# CLAUDE.md — Kraken Quantitative Algorithmic Trading Platform

See README.md for the current state and docs/ for architecture, threat model, runbook and Kraken API notes. The original product specification (mission, non-negotiable rules, deliverables, phases) is kept verbatim in docs/SPEC.md. Operating rules that apply to every change:

• Start in offline/backtest and paper modes. Never place live orders without owner configuration, preflight, feature flag and explicit UI activation with second confirmation.
• Never print, log, commit or store API secrets client-side. Separate least-privilege keys; no withdrawal permission.
• Every order passes ktrade.risk.gateway.RiskGateway (default-deny). No bypass, ever.
• No profitability claims without out-of-sample evidence, realistic costs and reproducible provenance. Never fabricate data.
• Exchange capabilities (pairs, minimums, precision, status, rate limits) are discovered at runtime from Kraken docs/endpoints.
• Remote-first deployment on MacLustr: the deployed directory on the node is the git source of truth (origin = spbgit).