Operational telemetry
latency · staleness · error
Critical-action measurement, WS positions state and operational endpoints.
Official hedge mode
Bitget Futures v2
USDT-M perpetuals with native hedge mode. Direction-aware: long, short, neutral and 50/50 hedge.
WebSocket channels
deduplicated broadcasters
price · grid_status · positions · tickers · open_orders · grid_orders · trade_fills · alerts · ai_reads.
Auth
JWT httpOnly cookie
Access 24h + refresh 7d. 5/min login rate limit. Exact-match origin validation on WS.
Bitget credentials
AES-256-GCM
Encrypted in SQLite per user. Never in logs, never in API responses. Passphrase rotated in 2026-03.
Defense in depth
Circuit breaker + AI Guard
Circuit breaker protection levels (warn/danger), regime detection, adaptive SL and auto-recovery after restart.
Backend ownership
clear domains
ai · auth · autonomous · billing · entitlements · exchange · grid · monitoring · positions · strategy_recipes.
Operations
SQLite WAL + 30d backup
Systemd resource limits (2G / 80% CPU). Bound to 127.0.0.1, exposed only through Nginx :443 with Let's Encrypt TLS.