The limit is written first. The position is whatever survives it.

No order without a limit written beforehand. The maximum acceptable loss is set first and the position size derived from it, not the other way round. An order that carries no limit is refused, and that is a structural refusal rather than a warning.

Exposure, concentration and drawdown are numeric limits at the system level, not guidance for the user. Approaching a limit narrows the permitted size before it is reached; breaching one stops execution.

An emergency halt stops orders being sent, and depends on neither a user's response nor a notification arriving. A control that requires somebody to notice it is not a control.

No order is refused silently. The order, the limit it breached, the inputs at the time of the check and the timestamp are all recorded. The refusal log is part of the product, not a side effect of it.

Limits are reviewed every ninety days and on any material change in market behaviour. A limit that is never revisited becomes an inherited number rather than a decision.