A single CTRADER_LIVE=true env var was enough to route real money orders through the broker. Now requires CTRADER_LIVE_CONFIRMED=I_UNDERSTAND_REAL_MONEY alongside it, preventing accidental live trading from copy-pasted configs. Also adds prominent warning log when live mode activates and info log for demo mode. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>