CENTRAL EXECUTION CONTROL PLANE
One risk boundary.
Three independent votes.
Bots, MIDAS AI, TradingView and humans submit intents. A 2-of-3 risk quorum approves new risk, Redpanda queues it, and an isolated execution worker alone touches the exchanges.
BOT
TRADINGVIEW
MIDAS AI
MANUAL
→GATEWAYINTENT → 2/3 QUORUM → REDPANDA → EXECUTION WORKER→
BINANCE
BYBIT
OKX
TENANT
Prop desk
MEMBERS
RBAC
EXECUTION
Manual intent
No intent submitted.
STRATEGIES
Scoped API keys
Credentials are displayed once.
POLICY
Institutional limits
EXCHANGE VAULT
Connections
Trading permission only. Never enable withdrawals. Use IP allowlists and demo/testnet first.
HA CLUSTER
Quorum / Bus / Vault
New risk fails closed if quorum is unavailable. Reduce-only exits use the emergency escape quorum.
SECURITY
2FA / Passkeys
MFA status will appear here.
PROP RISK
Trader books / quarantine
ALERTS
Telegram / Slack
STRESS LAB
Scenario firewall
No stress run yet.
ORDER STATE MACHINE
Execution ledger
AUDIT