# CLAUDE.md — Kraken Quantitative Algorithmic Trading Platform

See `README.md` for the current state and `docs/` for architecture, threat model, runbook and Kraken API notes.
The original product specification (mission, non-negotiable rules, deliverables, phases) is kept verbatim in
`docs/SPEC.md`. Operating rules that apply to every change:

- Start in offline/backtest and paper modes. Never place live orders without owner configuration, preflight,
  feature flag and explicit UI activation with second confirmation.
- Never print, log, commit or store API secrets client-side. Separate least-privilege keys; no withdrawal permission.
- Every order passes `ktrade.risk.gateway.RiskGateway` (default-deny). No bypass, ever.
- No profitability claims without out-of-sample evidence, realistic costs and reproducible provenance. Never fabricate data.
- Exchange capabilities (pairs, minimums, precision, status, rate limits) are discovered at runtime from Kraken docs/endpoints.
- Remote-first deployment on MacLustr: the deployed directory on the node is the git source of truth (`origin` = spbgit).