System Documentation

AQMath Quantitative Portfolio Rebalancer — Technical Reference
v2.1 — August 2026
⚡ READ THIS PAGE IN 60 SECONDS

What it does: AQMath tells you the mathematically best way to spread every new dollar you invest across your tokens — instead of guessing or splitting equally.

How it protects you: the Deleverage Shield automatically moves your portfolio into stablecoins as the market turns dangerous, and back into tokens as it recovers.

How it stays private: no accounts, no wallet connection. Your portfolio lives in your browser — the only server-side data is pseudonymous, exists only if you opt in to the optional signal & notification service, and is deletable at any time.

Plain English: drawdown = how far a portfolio falls from its highest point. Sharpe = return earned per unit of risk — higher is better. risk parity = weighting tokens by the risk they add, not by their dollar size. DCA = investing a fixed amount on a regular schedule.

1. What is AQMath?

AQMath is a quantitative portfolio rebalancer purpose-built for the crypto market. It combines institutional-grade mathematical models — the same class of optimization used by multi-billion-dollar hedge funds — with a privacy-first architecture that ensures your financial data never leaves your control.

At its core, AQMath solves a deceptively complex problem: when you add new capital to your crypto portfolio, which tokens should you buy, and how much of each? A naive approach (split equally) ignores that some positions are already overweight while others are dangerously underweight. AQMath’s DCA engine uses smart proportional allocation, filtered through a DCA safety pipeline, to ensure every dollar you invest moves your portfolio closer to its optimal structure.

The system operates on a hybrid architecture: your portfolio data (token amounts, entry prices, targets) is stored exclusively in your browser’s localStorage, while computationally intensive math (covariance matrices, DCA allocation planning, volatility analysis) runs on our secure backend engine. This means you get institutional-quality analysis — and nothing financial is stored on any server unless you opt in to the optional signal & notification service (Section 9).

🔐 NON-CUSTODIAL PRIVACY

AQMath’s privacy model is non-custodial by design: the backend receives position data in-memory during a single DCA request, computes the result, and discards everything. No persistence. No logs of your amounts. No database of your identity. Your financial state lives in your browser’s localStorage — the only server-side exception is the optional signal & notification service, which stores your holdings under a one-way key hash and can be deleted at any time.

1.1 Who Is AQMath For?

AQMath is designed for a specific type of crypto investor:

  • Passive DCA investors who regularly add capital and want to know the mathematically optimal way to distribute it across their portfolio — not just “buy more BTC” but “buy more of whatever is most underweight right now.”
  • Long-term holders who believe in their token thesis (6–18+ months) but want to avoid emotional rebalancing decisions driven by market hype or fear.
  • Privacy-conscious users who refuse to connect wallets, hand over API keys, or trust a centralized service with their portfolio data. AQMath requires zero accounts, zero wallet connections, and zero data sharing.
  • DeFi participants who hold tokens across multiple chains and wallets and need a unified view with quantitative allocation — without giving any single service visibility into their total exposure.
  • Risk-aware allocators who understand that a 30% position in a single altcoin is not “diversified” just because it has a high target — and want structural limits (hard caps, risk budgets, circuit breakers) enforced automatically.

AQMath is not a trading bot. It does not execute trades, predict prices, or time the market. It is a mathematical allocation engine that tells you exactly how to distribute new capital for maximum portfolio balance — and then gets out of your way.

2. System Architecture

AQMath uses a hybrid architecture that separates data ownership from computational power. Your browser owns the data; the backend owns the math. This is fundamentally different from traditional portfolio tools that store everything on centralized servers, creating a single point of failure and a tempting target for data breaches.

System Architecture Diagram
BROWSER (localStorage) Portfolio: amounts, targets Entry prices, cost basis OHLC history via backend (180d) DCA results → updated amounts Safe-Haven toggle, ATH tracker positions during DCA prices + risk weights SECURE BACKEND ENGINE DCA Distribution Engine AQMath Engine (Black) Circuit Breaker + Hard Caps Volatility Calculator Safety Factor + Trend Filter EXTERNAL APIs Binance (frontend spot prices) CoinGecko (daily close history) Data Pipeline (daily close) PRIVACY BOUNDARY Positions sent during DCA, never stored. Holdings synced only if you opt in. No persistence (opt-in signal service excepted).

