1.9 StrategySuitabilityGate

1. Bot Identity

Operational profile

2. Purpose

StrategySuitabilityGate screens every OrderIntent against the user's declared experience tier and capital envelope, blocking strategy types that exceed the user's configured risk profile. It prevents novice-tier users from executing advanced multi-leg or high-leverage strategies without explicit elevation.

3. Why This Bot Matters

• Unsupported strategy executed

  A user configured for basic strategies executes a complex multi-outcome strategy they have not validated, leading to unexpected losses and support escalation.

• Capital envelope exceeded

  A strategy-level order exceeds the user's configured per-strategy capital cap, concentrating more exposure than intended.

No worked examples on this bot yet. Worked examples are optional but strongly recommended — they turn an abstract failure mode into something a developer can verify in a fixture.

4. Required Polymarket Inputs

5. Required Internal Inputs

6. Parameter Guide

7. Detailed Parameter Instructions

{ "allowed_strategy_classes": ["basic"] }

if (!params.allowed_strategy_classes.includes(intent.strategy_class)) return reject('SUITABILITY_STRATEGY_CLASS_BLOCKED');

{ "max_capital_per_strategy_usd": 1000 }

if (intent.size_usd > params.max_capital_per_strategy_usd) return reject('SUITABILITY_CAPITAL_CAP_EXCEEDED');

{ "require_elevation_for_negrisk": true }

if (params.require_elevation_for_negrisk && intent.neg_risk && user.tier < 'advanced') return reject('SUITABILITY_NEGRISK_BLOCKED');

8. Default Configuration

{
  "bot_id": "risk.strategy_suitability_gate",
  "version": "0.1.0",
  "mode": "hard_guard",
  "defaults": {
    "allowed_strategy_classes": [
      "basic"
    ],
    "max_capital_per_strategy_usd": 1000,
    "require_elevation_for_negrisk": true
  },
  "locked": {
    "max_capital_per_strategy_usd": {
      "min": 50
    }
  }
}

9. Implementation Flow

1. Receive OrderIntent including strategy_class, size_usd, neg_risk flag, and user context.
2. Check KillSwitch; if active, HARD_REJECT(KILL_SWITCH_ACTIVE).
3. Load user profile (experience tier, capital envelope) from internal config store.
4. If intent.strategy_class not in allowed_strategy_classes, HARD_REJECT(SUITABILITY_STRATEGY_CLASS_BLOCKED).
5. If intent.size_usd > max_capital_per_strategy_usd, HARD_REJECT(SUITABILITY_CAPITAL_CAP_EXCEEDED).
6. If require_elevation_for_negrisk and intent.neg_risk and user.tier < advanced, HARD_REJECT(SUITABILITY_NEGRISK_BLOCKED).
7. All checks passed — APPROVE with checked_at timestamp.

10. Reference Implementation

Pseudocode is language-agnostic. FETCH = read input. EMIT = produce output. IF/THEN/ELSE = decision. Translate directly to TypeScript, Python, Go, or Rust.

FUNCTION evaluateSuitability(intent):
  ks = FETCH internal.killswitch.status
  IF ks.active:
    EMIT RiskVote(HARD_REJECT, KILL_SWITCH_ACTIVE); RETURN

  profile = FETCH internal.user_profile(intent.user_id)
  IF profile IS NULL:
    EMIT RiskVote(HARD_REJECT, SUITABILITY_DATA_UNAVAILABLE); RETURN

  IF intent.strategy_class NOT IN profile.allowed_strategy_classes:
    EMIT RiskVote(HARD_REJECT, SUITABILITY_STRATEGY_CLASS_BLOCKED); RETURN

  IF intent.size_usd > params.max_capital_per_strategy_usd:
    EMIT RiskVote(HARD_REJECT, SUITABILITY_CAPITAL_CAP_EXCEEDED); RETURN

  IF params.require_elevation_for_negrisk AND intent.neg_risk:
    IF profile.tier < 'advanced':
      EMIT RiskVote(HARD_REJECT, SUITABILITY_NEGRISK_BLOCKED); RETURN

