Paper trading

Settings

Preferences persist in this browser. They are not writes to a Prism engine or cloud service.

Read-only agent connection

The native server binds 127.0.0.1, has no CORS, and requires a bearer token for protected reads. A hosted browser cannot connect directly. Use a same-machine deployment or an authenticated HTTPS bridge with this app’s origin explicitly allowed. Never expose the engine unauthenticated.

HTTPS bridge URL

Any path prefix is preserved (e.g. …/prism/status).

Bearer token · memory only

Never saved to local storage; cleared on disconnect or reload.

Source: Paper trading

Read endpoints only

GET /health · /status · /positions
/decisions?limit=100 · /config · /agent-policy

All six are read in one 8s operation and validated before the view switches. Proposal and approval endpoints are never called.