2.1 Data Flow

Understanding the data flow is critical to understanding AQMath’s privacy guarantees. Every computation interaction follows the same pattern: your browser sends the minimum information needed, and the backend returns results without retaining any state. The single documented exception is the opt-in signal & notification service (Section 9).

  1. User enters tokens + targets → stored exclusively in browser localStorage. No network request is made.
  2. SYNC clicked → live spot prices are pulled from Binance’s public market data (CoinGecko as fallback) — read-only market data. Your holdings are never transmitted.
  3. DCA Distribute clicked → positions (including amounts) and DCA budget are sent to the backend engine via a single HTTPS POST request.
  4. Backend computes → the DCA engine builds a plan-based proportional allocation, filtered through the full safety pipeline. All computation happens in-memory. Nothing is written to disk or database.
  5. Results returned → updated token amounts are sent back to the browser and written to localStorage. The backend discards the request data immediately after responding.

2.2 Data Cleaning Pipeline

Before price data reaches the optimization engine, it passes through a multi-stage cleaning pipeline that ensures mathematical integrity. Raw market data from multiple sources (CoinGecko, Kraken, Coinbase) is often noisy — containing duplicates, exchange-specific outliers, and occasional gaps. The cleaning pipeline applies four sequential filters:

  1. Deduplication — removes duplicate timestamps, keeping the latest entry per date.
  2. Outlier Removal — rejects prices that deviate several standard deviations from a 7-day rolling window, eliminating flash-crash spikes and stale quotes.
  3. Multi-Source Merge — when the same token is collected from multiple exchanges, the median price is used to eliminate exchange-specific bias.
  4. Gap Interpolation — fills gaps of 2 days or fewer using linear interpolation, preserving trend continuity.

This pipeline runs daily at 01:00 UTC via a scheduled cron job. The result is a clean, continuous price series suitable for covariance and volatility calculations.

2.3 Non-Custodial Privacy Model

AQMath’s privacy architecture is non-custodial by design. The backend processes your DCA request statelessly — it receives position data, computes optimal allocation, returns results, and discards everything from memory. No persistent record of your holdings is created server-side unless you opt in to the signal & notification service (Section 9):

  • No portfolio or financial database exists unless you opt in — and even then only a pseudonymous record under your hashed key, deletable at any time (Section 9)
  • No portfolio amounts are logged or stored server-side after a DCA response
  • No wallet addresses, API keys, or identity information is ever collected
  • Unless you opt in to the signal service, the backend cannot reconstruct your portfolio — it simply doesn’t retain the data
  • Your browser’s localStorage is the home of your financial state; the optional signal service keeps only a pseudonymous mirror of your holdings
🔐 WHY THIS MATTERS

In 2023–2025, multiple centralized portfolio trackers suffered data breaches exposing user holdings. With AQMath, even a server breach could expose only what you chose to sync — token symbols and amounts tied to an anonymous key hash, never your name, wallet, or exchange keys. Your financial sovereignty is guaranteed by architecture, not by promises.

3. Portfolio Tracking

Your portfolio is a collection of token positions stored entirely in your browser’s localStorage. For each token, AQMath tracks your holdings, target allocation percentage, current price, staking yield, entry price history, and DCA cost basis. Together, these parameters form the complete state of your portfolio and drive every calculation in the system — from allocation metrics to risk budget enforcement. If you enable the optional signal & notification service, a pseudonymous copy of your holdings is mirrored server-side under your hashed key (Section 9).

Portfolio Position Overview (example)
PORTFOLIO TOTAL: $100,000 BTC Bitcoin 0.45 BTC target: 25% current: 27% ETH Ethereum 12.5 ETH target: 20% current: 15% USDC USD Coin 20,000 USDC target: 25% current: 20% P&L +18% +24% 0%

3.1 Position Metrics

Every time the UI renders or a DCA calculation runs, the system computes real-time metrics for each token. It measures how much each position is currently worth, what share of your total portfolio it represents, and how far it has drifted from your intended target.

The DCA engine uses delta — the dollar gap between where a token is and where it should be — to prioritize which tokens receive new capital first. Tokens that are most underweight relative to their target get funded first. Safe-haven tokens (stablecoins) bypass this filter entirely and always receive capital when designated.

