Risk

For risk teams

Risk officers and desk heads.

DojiPad checks each trader's plan against your firm's limits before the order is placed. A trader commits a plan to confirm it as the plan of record. If a committed plan goes past a limit, it appears in the list of limit breaches, with the figure. This happens before the order is entered. The desk overview and analytics show where the cost comes from. You see open flags and the largest breach for each trader, filtered by desk. You also see the list of limit breaches grouped by type of limit.

What do I see, and will my traders accept it? You see each trader's process. You don't see their conversation with DJ, DojiPad's AI coach. No screen or report in DojiPad shows a trader's conversation with DJ, their personal rules or what DJ learns about them. They are stored in your firm's own database, so, as with any system your firm hosts, its database administrators could read them there.

On this page

  1. 1 How it fits your risk framework First line, second line and third line: what each gets from DojiPad. →
  2. 2 Your firm's limits How your limit document is read, set up, switched on and versioned. DojiPad does not guess. →
  3. 3 The list of limit breaches One group from the list, as the product renders it. →
  4. 4 Desk overview and analytics Open flags, largest breach and last plan for each trader. Every card states its time period. →
  5. 5 Breach prediction Which traders are likely to breach a limit on their next plan, checked against what each trader does next. →
  6. 6 How prediction accuracy is measured Calibration and Brier scores, for each trader. →
  7. 7 How it fits your risk process Each control you already run (order checks, surveillance, P&L review) has its place on the decision timeline. →
  8. 8 What DojiPad doesn't do yet It checks plans, not executed trades. Market data and the execution feed are on the roadmap. →
  9. → Pilot Thirty days from go-live, on one desk, in a private copy of DojiPad in your own cloud account. The fee is credited in full if you go on to subscribe. →
  10. → Request a briefing DojiPad running live on a simulated firm. We show it first from the list of limit breaches, then from the trader's side. →

How it fits your risk framework

DojiPad feeds your risk framework and replaces none of it.

  • First line: traders and desk heads get the plan check and DJ before the order.
  • Second line: risk and compliance see limit breaches, the desk overview and breach predictions.
  • Third line: internal audit can read the audit log and rebuild it as of any date, and can't change anything.

DojiPad sees the plans traders state, so which decisions need a plan is a desk policy. How your team checks coverage today is under What DojiPad doesn't do yet.

Product · Your firm's limits

How DojiPad sets up your firm's limits

We set up your limits from your own documents, in two workshops with your risk or compliance owner. Limits that can't be written as rules are listed as not monitored, never silently skipped. If DojiPad can't map an instrument, it says so rather than guessing. Each limit is set to show traders the full figure, only whether they are near or over the limit, or nothing (monitored internally).

I.

From your limit document to proposed limits

You give DojiPad the document that sets out your firm's limits. DojiPad proposes each limit, ready to be set up in the system. Each limit's threshold, and what it is measured against, must come from the document's own text. If they do not, the proposal says the limit cannot be expressed. It never shows a guessed number. DojiPad does not guess.

II.

Versions, switching on, and what is monitored

Each limit, once set up, is either switched on or not. When a limit changes, the old version is kept, and each limit finding records which version it was checked against. Every exported PDF carries a stamp. The stamp lists which limits are monitored and which are declared not monitored. So a gap in coverage is stated openly, never left unsaid.

III.

Plans that cannot be measured are refused

Futures are sized in contracts, using a verified record of contract multipliers. A plan that cannot be measured this way is refused, not estimated.

IV.

In the walkthrough

Recorded on the live product. The chapter on the firm's limits shows the list of limits for Aurora Capital Management (Simulated). One of them is not yet set up. Every figure on screen is calculated from the records at the moment the page is requested.

The list of limit breaches

One group from the list of limit breaches, as the product renders it, with simulated data. What was breached comes first, then by how much, then who.

Limit breach
Up to 1.71× the limit
Emre Sato (Simulated) · Systematic desk
26 breaches · first 30 Aug 2026, 18:30 UTC · latest 30 Aug 2026, 22:41 UTC · 22 open · 4 acknowledged · 1 unreviewed by you
Redrawn from the live product for this site. Figures are live values from Aurora Capital Management (Simulated).

Product · Desk overview and analytics

What desk heads see, and what stays unknown

I.

Open flags, largest breach and last plan per trader

The desk overview has one row per trader. It shows open flags, the largest breach (as a multiple of the limit) and the last plan. The open-flag count is the same number as in the list of limit breaches. It means the same thing on every screen. Checking plans against what was actually traded needs the execution feed, the record of your filled trades. Until that is connected, those columns say plainly that they are unavailable. They are not estimated. Once the execution feed is connected, orders without a stated plan show on the desk overview.

II.

Analytics: a read-only summary

Analytics summarizes the list of limit breaches, the briefs and the breach predictions. It shows open flags now and how often traders reshape a plan. It shows how many briefs traders write and how long acknowledgements take. A table per trader shows how closely each trader's predictions matched what happened. Limit breaches are also shown by type of limit. Every card states the time period it covers. Analytics only reads: it records nothing and defines nothing of its own.

