Jakeschincariol/day-trader-skill

Review signals: 1 connection review.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 45.60.0.144:443 3 attributed processes.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• Sizing: a $5,000 account with a $50 max loss per trade gives 8 shares of <email>: Real input produced the expected result: Size: 8 shares of TSLA = $2,913.44

  Source: 50 / 5.86 = 8 shares ($2,913.44). If the stop <email>, the loss is

  Input: plan-tsla.json, config budget 5000, now 2026-10-19 10:15

  Expected: Size: 8 shares of TSLA = $2,913.44

  Command: python3 trader-budget/size.py --plan tests/fixtures/trader-budget/plan-tsla.json --config trader-budget/config.example.json --budget 5000 --now '2026-10-19 10:15'

  Observed: Size: 8 shares of TSLA = $2,<email>. Max loss at the stop: 8 x 5.86 = $46.88. A stop is an order, not a promise: in a fast market it can fill below 358.32. Proposed bracket order (place_stock_order arguments, nothing has been placed): buy 8 TSLA, market, day, take-profit 370.04, stop-loss 358.32 Flat by 15:55 New York: anything still open then gets closed (trader-alerts rings, trader-broker flatten). Next: trader-risk checks it, then trader-broker asks you yes or no. Education and tooling, not financial advice.

• Risk check gives a PASS or BLOCK verdict per order with the reason: Real input produced the expected result: 1 passed, 0 blocked at 2026-10-19 10:15 New York

  Source: PASS or BLOCK, with the reason.

  Input: orders-tsla.json at 2026-10-19 10:15, no write

  Expected: 1 passed, 0 blocked

  Command: python3 trader-risk/check.py --orders tests/fixtures/trader-risk/orders-tsla.json --config trader-budget/config.example.json --now '2026-10-19 10:15' --today 2026-10-19 --no-write

  Observed: 1 passed, 0 blocked at 2026-10-19 10:15 New York. Cash after the passed orders: $2,086.56 (paper account). Every order passed. trader-broker still asks you yes or no for each one. Education and tooling, not financial advice.

• Entry timer reports the opening-range breakout trigger at 10:<email>: Real input produced the expected result: TRIGGERED 10:15 AM at $364.18

  Source: At 10:15 it said triggered: the first

  Input: TSLA 5m bars for 2026-10-19 offline, now 10:15

  Expected: TRIGGERED 10:15 AM at $364.18

  Command: python3 trader-entry/entry.py check TSLA --setup orb --now '2026-10-19 10:15' --offline tests/fixtures/trader-entry/TSLA-2026-10-19-5m.json

  Observed: TRIGGERED 10:15 AM at $364.18: the 10:10 bar (bar 8) closed above the range high $362.18 (+0.55%). This is the moment to get in, if you take the trade. Nothing was placed. Next: set the stop and target BEFORE you buy: /trader-exit (exit.py plan --from trader/entry.json).

Examples

• Scan the Nasdaq Trader symbol lists into a universe file: command completed successfully

  Source: README.md ## The tools

  Input: scan.py universe

  Expected: writes trader/universe.txt

  Command: python3 trader-scanner/scan.py universe

  Observed: Nasdaq Trader symbol directories, files of 2026-10-27 18:01 ET: 13,291 rows. Kept 5,942 US-listed common stocks, ordinary shares and ADRs. Dropped: 5,776 ETF, 377 not a plain ticker, 368 warrant, 253 unit, 171 note, 128 unit / warrant / right suffix, 104 right, 96 coupon, 37 test issue, 21 preferred, 14 depositary, 3 bond, 1 unit or right. Wrote trader/universe.txt (one SYMBOL|Name a line).

• Run the offline unit test suite documented in the README: Ran python3 -m unittest discover -s tests -v: 315 tests, 1 failure in tests/test_repo.py test_root_matches_the_reel. That test expects the repo root to list only README/LICENSE/.claude-plugin/tests and skill folders; the harness-created hidden .coldpass directory is in the root, so the expectation fails. Not a product defect; the product code paths passed.

  Source: README.md ## The tools

  Expected: documented command completes successfully

  Observed: Ran python3 -m unittest discover -s tests -v: 315 tests, 1 failure in tests/test_repo.py test_root_matches_the_reel. That test expects the repo root to list only README/LICENSE/.claude-plugin/tests and skill folders; the harness-created hidden .coldpass directory is in the root, so the expectation fails. Not a product defect; the product code paths passed.

