> For the complete documentation index, see [llms.txt](https://candora.gitbook.io/whitepaper/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://candora.gitbook.io/whitepaper/system-principles.md). # System Principles Trading already contains unavoidable uncertainty. Markets move unexpectedly, liquidity changes, and risk must be managed continuously. These are inherent characteristics of trading itself. What should not be part of the experience are disadvantages introduced by the platform operating the market. Many modern trading venues have built business models around structural inefficiencies. Participants encounter slippage that consistently works against them, latency that affects execution quality, opaque prioritization mechanisms, and liquidation systems that can amplify rather than mitigate market stress. While these behaviors may not always be intentional, they often arise from infrastructure designs that place platform incentives ahead of participant outcomes. Candora is built around a different premise. The objective is not to remove risk from trading. Risk is fundamental to markets. The objective is to remove avoidable friction, reduce structural disadvantages, and align platform behavior with participant interests wherever possible. These principles influence both the design of Candora Grid and the operational decisions made throughout the platform. ### Fair Execution Execution quality begins with consistent treatment. Candora is designed around the principle that matching behavior should follow published rules rather than participant identity, account size, subscription tier, or commercial relationship with the platform. Under normal operating conditions, orders are processed according to FIFO price-time priority, ensuring that priority is determined by price and arrival sequence rather than hidden preference mechanisms. This principle extends beyond matching itself. Network architecture, ingress handling, and execution routing are designed to preserve logical consistency throughout the order path. Candora may publish execution-quality and latency-distribution metrics where legally and operationally appropriate to support independent evaluation of execution behavior. Under predefined systemic stress conditions, the platform may temporarily transition into interval-based clearing designed to preserve market integrity during periods of extreme instability. These transitions operate according to predefined activation criteria and published rules rather than discretionary intervention. Fair execution does not guarantee favorable outcomes. It guarantees that outcomes are determined by market conditions and platform rules rather than undisclosed participant advantages. ### Market Transparency Markets function most effectively when participants can make decisions using information that accurately reflects underlying conditions. Candora is designed to promote transparency by prioritizing the visibility of genuine executable interest and reducing the influence of behavior intended primarily to distort market perception. Displayed liquidity does not always represent meaningful trading intent. Orders may be repeatedly placed and removed, liquidity may appear deeper than it truly is, and market activity may create misleading impressions regarding supply, demand, or available execution capacity. To improve market interpretation, Candora incorporates automated market-integrity systems, behavioral monitoring frameworks, and analytical controls designed to identify patterns commonly associated with deceptive market activity. These systems support transparency and participant awareness but do not guarantee perfect detection or complete elimination of all misleading behavior. The objective is not to create an idealized market. The objective is to provide participants with a clearer representation of actual market conditions. ### User Sovereignty Participants should retain meaningful control over their capital and trading decisions. Candora is designed around user-directed participation. Trading activity, capital deployment, position management, and withdrawal intent remain under participant control within the platform's custody and settlement framework. The exchange provides the infrastructure required to secure assets, process settlements, maintain custody records, and satisfy applicable compliance obligations. These responsibilities require predefined security, compliance, and operational controls. However, such controls are intended to be rule-based, transparent, and non-discretionary rather than dependent upon arbitrary platform intervention. Withdrawals are not subject to unnecessary restrictions, although deterministic system-wide pacing mechanisms may be activated during periods of severe market stress to preserve settlement continuity and reserve integrity. User sovereignty does not imply direct custody of platform infrastructure. It means participants retain control over their decisions while the platform provides secure and predictable execution, custody, and settlement services. ### Designed for Stress-Condition Reliability Reliability matters most when conditions are unfavorable. Many systems perform well during periods of normal activity but deteriorate precisely when volatility, liquidity pressure, or participant demand increases. Candora is designed with the assumption that the most important operating conditions are often the most difficult ones. The platform's architecture emphasizes fault isolation, deterministic recovery, replayability, and coordinated stress-response mechanisms across execution, risk, market-state, custody, and access systems. The objective is to preserve continuity of execution, pricing, risk management, settlement, and platform access even when market conditions become abnormal. Reliability is therefore measured not by performance during ideal conditions, but by behavior during periods of stress, disruption, and uncertainty. ### User Experience and Accessibility Sophisticated infrastructure should not require unnecessary complexity to operate. Candora is designed to remain accessible across a wide range of trading experience levels without compromising the integrity of its underlying systems. The platform incorporates structured safeguards, contextual guidance, risk visibility, and execution-awareness tools intended to reduce avoidable user errors while preserving participant control. These features are designed to improve understanding rather than abstract away the realities of trading. Usability is viewed as an extension of market integrity. Participants should be able to understand what the platform is doing, why it is doing it, and how their actions affect outcomes. The objective is not to simplify markets. It is to make interaction with those markets clearer, more predictable, and easier to understand. ### Principles in Practice These principles establish the philosophical foundation of Candora. The technical systems described throughout the remainder of this whitepaper exist to implement these objectives in a measurable and enforceable manner. The following sections describe the infrastructure architecture that supports execution, market-state synchronization, pricing integrity, solvency management, custody, intelligence, and platform access throughout Candora Grid.