Evidence is not execution

A strong research result is not a broker instruction. TradingCodex deliberately separates the analysis path from any final effect and keeps a single exact path for each sensitive action.

The default is analysis-only #

Natural-language research, Decision Memory, a scheduled task, a Strategy, an Investment Brain, or a Build task do not create an order, approval, or broker action. Fixed-role subagents have no submit or cancel capability, and the browser viewer has no mutation route.

Explicit exclusions remain binding. “No order,” “No trading,” and similar limits apply to the dynamic workflow. Use the research path when you want evidence, alternatives, or a Decision Package without a final effect.

For the user journey from Paper or broker provider setup through ticket, approval, and final action, read From provider to order.

Three exact order entrypoints #

There is no broad tcx-order skill. The root-native entrypoints are unavailable in Plan mode and subagents, and their complete prompt grammar is parsed before a model runs.

Entrypoint	Purpose	Immediate effect
`tcx-order-allow`	Admit at most one later submit or cancel attempt in this root turn.	No; it creates a bounded one-use grant.
`tcx-order-submit`	Submit one already-approved order with the exact ticket and approval receipt ids.	One canonical submit attempt.
`tcx-order-cancel`	Cancel one known submitted broker order with exact identifiers.	One canonical cancel attempt.

Use the turn grant only when needed #

Use tcx-order-allow only when the order identifiers are not known at the beginning of a normal workflow and you intentionally allow one possible final attempt after all research and approvals pass. Put its exact mode invocation on the first meaningful line; only the skill token may be replaced by a matching workspace skill link.

Exact first meaningful line

$tcx-order-allow --mode paper
$tcx-workflow
Review the approved paper-order candidate. Submit at most one order only if every gate passes.

The grant is bound to the workspace, session, turn, original complete prompt, permission mode, and order mode. It expires after one hour and is revoked on use, Stop, or the next user turn. It neither grants approval nor performs an immediate order.

The service remains the final gate #

Even an exact request or current turn grant is only an admission path. The canonical service still checks policy, payload validation, restricted lists, matching approval receipts, idempotency, account scope, broker health, live confirmation, reconciliation, and audit.

Do not automatically retry a result that is uncertain or needs review. Status inspection and ordinary analysis can continue, but the effect path waits for a terminal canonical result.