Institutional Trading Terminal · buy-side execution surface
Grounded in FIX 4.4 production · ACY Connect
A terminal that surfaces hundreds of risk signals without cognitive overload — density as a discipline, not decoration. Built for L/S equity PMs running $1B–$10B books who cannot afford to context-switch during the open.
Walkthrough · 90 seconds
A short walkthrough — the Portfolio Risk Matrix surfacing 960 data points across 80+ funds, the Level-2 order book, the inline pre-trade SEC/FINRA compliance overlay, and multi-chart orchestration. Grounded in production FIX 4.4 exposure from ACY Connect.
Executive Architecture Decision Record
Institutional L/S equity PMs trading $1B–$10B books lose the open when forced to cross-reference disconnected risk dashboards and execution tickets. Modelled problem framing — not a measured latency study.
Option A: Full AI Auto-Execution (Rejected: model risk & SEC 15c3-5 liability).
Option B: Modal Multi-Step Form (Rejected: ticket latency during the open).
Option C: Single-Surface L2/L3 Terminal with Pre-Trade Gating (Chosen).
Adopted Option C: Embed SEC 17a-4 / FINRA 2111 compliance invariants directly inside the hot ticket, before the FIX gateway, so post-trade reconciliation is not the first line of defence. Modelled architecture — not a measured gateway latency.
Walked through against simulated open volatility. No production TCA, no claimed retrofit-cost saving. The point is the architecture: compliance as a ticket invariant, not a downstream review.
The contribution · at a glance
This is a production-grounded independent study — the numbers describe surfaces, data density, and the regulatory frameworks designed against, not production outcomes. FIX 4.4 literacy comes from shipped production work at ACY Connect. Nothing here is dressed up as a live employer product.
Design provenance
The interaction rules here — partial-fill state display, session-aware routing, single-instrument depth focus, keyboard-first cancel/modify — are not borrowed from an incumbent terminal's screenshots. They are derived from ACY Connect's FIX 4.4 protocol work in production, serving 12+ institutional clients.
Tag 39 OrdStatus lifecycle. Session state machines. The anti-pattern constraints that govern real institutional order flow. Independent study, grounded in protocol reality.
Live interactive prototype
A working slice of the execution surface — a live order book with depth heat, a streaming candlestick, real-time position P&L, a microstructure panel, and smart-order-router allocation. Every price, fill and metric is synthetic and labelled as such; the point is the information architecture, not a data feed.
Design decisions · why this, not that
The rejected paths weren't wrong — they were wrong for this specific user context. Grounded in direct protocol experience, not in reading terminal screenshots.
✕ Rejected · drill-down
Standard in retail dashboards. Every navigation click is latency in a position decision.
✓ Chosen · single page
PMs monitor 80+ funds during the open. Context-switching kills reaction time. Density is a workflow constraint, not a style choice.
✕ Rejected · multi-instrument L2
A FIX session can carry hundreds of symbols — the protocol doesn't force single-instrument UI.
✓ Chosen · single-instrument depth
The cognition forces it. Tag 150 ExecType for AAPL bleeds into MSFT depth in peripheral vision under stress. Alt+O context-switch is faster than the eye.
✕ Rejected · post-submission errors
Fine in retail — a minor friction. In institutional execution it triggers a reporting obligation and a trade-reconstruction audit.
✓ Chosen · pre-trade constraint
Position limits, wash-trade flags, concentration limits appear in the ticket as the trader types quantity. The cost of the error sets the requirement.
✕ Rejected · green-on-black clone
Fails WCAG 2.1 AA for financial data and conflates semantic green (buy/profit) with display green — parsing errors under stress.
✓ Chosen · semantic dual-theme
UI chrome uses neutral blues and ambers. Semantic meaning holds across dark and light so traders switching workspaces never re-learn colour.
SEC / FINRA · pre-trade compliance
Broker-dealers serving institutional flow operate under tight scrutiny — 2024 FINRA disciplinary settlements cluster in the $250K–$5M range, with rare nine-figure outliers. The design surfaces the constraint before the trader commits, following FINRA Rule 2111 suitability and SEC 17a-4 audit-trail retention.
