Multi-Venue Smart Order Routing
A single execution surface that quotes across paper venues, measures spread and toxic-fill on every fill, and records mid-price references for retroactive slippage attribution.
Paper-First · Shadow Mode · Read-Only
Adaptive Institutional
Profitability Engine
ApexFlow Engine runs every strategy in strict shadow-paper mode, measures edge with Bayesian confidence gates, and locks safety-critical flags behind a hash-chained audit trail — so quantitative operators can prove profitability before touching real capital.
PAPER · SHADOW · READ-ONLY · NO ENFORCEMENT
Why paper-first is not optional
Most trading platforms treat the paper-live boundary as a single button. ApexFlow Engine treats it as a governance program. Every strategy accrues shadow performance rows in a dedicated ledger. A gap-tolerant Bayesian streak counter requires fourteen consecutive profitable days before a promotion is even proposed. The promotion itself demands admin JWT plus cutover stage seven, a literal phrase, and an explicit CRITICAL audit entry — none of which can be forged from the outside because every mutation is hash-chained to the previous entry.
What the engine measures
Every capability below runs today in shadow mode. None require live-money authorisation to observe.
Bayesian Promotion Gate
Strategies must string together 14 gap-tolerant profitable days before the promotion gate opens. No opinion-based go-lives; every activation is data-earned.
Shadow Strategy Tournament
Expectancy rankings, edge-decay boards, allocator comparators, and regime compatibility matrices — all shadow-mode. Winners are visible before they touch capital.
Execution Telemetry Coverage
Every fill row carries a capture_status tag. Coverage percent is surfaced in real time so operators know how much of the day is fully instrumented.
Hash-Chained Audit Log
Safety-critical flag mutations, admin actions, and governance events are appended to a tamper-evident audit chain. Every write is signed with a rolling hash.
Explicit Live-Money Arming
LIVE_MODE_ENABLED stays false. To go live requires an admin JWT, cutover stage seven, a literal confirmation phrase, and a CRITICAL severity audit entry.
Current Safety Posture
Live trading is disabled by default and cannot be enabled without a governance-arming procedure.
LIVE_MODE_ENABLED is false. EFFECTIVE_MODE is PAPER. signal_quality_layer_enforced is false. All operator activity is read-only or shadow-mode. No real venue writes occur. This posture is verifiable via the authenticated trust page.