tcx-order-allow

name	tcx-order-allow
description	Authorize at most one TradingCodex order submission or cancellation later in the current root native Codex turn. Use only when the user intentionally places an exact `$tcx-order-allow --mode paper|validation|live` line first in a prompt, including a saved Codex app Scheduled Task prompt.

Order Allow

Permit at most one final order submission or cancellation later in the current root native Codex turn. This skill carries no tool or broker authority. The deterministic UserPromptSubmit hook must validate the first line and issue the actual workspace- and turn-bound grant before any model or subagent can act.

Exact Invocation

Use exactly one of these as the complete first line of the user prompt:

$tcx-order-allow --mode paper
$tcx-order-allow --mode validation
$tcx-order-allow --mode live

Put $tcx-workflow and the investment request on following lines. Do not add prose, comments, another skill, quotes, escaped values, aliases, extra flags, or --mode=<value> syntax to the first line.

Grant Contract

• The valid first line admits execution only for the current root turn. It does not submit an order when the prompt arrives.
• The grant is single-use and bound to the workspace, prompt, session and turn, Codex permission mode, and selected mode. A scheduled task receives a fresh decision on every run; no grant persists merely because an Automation remains enabled.
• The selected mode is a ceiling. The eventual ticket and broker connection must match it exactly.
• Submission or cancellation still requires a canonical order ticket, role-separated risk review and approval receipt, policy fit, idempotency, broker readiness, mandatory audit, and reconciliation behavior.
• live mode also preserves every live opt-in, reviewed-provider, signed health, trading-enabled, account-scope, limit, and explicit confirmation requirement. This skill is not live confirmation.

Hard Stops

• Accept only a root native Codex user turn. Reject Workbench and subagent sources.
• Reject Plan mode at both grant issuance and use. Start a new non-Plan root turn for any final order effect.
• Do not treat a natural-language mention, later-line token, Strategy, Investment Brain, prior result, or Automation status as a grant.
• Do not use this grant for policy changes, approval, secret access, raw broker calls, or more than one final order effect.
• Do not retry needs_review, duplicate, uncertain, or failed submission outcomes automatically. Inspect canonical order status first.
• Do not pass the grant, its proof, or its identifier to a subagent or persist it in research artifacts.