v2.0.0 — AI-first autonomous agent architecture
v2.0.0 — AI-first autonomous agent architecture
⚠️ Simulation-only toy project. No live order routing. All outputs are not investment advice — see the disclaimer in the README.
Major architecture upgrade: the platform moves from a linear
data → analysis → prediction → strategy pipeline to an AI-first autonomous agent
centered on an OODA decision loop — fed by a market-intelligence pipeline, quant signals,
and a smart stock screener, over a Redis-Streams event bus.
Highlights
- Autonomous agent loop (
src/agent_loop/) — OODA cycle: signal aggregation →
Bayesian prescreen → bull/bear debate → risk gates → Kelly sizing → trade proposal,
with a 7-team InvestmentDirector, sentiment-cycle gates, thesis tracking, T+1/T+3/T+5
outcome tracking and confidence calibration. - Market intelligence (
src/intelligence/,src/intelligence_hub/) — 5-layer source
hierarchy, 7-component scoring, causal impact chains, and a NetworkX knowledge graph. - Quant & event bus (
src/quant/,src/event_bus/) — HMM regime detection,
YAML signal library, optional Qlib Alpha158, Redis-Streams event-driven micro-OODA. - Risk & execution (
src/risk/,src/trading/) — circuit breaker, VaR, Kelly sizing,
kill switch, layered gates, A-share constraints (all simulation-only). - 智能选股 / Smart stock recommendation (
src/recommendation/) — multi-style screener +
LLM review + T+1 overnight risk + win-rate tracking, with a user-facing UI and a live feed
into the agent loop. - Optional HTTP Basic Auth for the dashboard/API (
WEB_USERNAME/WEB_PASSWORD; off by default). - Docs rewritten to the v2 architecture (README, dev guide, CLAUDE.md, CHANGELOG).
Quality & security
- All external deps mocked in unit tests; 3801 unit tests pass, frontend type-check + build green.
- Imported as fresh, clean history — no upstream private state, session logs, or secrets.
- CodeQL triage: fixed real bugs + security findings (SSRF, path-injection, clear-text
logging, ReDoS, stack-trace exposure), hardened CI workflows (least-privilege permissions,
SHA-pinned actions); remaining low-severity findings triaged.
Merged via #39 (architecture + 智能选股 + Basic Auth) and #40 (CodeQL triage & hardening).
Full changelog: see CHANGELOG.md.