Kill switch, stops and caps: anatomy of automated risk control

The wrong question about automation: "how much can it make?". The right question: "what stops it from ruining me on a bad day?" An automated execution system worthy of the name is an onion of protective layers. These are the layers.

Layer 1: position sizing (the cap)

No single position should be able to do serious damage on its own. A per position cap (for example, never more than 10-15% of the account in a single asset) ensures that even the worst individual trade is a scratch, not an amputation.

Layer 2: the stop

Every position is born with a defined exit point in case the market turns against it. The stop turns "waiting for it to come back" (the amateur's official prayer) into a mechanical rule. The detail that separates systems: the stop should live at the broker, as a real order, not just in the software's head, so it works even if the system is down.

Layer 3: cash reserve and exposure ceiling

Being 100% invested is choosing to have no cushion. A disciplined system keeps a reserve and a total exposure ceiling (for example, never more than X% of the account invested), adjusted to the market regime. And one golden rule: never trade on margin without an explicit decision. Borrowed money turns a bad day into a catastrophe.

Layer 4: the circuit breaker (drawdown limit)

If the account falls more than X% from its peak, the system goes into defensive mode on its own: it stops opening new positions and keeps only the exits. It resumes once it recovers. It is the airbag: rarely used, non-negotiable.

Layer 5: the kill switch

The human button. One tap and all automation stops, immediately, no negotiation. It should be reachable inside the app and outside it (for example, on Telegram), because on the days you need it, you need it NOW. And of course: since the keys are yours (the BYOB model), revoking them at the broker is the kill switch of kill switches.

How to test a service's layers

Ask for the five numbers: cap per position, stop policy, exposure ceiling/reserve, drawdown limit, and where the kill switch lives. A serious system answers from memory. If the answers are vague, the risk is you.

---

At Kamla, every layer exists and is visible: caps and reserve in the settings, stops at the broker, an automatic circuit breaker and a one-tap kill switch in the app and on Telegram. See how it works: kamla.ai.