Pre-trade risk checks — position limits (SEC 15c3-5), wash-trade flags, concentration limits — remain mandatory and cannot be bypassed by any auto-send control.
Portfolio risk matrix
80 funds × 12 metrics held simultaneously — VaR, Sharpe, Alpha, Beta, sector and regional exposure — because the PM's first question is portfolio shape, not an individual ticker. Density tiers and semantic colour make the anomaly pre-attentive: the breach surfaces first, the supporting detail second. Untested with live PMs — at this density the claim is a design hypothesis, and the honesty register below says so.
| Fund | VaR 95% | Sharpe | Alpha | Beta | Sector | Region | Δ 1D |
|---|---|---|---|---|---|---|---|
| MERIDIAN L/S EQ-0142 · $2.4B | −4.8% | 0.71 | +2.1% | 0.94 | Tech 38% | US | −1.9% |
| ARDEN MACRO MAC-0088 · $5.1B | −2.1% | 1.82 | +3.4% | 0.41 | Rates 44% | Global | +0.6% |
| HALLEY CREDIT CR-0231 · $1.8B | −3.3% | 1.14 | +0.9% | 0.62 | HY 51% | EU | −0.3% |
| VECTOR QUANT QT-0410 · $3.7B | −1.6% | 2.05 | +4.2% | 0.28 | Multi | Global | +1.1% |
| STERLING EVENT EV-0177 · $0.9B | −5.2% | 0.44 | −1.3% | 1.11 | M&A 63% | US/EU | −2.7% |
| KESTREL SYSTEMATIC SY-0305 · $4.3B | −2.4% | 1.37 | +1.8% | 0.55 | CTA | Global | +0.4% |
Exchange-level layer · the real qualifier
The gap between an institutional terminal and exchange-grade infrastructure is what lives below the chart. These are the layers a terminal needs before 2026 to be more than a retail terminal wearing an institutional suit.
Incident Drills & Post-Mortem
Institutional design integrity is forged in failure modes. Below are two architectural post-mortems from extreme-load testing.
Failure Mode: During simulated flash-crash testing, high-frequency L2 order book updates triggered micro-layout thrashing, spiking render times to 420ms and dropping 18 frames.
Failure Mode: Rapid partial fills (Tag 39=1) arriving out-of-order from multi-venue SOR routes caused the ticket UI to momentarily display stale cumulative quantities.
Status & honesty
Production-grounded independent study · fictional brand · original IP · not a live employer product. Built from production work — the ACY Connect FIX 4.4 platform, real prime-brokerage requirements, terminal architecture analysis. Read as a reconstructed study, not a shipped TradeX product.
◆ What I designed
○ Deliberately not built
Research provenance. Production exposure — ACY Connect FIX 4.4, shipped, serving hedge funds and prime brokers. Unstructured interviews (n=3, 45–60 min) — one PM, one quant analyst, one buy-side risk officer; findings seeded the framework, they did not validate it. Terminal architecture analysis supplemented by public documentation. TradeX is a design hypothesis built on production FIX exposure — treating it as anything else would be dishonest.
Retail dashboards lie by simplifying. Institutional terminals lie by overloading. I've built on both sides — and I've picked a side.
Ed Chen · Senior Product Designer · the defensible design tells the trader what they need in the five seconds before the market moves
Study evolution
The risk matrix and compliance architecture here are the structural foundation for a deeper study — what happens when the terminal is rebuilt with intelligence-first architecture, no legacy constraints. TradeX Hedge Fund answers that across the portfolio-management cognitive layer above execution.
Explore further
Every problem we solve for clients has multiple valid approaches — different costs, different ROI, different risk profiles. These threads show how the approach on this page compares to others in the portfolio.
How upstream regulation and macro prints become downstream product defaults and Legal-safe disclosure.
Portfolio-level math primitives — HHI, beta, VaR, regime — rendered into UI defaults and AI-assisted decision surfaces.