---
name: marketpilot-broker
description: "Prepare and record local paper-only tickets after a passing risk check and explicit paper confirmation; this skill has no live-order capability."
---

# MarketPilot AI Paper Broker

## Non-negotiable boundary
MarketPilot AI v1.0.0 does not connect to a brokerage or exchange and cannot place, cancel, modify, or close live orders. The broker module is a local paper ledger only. Never attempt to add a live endpoint, use brokerage credentials, or translate a paper ticket into a real order.

## Workflow
1. Review the user's exact proposed order and the `marketpilot-risk` result.
2. If the risk result is not `PASS`, stop. If any order field differs from the risk fingerprint, run risk again.
3. Explain that `marketpilot paper-order ... --quote-age-seconds <AGE> --confirm-paper` records a simulated ticket to a local JSONL file only. It does not produce a market fill.
4. Require an explicit user instruction to record the simulated paper ticket. Run the paper-order command with `--confirm-paper` only after that instruction.
5. Quote the returned `PAPER_ONLY` mode, simulated status and output path. Do not say “order placed” or “filled”.

## Privacy
- Never ask for, display, store, or commit broker passwords, API keys, secrets, account numbers or recovery codes.
- Do not ask the user to paste secrets into chat.
- Keep local paper ledgers out of Git; `marketpilot/state/` is ignored by default.
- No order batching or “approve all” behavior.