If it cannot surface, it does not dive.
Risk is a design constraint here, not a review that happens afterwards. A strategy is assessed before capital is allocated, launched inside a defined mandate, and monitored against exposure, loss, liquidity and operational limits for as long as it stays down.
Venue onboarding and counterparty screening
Kill switches for individual strategies
Code review and controlled deployment
Daily and per-strategy drawdown thresholds
Whitelisted withdrawal addresses
Position, notional and leverage limits
Incident response and recovery
Independent reconciliation of positions
API keys without withdrawal permissions
Pre-trade checks and order-size controls