Skip to main content
No autonomous agent in Sisera can handle live institutional or user capital without progressing sequentially through a mandatory 7-stage promotion pipeline (POST /v1/agents/:id/promote). Each promotion transition is enforced at both the application layer (@sisera/agent-runtime) and the PostgreSQL database trigger layer, requiring persisted evaluation evidence tied to the exact cryptographic hash of the active manifest version.

The Seven Promotion Stages


Automatic Demotion & Circuit Breakers

Even after reaching limited_live or live, every agent is continuously monitored by automated circuit breakers on every tick:
Instant Demotion Triggers: An active agent is automatically demoted to paused or paper without waiting for human intervention if any of the following conditions occur:
  1. Daily Drawdown Breach: Realized + unrealized daily drawdown exceeds max_daily_drawdown_pct.
  2. Implementation Shortfall Anomaly: Realized execution slippage exceeds 3× the backtest/shadow expectation.
  3. Market Data Degradation: Connectivity to order book or Pyth reference data degrades for more than 5 seconds.

Emergency Fleet Halt

Operators and risk managers can also trigger an immediate fleet-wide or single-agent emergency halt at any time:
  • Single Agent Pause: POST /v1/agents/:id/pause
  • Global Emergency Halt: POST /v1/agents/emergency-halt — Immediately transitions all active live agents to paused and cancels pending proposals.