Control Room

Engine Healthy DCM Open DCO Linked Halt None
--:--:-- UTC DEMO

Control Room

Single-pane status for the regulated venue — real-time monitoring, market state, and the DCM/DCO settlement path. Surveillance analysts work the alert queue from here.

◐ Live metrics · simulated alerts
Open alerts 0 0 critical · live queue
Resolved today 14 avg time-to-resolve 17m
24h matched volume $1.42B ▲ 6.1% vs prior day
Markets open 3 / 3 24/7 · all crypto perps

System & settlement feeds

data-path health across the DCM/DCO stack
Matching engine Live
Healthy · seq lag 0
p99 match 41µs
TCP sync → indexer Live
Healthy · 0 frames dropped
seq 4,182,905
Solidus feed (T+1) To build
Healthy · lag 0.8s
1,284,902 recs today
DCO clearing link To build
Linked · 100% cleared
FCM omnibus · mock

Live alert queue

Appendix A — real-time market monitoring
SeverityTypeMarketDescriptionStatus

Markets

status snapshot

Market Monitoring

Real-time alerts on disorderly trading and market/system anomalies. Click any alert to open its case and move it through investigation. Regs 38.157 · 38.251(c) — Appendix A

○ Detectors to build · metrics live
Appendix A categories covered: system, volume & price anomalies · disorderly trading · message flooding · settlement disruptions · missing-participant data · price adjustments. Raw engine metrics (volume, price-staleness, queue depth, risk invariants) exist today; the anomaly detectors and alert store are the build target.
CriticalHighMediumLow
SeverityTimeTypeMarketAccountDescriptionStatus

Cases & Investigations

The alert lifecycle CFTC wants to see end-to-end: triggered → investigating → resolved/closed with justification, with analyst assignment, sign-off and a tamper-evident transition log.

○ Case manager · to build
Triggered0awaiting assignment
Investigating0in progress
Resolved0closed with reason
Closed (no action)0logged for audit
CaseOpenedTypeMarketSeverityAssigneeStatus

Markets

Per-product state, oracle-anchored price bands (±20%), and operator halt/pause controls. Halting a market requires two-person authorization. §III · §V · Appendix C

◐ State live · halt control to build
MktSymbolClassStatusMarkOracleBand ±20%24h volOpen int.Funding 8hControl
Price band and self-match prevention are live in the engine. Automatic oracle-driven closure exists today; an operator halt/pause with two-person control (the buttons here) is the build target — design is captured in the kill-switch spec.

Order & Trade Activity

Live blotter of orders, fills and rejections with engine reason codes — the data CFTC sees behind every alert. Every row carries the full audit-trail field set. §III · §IV

● Live engine data
Streaming · seq 4,182,905
TimeSeqEventSideMarketPriceSizeAccountResult

Accounts & Participants

Registry keyed on a single customer-level user ID that traces onboarding → order → execution → clearing. KYC/ECP status shown here; onboarding itself runs in the Bridge Portal / FCM. §II · §VI

◐ Accounts live · KYC/ECP/FCM to build
KYC:VerifiedPendingReview
User IDTypeFCMKYCECPStatusEquityMargin usedPos.

FCM & Clearing

FCM omnibus structure — each FCM holds a dedicated DCO/bank account; retail customers are internal sub-accounts. Clearing shown as light status indicators (sent / cleared / settled). §VI

○ FCM shim & clearing to build
Trades sent → DCO38,402today
Cleared38,402100% · 0 rejects
Pending settle0margin sync 11s ago
EOD margin calls2$418k total

Futures Commission Merchants

omnibus accounts & sub-account rollup
FCMIDStatusOmnibus balanceSub-accountsMargin postedClearing
An FCM shim layer over the engine core and the DCM↔DCO clearing interface are not yet built — these views are mocked against a demo FCM. Deposit/withdrawal handling, balances and real-time credit checks are live.

Risk Controls & Kill Switch

Pre-trade risk limits, circuit breakers, and emergency controls to prevent and mitigate market disruptions. Disruptive actions require two-person authorization, verified in-engine. Reg 38.255 · Appendix C

○ Controls to build · SMP/band live
Two-person control. Halt, suspend, switch-off and limit-change actions cannot be executed by one operator. Each requires a second authorizer; both Ed25519 signatures are verified by the engine and written to the audit trail.

