Security

Your keys.
Your machine. Always.

Self-hosted is not a marketing word for us, it is the architecture. This page documents what we touch, what we do not touch, what is audited, and how to report a vulnerability.

What lives where

ItemWhere it is storedSent to us?
Exchange API key + secretuser-data/.env on your diskNever
Anthropic API keyuser-data/.env on your diskNever
SKALE wallet private keyuser-data/.env on your disk (only if you enable it)Never
Trade historydata/memory/{agent_id}.db (SQLite, local)Never
Beliefs (LLM-derived rules)data/beliefs/{agent_id}.jsonNever
License key hashuser-data/license.keyHash only, with machine id
Trade reasoning prompts to AnthropicSent directly from your machine to AnthropicNever to us, only to Anthropic

What we recommend you do

Required

Disable withdrawal on your exchange API key

Every exchange lets you create API keys with trading enabled but withdrawals disabled. Always do this. Even if your laptop is compromised, an attacker cannot drain your account.

Required

Set spending limits on your Anthropic account

Anthropic supports monthly spend caps. Set one (e.g. $100/mo) so a runaway loop cannot drain your credits. Even when capped, the floor degrades gracefully to pure-quant mode.

Recommended

IP whitelist your exchange API key

If your home IP is stable, whitelist it on the exchange API key. Cuts attack surface dramatically. Skip if your ISP rotates your IP frequently.

Recommended

Encrypt your disk

FileVault (Mac), BitLocker (Windows), or LUKS (Linux). The .env file holding your keys is plaintext on disk by design (so the floor can read it on boot). Disk encryption prevents extraction if your laptop is stolen.

What we do not do

Architecture

We have no server for your keys to reach.

This is not a privacy promise. It is a structural fact. There is no remote endpoint that ever sees your exchange credentials. The only network call we make from your machine is the license-key hash check, plus version-update polling.

Architecture

We never proxy your trades.

Orders go directly from your machine to your exchange via CCXT. We are not a counterparty. We are not in the order flow path.

Architecture

We do not collect telemetry.

No analytics SDK, no third-party trackers, no error reporting service. The dashboard runs entirely on your loopback interface.

Policy

We never custody funds.

Not one satoshi has ever been held by TrAIding Floor. The product is software you run, not a service that holds your money.

Audits and disclosure

The trading-system code base is not yet third-party audited. The SKALE contracts (FLOOR token, AgentRegistry, TradeLedger) will be audited before mainnet deployment; we will publish the audit report and a SHA-256 of the audited bytecode on this page. Until then the on-chain layer is testnet only.

Vulnerability disclosure: open a private GitHub security advisory on the repository. We aim to acknowledge within 24 hours and fix within 7 days. Reports that have not been public-disclosed are eligible for our (small but real) bounty program once we close the issue.

TrAIding Floor © 2026

Trading software, not financial advice. Past performance does not guarantee future results.