systemGhostTraderOS
runs onWindows (VPS, PC, Mac VM)
risk engineenforces every risk rule the fund runs on, across system, account, and strategy level
system
time-window restrictionsblocks new trades during news windows and market-closed / weekend; optional close-open per account
server DD defaultsa global drawdown default used when an account sets none
account
account DDcaps total account drawdown; blocks new and closes all open trades, the hard floor
daily DDcaps drawdown for the day; blocks new, then auto-resets
paused statemanual per-account pause; blocks new trades, lets open ones run
margin protectionkeeps exposure clear of margin-call levels
max open tradeslimits how many trades run at once
risk sizingsizes each position from the account's mode (% balance, balance / 10, or fixed cash)
equity auto-scalescales size above a base floor as equity grows
risk profilespackaged sizing and trade-management presets, built-in and custom
baselinethe balance each DD limit measures from; resets monthly
broker-side stopevery trade carries a broker-side stop loss as its ultimate net
offline safe-modekeeps managing open trades from cached limits if the connection drops
strategy
health gatepauses a strategy when its performance drops below set thresholds (win rate, session, day, RR, degradation)
scheduler / time engineowns the OS's notion of time, one central clock and the timing of every scheduled job
time
central clockone clock for the whole OS; NY default, timezone is a setting
market calendartrading sessions, plus market open / closed states
news windowsupcoming high-impact news windows (impact, forecast, previous, actual)
scheduled jobs
daily resetfires at the day boundary (NY midnight default); resets the daily drawdown counters
monthly resetfires at month start; re-baselines account balance
weekend closefires at the Friday cutoff; crypto accounts exempt
news refreshkeeps the upcoming-news windows current
heartbeat pulseperiodic health pulse and daily summary
backupfires the scheduled data backup
security engineowns the OS's security posture, identity, access, and boundaries
identity & access
manager loginone human login per fund, protected with 2FA
machine identityevery machine and service gets its own scoped, revocable credential
credential lifecycleissue, rotate, revoke; an unknown credential is rejected instantly
credential protectionevery credential hashed or encrypted, never in code, logs, or frontend
boundaries
non-custodialthe OS never holds any broker login or password; a full breach exposes no broker access, there's nothing custodial to steal
hardening
rate limitsapp-level throttling on every entry point
lockoutbad logins lock out; unknown or unauthorized attempts are rejected, alerted, and logged
data centerowns all persistence, the one store every record lives in and the single truth for all of it
model
one storeall data lives in one authoritative place, never scattered in private copies
fund per databaseeach fund is its own database; adding a fund adds a database
full isolationone fund's data can never reach another's, and an external user's data can never touch a fund's core
what's recorded
accountsper-account state and configuration
tradesevery signal, execution, and closed trade
rejectionsblocked and unidentified signals, with the reason
systemsystem events, maintenance, and resource readings
controlsthe live blackout and kill-switch flags
notificationsowns outbound comms, how the system tells you what's happening and how you ask it things
alerts
tradesentries, exits, and fills
riskdrawdown and risk events
rejectedblocked or unidentified signals, with the reason
systemhealth and infrastructure events
controlsblackout, kill switch, weekend, and config changes
securitysecurity events
strategywin-rate drops and cold strategies
milestonesequity highs, targets, and win streaks
anomalyearly warnings before something breaks
pulsea periodic all-good heartbeat
command center
read-onlylive query of P&L, balances, open trades, strategies, receivers, health, activity, market context, and summaries
safetymoney-critical actions (pause, blackout, kill, config) are never a button; they need the secure dashboard and 2FA
deliverysent to the fund manager's own channel, per fund
settingsthe OS's config core, holds every global switch and system-wide default
emergency
blackoutblocks all new signals from entering; open positions are left untouched
kill switchflattens every open position across all accounts, then turns blackout on
config
global defaultssystem-wide baselines for risk, health, and time gates
feature flagsglobal on/off switches for system features
supervisorthe operator's single control room over the whole system, full visibility and operational command
visibility
god-eye viewone live view of every part of the system, color-coded healthy / problem / unknown
capacitylive load and headroom, so you see what's near its limit
health monitorsilence counts as a problem, never "all-good"; stale data is flagged and never trusted
control
guided consolecommands built from menus, not typed free-form; an invalid one can't be formed
dry run and previewsee exactly what a command will affect before it runs ("affects 23 accounts")
type-to-confirmbig or money-critical commands must be typed to confirm
undooperational actions can be rolled back; an executed trade cannot
observe-onlyit never touches a trade decision, only operational actions
autonomy
make-safe onlyacts on its own only to reduce risk; anything that restores or adds is proposed for you to confirm
