Final whole-branch review Minor: the audit checked the token appeared anywhere in the function body, so a partial regression (param kept in signature but dropped from the inner seam call) passed silently. Now require as a forwarded kwarg. Mutation-verified: dropping the forwarding from run_bybit_testnet's call (while keeping the import) now FAILS the audit, where the substring check passed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>