Master control

Live room

They create a desk and connect trade-only. You Admit — no payment. You Watch their record. The engine runs the card they elected. You never take keys. You never trade as them. This page keeps you signed in.

Master stay-signed-in is 12 hours. Staff 8 hours. Newest desks are first. We do not drop your session when a test logs in as you.

No guest desks yet.

Decision Center

Three gates you can show. We do not arm live from this website. We never recommend a pair.

Paper Floor fan-out

One elected HMAC may fill every matching paper election. Pair and direction must be repeated. We do not infer. Not an exchange key. Live writes stay refused.

Secret: none yet — elect a rotate

POST /api/hooks/signal

{"fanout":true,"pair":"ETH/BTC","direction":"long","nonce":"once","elected":true,"source":"floor"}

Headers: X-LBF-Timestamp and X-LBF-Signature (HMAC-SHA256 of timestamp.body). Pair must match desks that elected to listen. Staff with Control can rotate this secret. Not an exchange key.

HMAC above is the signed push path. Named platform APIs below are the keys you send to North Star or the Floor — one Bearer for pull and paper write.

Platform APIs

This is the 3Commas-style plug. A user connects trade-only. This website sits in the middle. You generate a named API, send it to North Star or the Floor, they pull ready desks and deploy elected signals back to that user. Not an exchange key. No 2FA yet. Venue secrets never live here.

1. They connect. The desk becomes visible.
2. They elect North Star. The desk is ready.
3. Engine: GET /api/v1/desks?ready=1 then POST /api/v1/desks/:userId/signal

Secret is shown once after generate.

No platform APIs yet.

Nox HMAC (dedicated)

Separate from Floor. Nox signs with this. After it exists, Floor cannot sign source:nox. Not an exchange key. Sidecar on this PC: data/nox-hmac.secret (gitignored). Shown once on rotate.

Secret: none yet — elect a rotate

Manual start — Adobe PDF

Payment stays later. You email the Adobe PDF. They create a desk and connect trade-only. Admit opens their desk with no card charged — customer grants plus North Star. Mark enrolled only records the election. Secrets never enter this website.

1. They create a desk and connect trade-only.
2. You email the Adobe PDF and keep the signed copy.
3. Admit — no payment, or they check the boxes on Enroll.
4. Their paper card runs. Engine pulls GET /api/v1/desks. Floor HMAC can add after that.

No one is waiting on the PDF.

Venue kill

Stops new deals on that exchange. Open deals can still panic. Not a recommendation.

Pair halt

Delisted or halted pairs do not get new entries; flatten is reduce-only. Type the pair. We do not pick one.

Venue maintenance

Scheduled pause of new entries and safety orders. Panic and flatten still work. Not a halt and not advice. Type the venue. We do not pick one.

No windows scheduled.

Paper chaos (tests)

Simulate exchange-down pauses new entries. Paper ticks still return. Not a halt. We do not invent fills.

Users

Grant authority

You grant people who work for you, or you grant a normal customer desk. One person, one desk. There are no subusers. Staff cannot add anyone and cannot change these boxes. Impersonate is a snapshot — they cannot act as the customer. That was the 3Commas hole.

Pick a person you already have. You grant. They cannot grant. No one adds a second hand to a desk.

Fleet

Filter every client bot by account, type, and pair. Open one to inspect and edit. Pause from here. You do not start or panic as them.

Paper tickets

Paper inbox; no mailer. Record ack first. Then type a follow-up — the customer sees it on Support. We never recommend a pair.

Elections

Audit