Appearance
Are you an LLM? You can read better optimized documentation at /safety-and-reliability.md for this page in Markdown format
Safety & Reliability
TTMT is not just a signal copier. It is a safety system that happens to also execute trades.
When you trust software with real capital, the stakes are not theoretical. A single bad signal, a momentary broker outage, or a miscalculated lot size can do real damage. TTMT is built from the ground up with this reality in mind. Every signal is scrutinized before execution. Every broker interaction is wrapped in fault tolerance. Every open position is continuously monitored and protected.
This section documents the five layers of defense that stand between a Telegram message and your trading account.
The Five Layers of Defense
Every trade passes through multiple independent safety systems. If one layer fails to catch a problem, the next layer will.
Layer 1: Signal Validation
Before any trade is placed, the signal TTMT builds from the message passes through a sequence of safety checks. This catches typos, wrong-side stop losses, duplicate signals, implausible entry zones, and signals that would violate your account constraints. The first of these checks is the Signal Sanitizer, which screens for malformed prices before any other validator runs.
A signal that fails validation is rejected with a logged reason -- it never reaches your broker.
Read the full Signal Validation reference -->
Layer 2: Execution Safety
Even after a signal is validated, the actual trade execution is wrapped in multiple fault-tolerance mechanisms. An automatic safety pause halts trading if too many errors occur. A speed control prevents overloading the broker. Smart retries tuned to each operation handle temporary failures gracefully. And hard volume caps ensure that no single trade can risk more than your configured limits, regardless of what the signal says.
Read the full Execution Safety reference -->
Layer 3: Position Protection
Once a trade is open, the work is not done. TTMT continuously manages every position:
- Auto-breakeven locks in profit when a take-profit target is hit.
- Trailing stops follow price action server-side, independent of TTMT uptime.
- TP redistribution shifts and compresses targets when deeper layers fill, reducing risk during heavy retracements.
- Conflict prevention ensures modifications are processed one at a time so nothing gets corrupted.
- P&L recovery detects and reconciles positions that close outside TTMT's awareness.
Read the full Position Protection reference -->
Layer 4: Connection Resilience
Trading requires constant connectivity to both Telegram (for signals) and your broker. TTMT handles disconnections, stale data, and ghost positions automatically:
- Broker connections are managed with strict lifecycles to prevent stale connections.
- A layered health check covers the TTMT service, the broker connection, and live-price flow.
- Position sync runs periodically to detect drift between TTMT and your broker.
Read the full Connection Resilience reference -->
Layer 5: Emergency Controls
When something goes seriously wrong, you need the ability to act immediately. TTMT provides:
- A kill switch with two scopes -- close everything, or close only TTMT-managed trades.
- A Risk Limits halt -- an automatic per-account daily-loss cap that stops trading on its own. See Risk Limits.
- Recovery Guidance -- an advisory banner that appears at 10%, 20%, and 40% of today's loss against your current balance. It is guidance only, not an enforced cap (that is Risk Limits).
- Real-time health indicators in the dashboard header showing trading, signal, and system status at a glance.
- Staleness detection that warns you when data may be outdated.
Read the full Emergency Controls reference -->
Situational Guides
Beyond the five core layers, two additional guides explain how these systems work together in specific scenarios:
| Guide | What It Covers |
|---|---|
| Fast Market Conditions | How TTMT handles volatile, fast-moving markets where brokers are overwhelmed and prices gap |
| Typos & Bad Signals | How TTMT detects and handles poorly formatted signals, wrong values, and low-quality channels |
Design Philosophy
Three principles guide every safety decision in TTMT:
1. Defense in Depth. No single system is trusted to catch every problem. Validation, execution, monitoring, and emergency controls each operate independently. A failure in one layer does not compromise the others.
2. Fail Closed. When in doubt, TTMT rejects the trade. A missed opportunity is always preferable to an uncontrolled loss. Automatic safety pauses activate conservatively. Validators reject aggressively. Volume caps enforce hard limits.
3. Transparency. Every rejection, every retry, every automatic safety pause is logged with a clear reason. You can always understand why TTMT made a particular decision by checking the signal log and trade history.
Your Capital Comes First
TTMT is designed so that every default favors protecting your account over maximizing trade count. You can relax individual safety checks if you choose to, but the defaults are deliberately conservative.
Related Pages
- Signal Validation -- The sequence of safety checks
- Signal Sanitizer -- The first filter against malformed prices
- Execution Safety -- Automatic safety pauses, speed control, and error handling
- Position Protection -- Breakeven, trailing stops, and redistribution
- Connection Resilience -- Connection management and health monitoring
- Risk Limits -- The automatic daily-loss halt
- Emergency Controls -- Kill switch and recovery guidance
- Fast Market Conditions -- Volatile market handling
- Typos & Bad Signals -- Poor signal quality defense
- Risk Management -- Position sizing and volume calculation
- Order Management System -- The adaptive layered execution model

