Kill Switch

Hardcoded 4-tier risk halt. T0 = manual emergency stop · T1 = correlation shock (≥2σ) · T2 = VaR breach (1d 99% > 5% NAV) · T3 = composite (any 2 of VaR / correlation / drawdown-velocity / prescience-unanimity). Methodology

M1: render binding pending. Engines: engine/kill-switch.js, engine/var.js, engine/correlation-shock-detector.js, engine/drawdown-velocity.js, engine/prescience-unanimity.js shipped + tested. Spec: docs/black-swan-playbook-2026-04-28.md. Deferred: cockpit hookup + history persistence (see docs/kill-switch-cockpit-integration-2026-04-28.md).
No active kill-switch tier
All four signal sources within calm bounds. Confidence:
Attestation:

VaR (1d 99%)

limit 5% NAV

Correlation Shock

max z-score

Drawdown Velocity

depth + speed

Prescience Unanimity

bearish indicators

Recommended actions

User-initiated only. The kill-switch never auto-executes.

Emergency override

History

Every kill-switch tier change is attested with a SHA-256 hash and persisted to the decision journal.

TimestampTierReasonConfidenceAttestation
No history yet.