Runaway order velocity
An algorithm begins submitting orders far beyond its intended rate (a loop, a bad deploy, or dormant code waking up) and floods a venue before any human can react.
Order-velocity guards, position limits, and circuit-breaker halts for trading agents, validated against Knight Capital, Flash Crash, and Archegos.
Trading algorithms send thousands of orders a second across global venues. The platform governs fill rates, latency, and throughput, but not the algorithm's behavior: order velocity, position concentration, strategy drift, or spoofing. That gap is where the documented failures live. Knight Capital lost about $440M in roughly 45 minutes in August 2012 when dormant code activated during a deployment. Archegos collapsed in March 2021 with more than $10B in losses across prime brokers that each saw only part of one concentrated position. The May 2010 Flash Crash briefly erased on the order of $1T in market value as algorithms pulled liquidity at once. In each case the code ran exactly as written; what was missing was governance: behavioral monitoring, aggregate position limits, and a kill switch that could not be overridden.
An algorithm begins submitting orders far beyond its intended rate (a loop, a bad deploy, or dormant code waking up) and floods a venue before any human can react.
An algorithm builds a large position across several venues or brokers, each holding only a slice, so no single risk view shows the true aggregate exposure until it unwinds.
An algorithm wanders from its declared strategy (its instrument universe, order sizes, or holding period) and starts taking risk the desk never signed off on.
An algorithm places and rapidly cancels orders to move a price, an abusive pattern that draws regulatory scrutiny and that ordinary fill-rate metrics never surface.
Inventory every agent touching order flow, risk, and execution across whatever frameworks your desks use. An unregistered agent falls back to read-only until it is scoped.
Order velocity, per-instrument position concentration, and cross-venue aggregate exposure are hard-gated before an order leaves. The ceilings are server-registered: a limit that arrives on the request is dropped and recorded as an attempt, never honoured, so an agent cannot raise its own ceiling. Alert at threshold, hard block at the ceiling, no soft pop-up override.
A drawdown floor, a velocity breach, or strategy drift past the registered threshold denies the action and quarantines the algorithm. One command halts every governed algorithm, or a single named agent, and the halt survives a restart; resuming requires an explicit, named operator approval, not a dismissed pop-up.
One tamper-evident, hash-linked audit trail records every consequential action (which agent, under whose authorization, and why), exportable to the framework your auditors and regulators care about.
Agentomy carries a dedicated ALGO pattern family for Algorithmic Trading Governance. Each one is a specific failure this layer watches for, with the signal it watches, checked at runtime before the action reaches your systems.
DetectionOrder message frequency monitoring per agent per venue.
DetectionReal-time position tracking per agent per instrument.
DetectionTrack order lifecycle per agent: placed, modified, canceled, filled.
DetectionCompare order size against agent's historical order size distribution.
DetectionTrack model version fingerprint per agent.
DetectionReconcile front-office positions against back-office/clearing records.
DetectionMonitor all configuration changes to circuit breaker parameters.
DetectionTrack realized + unrealized P&L per agent in real-time.
DetectionGovernance gate on agent registration.
DetectionCompare agent action distribution against registered strategy profile.
DetectionAggregate position and exposure data across all venues for each agent.
DetectionMonitor cancel-all and mass-withdrawal events across governed agents.
ALGO family, ALGO-001 to ALGO-012 · 12 of 166 governance patterns Agentomy enforces at runtime. Severity as classified in the pattern definition.
Agentomy does not certify you. It gives you the enforcement and the audit trail these frameworks ask for, so readiness is something you can show rather than assert.
A tamper-evident, hash-linked trail of every governance decision for this workload: what an agent did, under whose authorization, and why. Plain-English reasons for every allow and deny, exportable to the framework your auditors care about.
| Agent | Type | Status | Module | Score |
|---|---|---|---|---|
| market-research-agent | Research | Active | RuntimeMonitor | 92 |
| client-support-agent | Support | Active | AuditLogger | 88 |
| counterparty-review-agent | Counterparty | Monitored | PermissionRouter | 74 |
| reconciliation-agent | Settlement | Quarantined | HaltProtocol | 41 |
| disclosure-draft-agent | Compliance | Monitored | EthicsConstraint | 79 |
| exposure-report-agent | Reporting | Active | DecisionLog | 90 |
| Agent | Action | Policy | Result | Time |
|---|---|---|---|---|
| PermissionRouter | data_access_request | vendor-access | Blocked | 12:42:08 |
| AuditLogger | output_validation | audit-trail | Allowed | 12:41:54 |
| TrustScorer | policy_check | runtime-score | Allowed | 12:41:37 |
| RuntimeMonitor | behavior_drift | drift-threshold | Flagged | 12:40:58 |
| HaltProtocol | halt_initiated | unsafe-action | Blocked | 12:40:21 |
| EthicsConstraint | prompt_review | restricted-output | Flagged | 12:39:46 |
| DecisionLog | evidence_recorded | decision-proof | Allowed | 12:39:12 |
| Block | Timestamp | Agent | Action | Tier | Hash |
|---|---|---|---|---|---|
| 41,703 | Today 12:42:08 | market-research-agent | data_access_request | Evaluator | 57e5e9b5ed2b4c2b |
| 41,702 | Today 12:41:54 | client-support-agent | output_validation | Analyst | 8bbde1d28a536e7a |
| 41,701 | Today 12:41:37 | counterparty-review-agent | policy_check | Builder | b2dbbc19b237fc9c |
| 41,700 | Today 12:40:58 | reconciliation-agent | behavior_drift | Operator | 075a0fe09e54c48f |
| 41,699 | Today 12:40:21 | disclosure-draft-agent | halt_initiated | Strategist | db8e86f53c13987e |
| 41,698 | Today 12:39:46 | exposure-report-agent | prompt_review | Evaluator | c79428e469977956 |