System overview

System overview

The system is made of a web app with wallet sign-in, an accounts record, a trading backend that opens and closes the delta-neutral position, a scheduled keeper that watches and repairs it, on-chain execution through the trading key, guards, an event and audit stream, and a withdrawal path.

Deposits are currently supported on HyperCore, either through direct funding from another wallet or through an external bridge.

Trust model

During a one-time setup the user signs in, deposits funds, and approves a scoped trading key that lasts 90 days. That approval is the signature that matters, because it sets what the allowlist for the duration of the key.

The trading key can place and close orders, rebalance and re-hedge, and add margin to defend the position. It cannot move funds out of the account. Withdrawals are signed by the user: an EOA moves its own funds, and a Safe executes the transfer itself. Changes to the account's margin mode ride a separate user ceremony.

The practical result is that the widest range of action available to a malfunctioning key is trading and adding margin within the delta-neutral mandate. It cannot withdraw, and it cannot raise the account's risk.