Harden trading, training, and monitoring

.env.example

@@ -71,7 +71,13 @@ TIME_SERIES_PROBE_ENABLED=true
 TIME_SERIES_PROBE_MIN_EDGE_PERCENT=0.02
 TIME_SERIES_PROBE_MIN_PROBABILITY_UP=0.55
 TIME_SERIES_PROBE_SIZE_MULTIPLIER=0.40
-TIME_SERIES_REBOUND_FALLBACK_ENABLED=true
+TIME_SERIES_REBOUND_FALLBACK_ENABLED=false
+TIME_SERIES_REQUIRE_QUALITY_GATE=true
+# Emergency paper-only override. Keep false unless a failed guard is accepted manually.
+TIME_SERIES_MANUAL_QUALITY_OVERRIDE=false
+TIME_SERIES_REQUIRE_FRESH_MODEL=true
+TIME_SERIES_MODEL_MAX_AGE_HOURS=48
+MARKET_TICKER_MAX_AGE_SECONDS=45
 STOP_LOSS_PERCENT=0.04
 TAKE_PROFIT_PERCENT=0.035
 TRAILING_STOP_PERCENT=0.015
@@ -86,6 +92,22 @@ SLIPPAGE_RATE=0.0003
 ENABLE_LIVE_TRADING=false
 LIVE_TRADING_CONFIRM=
 LIVE_ORDER_MAX_USDT=10
+LIVE_ORDER_FILL_TIMEOUT_SECONDS=20
+LIVE_RECONCILIATION_INTERVAL_SECONDS=30
+LIVE_PROTECTIVE_STOP_ENABLED=true
+
+# Required for direct API access. If a trusted reverse proxy authenticates
+# requests, set TRUSTED_PROXY_USER_HEADER to the header injected by that proxy.
+TRADEBOT_API_TOKEN=
+TRADEBOT_TRAINING_TOKEN=
+TRUSTED_PROXY_USER_HEADER=
+
+HOLD_SIGNAL_SAMPLE_SECONDS=60
+STORAGE_RETENTION_DAYS=30
+STORAGE_PRUNE_INTERVAL_SECONDS=3600
+
+# Windows trainer keeps this final tail untouched by training and early stopping.
+TORCH_RETRAIN_HOLDOUT_WINDOW=240
 
 DATABASE_PATH=runtime/tradebot.sqlite3
 LOG_PATH=runtime/tradebot.log