Problem: Forex/CFD brokers needed fast, explainable risk signals and defensible decision trails — but their tools were fragmented dashboards on legacy systems with governance enforced only at the app layer.
Key Constraints:- •Audit trail must be tamper-evident and verifiable by a third party
- •Shadow mode is a hard invariant — system observes, never executes trades
- •Async audit writes rejected: deterministic traceability or nothing
Key Decision: Chose hash-chained, synchronous audit events with DB-level immutability triggers over async logging. Slower per-write, but the audit chain is provably complete and tamper-evident — a requirement in regulated brokerages.
Outcome: Replaced 3–4 fragmented dealer tools with one audit-grade platform. 14+ modules, 50+ screens, 3 user roles. Shipped in 3 weeks. Tamper-evident audit chain verifiable by any third party. Zero shortcut paths.
📎 Live demo + full architecture walkthrough available