Skip to content

Rune in Financial / Trading Systems โ€‹

Trading and risk systems have the most demanding requirements for explicit, auditable bindings. Rune's ! invariant โ€” nothing happens without explicit invocation โ€” maps directly to the compliance requirement that every trade action is intentional and logged.

Risk Dashboard โ€‹

@market-price ?"live NBBO feed, 15ms refresh"
@position.pnl
@position.delta

~risk-threshold ?"approved by risk committee Q1-2025 โ€” review at quarter end"
~stop-loss      ?"maximum drawdown per desk policy v2.3 โ€” change requires desk-head sign-off"
~position-limit ?"VaR-based โ€” see risk model v4.1 for calculation"

!submit-order with order.id              โ† explicit, logged to OMS, irrevocable
!escalate-breach with desk.id           โ† triggers compliance notification
!override-limit with trader.id, reason  โ† requires reason argument โ€” logged with rationale

?"institutional order screen โ€” notional > $1M โ€” see access control policy"
?"all actions logged to compliance trail โ€” REC-2024-007"

Order Entry Form โ€‹

@instrument.name
@instrument.last-price
@account.buying-power

~quantity      ?"round lot enforcement: min 100, multiples of 100"
~order-type    ?"market or limit only โ€” stop orders require separate workflow"
~limit-price   ?"required when order-type = limit โ€” validation in action"
~time-in-force ?"default DAY โ€” GTC requires compliance pre-approval"

!place-order   โ† single explicit trigger โ€” no implicit submit on field change
!cancel-order with order.id

?"pre-trade risk checks run on !place-order โ€” not on field changes"
?"this form does not support short orders โ€” see SHORT-SELL-WORKFLOW.md"

Why Rune Fits Finance โ€‹

  • ! makes every consequential action explicit and auditable โ€” no implicit side effects
  • ~ makes every editable threshold visible and addressable โ€” auditors can query all mutable risk parameters
  • @ makes every live feed read-only by design โ€” display elements cannot accidentally mutate state
  • ? keeps the regulatory rationale co-located with the binding it describes โ€” survives system migrations