Real-time risk management, in a market that never closes

The phrase is used loosely, so here is the mechanism. Venue prices arrive over WebSocket, so a move reaches the book in milliseconds rather than on the next poll. A price move triggers a revaluation of the whole book — exposure, margin, collateral and limits — throttled to about a second and self-limiting, so the screen reflects the market roughly as fast as a person can read it. Fills land over a persistent connection with per-source sequence numbers, gap detection and resync, and the book applies them as events rather than overwriting a snapshot. Results are pushed to every open screen over a live stream with a polling fallback. The browser displays; it never calculates.

• Prices streamed over WebSocket, with a REST sweep behind it as reconciliation
• Revaluation triggered by price moves, not only by a timer
• Streaming ingestion of fills — WebSocket with sequence gap detection, FIX drop-copy, NATS
• Event-sourced book: corrections are appended as events, never silent overwrites
• Results pushed to every client over a live stream, with a polling fallback

Overnight risk assumes the market pauses and that the difference between two closes is the story. In digital assets the damaging moves happen between those points, and the margin schedules themselves change intraday — a venue can raise initial margin on a symbol at any hour, which silently turns every client tier priced beneath it loss-making. A report produced the next morning tells you what the loss was. A live book tells you while it can still be acted on.

A digital asset can move fifty per cent in a minute, so a breach discovered on the next scheduled slot is a breach discovered late. Safetifi therefore runs two clocks and does not compromise between them: price-driven recomputes reach the screen immediately, while a separate aligned grid on exact UTC boundaries — :00, :15, :30, :45 — is what gets recorded to history and what an end-of-day figure is stamped with. Recording every price-driven compute would turn the series into one row per tick; scheduling the screen off the grid would make you wait.

The only moment a limit is cheap to hold is before a trade exists. Safetifi prices a hypothetical ticket against the live book: the margin spread on that trade, its marginal portfolio-margin effect after offsets, the before-and-after view of net exposure, value-at-risk and liquidity, and a limit check that isolates this trade’s own contribution rather than flagging a breach the book was already carrying.