CoilOps
userpaper modeThe product model: whisper → coil → validate → fuse → compile → receipt → share → run.
What CoilOps is
CoilOps is the HISS workbench that turns market whispers into verified Coils — structured trading playbooks — and compiles them into Robinhood-MCP-ready Execution Capsules with binding risk fuses. The product is the toolchain: the same pipeline serves a human at the workbench and any MCP-capable agent calling the tools API or the HISS MCP server.
What CoilOps is not: not a broker, not an autotrader, not an order-placing MCP server. HISS tools never place orders. Capsules are documents a user’s agent replays against Robinhood’s official Trading MCP, in the user’s own Agentic account, under Robinhood’s own controls — see Robinhood Agentic Trading.
The pipeline
| Stage | What happens | Docs |
|---|---|---|
| 1 · Whisper | Paste a market take, thread, or note. The raw idea is preserved verbatim on the Coil. | Create a Hiss |
| 2 · Coil | HISS structures the whisper into a Coil manifest: thesis, canonical instruments, weights in bps, policy, fuses, triggers. | Concepts |
| 3 · Validate | Deterministic checks: registry match, weight math (exactly 10,000 bps), symbol-space separation, fuse bounds. | Agent tools API |
| 4 · Fuse | Attach binding risk fuses. Five fuse kinds are mandatory before any capsule can compile. | Risk fuses |
| 5 · Compile | One Coil in, every artifact out: runbook, Execution Capsule (non-paper modes), tool-call plan, fuse checklist, share card. | Coil compiler |
| 6 · Receipt | Every artifact gets a canonical-JSON SHA-256 receipt with liveOrderSent hard-typed false. | Receipts |
| 7 · Share / export | Publish the Coil, post the share card (a thesis artifact, never a performance claim), or export the capsule. | Share cards |
| 8 · Runbook | The human- and agent-readable session protocol: validate, snapshot read-only, compute drift, propose, confirm, check. | Execution Capsules |
| 9 · Post-run | Post-trade checks (weights vs fuses, turnover, order log vs plan, residual drift) and a session receipt. | Drift checks |
Core objects
| Object | Meaning |
|---|---|
| Whisper | The raw market idea a Coil was coiled from. Recorded verbatim; required by validation. |
| Coil | A structured, versioned trading playbook: allocation core (weights in bps), policy, risk fuses, triggers, execution mode. |
| Fuse | A typed, checkable constraint — a bound on what a compiled artifact may instruct, or a hard stop condition. All fuses are binding. |
| Capsule | An Execution Capsule: a bounded instruction bundle (markdown + JSON) the user hands to their own agent on Robinhood's official Trading MCP. HISS never sends it anywhere. |
| Trace | The public timeline of a Coil: whisper, versions, validations, receipts, forks. Provenance you can walk. |
| Runbook | The markdown session protocol compiled from a Coil: targets, policy, fuses, steps. |
| Receipt | A deterministic canonical-JSON SHA-256 fingerprint of an artifact. Paper anchoring only; never a performance claim. |
| Coil Health | A 0–100 structure/readiness heuristic over nine components. Never a prediction of returns. |
| Drift report | Target-vs-current weight comparison. Breaches yield rebalance proposals — previews requiring human confirmation. |
Two symbol spaces, never confused
A Coil’s allocation core uses the canonical Robinhood Chain Stock Token registry (identity = 0x address). The brokerage side of a capsule uses plain tickers in a Robinhood Agentic account. The mapping is explicit (brokerSymbols) and validation rejects any blur between the two — a broker symbol that looks like a chain address is a hard error.
Defaults that keep you safe
- paper_only is the default execution mode. Paper Coils compile runbooks and share cards, and refuse to compile capsules.
- Simulate-first. Non-paper capsules instruct the agent to simulate every order and verify tradability before anything else — both are first-class Robinhood MCP tools.
- Human confirmation everywhere except one mode — and
agentic_mcp_enabledonly compiles with the explicituserAcknowledgedAgenticModeflag. A mode string alone never unlocks it. See Modes & flags. - liveOrderSent is hard-typed
falsein every capsule and receipt. There is no rail in HISS that could make it true.