III.

Results against plans, once trades are connected

This screen compares realized results with whether the plan was followed, by behavior pattern and by cost. It cannot link results to their causes until the execution feed is connected. The screen says so, and shows nothing rather than misleading figures.

As of 2 Sep 2026, 00:46 UTC · view: desk
Scope: whole organisation.
Generated by Compliance officer (Simulated)
Monitoring: 6 of 20 clauses monitored.
NOT MONITORED at generation: 7.2 (unevaluable_stale_nav); 9.4 (unencoded); 9.7 (unencoded) (list truncated for this rendering; the export names every desk's clauses)
Redrawn from the live product for this site. Figures are live values from Aurora Capital Management (Simulated).

Product · Breach prediction

Which traders are likely to breach a limit on their next plan

Breach prediction answers one question: will this trader's next committed plan breach a limit? It answers no other. Each prediction is checked against the trader's next committed plan, and predictions stay hidden until there is enough history to judge them. The prediction is built from committed plans and their limit breaches. It starts from your firm's overall breach rate. It then moves with the trader's own record, and gives recent plans more weight. You can open every figure to see the plans behind it.

I.

How each prediction is checked

A prediction is made each time a plan is committed. It is settled when the trader's next committed plan is checked against your limits.

Emre Sato (Simulated) · 44 prior plans, 25 exceeded
proximity 1.2× forecast 0.49 · realised 0.59 · 41 settled 45%
next plan exceeded
Redrawn from the live product for this site. Figures are live values from Aurora Capital Management (Simulated).
II.

How prediction accuracy is measured

Breach prediction is measured in two standard ways.

  • Calibration compares the predicted rate with the actual rate over settled plans, for each trader. A plan counts as settled once the trader's next committed plan has been checked. The screen shows the two rates side by side. So you can see whether the number claims more than the record supports.
  • Brier scores, a standard accuracy score for probability forecasts, measure how far the predictions were from what happened. They are kept in the detail view, next to the figures they are compared with, never shown on their own.
III.

What the prediction screen holds back

  • No figure for a trader with fewer than three prior plans.
  • No tiers until at least five traders have been scored.
  • The firm's overall rate and the tier cut-off lines are shown at the top of the screen.
IV.

On the roadmap: checking against actual trades

ROADMAP

“Calibrates on the execution feed. Not connected.”

Checking predictions against actual trades (fills) comes with the execution feed. Until that ships, the screen checks predictions against the trader's next plan only. It says so on screen.

V.

What the trader sees of their prediction

Each trader sees their own prediction and its trend, in their own view. They see nothing about any other trader.

I.

How DojiPad fits the controls you already run

The controls you already run are order checks, surveillance, and review after the fact. Each one acts at a set point on the decision timeline. Read the timeline and the pattern is clear.

PLANDOJIPAD INSTITUTIONALORDER ENTRYPRE-TRADE COMPLIANCEEXECUTIONSURVEILLANCE, AFTERWARDSREVIEWRETROSPECTIVE ANALYTICSTHE ONLY CONTROL BEFORE THE ORDER EXISTS
THE DECISION TIMELINE · READ FROM TOP TO BOTTOM
PLAN
DOJIPAD INSTITUTIONAL
The plan can still change. Only here can a control both record the decision and still influence it.
THE ONLY CONTROL BEFORE THE ORDER EXISTS
ORDER ENTRY
PRE-TRADE COMPLIANCE
The order already exists. The thinking is done.
EXECUTION
SURVEILLANCE, AFTERWARDS
The money has already moved.
REVIEW
RETROSPECTIVE ANALYTICS
The quarter is over.

Read the timeline left to righttop to bottom. The further rightfurther down a control sits, the more it can prove and the less it can change. By order entry, the thinking is done. By execution, the money has moved. By review, the quarter is over. Before the order is the only point where a control can both record the decision and still change it. Until now, no control has worked there.

THE TIMELINE AS TEXT
  • Plan, before the order: DojiPad Institutional. The plan can still change. Only here can a control both record the decision and still influence it. The only control before the order exists.
  • Order entry: pre-trade compliance. The order already exists. The thinking is done.
  • Execution: surveillance, after the trade. The money has already moved.
  • Review: retrospective analytics. The quarter is over.

What DojiPad doesn't do yet

Today DojiPad checks plans, not executed trades. It doesn't yet read market data or your executed trades (the execution feed). Both are on the roadmap, as one-way connections into DojiPad.

What that means today:

  • DojiPad sees the plans traders state. Your desk decides which decisions need a stated plan, for example every new position or anything above a set size. Until the execution feed is connected, your team checks coverage against its own order log.
  • Limits are checked on the plan as stated, using the plan's own price and your capital figures (NAV, firm book or desk book, as each limit specifies).
  • Comparing what was planned with what was executed starts when the execution feed is connected.
  • Each breach prediction is checked against the trader's next committed plan. Checking predictions against executed trades arrives with the feed.
  • The product says so on screen: “Session monitoring is not active — no execution feed is connected. Silence here is not a clean bill.”