Pre-Trade Risk Check

Validates order parameters against configurable sanity limits to prevent catastrophic human input errors. The system compares the order's price, quantity, and notional value against instrument-specific thresholds.

• Price Collar: Rejects orders with a limit price deviating by more than X% from the last traded price or reference price.
• Maximum Order Value: Caps the gross notional value of a single order to prevent a $500M order when $5M was intended.
• Quantity Limit: Restricts the maximum share or contract quantity per order to a predefined ceiling.
• Duplication Check: Identifies and blocks identical orders submitted within a millisecond window, preventing double-clicks from reaching the market.

Performs a real-time, synchronous check against the executing account's available credit before releasing the order. This prevents a trader or algorithm from exceeding their allocated buying power.

• Intraday Margin: Validates that the order's margin requirement does not exceed the account's remaining intraday credit line.
• Counterparty Exposure: Aggregates pending and executed fills to calculate net exposure to a specific counterparty, blocking orders that breach concentration limits.
• Cash Available: For cash accounts, verifies that the aggregate cost of open buy orders plus the new order does not exceed the settled cash balance.
• Global Buying Power: Consolidates exposure across multiple asset classes and trading desks to enforce a firm-wide hard limit.

Calculates the projected position resulting from the order's execution and compares it against regulatory and internal position limits. The check considers both executed fills and pending unexecuted orders.

• Single Instrument Limit: Blocks an order if the resulting net position in a specific security exceeds the maximum allowed shares or contracts.
• Gross Position Limit: Enforces a ceiling on the absolute sum of long and short positions in a derivative contract, as mandated by exchanges like the CME.
• Delta-Adjusted Exposure: For options, converts the position into its equivalent underlying share exposure using real-time delta to validate against equity limits.
• Intraday vs. Overnight: Applies stricter, lower limits for positions held overnight versus those flattened intraday.

Enforces market access rules and regulatory mandates directly in the order path to prevent the firm from submitting illegal orders. This is the final compliance barrier before the order hits the exchange.

• Short Sale Restriction: Queries the locate status and blocks a sell order if a valid borrow locate is not confirmed for the security.
• Reg SHO Check: Validates that a short sale order is not submitted when a circuit breaker is in effect for that security.
• Wash Trading Prevention: Compares the account's recent buy and sell activity to block a trade that would result in a self-match or wash sale violation.
• Market Access Rule 15c3-5: Ensures the broker-dealer maintains aggregate credit and capital thresholds before providing sponsored access to a client.

Provides a direct interface to an emergency circuit breaker that can halt all order flow from a specific trader, desk, or algorithm when a risk threshold is breached. The kill switch operates independently of the core risk check logic.

• Trader-Level Kill: Instantly cancels all open orders and blocks new orders for a specific trader ID upon a breach event.
• Notional Loss Trigger: Automatically activates the kill switch when the realized and unrealized P&L for a session exceeds a maximum loss limit.
• Heartbeat Monitor: Continuously pings the trading engine; if the risk check service fails to respond, the kill switch defaults to a 'locked' state, preventing unchecked order flow.
• Manual Override: Allows a designated risk manager to manually trigger the kill switch via a secure, out-of-band command interface.

Monitors the message rate of an order session and throttles order submission if the frequency exceeds a predefined threshold. This prevents runaway algorithms from flooding the exchange and violating exchange order-to-trade ratio limits.

• Orders Per Second (OPS): Caps the maximum number of new order messages allowed per second from a single session.
• Order-to-Trade Ratio: Tracks the ratio of orders to executions and throttles the session if it exceeds the exchange's maximum allowed ratio, preventing excessive quoting.
• Consecutive Rejection Limit: Automatically locks a session if a sequence of orders is rejected by the exchange due to invalid parameters, indicating a malfunctioning algorithm.
• Token Bucket Algorithm: Implements a burst-tolerant rate limiter that allows short bursts of activity up to a defined ceiling while smoothing the average message rate.

A critical pre-trade validation that catches typographical errors in order entry before they reach the market. Checks include:

• Price collars: Reject orders exceeding a percentage deviation from the last traded price
• Quantity limits: Cap order size to a maximum notional value or share count
• Duplicate order detection: Identify identical orders submitted within milliseconds These validations prevent catastrophic losses like the 2014 Japanese fat-finger incident where a $617 billion erroneous order was cancelled milliseconds before execution.

A pre-trade gate that validates whether a client or trading desk has sufficient buying power to support the order. The system calculates:

• Margin requirements for derivatives and short sales
• Open order exposure aggregated across all venues
• Intraday credit utilization against firm-wide limits Orders that breach credit thresholds are either blocked or routed for manual approval, preventing unauthorized leverage accumulation.

Real-time verification that an order will not cause the firm to exceed regulatory or internal position limits. This includes:

• Exchange-mandated limits on futures and options contracts
• Single-stock concentration caps to avoid large shareholder disclosure triggers
• Net delta exposure for options portfolios Position checks aggregate across all accounts, desks, and trading venues to provide a consolidated view before order release.

An emergency mechanism that immediately halts all trading activity for a specific trader, desk, or the entire firm. Kill switches operate at multiple levels:

• Session-level: Terminates a single FIX session
• Trader-level: Cancels all open orders and blocks new submissions for a specific user
• Firm-level: Pulls the network connection to the exchange gateway Effective kill switches must execute in sub-millisecond timeframes to prevent runaway algorithms from causing catastrophic losses.

Pre-trade checks that enforce jurisdictional trading rules before order submission. Key validations include:

• Short sale restrictions: Verify locate requirements and uptick rules under Reg SHO
• Wash trade prevention: Block orders that would result in self-trading
• Market access rules: Ensure compliance with SEC Rule 15c3-5, which mandates broker-dealers implement risk controls for sponsored access clients Non-compliance can result in significant regulatory fines and reputational damage.

A pre-trade throttle that limits the ratio of orders submitted to executions achieved, preventing excessive quoting activity. European exchanges under MiFID II impose penalties when ratios exceed predefined thresholds. The risk check:

• Counts order messages per instrument over a rolling window
• Blocks new orders when the ratio approaches the penalty threshold
• Prioritizes execution probability over aggressive quoting strategies This mechanism discourages quote stuffing and protects market stability.