- GraduatedRecovery: post-emergency position ramp (25% → 100% over 15 days) (risk) - RiskGate: pipeline stage with LogOnly/Enforcing modes, kill switch + drawdown checks (trading_service) - OperatingMode: Backtest→Paper→Shadow→Live state machine with validated transitions (trading_service) - SystemState: observability snapshot aggregating health, risk, positions, drift, models (trading_service) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>