Risk and limits
Kato's limits are code, enforced on every order. That code is protected: no agent can edit it.
Hard limits
Limits cap how much exposure Kato can carry: delta, gamma and vega against set maximums, margin use, and daily loss. Quote sizes shrink as a limit gets close, before it is hit. The live page shows how much of each limit is in use.
Circuit breakers
Breakers pull every quote at once on stale data, a sharp move in the market, a run of venue errors, high margin use or a loss limit. Kato's own books are reconciled against the exchange's around the clock; a mismatch halts trading until a person resumes it.
Protected code
The risk core, the executor and the signer are protected code that no agent can edit, including the ones that build Kato. A human reviews every change to them, and nothing the learning layer proposes can loosen them.