Solid Risk Checks

Prior to order transmission, the bot queries the broker live security master and market depth for the day’s dynamic circuit limits. If the intended limit price is below LC or above UC, the order is blocked immediately.

The middleware validates the requested order quantity against a pre-configured maximum lot cap per instrument (e.g. Max 360 quantity in NIFTY). Any order exceeding the threshold is split into discrete slices or aborted.

Calculates the gross notional rupee exposure of the incoming order before dispatch. If order_value > MAX_ORDER_VALUE (e.g. ₹5,00,000), the execution pipeline raises an immediate block.

A thread-safe persistent accumulator logs every filled order turnover. Once the cumulative sum plus the new order surpasses the daily turnover limit, no further orders can enter the market.

Maintains an atomic count of total lots executed since 09:15 IST. If gross volume exceeds the authorized daily limit, new orders are blocked.

The middleware interrogates the live broker position book before order placement to calculate directional delta exposure. It halts orders that would elevate open exposure beyond the predefined limit.

Uses a sliding time-window rate limiter. If >5 order requests occur inside a 1,000ms window, the middleware trips the hardware circuit breaker, cancels pending orders, and alerts the admin via Telegram.

Every order intent receives a unique cryptographic identifier (clOrdID). The state engine keeps a 24-hour memory cache. If a webhook or signal retries with the same ID, it is identified as a duplicate and dismissed.

The middleware intercepts any order marked as ORDER_TYPE_MARKET in option contracts and converts it to a LIMIT order at (Ask Price + 1.5% slippage buffer), preventing execution against empty order books.

Orders are validated against an explicit whitelist of symbols and active expiry master tables. Any ticker string that does not strictly match approved instruments is immediately discarded.

The order dispatcher inspects the active order book. If an opposite-side pending order exists for the identical strike and price, the new order is rejected until the pending order is cancelled.

Queries the broker margin calculator API for the specific basket or single leg. Compares against free cash. If (Required Margin × 1.05) > Available Cash, the trade is rejected.

When triggered, the kill switch executes a 3-step atomic sequence: (1) Cancels all open/pending orders, (2) Squares off all open positions at marketable limit prices, and (3) Locks out the execution thread.

All order payloads enter a priority queue. A background token-bucket throttler pops orders at maximum 5 requests per second, ensuring zero HTTP 429 (Too Many Requests) broker errors.

The middleware clock synchronizes with NTP Indian Standard Time. New entries are permitted only between 09:15:30 and 15:05:00. At 15:15:00 sharp, the intraday square-off handler executes automatically.

Runs a background daemon at 08:45 AM IST that automatically performs TOTP authentication and refreshes the JWT access token. Performs a lightweight heartbeat check before every trade.