OPPEN
RouterLocal-firstAgentsTerminalManifestoWhitepaperDocs
WHITEPAPER
oppen.xyz · manifesto · rev 01

Trading is about to be
rebuilt by agents.
The keys should stay with you.

I

The keys stay with you.

Custody is not a feature to be traded away for convenience. Your keys are generated on your machine, encrypted on your machine, and used on your machine. oppen never holds funds and never sees a key. There is no account to freeze, no server to subpoena, no wrapper to unwind.

II

Software should trade. People should write the rules.

Markets move faster than attention. Agents can watch every book, every funding interval, every fill, without fatigue. What they cannot do is decide how much you are willing to lose. That is policy, and policy is yours: markets, venues, notional cap, leverage, loss halt. The gateway enforces it before every order. The model cannot change it.

III

Nothing happens off your machine.

Local-first is not a deployment detail. It is the only architecture where the trader, the agent and the gateway share one trust boundary, and that boundary is the edge of your own hardware. Venue connections are direct. Model calls carry no keys. There is no telemetry, because there is nothing we need to know.

IV

Every decision is written down.

An autonomous agent earns autonomy by being legible. oppen logs every decision an agent makes, including the ones that result in nothing: every hold, every quote it declined, every order the policy refused. The log is local, append-only, and yours to read. If you cannot audit it, you should not arm it.

V

Best fill is a measurement, not a claim.

Liquidity is fragmenting across venues, and it will keep fragmenting. One account should be able to quote three books and take the best of them. oppen routes every order to the venue with the best price for that size, and records the price and latency of every venue it did not choose, so the claim can be checked.

VI

Contrast is earned.

A trading interface should not perform. It should report. Everything on an oppen screen sits in the bottom of the contrast range until a fact changes, and then only that fact is bright. The brand is drawn in characters because a character grid cannot lie about resolution: what you see is exactly what the machine knows.

VII

We chose the name on purpose.

We chose oppen because of Oppenheimer. We believe agents are going to bring a huge impact to the financial industry in the following years and can transform retail trading just like the atomic bomb transformed humanity. That is not a boast. It is a warning we are choosing to take seriously: the tools are arriving whether or not anyone is careful with them. We would rather build the careful version, and we would rather you held the keys.

— the oppen team · signed locally
oppen.xyz · 2026 ← back to oppen.xyz