- [ ] Keys, account IDs, and production/sandbox URLs come from configuration.
- [ ] Signatures cover the exact method, URI, timestamp, idempotency key, broker and access-key IDs, and body bytes.
- [ ] Decimals remain
{units, nanos}end to end; no binary floats are used. - [ ] Every logical command has one persisted
Idempotency-Key, reused unchanged only for retries. - [ ] Command acceptance is not treated as final order state.
- [ ]
client_order_idis not reused. - [ ]
/orders,/accounting, and/eventspersist independentlast_appliedvalues and matching filter sets. - [ ] Resumable-stream
seqgaps are accepted; only duplicates and regressions are dropped. - [ ] Reconnects use
sincewithin the one-hour replay window. - [ ] An accounting
resume_too_oldstops automatic processing and triggers operational reconciliation. - [ ] Market data rebuilds from a snapshot on an
md_seqgap. - [ ] Regular broker orders are sent only while the market is
active. - [ ] Position logic supports simultaneous
YESandNOholdings when required by the business model.