Cycles

• Entry timer runs a bar-by-bar watch loop until it triggers: Triggered one cycle by hand (run-once with simulated clock (--now and --offline replay the day without sleeping); no real-time wait; normal trigger: watch polls every --every seconds (default 30) and wakes after each 5-minute bar closes): TSLA Mon 2026-10-19 10:15 ET opening-range breakout (15-minute range) on 5-minute bars (Yahoo, free, can lag) Opening range 9:30-9:45: high $362.18, low $354.47 (3 of 3 bars). TRIGGERED 10:15 AM at $364.18: the 10:10 bar (bar 8) closed above the range high $362.18 (+0.55%). This is the moment to get in, if you take the trade. Nothing was placed. Next: set the stop and target BEFORE you buy: /trader-exit (exit.py plan --from trader/entry.json). Wrote trader/entry.json.

  Source: trader-entry/entry.py

  Input: TSLA 5m bars for 2026-10-19 (offline fixture), now 10:15 ET

  Expected: prints the triggered line and stops with exit 0 (watch returns 0 on a trigger)

  Command: python3 trader-entry/entry.py watch TSLA --setup orb --now '2026-10-19 10:15' --offline tests/fixtures/trader-entry/TSLA-2026-10-19-5m.json --every 30 --until 15:30

  Observed: TSLA Mon 2026-10-19 10:15 ET opening-range breakout (15-minute range) on 5-minute bars (Yahoo, free, can lag) Opening range 9:30-9:45: high $362.18, low $354.47 (3 of 3 bars). TRIGGERED 10:15 AM at $364.18: the 10:10 bar (bar 8) closed above the range high $362.18 (+0.55%). This is the moment to get in, if you take the trade. Nothing was placed. Next: set the stop and target BEFORE you buy: /trader-exit (exit.py plan --from trader/entry.json). Wrote trader/entry.json.

Local or hosted: local

Run the day-trader tools (sizing, risk check, entry timer, scanner universe) from the README, plus the README's offline unit tests

