How the Pipeline Works
Data Ingestion
Market data flows in from Twelve Data (OHLCV bars for 678 instruments) and Crypto price feed (real-time crypto ticks). News sentiment and Fear/Greed index provide macro context.
Technical Analysis
Every bar is processed through EMA, RSI, MACD, StochRSI, Bollinger Bands, Gaussian Channel, VWAP, and Fibonacci levels. Elliott Wave detection adds structure analysis.
Signal Generation
Seven strategy modes evaluate each instrument: Strict, Dip, Scalp, Position, BB Squeeze Breakout, MACD Zero-Cross, and EMA Crossover. Multi-timeframe consensus gates weak signals.
Risk Management
Position sizing uses risk-per-trade / stop-loss distance. Exposure caps, max-concurrent-position limits, consecutive-loss circuit breakers, and daily P&L limits protect the account.
Smart Execution
Trades route to the correct broker based on asset class. IBKR handles equities/forex, Swyftx handles crypto, XRPL handles on-chain XRP. Credentials are decrypted momentarily, then wiped.
Exit Management
Three exit layers: real-time tick-based trailing stops (sub-second), 60-second cron safety net, and broker-side stop-losses (IBKR). Time-stops close stale positions automatically.
Security Model
| Layer | Implementation |
|---|---|
| Authentication | JWT tokens with bcrypt (cost 12), email verification gate, TOTP 2FA via speakeasy |
| API Key Storage | AES-256-GCM encryption with scrypt key derivation. Keys decrypted momentarily during trade execution, then wiped from memory. |
| Transport | HTTPS everywhere, HSTS headers, Helmet CSP with per-request nonces |
| Rate Limiting | Login attempts (5 per 15 minutes), API endpoints rate-limited, timing-safe token comparison |
| Input Validation | All user input sanitised, parameterised database queries, no raw SQL concatenation |
| Audit Trail | Every login, trade, and settings change logged with IP address and timestamp |
Tech Stack
| Component | Technology |
|---|---|
| Runtime | Node.js (ESM) |
| Server | Express + WebSocket (ws) |
| Database | SQLite (local development) / PostgreSQL (production) |
| Hosting | Render (Web Service) |
| Payments | Stripe (checkout sessions, webhooks, subscription management) |
| Nodemailer (SMTP) with HTML templates | |
| Market Data | Twelve Data REST + WebSocket API |
| Real-time Prices | Real-time crypto WebSocket, Twelve Data WebSocket (equities/forex) |
| Frontend | Vanilla HTML/CSS/JS — no framework, no build step |
Open architecture: Every component is visible in the source. No black boxes, no hidden fees, no vendor lock-in. The algorithm, risk management, and execution logic are all inspectable.