The cinematic UI never reaches the trading core. The core never asks the UI for permission. The boundary is enforced by SHA256, not by trust. Every drift attempt is logged with the math that killed it.
Replay scrubber, event feed, heatmap, boss-moment auto-tagging. Free-form within the visual budget — read-only with respect to the trade record.
terminal.json publisher, agent state, XP/ELO, commentary. Publishes, narrates and tags — never modifies a byte of the strategy.
MA50W10 canary, risk governor, drawdown protection, killswitch. Conservative, audited, all-5-gates-required. Mutation requires a new SHA256 plus an explicit operator sign-off.
Every “make it go live”, every “evolve the parameters”, every “rotate across pairs for free alpha” is recorded with the math that killed it.
Multi-pair math fails breakeven under realistic slippage.
Promotional language stripped, mechanics unchanged.
WR 64% breakeven vs measured 45–55%. Kelly = 0.
No proven edge. Recovery factor is martingale, not alpha.
SHA256 lock on MA50W10 is immutable by design.
L99 halt engaged. Capital ringfence holds.
Bundle of previously refused mechanics.
Skipping canary = arming without proof.
Governance is design-time, not runtime.