterministic gates
0Broker calls after refusal
AISuggests the idea
RustChecks whether it is allowed
Market DataProvides executable structure
AlpacaReceives it only if safe

Oversized iron condor

Static evidence, no live order

AI proposal

Ready to check
Structure
Iron condor
Put wing width
29 points
Net credit
$3.75
Account balance
$100,000
Risk ceiling
2% · $2,000
Calculated max loss
$2,525

Replays a code-backed test case. It does not contact Alpaca.

Safe order path

  1. 01 Margin circuit breakerBlocks a new dispatch when account strain reaches the Governor’s VENT state. Waiting
  2. 02 Position-state checkIllegal order-state transitions are refused. Waiting
  3. 03 AI permission checkOnly an authorized verdict may continue. Waiting
  4. 04 Market stability checkUnstable market structure stops the order. Waiting
  5. 05 Trade structure checkAll option legs must form a valid spread. Waiting
  6. 06 Maximum-loss checkPotential loss must stay below 2%. Waiting
  7. 07 Alpaca submissionReached only after every check passes. Locked
Awaiting replayRun the checks to see the code-backed verdict.

The numbers cross the hard limit

No prediction or model opinion decides this result. A fixed, tested risk rule compares the calculated loss with the account ceiling.

Wing risk29 × $100$2,900
Credit received$3.75 × 100$375
Maximum loss$2,525$525 over limit
Decision receiptGATED PATH

REFUSED

$2,525 potential loss exceeds the $2,000 ceiling.

Price-format receiptVERIFIED

-3.28

A $3.28 net credit is serialized as a negative limit price. Debit prices are positive.

Creative AI, deterministic control

The model is useful for proposing a thesis. It never gets direct authority to place an order.

1

Strategist

Produces a constrained trade thesis.

2

Rust safety gates

7 deterministic gates, with GovernorVent checked before every other refusal path.

3

Alpaca

Receives a structured order only after every gate passes.

8-signal safety governor

The margin circuit breaker continuously monitors 8 strain axes. VENT is the hard dispatch stop in the current order path.

+1 ACCUMULATE 0 HOLD -1 VENT

What this portal can prove

Read complete proof map →
LiveGovernor VENT blocks dispatch before the other checksBacked by governor_vent_refuses_before_any_other_gate test
LiveState, risk, and structure checks control the order pathBacked by dispatch code and refusal tests
Verified159/159 tests: 110 forge-gate + 36 forge-daemon + 13 example testsCurrent receipt: 2026-09-02-night-governor
VerifiedCredit prices serialize as negative valuesBacked by an Alpaca convention test
TestedStrategy uses quoted strikes and pulls wings inside the capBacked by strategy tests
SupportMerkle seal, Fredholm residue, API pacerBuilt components, not presented as live gates