3.2 P&L Tracking

Profit and loss is tracked against your cost basis — the true dollar-cost-averaged entry price across all purchases. As the DCA engine buys more tokens over time, it accumulates your cost basis and total tokens acquired, giving you an accurate average price and return percentage for each position.

3.3 Discipline Meter

AQMath is human-in-the-loop: the engine proposes each rebalance as a signal, and you confirm or adjust it — nothing ever executes by itself. The Discipline Meter tracks one thing: how reliably you act on those signals the same day. It is a mirror, not a judge. Showing the number does most of the work, because most people assume they confirm ~90% of signals and discover they are closer to ~60%.

Each signal carries a 12-hour deadline. Confirming within the first hour scores 100%, and the score decays to 0% at the deadline; a signal you never confirm counts as missed. Your overall rate is the average score across all resolved signals, shown with a Confirmed / Missed / Skipped breakdown and a rolling window of your last 10 signals. The history chart plots your actual equity against an “ideal” curve (every signal confirmed on time) on a fixed $10,000 baseline, so the cost of hesitation is visible.

You set your own same-day goal (50–100%, default 80%) — self-set friction feels completely different from an app grading you, and the bar is colored against your own number. Active reminders are opt-in and silent by default, so opening the app is never punished. The meter counts only the signals you already have; it adds no new server-side data beyond the pseudonymous signal record described in Section 9.

4. DCA Distribution Engine

The DCA engine is the heart of AQMath. Given a budget (e.g., $500), it determines exactly how to distribute that capital across your portfolio’s underweight tokens — not equally, not randomly, but proportionally to how far each token is from its target, adjusted for risk.

The engine builds an allocation plan without ever touching your actual tokens: it hands each token a share of the budget in proportion to how far it sits below its target, adjusted for risk. Tokens that reach their target drop out and their share is redistributed to the rest. Every planned buy must clear a per-token minimum (default $20) — any buy that would fall below that floor is dropped and its budget re-planned across the remaining tokens, so you never place fee-eating sub-dollar buys.

DCA Budget Flow (example: $500)
$500 DCA Budget DCA ENGINE DCA safety pipeline plan-based allocation non-custodial BTC +$142 ETH +$89 SOL +$54 USDC +$215 ✓ on target ▼ underweight ▼ underweight ▶ safe-haven

4.1 How It Works (High-Level)

Before any allocation happens, each token is evaluated through the DCA safety pipeline (see Section 5). Only tokens that pass all filters are eligible to receive DCA funds. The allocation then follows a simple principle: the more underweight a token is relative to its target, the larger share of new capital it receives — tempered by a risk adjustment that reduces allocation for highly volatile assets.

After each round, cost basis and token counts are updated automatically. Over multiple DCA cycles, the engine naturally balances your portfolio toward its ideal allocation.

4.2 Small DCA Rule

When the DCA budget is very small, the engine allocates the entire amount to the single most underweight eligible token.

📊 WHY SINGLE-TOKEN FOR SMALL AMOUNTS

If you DCA $20 across 5 tokens, each gets $4 — likely below exchange minimums, and fees would consume a significant percentage. The small DCA rule puts the full $20 into the token that needs it most. Over multiple DCA cycles, the algorithm naturally balances across all tokens. The same fee-avoidance logic applies to larger budgets: every buy must clear a configurable per-token minimum (default $20) — any token whose share would fall below that floor is skipped and its budget redistributed to the more underweight tokens, so even a $500 DCA never places tiny sub-dollar buys.

5. DCA Safety Pipeline

AQMath implements a multi-layer safety pipeline for DCA allocation designed for crypto markets. Traditional systems would halt trading on a 10% dip — but in crypto, pullbacks of that size happen regularly and are often excellent buying opportunities. Each layer operates independently and in strict sequence. Note: This pipeline governs only how new DCA capital is allocated — it does not trim or sell existing positions.

📈 APY IS INFORMATIONAL ONLY

Staking APY is tracked per token and displayed in the portfolio table together with its yield gap versus the 10% self-sustaining threshold. It does not gate DCA eligibility: an underweight token with a high yield still receives allocation like any other underweight token.

