Multi-tenant identity
Auth with strong tenant_id scoping and testable boundaries.
Built for real-money paths
From acquisition site to engine hot path — isolation and auditable execution first.
Billing
Trials, upgrades, downgrades; idempotent callbacks against under/overpay and replay.
Entitlements
O(1) hot snapshots from plan to gate; changes apply immediately.
Trading engine
Low-latency execution with globally idempotent client_order_id.
Baseline risk
Limits, rate, self-trade, and confirmations — before, during, after.
Monitoring & invoices
Live fills, reconciliation, and subscription invoices for tenants.