cd <guest-path> && pwd && ls -la && git status 2>&1 | head -3; id -u; python3 --version; cat README.md 2>/dev/null | head -200
curl -s -m 10 -i $CDP_URL/json/version; echo; echo "exit=$?"
cd <guest-path> && sed -n '/^## Files/,$p' README.md; echo ----; ls -la trader-* tests .coldpass .claude-plugin; find tests -type f | head -50
cd <guest-path> && python3 -m unittest discover -s tests -v 2>&1 | tail -15; echo "rc=${PIPESTATUS[0]}"
cd /tmp && timeout 40 curl -s -o /dev/null -w '%{http_code}\n' 'https://query1.finance.yahoo.com/v8/finance/chart/TSLA?interval=5m&range=1d'; echo "rc=$?"; timeout 40 curl -s -o /dev/null -w '%{http_code}\n' https://www.nasdaqtrader.com/dynamic/SymDir/nasdaqlisted.txt; echo "rc=$?"
cd <guest-path> && python3 -m unittest discover -s tests 2>&1 | grep -B3 -A25 '^FAIL:' | head -60
cd <guest-path> && timeout 200 python3 trader-scanner/scan.py universe 2>&1 | tail -15; echo "rc=${PIPESTATUS[0]}"; ls -la trader 2>&1 | head
cd <guest-path> && for f in trader-risk/check.py trader-budget/size.py trader-alerts/alerts.py trader-broker/ticket.py; do echo "== $f"; timeout 30 python3 $f --help 2>&1 | head -25; done
cd <guest-path> && cat trader-budget/config.example.json; echo; cat tests/fixtures/trader-budget/plan-tsla.json | head -c 600; echo; echo ==; timeout 60 python3 trader-budget/size.py --plan tests/fixtures/trader-budget/plan-tsla.json --config trader-budget/config.example.json --budget 5000 --now "2026-10-19 10:15" 2>&1 | head -40; echo "rc=${PIPESTATUS[0]}"
cd <guest-path> && head -c 500 tests/fixtures/trader-risk/orders-reel.json; echo; timeout 60 python3 trader-risk/check.py --orders tests/fixtures/trader-risk/orders-reel.json --config trader-budget/config.example.json --now "2026-10-19 10:15" --today 2026-10-19 --no-write 2>&1 | head -40; echo "rc=${PIPESTATUS[0]}"
cd <guest-path> && timeout 60 python3 trader-risk/check.py --orders tests/fixtures/trader-risk/orders-tsla.json --config trader-budget/config.example.json --now "2026-10-19 10:15" --today 2026-10-19 --no-write 2>&1 | head -30; echo "rc=${PIPESTATUS[0]}"
cd <guest-path> && grep -n -i "while True\|--every\|--once\|--now\|sleep(\|add_argument('watch\|def cmd_watch\|def watch" trader-entry/entry.py trader-alerts/alerts.py trader-news/news.py | head -40
cd <guest-path> && sed -n 30,50p trader-entry/entry.py; echo ----; sed -n 695,730p trader-entry/entry.py; echo ----; sed -n 825,860p trader-entry/entry.py; ls tests/fixtures/trader-entry
cd <guest-path> && timeout 120 python3 trader-entry/entry.py check TSLA --setup orb --now "2026-10-19 10:15" --offline tests/fixtures/trader-entry/TSLA-2026-10-19-5m.json 2>&1 | head -20; echo "rc=${PIPESTATUS[0]}"; echo ====; timeout 120 python3 trader-entry/entry.py watch TSLA --setup orb --now "2026-10-19 10:15" --offline tests/fixtures/trader-entry/TSLA-2026-10-19-5m.json --every 30 --until 15:30 --out <guest-path> 2>&1 | tail -15; echo "rc=${PIPESTATUS[0]}"
cd <guest-path> && rm -f .coldpass/entry-watch-probe.json && for q in "50 / 5.86 = 8 shares (\$2,913.44). If the stop <email>, the loss is" "PASS or BLOCK, with the reason." "At 10:15 it said triggered: the first" "python3 trader-scanner/scan.py universe" "python3 -m unittest discover -s tests -v"; do printf '%s => ' "$q"; grep -cF -- "$q" README.md; done; grep -n "while True" trader-entry/entry.py | head -3
cd <guest-path> && mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["python3","trader-entry/entry.py","check","TSLA","--setup","orb","--now","2026-10-19 10:15","--offline","tests/fixtures/trader-entry/TSLA-2026-10-19-5m.json"],"cwd":"<guest-path>","env":{},"expected_text":"TRIGGERED 10:15 AM at $364.18"}
EOF
cat > .coldpass/claims.json <<'EOF'
[
{"kind":"claim","claim":"Sizing: a $5,000 account with a $50 max loss per trade gives 8 shares of <email>","source":"50 / 5.86 = 8 shares ($2,913.44). If the stop <email>, the loss is","input":"plan-tsla.json, config budget 5000, now 2026-10-19 10:15","expected":"Size: 8 shares of TSLA = $2,913.44","probe_kind":"cli","argv":["python3","trader-budget/size.py","--plan","tests/fixtures/trader-budget/plan-tsla.json","--config","trader-budget/config.example.json","--budget","5000","--now","2026-10-19 10:15"],"env":{},"expected_text":"Size: 8 shares of TSLA = $2,913.44","cwd":"<guest-path>"},
{"kind":"claim","claim":"Risk check gives a PASS or BLOCK verdict per order with the reason","source":"PASS or BLOCK, with the reason.","input":"orders-tsla.json at 2026-10-19 10:15, no write","expected":"1 passed, 0 blocked","probe_kind":"cli","argv":["python3","trader-risk/check.py","--orders","tests/fixtures/trader-risk/orders-tsla.json","--config","trader-budget/config.example.json","--now","2026-10-19 10:15","--today","2026-10-19","--no-write"],"env":{},"expected_text":"1 passed, 0 blocked at 2026-10-19 10:15 New York","cwd":"<guest-path>"},
