Files
foxhunt/.gitignore
jgrusewski 86f7f1fa76 fix: comprehensive audit — real brokers, deployment fixes, production safety
Codebase audit identified 23 findings across 4 dimensions (production safety,
code health, deployment readiness, test quality). This commit fixes all of them.

Broker execution layer (was entirely stubbed):
- Real IBKR TWS client via ibapi crate (950+ lines, feature-gated)
- ICMarkets ctrader-openapi now always-on (removed feature flag)
- Real broker routing with health monitoring and exponential backoff reconnect
- Validated against live IB Gateway Docker (6/6 connectivity tests pass)

Deployment blockers:
- Fixed 6 broken Dockerfiles (removed COPY foxhunt-deploy)
- Created foxhunt K8s namespace, secret templates, migration job
- Added liveness probes to all 7 K8s services
- IB Gateway manifest (ghcr.io/gnzsnz/ib-gateway:stable)
- IBKR credentials in Scaleway Secret Manager via Terragrunt
- Fixed port collisions and mismatches across services

Production safety (9 critical + 6 high/medium fixes):
- Asset-class-specific VaR volatility (not flat 2%)
- Real parametric VaR with z-score 95th percentile
- Kyle's lambda regression (100-bar rolling window)
- Per-feature running statistics from historical data
- VWAP-based slippage reference, regime duration tracking
- Real Databento JSON parsing for OHLCV/Trade/Quote

Code health:
- Removed #![allow(dead_code)] from ml, data, config
- Fixed log:: → tracing:: in 4 production files
- Removed dead workspace deps (ratatui, crossterm)

Verified: cargo check --workspace (0 errors), trading_engine 330 tests pass.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-25 00:32:10 +01:00

164 lines
2.4 KiB
Plaintext

# Build artifacts
/target/
target/
# IDE files
.vscode/
.idea/
*.swp
*.swo
# OS files
.DS_Store
Thumbs.db
# Logs
*.log
# Environment variables and secrets
.env
.env.*
!.env.example
!.env.runpod.template
# Secret files and directories
/config/secrets/
secrets/
*.key
*.pem
*.p12
*.pfx
*.crt
*.cert
# Credential files
credentials.json
credentials.toml
auth.json
auth.toml
ibkr.txt
# Certificate security files
certs/security.env
certs/production.env.template
certs/*.serial
certs/**/*.serial
# API keys and tokens
*api_key*
*token*
*secret*
!*secret*.example
!infra/modules/secrets/
!infra/live/production/secrets/
!infra/k8s/secrets/
!infra/k8s/secrets/*.yaml
# Database credentials
database.conf
db_config.json
# Temporary files
*.tmp
*.temp
# GPU test artifacts
gpu_test.rs
simd_bench
simd_bench.rs
temp_script.sh
# Build artifacts (additional)
**/*.rs.bk
*.pdb
Cargo.lock
# Coverage reports
tarpaulin-report.html
cobertura.xml
lcov.info
# Benchmark results
target/criterion/
target/bench/
# CI artifacts
audit-results.json
geiger-report.md
security-report.md
outdated.json*.profraw
# Python virtual environments and cache
venv/
.venv/
.venv_databento/
venv_databento/
__pycache__/
*.py[cod]
*.so
.Python
*.egg-info/
.coverage
coverage.xml
htmlcov/
.python-version
# ML model checkpoints and training artifacts
ml/checkpoints/
ml/trained_models/*.safetensors
ml/trained_models/norm_stats_*.json
ml/trained_models/ppo_fold*.safetensors
ml/trained_models/ppo_fold*.json
ml/ml/
# Removed Windows wrapper files per user request
hive-mind-prompt-*.txt
# Node.js
node_modules/
web-dashboard/dist/
# Git worktrees
.worktrees/
.claude/worktrees/
# Serena (IDE agent)
.serena/
# Claude local state
.claude/settings.local.json
.claude/ralph-loop.local.md
.mcp.json
claude-flow.config.json
.swarm/
.hive-mind/
.claude-flow/
memory/
coordination/
memory/claude-flow-data.json
memory/sessions/*
!memory/sessions/README.md
memory/agents/*
!memory/agents/README.md
coordination/memory_bank/*
coordination/subtasks/*
coordination/orchestration/*
*.db
*.db-journal
*.db-wal
*.sqlite
*.sqlite-journal
*.sqlite-wal
claude-flow
# Terragrunt cache and generated files
.terragrunt-cache/
**/.terragrunt-cache/
.terraform.lock.hcl
**/.terraform.lock.hcl
# Data cache (downloaded market data, not checked in)
data/cache/*
# Exception: futures baseline training data is checked in
!data/cache/futures-baseline/