⚔ The Arb Execution Panel operator-armed · client-side signing · one confirm per order · nothing auto-fires

⚠ Read this first

This panel can place real trades with your own wallet. It is the operator's tool, not the Sanctuary's: Blackhorn's server and Claude never see your keys and never sign or send anything — every order is constructed in your browser and signed by your wallet, one explicit confirmation at a time. There is no auto-fire and no bot.

state: disarmed

B/2 · Your wallet

Read-only connect via your injected wallet (MetaMask / EIP-1193). We read your address and chain to build orders — never your key.

not connected

B/1 · The plan (paper — from /api/arb/plan)

Pull a live opportunity from the scan (recommended — no hand-typed token ids), or paste an opportunity's outcome tokens. The plan is a paper book-walk — it renders read-only here.

C/1 · Operator config — your CLOB seam (lives in this browser only)

Your CLOB submit endpoint and auth stay in this browser's localStorage — they are never sent to Blackhorn's server and never written into the repo. Leave the endpoint blank to stay in dry-run.

C/2 · The tape (live edge & fill prices, sampled in your browser)

Samples the paper plan every few seconds once a plan is loaded. This is a live top-of-book tape, not a historical OHLC feed — it shows the realized edge and per-leg fill price breathing in real time.

stopped

C/3 · Decision tree (deterministic, on the current plan)

Walks a fixed policy over the paper plan. It recommends; it never fires. You still arm, sign, and place each order yourself.

Chain map: testnet = Polygon Amoy (80002) · mainnet = Polygon (137). Polymarket CLOB order signing is EIP-712 — the order struct + domain in this page are a scaffold you must confirm against the current CLOB spec before arming on mainnet. ← the cockpit · the read-only Scout