gitadmin/foxhunt
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(broker_gateway): require confirmation for cTrader live trading mode

Browse Source 
A single CTRADER_LIVE=true env var was enough to route real money orders
through the broker. Now requires CTRADER_LIVE_CONFIRMED=I_UNDERSTAND_REAL_MONEY
alongside it, preventing accidental live trading from copy-pasted configs.

Also adds prominent warning log when live mode activates and info log
for demo mode.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
jgrusewski
2026-02-23 23:17:43 +01:00
parent f1b5f84c6c
commit 960e8f9dcc
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
services/broker_gateway_service/src/main.rs
View File

@@ -73,8 +73,19 @@ async fn main() -> Result<()> {
.map(|v| v == "true")
.unwrap_or(false)
{
// Require explicit confirmation to prevent accidental live trading
let confirmed = std::env::var("CTRADER_LIVE_CONFIRMED")
.unwrap_or_default();
if confirmed != "I_UNDERSTAND_REAL_MONEY" {
anyhow::bail!(
"CTRADER_LIVE=true requires CTRADER_LIVE_CONFIRMED=I_UNDERSTAND_REAL_MONEY \
to prevent accidental live trading. Set both env vars to proceed."
);
}
warn!("*** LIVE TRADING MODE ACTIVATED — real money orders will be submitted to cTrader ***");
ctrader_openapi::CTraderEnvironment::Live
} else {
info!("cTrader running in DEMO mode (set CTRADER_LIVE=true to enable live trading)");
ctrader_openapi::CTraderEnvironment::Demo
},
heartbeat_interval_secs: std::env::var("CTRADER_HEARTBEAT_SECS")