Paper-only setup

Create or select an Alpaca paper account and use its paper API credentials and paper trading endpoint. Never paste credentials, account identifiers, account responses, or deployment secrets into a strategy plugin, checked-in YAML, issue, or public log.

Store credentials in a local ignored file or your deployment secret manager. Set account identity and endpoint independently, then run the read-only configuration check before starting a paper process. The generic equity plugin runner requires a dedicated account; it cannot share the V13.5 wheel account.

Deployment and optional hosting

Start a paper runner explicitly and verify that its state directory is persistent. Restart tests should cover pending and partial orders. Cloudflare is optional and only schedules a publication workflow; it is not required for local backtests or paper execution. Configure a repository-scoped token and a unique Durable Object for your fork.

The public performance exporter is GET-only and publishes a strict allowlist. Review every field before enabling publication. Missing balances, positions, or cash flows must remain unavailable rather than being displayed as zero.