Research
Exploratory analysis with explicit limitations and no downstream order authority.
- Schema & uniqueness
- Completeness
- Lineage
- Basic domain checks
Production access must be earned.
Approval belongs to one immutable snapshot, one environment and one evidence package. Research permission never implies permission to trade.
Three environments
Independent approval gates.
Promotion is sequential and revocable. Material data errors, broken lineage, point-in-time failures or license violations immediately quarantine a snapshot.
Paper Trading
Shadow operation under live timing without capital or external execution.
- Point-in-time correctness
- Cross-source reconciliation
- Freshness SLA
- License review
Production
Industrial consumption by live systems, pinned to an approved snapshot or feed version.
- Human approval
- Monitoring & alerting
- Fallback & outage behavior
- Rollback & access control
Production invariant
Default deny.
A strategy may read a production dataset only when the exact snapshot has active production approval and has not been revoked.
production_read(snapshot) ⇔ approved(snapshot, production) ∧ not_revoked(snapshot)
Audit dimensions
Evidence before confidence.
The audit record is part of the dataset product. It covers quant correctness, legal boundaries, operational reliability and recovery.
Correctness
Data Quality
Research risk
Bias Control
Operations
Reliability
Governance