Emergency kill switch

real-time intervention

Kill account session To build

Terminate a participant's active sessions and reject new intake immediately.

Mass-cancel orders Partial

Withdraw all resting orders for an account across every market in one action.

Suspend account To build

Block an account from trading while positions and balances are preserved.

Switch off product Partial

Halt a product across all accounts and firms in real time.

Circuit breakers & pre-trade controls

Price band Live Active

Oracle-anchored ±20% slippage boundary; aggressive orders beyond the band are auto-rejected (SLIPPAGE_EXCEEDED).

Self-match prevention Live Enabled

Maker order canceled when taker and maker share an address (SELF_TRADE).

Volume circuit breaker To build

Auto-pause when 1-min volume exceeds baseline by threshold.

Trigger

Volatility breaker To build

Auto-pause on price velocity beyond limit over rolling window.

Move / 60s

Pre-trade financial limits

per FCM / participant To build
ScopeMax position notionalMax order sizeMax open ordersCredit limit
Ridgeline Futures (FCM-001)$25,000,000$2,000,0001,000$40,000,000
Hudson Futures (FCM-002)$12,000,000$1,000,0001,000$18,000,000
Retail default tier$500,000$100,00050$750,000

Surveillance — Solidus

T+1 trade-practice (Appendix B) and market surveillance (§X) run in Solidus, which holds its own investigation dashboard. This panel covers the hand-off: feed health, the CFTC↔Solidus alert-name mapping, and an open-alert rollup. Reg 38.152 · 38.251–253

○ Export feed to build

Feed to Solidus

Healthy
Transport
2nd TCP sync subscriber To build
Last sync
11:42:07 UTC
Lag
0.8 s
Records sent today
1,284,902
Schema version
v3 · orders·trades·accounts
Reconciliation
0 gaps

Open Solidus alerts

managed in Solidus
Spoofing / Layering
3
Wash trading
1
Position-limit breach (§X)
2
Large-trader concentration (§X)
1

CFTC ↔ Solidus alert mapping

naming differences explained for the demo
CFTC termSolidus alertAppendix
Wash tradingSelf-Match / Wash TradeB
Accommodation tradingWash Trade AlertB
Spoofing / layeringSpoofing · LayeringB · 4c(a)(5)
Front-runningFront RunningB
Pre-arranged tradingPre-Arranged TradeB
Money passMoney PassB
Trading ahead / againstCustomer Order ProtectionB
Position limits / accountabilityPosition Limit Breach§X
Large-trader monitoringConcentration / Large Position§X
Cross-market manipulationCross-Product Manipulation§X
Marking the settlementRamping / Marking Close§X

Audit Trail & Recordkeeping

Event-sourced, deterministic record of every order, trade and operator action — millisecond timestamps, operator ID, and full trade reconstruction by sequence. §IX · Regs 38.551–553 · §1.31

◐ Capture live · WORM/integrity to build
Operator-ID captureSignerPubkeyLive · per request Live
Timestamp precision1 msorders · mods · trades
Retention target5 yr WORMS3 Object Lock To build
Integrity checkPartialCRC/continuity Partial

Trade reconstruction

deterministic replay from the event log
Replay sequence range Deterministic · same input → same state
seq 4,182,901 11:41:58.204Z ORDER_CREATE signer=ed25519:7n…c4e2 ETH-PERP BUY size=12.0 px=3,418.50 tif=GTC seq 4,182,902 11:41:58.204Z TRADE taker=7n…c4e2 maker=2mB…f0a1 ETH-PERP size=12.0 px=3,418.50 seq 4,182,903 11:41:58.731Z ORDER_CANCEL signer=ed25519:9xQ…b21c SOL-PERP order=5523109 reason=USER seq 4,182,904 11:41:59.010Z ORDER_CREATE signer=ed25519:4kP…7f3a BTC-PERP SELL size=0.40 px=64,980 REJECTED=SLIPPAGE_EXCEEDED seq 4,182,905 11:41:59.488Z TRADE taker=2mB…f0a1 maker=MM-01 BTC-PERP size=0.85 px=65,142

Audit log

orders, controls & case dispositions — newest first
Time (UTC)SeqActorActionObjectDetail