  EMIT RiskVote(APPROVE, checked_at=now_ms())

SDK calls used

• internal.user_profile(user_id)
• internal.killswitch.status()
• gamma.getMarketByConditionId(market_id)

Complexity: O(1)

11. Wire Examples

Input — what arrives on the wire

OrderIntent — strategy class blocked — internal

{
  "intent_id": "int_a1b2c3d4e5f60001",
  "market_id": "0x1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b",
  "strategy_class": "multi_leg",
  "size_usd": 500,
  "neg_risk": false,
  "generated_at_ms": 1746800000000
}

Output — what the bot emits

RiskVote — HARD_REJECT

{
  "guard_id": "risk.strategy_suitability_gate",
  "decision": "HARD_REJECT",
  "severity": "HARD",
  "reason_code": "SUITABILITY_STRATEGY_CLASS_BLOCKED",
  "message": "strategy_class 'multi_leg' not in allowed list ['basic'].",
  "constraints": {},
  "checked_at": "2026-05-10T08:00:00Z"
}

12. Decision Logic

13. Standard Decision Output

This bot returns a RiskVote object. See RiskVote schema.

{
  "guard_id": "risk.strategy_suitability_gate",
  "decision": "HARD_REJECT",
  "severity": "HARD",
  "reason_code": "SUITABILITY_STRATEGY_CLASS_BLOCKED",
  "message": "Strategy class 'multi_leg' is not in the user's allowed_strategy_classes list.",
  "constraints": {},
  "inputs_used": [
    "internal.user_profile",
    "internal.killswitch.status"
  ],
  "checked_at": "2026-05-10T08:00:00Z"
}

14. Reason Codes

15. Metrics & Logs

Metrics emitted

Alerts

16. Developer Reporting

{
  "bot_id": "risk.strategy_suitability_gate",
  "decision": "HARD_REJECT",
  "reason_code": "SUITABILITY_STRATEGY_CLASS_BLOCKED",
  "inputs_used": [
    "internal.user_profile"
  ],
  "metrics": {
    "strategy_class": "multi_leg",
    "allowed": [
      "basic"
    ],
    "user_tier": "basic",
    "size_usd": 500
  },
  "checked_at": "2026-05-10T08:00:00Z"
}

17. Plain-English Reporting

18. Failure-Mode Block

19. Failure-Injection Recipes

20. State & Persistence

Cold-start recovery

On cold start, profile is fetched from Redis synchronously. If Redis unavailable, HARD_REJECT until restored.

21. Concurrency & Idempotency

22. Dependencies

Depends on (must run first)

Emits to (downstream consumers)

External services

23. Security Surfaces

Abuse vectors considered

• Submitting an OrderIntent with a spoofed strategy_class field
• Profile cache poisoning to elevate a user's apparent tier

Mitigations

• strategy_class is validated against an operator-managed enum; unknown values are rejected
• Profile cache is write-protected; only the user-config service may update entries

24. Polymarket V2 Compatibility

25. Versioning & Migration

Migration history

26. Acceptance Tests

Unit Tests

Integration Tests

Property Tests

27. Operational Runbook

Incidents typically involve a stale user profile cache or a misconfigured allowed_strategy_classes list. Confirm Redis connectivity and profile cache age before adjusting parameters.

On-call actions

Manual overrides

• polytraders risk refresh-profile --user-id <id> — After a user tier upgrade that has not propagated within the cache TTL.

Healthcheck

GET /internal/health/strategysuitabilitygate → green: Redis reachable, profile cache age < 60s, p99 eval latency < 50ms; red: Redis unreachable, cache age > 120s, or SUITABILITY_DATA_UNAVAILABLE rate > 0

28. Promotion Gates

A bot does not advance to the next readiness state until every gate below is green. Gates are observable from production data — no subjective sign-off.

Promote to Shadow

Promote to Limited live

Promote to General live

29. Developer Checklist

Ready-to-ship score: 27/27 sections complete · 100%