{"kind":"claim","claim":"Entry timer reports the opening-range breakout trigger at 10:<email>","source":"At 10:15 it said triggered: the first","input":"TSLA 5m bars for 2026-10-19 offline, now 10:15","expected":"TRIGGERED 10:15 AM at $364.18","probe_kind":"cli","argv":["python3","trader-entry/entry.py","check","TSLA","--setup","orb","--now","2026-10-19 10:15","--offline","tests/fixtures/trader-entry/TSLA-2026-10-19-5m.json"],"env":{},"expected_text":"TRIGGERED 10:15 AM at $364.18","cwd":"<guest-path>"}
]
EOF
python3 -m json.tool .coldpass/probe.json >/dev/null && python3 -m json.tool .coldpass/claims.json >/dev/null && echo OK
cd <guest-path> && cat > .coldpass/examples.json <<'EOF'
[
{"kind":"example","claim":"Scan the Nasdaq Trader symbol lists into a universe file","source":"README.md ## The tools","input":"scan.py universe","expected":"writes trader/universe.txt","argv":["python3","trader-scanner/scan.py","universe"],"cwd":"<guest-path>","env":{},"expected_text":"Wrote trader/universe.txt"},
{"kind":"example","claim":"Run the offline unit test suite documented in the README","source":"README.md ## The tools","reason":"Ran python3 -m unittest discover -s tests -v: 315 tests, 1 failure in tests/test_repo.py test_root_matches_the_reel. That test expects the repo root to list only README/LICENSE/.claude-plugin/tests and skill folders; the harness-created hidden .coldpass directory is in the root, so the expectation fails. Not a product defect; the product code paths passed."}
]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":true,"checks":[{"claim":"Entry timer runs a bar-by-bar watch loop until it triggers","source":"trader-entry/entry.py","quote":"    while True:","schedule":"watch polls every --every seconds (default 30) and wakes after each 5-minute bar closes","method":"run-once with simulated clock (--now and --offline replay the day without sleeping); no real-time wait","input":"TSLA 5m bars for 2026-10-19 (offline fixture), now 10:15 ET","expected":"prints the triggered line and stops with exit 0 (watch returns 0 on a trigger)","kind":"cli","argv":["python3","trader-entry/entry.py","watch","TSLA","--setup","orb","--now","2026-10-19 10:15","--offline","tests/fixtures/trader-entry/TSLA-2026-10-19-5m.json","--every","30","--until","15:30"],"cwd":"<guest-path>","expected_text":"TRIGGERED 10:15 AM at $364.18"}]}
EOF
python3 -m json.tool .coldpass/examples.json >/dev/null && python3 -m json.tool .coldpass/cycles.json >/dev/null && echo OK
cd <guest-path> && ls <guest-path> /inputs/ 2>&1; <env-var>=<guest-path> timeout 900 python3 -I <guest-path> --validate --replay 2>&1 | tail -80; echo "rc=${PIPESTATUS[0]}"
cd <guest-path> && cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":"test","operation":"Run the day-trader tools (sizing, risk check, entry timer, scanner universe) from the README, plus the README's offline unit tests","operation_scope":"Python 3.12.3 (README needs 3.8+); standard library only, no install step. Offline fixtures for sizing, risk and entry; scanner universe uses live Nasdaq Trader lists. Yahoo chart endpoint returned HTTP 429 at one point but the fixture-based operations do not need it. CDP endpoint http://<internal-ip>:9226/json/version returned HTTP 200 (Chrome/155.0.8059.84); no browser was needed by this product.","steps":["python3 -m unittest discover -s tests -v","python3 trader-scanner/scan.py universe","python3 trader-budget/size.py --plan tests/fixtures/trader-budget/plan-tsla.json --config trader-budget/config.example.json --budget 5000 --now \"2026-10-19 10:15\"","python3 trader-risk/check.py --orders tests/fixtures/trader-risk/orders-tsla.json --config trader-budget/config.example.json --now \"2026-10-19 10:15\" --today 2026-10-19 --no-write","python3 trader-entry/entry.py check TSLA --setup orb --now \"2026-10-19 10:15\" --offline tests/fixtures/trader-entry/TSLA-2026-10-19-5m.json","python3 trader-entry/entry.py watch TSLA --setup orb --now \"2026-10-19 10:15\" --offline tests/fixtures/trader-entry/TSLA-2026-10-19-5m.json --every 30 --until 15:30"],"deviations":["Unit suite: 315 tests run, 1 failure (tests/test_repo.py::test_root_matches_the_reel). It expects the repo root to contain only the README-listed entries; the harness-created .coldpass directory breaks that expectation. Not a product defect.","Did not run trader-risk on the reel orders as a success; it correctly BLOCKs all 5 (no stop set), exit 1, as designed.","Did not run live Yahoo-dependent commands (entry check/watch without --offline, scan orb/daily, alerts check) because Yahoo returned HTTP 429 during the run; used the README's offline fixtures instead.","Used SEC_USER_AGENT not needed for the chosen operations; the SEC tools (news, analyst, pelosi) were not exercised.","Did not use --write, so no trader/orders.json or plan files were produced; only trader/universe.txt and trader/entry.json were written by the documented commands."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":"Make the repo-layout test ignore hidden directories (or allow .coldpass) so the suite passes in a harness that creates .coldpass in the repo root."}
EOF
python3 -m json.tool .coldpass/report.json >/dev/null && echo OK; ls -la .coldpass