ML classifier scores every leader signal. Rejects noise.
Five modules.
Seven rules.
One trade-only API key.
The engine isn't one model. It's a pipeline of five independent components, each with a specific job and the authority to refuse a trade. If any link fails or objects, the trade is skipped.
System architecture diagram
- ◰ScannerOKX · Bitget · HTX
- ◆EDGEML signal scorer v7
- ◐ORACLEMarket regime classifier
- ☆SAGEMeta-judge & veto
- ◯ConsensusVote aggregator
- ▲SHIELD7 hard risk rules
- →ExecutorTrade-only API order
- ✎LENSDaily research log
Five independent modules.
Each one can refuse the trade.
The engine isn't one model — it's five components that vote. A trade only executes when no module objects. Failure of any single module fails safe.
Classifies the tape: Range, Bull, Bear, Volatile.
Cross-checks Edge + Oracle output. Vetoes weak setups.
Seven hard rules. Caps drawdown at -6%. No override.
Writes the daily research log. Includes the bad days.
Three steps. No magic.
Get the engine running on your account in under five minutes. You stay in control of the API key and can revoke it anytime.
◆──◆──◆ │ │ │ ◆──◆──◆
Choose an automation preset
Pick a strategy profile — conservative copy-trading, momentum, or mean-reversion. Each preset has documented entry rules, exit logic, and capped exposure.
┌─ EXCHANGE ─┐ │ ●●●●●●● │ └─── KEY ───┘
Connect your exchange
Generate a trade-only API key on OKX, Bitget, or HTX. No withdrawal permission, ever. Killbot never sees your funds — only your orders.
╱╲ ╱╲
╲__╱ ╲___
paperStart in paper mode
14-day free trial with $10K virtual capital. Watch the engine make decisions on real market data. Switch to live when ready — same code, real money.
Seven hard rules. No override.
The risk overlay is the last gate before any order is placed. These rules cannot be disabled by user configuration or strategy choice. They run on every trade, every time.
Drawdown cap
If account equity falls 6% below peak, all positions close. Engine sleeps until next manual review.
Per-symbol notional cap
No single symbol exceeds 25% of configured exposure. Hard limit, regardless of signal strength.
Same-direction DCA gating
Adding to an existing position requires a fresh consensus signal. Prevents runaway averaging.
Stale signal filter
Signals older than 30 minutes are rejected. Market context is no longer valid.
Cross-user isolation
Each account runs in its own engine instance. No shared state, no cross-talk.
Exchange health gate
If exchange API health degrades, new entries pause. Existing positions still managed.
Manual kill switch
A single Telegram command stops all trading and closes all positions within 30 seconds.