Concrete ways an agent goes wrong here without governance, and the control that catches each one.
01A runaway loop floods the venue
An algorithm starts submitting orders far past its rate limit, the shape of the failure that once cost a firm hundreds of millions of dollars in minutes. The registered order-velocity ceiling trips, further orders are refused, and the algorithm is quarantined before the losses compound.
02A position concentrates past its limit
An algorithm accumulates a position beyond its approved limit across several venues. Cross-venue aggregation sees the whole exposure, blocks the breach at the limit, and logs it, instead of each venue seeing only its own slice.
03A strategy drifts from its mandate
A trading agent gradually departs from the strategy it was authorized to run, moving into different instruments and different sizing. Behavioral baselines flag the drift and halt it past a set threshold, before it becomes an unapproved book.
04A fat-finger order hits the market
An order arrives many times larger than any reasonable size. The pre-trade check adds it to the current position and measures the result against the registered position ceiling, so it is refused before it reaches the venue and a keystroke error is not an execution.
05Halt the desk in an incident
A suspected malfunction means trading must stop now. One command halts every governed algorithm and quarantines it, confirmed, and the halt cannot be overridden until an operator approves the resume.