DCA Safety Pipeline
L1 Circuit Breaker pauses DCA while Shield is defensive (exposure below redeploy) L2 Safety Factor reduces buy size for volatile assets L3 Trend Filter enforces buy-the-dip discipline L4 Hard Caps max concentration per token L5 Risk Budget caps total risky exposure L6 Safe-Haven Redirect surplus flows to stablecoin

L1 — Circuit Breaker

The circuit breaker halts all DCA distribution whenever the Deleverage Shield is in its defensive state — when market conditions have deteriorated enough for the shield to cut exposure to a defensive level. Because exposure is driven mostly by drawdown and downside volatility, it engages during any meaningful downturn, not only brief flash crashes, and stays paused through a sustained bear market. It resumes automatically once the shield’s exposure recovers.

L2 — Safety Factor

A per-token risk adjustment that reduces buy size for high-volatility assets. More volatile tokens receive proportionally less capital, ensuring that risky positions don’t get outsized allocations even when they’re the most underweight.

L3 — Trend Filter

Skips tokens currently trading above their moving average — effectively enforcing a “buy the dip” discipline. Capital flows to tokens during pullbacks, not during rallies.

L4 — Hard Caps

No single risky token can exceed a structural concentration limit. If allocation would push a token beyond this cap, the excess is trimmed and redirected to the surplus pool.

🔧 DYNAMIC CAPS (Black Feature)

The Black engine replaces the flat cap with volatility-adaptive limits: high-volatility tokens receive tighter caps, while low-volatility tokens can hold larger positions (up to 40%). Each token’s maximum weight is dynamically scaled based on how volatile it is relative to the most volatile token in the portfolio. The more volatile a token, the tighter its cap.

L5 — Risk Budget

Total risky exposure is capped at a percentage of your portfolio, ensuring a safety buffer always exists. If risky tokens exceed the budget, all allocations are scaled down proportionally.

L6 — Safe-Haven Redirect

All surplus capital from hard caps and risk budget scaling flows into your designated stablecoin. This capital sits in a safe buffer until you decide to redeploy it through DCA.

6. Volatility Calculation

Volatility is the foundational risk metric used throughout AQMath. It feeds into the safety factor, the circuit breaker threshold, and (in Black) the covariance matrix. The system computes a rolling volatility estimate for each token by measuring the magnitude of daily price swings — a standard approach in quantitative finance.

6.1 Portfolio Volatility

Portfolio-level volatility is computed from the covariance matrix of token returns: σ = √(w'Σw), where w is the weight vector and Σ is the covariance matrix. Safe-haven tokens and frozen positions are excluded since they have near-zero volatility by definition. This portfolio-level metric drives adaptive thresholds across the entire safety pipeline.

📘 COVARIANCE MATRIX (Black Feature)

The Black engine computes a full covariance matrix estimating how assets move together. Two tokens with moderate individual volatility but high correlation (like ETH and SOL) have amplified combined risk. The optimizer uses this to ensure each asset contributes equal risk — preventing hidden concentration through correlation.

8. AQMath Engine (Black)

The AQMath Engine is the Black-tier optimization layer that sits alongside the DCA engine. While the DCA engine distributes a fixed dollar budget, the AQMath Engine answers a deeper question: what should the target weights themselves be? It uses institutional-grade quantitative methods — the same class of algorithms deployed by multi-billion-dollar hedge funds — to compute mathematically optimal portfolio weights from first principles.

The engine runs a three-stage pipeline: it builds a full covariance matrix from 180 days of cleaned price history, solves for Equal Risk Contribution (true Risk Parity), and applies KKT projection with dynamic volatility caps to enforce structural limits.

AQMath Engine Pipeline
COVARIANCE 180 days of prices Risk matrix ERC SOLVER Equal Risk Contribution Equal risk weights KKT PROJECT Volatility-scaled caps budget-exact weights WEIGHTS new targets

8.1 Equal Risk Contribution (ERC)

Traditional portfolio optimization (Markowitz mean-variance) requires estimating expected returns — a notoriously unreliable process that amplifies estimation errors into extreme allocations. Risk Parity sidesteps this entirely by optimizing for equal risk contribution rather than equal weight or maximum return.

