AI Agentic Trading
An AI agentic trading desk for macOS. Nineteen strategies competing for one pool of capital, under pre-trade risk checks and broker-resident protection.
Judgment
Clearing the entry rules is not permission to trade. It is permission to be argued with. Every surviving candidate is handed to an adversarial judge, which builds a case against it from evidence the desk already holds, and only the unconvicted are funded.
The rest of the chart gets a vote.
The symbol’s other frames are polled on direction. Broad disagreement with the side the candidate wants to take, the daily frame included, is a conviction. A signal that only exists on the frame that produced it is not an edge, it is a coincidence with good timing.
This exact pairing has a history, and it is admissible.
Not the strategy in general, and not the symbol in general, but this precise pairing of the two. A pairing that has just been going wrong repeatedly does not get to try again at full conviction simply because a fresh bar arrived.
The trade has to survive its own execution.
The strategy’s measured history of entry slippage is set against the edge this candidate is claiming. If the fills this strategy actually gets have been consuming edges of that size, the trade is unprofitable before it exists, and the judge says so.
Every veto is booked as a zero dollar shadow position and carried through the same lifecycle as a funded trade, so what each refusal actually saved or cost becomes a measured quantity rather than a claim. The judge reports that record, and if the record turns against it, its authority steps back until the evidence restores it.
There is no approval queue, no discretionary override and no setting that lets an operator wave a trade past the chain. You set the account and the risk limits. It runs the desk, whether you are watching or asleep.
Schematic of the decision path. Not a live feed.
Intelligence
Almost no trading system can tell you whether it is getting better, because nothing in it is keeping score of itself. This one carries a standing measure of its own competence, assembled from four components, and it keeps the history so that improvement is something you can see rather than something you argue about.
How much closed experience actually stands behind the decisions being made right now. A desk that has not yet earned an opinion knows it, and says so, instead of trading like a veteran on its first morning.
Whether the capital is sitting in the strategies that are measurably earning, or merely in the ones that happen to be active. Being busy and being profitable are different states, and only one of them counts here.
How well the recent book is holding together, judged on the desk’s own closed trades rather than on a backtest that already knows the ending.
How many learned adjustments are currently in force: strategies benched, gates raised, allocations revived. A system that has learned nothing lately has a low reading here, and that is information too.
Every component is computed from the same tables the engine trades from. Nothing in it is a matter of opinion, nothing responds to how the last few days felt, and nothing moves the measure except outcomes that have actually been recorded.
The agent loop
This is what agentic actually means here: the software perceives, judges, acts, grades its own result and adjusts, without a human in the loop. No discretionary override, and no trade that skips a step. A chain of independent checks stands between a signal and your capital, each one recorded as it happens. Underneath runs a second loop, which measures how well those checks are performing and tunes them from what it finds.
Four of those eight can end a candidate. Every refusal is written down with the reason that ended it.
Almost every self improving trading system learns only from what it took. This one also learns from what it declined, which is the great majority of what a disciplined desk does. Twice the evidence, from the same market.
Execution
Expected edge is a claim. What the account receives after spread, fees and slippage is the result. The desk measures that gap continuously, from its own execution record, and prices it back into the next decision rather than discovering it at month end.
The subsystems
They divide into what the desk decides, what it remembers, and what it changes about itself. Each is scored by the machinery it supervises, and each earns its authority from its own record.
Specific thresholds, weights and formulas are withheld throughout this page. Licensees receive them in full.
One live ranking over everything actionable.
Inbound market events mark affected entries dirty in constant time, and a drain task re-scores them within milliseconds.
A second chair, on a short leash.
Only whitelisted controls inside hard bounds may apply themselves, and they do so with receipts. Everything else becomes a written work order for a human.
It fixes its own plumbing, and writes down that it did.
Dead poll tasks, stale feeds and a wedged database are repaired automatically, and every attempt is written to the events log.
Every yes and every no, kept forever.
Most systems record their trades. This one records its decisions, a far larger set, and that difference is what makes any of the learning possible.
The cost of every refusal is measured, not assumed.
Declined candidates are replayed against the bars that followed, turning the ledger into matched pairs of decision and outcome.
A report card on every goodbye.
Each close is replayed under a single counterfactual: the position keeps its original protection for the remainder of its hold clock.
Capital follows evidence, not opinion.
A Thompson sampling bandit over each strategy’s own posterior. The moment its evidence says it has stopped paying, its capital is withdrawn automatically.
It re-fits its own priors after every close.
Rolling backtests re-run minutes after the close and blend into the priors, weighted toward the long baseline so recency can never compound drift them away.
Each strategy gets the geometry its own record supports.
Gated by an evidence floor and damped by hysteresis, so a challenger must beat the incumbent repeatedly before anything moves.
Machine learning that has to earn its influence.
Gradient boosted trees on pre-registered features, validated by purged walk forward. A model that fails its deploy gates ships disabled.
Research discipline
Search enough features across enough events and impressive results appear by chance alone, every time, in any data. A learning system without a defence against that does not get smarter, it gets confidently wrong. The research stack is built around the problem rather than around ignoring it.
