THE HARD PART
What could not be hand-waved
A panel that can start and stop a live trading engine is a security boundary, not a convenience. Live updates make it worse: a stale position on screen is how an operator makes a decision that the data would not support.
THE RESPONSE
How the risk was addressed
Every state-changing action is versioned and written to an audit log with the actor attached. The frontend never computes risk locally — it renders what the backend asserts, so a stale tab shows stale data as stale rather than as truth.