The ERC solver searches for weights where each asset contributes an equal share of total portfolio risk. The process works as follows:

  • Each token’s risk contribution is calculated by multiplying its weight by its marginal contribution to overall portfolio volatility.
  • The solver repeatedly adjusts weights — increasing allocation to tokens that contribute too little risk, decreasing those that contribute too much.
  • Every adjustment step keeps the weights valid, so the search settles smoothly into a stable solution.

The result is a portfolio where BTC and a small-cap altcoin each contribute the same amount of risk — preventing any single asset from dominating your portfolio’s volatility profile, even if it has the largest allocation.

8.2 KKT Projection & Structural Limits

The raw ERC weights may violate real-world constraints (e.g., a 35% allocation to a single token). The KKT projection step enforces structural limits through iterative clipping:

  • Dynamic per-token caps — each token’s maximum weight is computed from its volatility. The more volatile a token is compared to the rest of the portfolio, the tighter its cap. Stable, low-volatility tokens can hold up to 40%.
  • Allocation budget — the optimizer allocates exactly the total budget it is given, never more. Portfolio-level de-risking is handled separately by the Deleverage Modulator.
  • No shorts — weights are clipped at zero; a token can be excluded entirely, but never sold short.
  • Surplus redistribution — capital freed by capping is redistributed to uncapped tokens proportionally.

The projection runs iteratively until all constraints are simultaneously satisfied.

8.3 Correlation & Covariance Analysis

The engine computes a full NxN covariance matrix from 180 days of cleaned, aligned price history. This matrix captures not just individual asset volatility but how assets move together. Two tokens with moderate individual volatility but high correlation (e.g., ETH and SOL tend to move in the same direction 85% of the time) have amplified combined risk — a relationship that simple weight-based allocation ignores entirely.

The AQMath Engine returns:

  • Covariance matrix — upper-triangle annualized covariances for all token pairs
  • Top correlations — the 6 highest-correlated pairs, sorted by correlation strength
  • Portfolio volatility — the aggregate annualized volatility after KKT projection
  • Per-token diagnostics — ERC weight, KKT weight, risk contribution, volatility, dynamic cap, and capped status
📈 WHY RISK PARITY MATTERS

A naïve equal-weight portfolio of BTC + SOL + DOGE allocates 33% each. But DOGE’s volatility is roughly 3x BTC’s, meaning DOGE contributes ~60% of total portfolio risk despite holding only 33% of value. ERC automatically corrects this: it would allocate ~55% to BTC, ~25% to SOL, and ~20% to DOGE — ensuring each token genuinely contributes one-third of the risk.

8.4 Deleverage Modulator

The Deleverage Modulator is a continuous de-risking mechanism that scales exposure down as portfolio drawdown and downside volatility rise — no indicators, no timers, no correlation gate. Unlike simple "pause DCA" strategies that only stop new purchases, the modulator performs true portfolio de-risking — it scales down ALL existing positions proportionally, moving capital into stablecoins (USDC) as the regime deteriorates.

⚠ TRUE DE-RISK vs PAUSE BUTTON

As the regime deteriorates, the modulator does two things simultaneously: (1) reduces all existing token positions by scaling their weights down proportionally — this is the actual "selling" of exposure; (2) reroutes all new DCA contributions into USDC while defensive. A strategy that only pauses DCA while letting existing positions ride through a -80% crash is not a shield — it’s just a pause button.

