# Safety model

MarketPilot AI is research and educational software, not financial advice. Day trading and other active trading can cause rapid, substantial losses. A profitable simulation does not imply a profitable live result.

## Hard boundaries in v1.0.0

- Long-only analysis and cash-style whole-share sizing are supported. Short selling, leverage, margin and options execution are disabled.
- The broker module cannot contact a broker or exchange. It only appends a local `PAPER_ONLY` record.
- Paper recording requires both an explicit CLI confirmation flag and a risk result with a fingerprint that matches the exact order. Risk checks require an explicit quote-age measurement; unknown freshness blocks.
- No credentials, tokens or brokerage keys are required for core functionality. SEC identity is read from a local environment variable.
- Alerts are one-shot local checks, not a hosted monitoring service.

## Before interpreting a result

1. Identify source, interval, exchange timezone and as-of time.
2. Audit gaps, stale bars, duplicates and partial provider results.
3. Read relevant headlines and primary filings; headlines alone are not verified facts.
4. Show stop, target, estimated loss, position size, fee and slippage assumptions.
5. Use the time-machine or strategy-lab output as a sensitivity/research exercise, not a forecast.
6. Keep an exact order fingerprint when reviewing any risk output.

## No guarantees

A planned stop does not cap realized loss. Market gaps, halts, liquidity, spread, slippage and rejection can change a fill or prevent an exit. Simulated outcomes omit important live-market mechanics. Public data can be incomplete or delayed.

## User responsibilities

Check local law, exchange/broker rules, tax obligations and provider licenses before using the tools. Use a licensed financial professional for advice tailored to your circumstances. Do not use this project to evade rules, access controls or data licensing restrictions.