audit trailevery action records the exact rule and inputs behind it
data backupdurability for the fund's data, safe backups and clean recovery
backup
consistent snapshoteach fund's database is captured whole, never a partial mid-write copy
secrets kept apartconfig and secrets are backed up separately and encrypted, never mixed with the data
off-box, yoursbackups go off the machine to a destination you control
schedulescheduled runs, plus an automatic snapshot before any deploy or migration
recovery
verified restoreone restore path, integrity-checked before it runs
retentionkeeps recent backups plus periodic long-term snapshots, configurable
resource managerthe machine's health layer, the early-warning system for the box it runs on
monitoring
livenessconfirms the system is actually serving, not just "running", within about a minute
resourceswatches disk, CPU, and memory against set thresholds
runtimechecks the runtime stays intact, catching a latent fault before it becomes an outage
instancestracks the state of every running instance on the machine
recovery
auto-restartrestarts the service on failure, throttled so it can't loop, and starts it on reboot
watchdogan independent process on the box, outside the trade path, reporting a crash even when the app goes silent
external checkan off-box ping catches a total machine death the internal monitor would miss
trade copiercopy one strategy across many accounts at once, each on its own terms
copying
one strategy, many accountsdefine a strategy once; every connected account follows it, and updating it updates them all at once
per-account riskevery account applies its own risk, drawdown, sizing, and limits
parallel variantsrun the same strategy several ways at once, each with its own sizing, risk, or execution style
any mixyour accounts can span different assets and platforms
trust
non-custodialyou connect your own account; the system never holds your credentials
journalthe full record of your trading, explorable and compared across any window
record
since inceptionevery trading day kept from the first log, nothing discarded
per dayP&L, win rate, streaks, rule-adherence, and signals taken vs missed
setup imageeach trade keeps the actual chart it fired on, saved with the entry
analysis
deep cutsbreak performance down by strategy, instrument, session, and day of week
bests and worstsranked best and worst by strategy, day, instrument, streak, and rule-adherence
decay watchspot a strategy's edge fading as win rate, expectancy, or streaks trend down over time
compareany window against any other, day to month to all-time
explore
searchfilter the whole record by account, strategy, instrument, day, or time window
drillopen any account, strategy, or instrument to its full history, equity curve, and streaks
autotraderrun your strategies on other people's accounts, fully automated and fully walled off
serve
permitted strategiesexpose only the strategies you choose; users can't reach the rest
hands-off for thema user connects their account and your strategy runs it automatically
their own accountsusers connect their own accounts, non-custodial; you never hold their credentials
isolation
hard wallexternal users' accounts, trades, and data never touch or mix with your fund's core
read-only viewyou see their execution, trades, and balances to confirm it's working, but can never move their money
safety
risk ceilingyou set the hard caps; users tune within them, never past
signal feedpublish your strategies' signals out to subscribers, view-only
publish
you choosepick which strategies go out; the rest stay private
live signalssubscribers see each setup, entry, TP, SL, and close as it happens
they act, not yousubscribers trade on their own; the feed only shows the signal, never touches their account
record
sent vs performedyour own record of every published signal and how it did (win rate, profit factor, outcome)
isolation
walled offview-only, kept fully separate from your fund's core; never touches it
dashboardthe operator's admin surface, run the whole fund from one screen
overview
the cockpittotal capital, P&L across all-time, month, and today, floating, closed and net today, account count, and open trades
every levelthe fund total drills down to each strategy and each account, same numbers all the way in
accounts
one cardevery account carries the same card, identity, risk config, live state, wherever it sits
organizedaccounts stay grouped and sortable, never a flat list, however many you run
strategies
the statsper strategy, its signals, win rates, profit factor, and health in one view
what goes outper strategy, choose whether it publishes signals to subscribers and whether it runs on others' accounts
signals
live logevery signal as it fires, its entry, SL, TP, and result
health
one glancesystem status, machine health, and every log in one place
manage
the controlsadd and edit accounts and strategies, set global defaults, and share a read-only public view
installerstand up the system on a server and bring accounts online, no manual setup
provision
one and donecreate an account and its instance spins up on your server, preconfigured
nothing to typeconnection details are written for you; you never enter them by hand
your brokeryou log into your own broker; the system never stores your broker credentials
credentials
per accounteach instance gets its own unique key, revocable on its own
teardown
clean removaltaking an instance down is managed, never a raw delete, and never abandons an open trade
where it runs