Bedrock
Under every autonomy mode, including full automatic. A finding that would require weakening any of these is skipped and explained rather than applied, and the list itself is one of the protected items, so nothing in the system can quietly shorten it.
Pre flight
The engine will not trade until an automatic self test passes. Nobody is asked to approve it. It simply runs, and takes about two minutes. The fourth step is the one that matters, because it proves stop orders genuinely reach the broker with real money before anything larger is at stake.
Then the ramp. Early trades run at a fraction of full size, stepping up only once the live order path has proven itself over a run of real fills.
The charter
A change that adds expected profit while weakening a loss bound fails this charter.
Governing document. Loaded verbatim into every audit the machine performs on itself.
Every judgment the system makes, whether a control change, a veto, an audit finding or a line of code it proposes, is tested against two hard goals and four questions. Which goal does this serve? What graded evidence supports it? How will success be measured? What is the damage if it is wrong, and what bounds that damage? A change that cannot answer all four is an observation, not an action.
The honesty requirements are enforced structurally rather than aspirationally. Claims are graded, and the grader’s verdicts outrank the rationale that produced them. Changes carry receipts: what changed, why, the value that was persisted, and the metric that will later prove or disprove it. The judge, the overseer and every strategy are held to the standard they apply to others.
Perception
So the desk draws on sources that are not, and on shapes a chart cannot show you. Filings, disclosures, funding, calendars, the book itself, and the changing geometry of the market as a whole. Every feed is best effort by design: a dead feed gates nothing, and the engine keeps flying.
Beyond price and volatility, the desk measures the market’s topology: how far apart assets are behaving from one another, treated as a point cloud under correlation distance. Assets dispersed and behaving independently is the normal state. The cloud collapsing, everything fusing into a single blob, is the documented shape that precedes a dislocation, and it is visible in the geometry before it is obvious in the prices.
Corporate insiders must report open market purchases of their own stock within two business days, and the filing reaches the regulator within minutes. Several distinct insiders buying the same company inside a few weeks is hard to explain as anything but a shared view, and it is the only timely public source of informed trading there is. The desk parses filings itself, builds its own universe from live clusters, screens it for liquidity and tradeability, and takes its holding period from a fitted study rather than a hunch. If the current study validates no horizon, the strategy stands down and says so on screen.
Clusters of legislative purchase disclosures, entered with no prior advantage whatsoever. They must earn weight live against the same bandit as everything else, or they get benched like anything else.
Fresh activist filings, initial filings only. The same terms apply: neutral prior, live evidence, no exceptions made for a good story.
Breakout longs are refused while perpetual funding sits crowded against its own trailing month, because the crowd paying to be long is not who you want to join. The premise ships with a study script, so a licensee can verify it rather than take it on faith.
No new single name entries near a known print, and positions close the session before it. A stop cannot protect across a gap. Standing aside can.
Above a configured volatility level, no new equity entries at all. A crisis brake, not a mood filter.
Top of book is spooled to disk all session, so questions about real spreads by symbol and hour, maker fills and adverse selection are answered from the desk’s own record instead of an assumption buried in a cost model.
The application
Sixteen screens in SwiftUI, resident in the menu bar, watching a Python engine that runs as its own supervised process. The two speak over a loopback interface bound to that machine alone. No inbound ports. Nothing listening to the internet.
Broker keys and risk limits. The keys go into the macOS Keychain and are never written to disk. After that the engine runs its pre flight and starts. On the next launch it resumes in whatever mode it last ran, and after a reboot the login item brings it back without anyone pressing anything.
Every row in the ledger is inspectable: what the strategy saw, which gate refused it, what the judge argued, and, days later, what the market did about that decision. The dashboard carries live market context derived from the same data the engine trades on, so the screen can never disagree with the trading logic.
The learning feed records every adjustment the desk makes to itself, with the evidence that caused it. Benches, revivals, raised gates, refreshed priors. It is the difference between a system that claims to adapt and one that shows you the receipt.
Alerts from charting platforms, or anything that can post JSON, enter as ideas and never as orders. They clear the same cost filter, sizing, ramp and caps as everything built in, and the allocator treats them as one more strategy with no prior, to be benched if they do not pay. An alert carrying a quantity is refused outright, because sizing is never the sender’s job.
The suite that guards all of this includes a check which drives a live regulatory filing the entire way through bars, strategy, sizing and routing into a protected order at the broker, with no human step anywhere in the path.
Tech Specs
Licensing
Sold to operators and firms who intend to run it, not to redistribute it. Every tier includes the charter, the owner’s guide and the reproducible research, because a system you cannot audit is one you should not run.
Fixed term, paper account only
Single operator, cleared for live
Perpetual, with build rights
Inquiries
Account size, the asset classes you care about, and whether you intend to operate it or build on it. Terms follow from that.
The thresholds behind all of this are withheld for the same reason the desk refuses most of its own signals: the value is in the calibration, and calibration given away is calibration destroyed. Licensees receive it in full.
Answered by an engineer, not a queue
Questions
Saved in this browser only. Nothing is sent anywhere. Accessibility statement