How it works

Five modules.
Seven rules.
One trade-only API key.

The engine isn't one model. It's a pipeline of five independent components, each with a specific job and the authority to refuse a trade. If any link fails or objects, the trade is skipped.

System architecture diagram

Multi-exchangeleader scannerOKX · Bitget · HTX◆ EDGEML signal scorer◐ ORACLEMarket regime☆ SAGEMeta-judgeConsensusaggregatorvote count▲ SHIELD7 hard rulesOrderexecutortrade-only API✎ LENSDaily report
  1. Scanner
    OKX · Bitget · HTX
  2. EDGE
    ML signal scorer v7
  3. ORACLE
    Market regime classifier
  4. SAGE
    Meta-judge & veto
  5. Consensus
    Vote aggregator
  6. SHIELD
    7 hard risk rules
  7. Executor
    Trade-only API order
  8. LENS
    Daily research log
System architecture

Five independent modules.
Each one can refuse the trade.

The engine isn't one model — it's five components that vote. A trade only executes when no module objects. Failure of any single module fails safe.

EDGE
Signal scoring

ML classifier scores every leader signal. Rejects noise.

modelv7 · AUC 0.72
ORACLE
Market regime

Classifies the tape: Range, Bull, Bear, Volatile.

staterule-based
SAGE
Meta-judge

Cross-checks Edge + Oracle output. Vetoes weak setups.

modeshadow
SHIELD
Risk overlay

Seven hard rules. Caps drawdown at -6%. No override.

rules7 active
LENS
Public reporter

Writes the daily research log. Includes the bad days.

cadencedaily 18:00 UTC
Signal flows — if any link refuses, the trade is skipped.
Onboarding

Three steps. No magic.

Get the engine running on your account in under five minutes. You stay in control of the API key and can revoke it anytime.

◆──◆──◆
│  │  │
◆──◆──◆

Choose an automation preset

Pick a strategy profile — conservative copy-trading, momentum, or mean-reversion. Each preset has documented entry rules, exit logic, and capped exposure.

┌─ EXCHANGE ─┐
│  ●●●●●●●  │
└─── KEY ───┘

Connect your exchange

Generate a trade-only API key on OKX, Bitget, or HTX. No withdrawal permission, ever. Killbot never sees your funds — only your orders.

╱╲    ╱╲
  ╲__╱  ╲___
      paper

Start in paper mode

14-day free trial with $10K virtual capital. Watch the engine make decisions on real market data. Switch to live when ready — same code, real money.

Safety rails

Seven hard rules. No override.

The risk overlay is the last gate before any order is placed. These rules cannot be disabled by user configuration or strategy choice. They run on every trade, every time.

R01

Drawdown cap

If account equity falls 6% below peak, all positions close. Engine sleeps until next manual review.

R02

Per-symbol notional cap

No single symbol exceeds 25% of configured exposure. Hard limit, regardless of signal strength.

R03

Same-direction DCA gating

Adding to an existing position requires a fresh consensus signal. Prevents runaway averaging.

R04

Stale signal filter

Signals older than 30 minutes are rejected. Market context is no longer valid.

R05

Cross-user isolation

Each account runs in its own engine instance. No shared state, no cross-talk.

R06

Exchange health gate

If exchange API health degrades, new entries pause. Existing positions still managed.

R07

Manual kill switch

A single Telegram command stops all trading and closes all positions within 30 seconds.