Architecture & Security
LiquidONE separates the execution engine from the web application. The database acts as the immutable contract between the two.
The Web Application
A Next.js 16 application hosted on Vercel. It provides the user interface across three subdomains: Marketing, Authentication, and the Product Dashboard. The web app never executes trades. It only reads data and writes user configuration.
The Postgres Contract
Supabase Postgres sits between the web app and the engine. The web app writes bot configurations to the database. The engine reads these configurations, executes trades, and writes results back to the database.
The Python Engine
An isolated Python worker running continuously. It polls the database for active bots, evaluates market conditions, applies the ORB logic and risk checks, and submits execution payloads to broker APIs.
Data Isolation (RLS)
Live updates to the dashboard (agent feed, live P&L) are powered by Supabase Realtime. To ensure security, Row-Level Security (RLS) policies are enforced at the database level, using the authenticated session to guarantee that users can only subscribe to their own data streams.