just a receiverinstall only the receiver on your own server, local or online
full systemrun the whole OS on your own server, with a license
hostedon GhostTraders hosting there's nothing to install, it comes ready
reportthe system's own operational record, a permanent history of what happened and when
what it keeps
critical eventsoutages and failures, each with start, cause, what it hit, how long, and how it ended
milestonesdeploys and notable changes, marked at the time
how it records
automaticsignificant events log themselves as they happen
by handadd a milestone entry yourself
just factsplain, timestamped records, no interpretation
scope
system, not tradesthis is the system's own history; your trades and accounts live in the journal
tv libraryone shared toolkit so every strategy speaks to the system the same, correct way
standard signal
one formata single signal contract carrying bot, symbol, direction, entry, SL, TP, and action
no malformedany script that fills those values gets read correctly, nothing lost
anyone can useyou, us, or a third party building a script all send the same way
harvest
beyond the tradeadd it to your own strategy and it collects far more than the buy or sell
the internalsevery indicator and component value at the moment a signal fires
the outcomethe same values again when the trade wins or loses
what really winsgrades each strategy's internals against real wins and losses so you learn what conditions actually drive results
no drag
off to the sidecollecting never slows or changes a trade, it runs entirely apart from execution
optimizerstudies your strategies' data and finds what actually separates a win from a loss
what it does
finds the patternreads your strategies' recorded data and surfaces the conditions that win
graded on resultsevery pattern is measured against real wins and losses, never taken on faith
tells you, doesn't tradeit informs how you run your strategies; it never touches execution
trustworthy by design
enough evidencea pattern must hold on unseen data before it is trusted
no fake edgessample size gates it out of chasing noise
not the journal
prescriptivethe journal shows what happened; the optimizer points to what to do about it
bridgeplaces your trades at market and manages every one live, fast and reliable
execution
market fillsorders go in at the live price, filled and confirmed, never left pending
sized safe firstthe stop is set to real broker limits, then the lot is sized to it, then risk-checked, in that order
skip the bad fillif price has already run past the profit target when the order lands, it skips instead of chasing
live management
scales outtakes partial profit at each target and moves the stop to breakeven as the trade runs
trails the restthe remainder runs on a trailing stop you choose per account
watches drawdownlive equity is watched, and if your drawdown limit is hit the account is closed out on its own
reliability
never droppedno signal is ever lost, even through an outage
knows its speedit times every trade end to end so you can see your own execution latency
sourcethe front door, everything entering the system arrives and is checked here first
who can send
registered onlyevery source is registered before it can send a thing; unknown senders get nothing in
its own keyeach source carries its own token; a wrong or missing one is turned away at the door
many kindsTradingView, Telegram, an API or script, a manual fire, or a connected live account that reports its own trades
clean intake
one formateach kind is translated into the system's single standard format, whatever it spoke
new sourcessupporting a new kind takes one small adapter, nothing else in the system changes
protection
flood guardper-source limits catch a misfiring strategy before it can swamp the system
blackout awarewhile maintenance is on, nothing is let in, and the sender is told why
silence watcha registered source that goes quiet unexpectedly raises a flag, catching a dead feed
record
every arrivaleach incoming request is logged the moment it lands, before anything else
gatethe bouncer, every signal is proven real and valid before it goes any further
identity
known and activethe strategy behind a signal must be registered and switched on, or it's turned back
the signal itself
known actions onlyonly recognized actions pass; anything unexpected is refused, never waved through
sound payloadrequired fields present, direction matching the action, prices sane, or it's rejected
no duplicatesthe same signal arriving twice is caught and dropped, only the first counts
not stalea signal past its usable age is refused; a late entry is no longer worth taking
accountability
every verdict loggedeach pass or reject is recorded with its reason, so you always know why a signal did or didn't trade
routerthe post office, sends each signal to exactly the accounts meant to receive it
targeting
by marketa signal goes straight to the accounts tagged for its market, not scanned against all of them
by strategywithin that group, only the accounts assigned that strategy are the recipients
right sliceeach recipient gets only the details meant for it, nothing more
delivery
all at onceone signal reaches every matched account simultaneously
dead ends skipan account that can't be reached is logged and skipped, delivery moves on without waiting
carries commandsit delivers system commands too, like a close-all, not just entry signals
record
where it wentevery delivery is recorded, which accounts received a signal and which were skipped