Deploy Aureon OS (deploy/selfhost stack: nginx edge + fusion API x2 + console + HNC organ + redis + postgres; paper mode) (part 2)

space/entrypoint.sh

@@ -15,12 +15,17 @@ export PYTHONDONTWRITEBYTECODE=1
 export PYTHONUNBUFFERED=1
 export HOME=/home/aureon
 
-# ---- authority defaults: paper / public data, no orders, no mutations ----
+# ---- authority: owner's signed release governs (docs/LIVE_TRADING_RUNBOOK.md,
+# RELEASE 2026-11-01). When the operator arms the surface via the Space secret
+# AUREON_LIVE_TRADING=1 + AUREON_FUSION_ARM_LIVE, paper defaults are NOT applied
+# and the owner's .env flags (LIVE=1, caps, rates) govern. Otherwise paper:
+if [ "${AUREON_LIVE_TRADING:-}" != "1" ]; then
 export AUREON_LIVE_TRADING=0
 export AUREON_FUSION_ARM_LIVE=""
 export AUREON_DISABLE_REAL_ORDERS=1
 export AUREON_DISABLE_EXCHANGE_MUTATIONS=1
 export AUREON_ORDER_INTENT_PUBLISH=0
+fi
 
 # ---- operator gateway (the full console brain, loopback behind nginx) ----
 export AUREON_OPERATOR_HOST="${AUREON_OPERATOR_HOST:-127.0.0.1}"

space/supervisord.conf

@@ -88,6 +88,23 @@ stdout_logfile_maxbytes=0
 stderr_logfile=/dev/stderr
 stderr_logfile_maxbytes=0
 
+[program:trader]
+; The owner-signed live-release seat (RELEASE 2026-11-01 in
+; docs/LIVE_TRADING_RUNBOOK.md). Arms from exchange-key secrets + AUREON_LIVE_TRADING=1
+; + AUREON_FUSION_ARM_LIVE; the seat/trading_world_v5b runs the trading organism
+; on 127.0.0.1:8765 (internal; never publicly routed).
+command=/usr/local/bin/python -u -m aureon.launch.master --only seat/trading_world_v5b,deps/python
+directory=/app/aureon-os
+environment=SERO_WORKSPACE="/app/aureon-os",PYTHONPATH="/app/aureon-os"
+priority=45
+autorestart=true
+startsecs=15
+startretries=2
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+
 [program:hnc_core]
 command=/usr/local/bin/python -u -m aureon_fusion.hnc_core --supervise
 environment=SERO_RUNTIME_HOME="/app/aureon-os/aureon_fusion/state"