How It Works

  • Two-signal regime read — the engine tracks only rising drawdown and rising downside volatility over a short rolling window. No moving averages, no timers, no correlation gate.
  • Continuous scaling — target exposure is a smooth 0–100% dial that turns down as drawdown and downside volatility rise — not a set of discrete steps. There is no hard floor: in a deep, volatile crash exposure can approach zero.
  • Capital preservation — while defensive the portfolio holds the majority in cash-equivalent (USDC), absorbing only a fraction of ongoing crash damage. Exposure scales continuously with the regime, holding cash when drawdown and downside volatility are elevated.
  • Steady ramp, trade less — exposure moves smoothly toward its target every bar, whether de-risking or re-entering. To avoid over-trading, Aegis (v14) only rebalances when the target drifts meaningfully from the position it is holding — this deadband (not a slower re-entry) is what prevents whipsaw and keeps trading costs low. Parked DCA cash redeploys automatically once exposure recovers.
Deleverage Modulator Lifecycle
NORMAL High exposure DCA active low dd + vol risk budget: 95% dd↑ vol↑ symmetric ramp DE-RISK Positions scaled down DCA → USDC fast smooth ramp no hard floor HEAL regime eases RE-ENTER gradual ramp Steady ramp hysteresis no whipsaw REDEPLOY Parked USDC back in Building position exposure ≥ 40% 106 DCA events FULL 100% deployed Normal ops risk on low dd + vol
Deleverage Modulator: Exposure & USDC Timeline
100% 50% ~0% EXPOSURE USDC risk budget ~0% (no hard floor) DE-RISK re-enter redeploy 100% DE-RISK minimal USDC USDC ↑ re-entering → USDC drains USDC ↑ 2017 2018 2020 2022 2025 normal exposure de-risk re-enter redeploy full recovery

The shield’s effectiveness comes from asymmetric crash math: during a -80% market crash, a shielded portfolio (with minimal exposure) loses only a fraction of that damage. When the market eventually recovers, the preserved capital base compounds — leading to dramatically better long-term outcomes compared to holding through the full crash.

8.5 Performance: Drawdown & Risk-Adjusted Scoring

The chart below compares the live production shield, Proteus (v18), against a classic Buy & Hold strategy, measured through the exact production path: a rolling 180-day window re-read every day, the same 180-day strategic re-optimisation cadence the live service runs, shield state persisted from one interval to the next, and turnover charged at the live fee rate. This is deliberately not a continuous full-history replay — production never sees one — so these are the figures a live deployment would actually have produced. Both legs receive identical inputs and identical DCA treatment. The shield is scored on risk-adjusted return (Sharpe and Calmar) and on peak-to-trough drawdown, not on raw dollars.

Peak-to-Trough Drawdown · Proteus (v18) vs Buy & Hold (large-cap basket)
0% -50% -100% -55.9% B&H -23.1% Proteus v18 Buy & Hold Proteus (v18)
📊 PRODUCTION-PATH RESULTS (ROLLING 180-DAY WINDOW)
Proteus Max Drawdown (large-cap)
23.1%
B&H Max Drawdown (large-cap)
55.9%
Drawdown Reduction (large-cap)
−32.8pp
Sharpe (Proteus vs B&H)
1.63 vs 1.37
Calmar (Proteus vs B&H)
2.00 vs 1.23
Alt Basket Max Drawdown
59.8% B&H → 29.4%

Under half the drawdown, at a better risk-adjusted score. On a large-cap basket run through the exact production path, Proteus (v18) held peak drawdown to 23.1% against 55.9% for Buy & Hold — a 32.8-point reduction — while scoring higher on both risk-adjusted measures: Sharpe 1.63 vs 1.37 and Calmar 2.00 vs 1.23. On a high-volatility alt basket it cut peak drawdown from 59.8% to 29.4% and beat Buy & Hold on Calmar (1.29 vs 1.23). Exposure is a continuous 0–100% dial: it moves smoothly toward its target every bar in either direction, and redeploys parked USDC automatically as exposure recovers. Aegis (v14) adds threshold rebalancing — a deadband that skips trades when the target barely moves, slashing fees without changing the signal. There are no timers, no tranches, and no correlation gate.

Honestly scoped: this does not beat Buy & Hold on raw dollars, and on the alt basket it does not beat it on Sharpe either. Buy & Hold ends both samples higher in absolute value because it stays fully exposed through the bull run (large-cap CAGR 68.7% vs 46.2%; alt 73.2% vs 37.9%), and on the alt basket its Sharpe is higher too, 1.18 vs 1.10 — there Proteus wins Calmar and halves the drawdown, but it does not win the risk-adjusted race outright and we are not going to imply otherwise. The shield’s edge is drawdown and consistency, not terminal wealth. Out-of-sample, stated correctly: on a sealed second half of an earlier 5-token survivor basket never used to choose the Aegis (v14) preset, Aegis still cut peak drawdown from 63.2% to 25.3% — that result reproduces. Its Sharpe on the same sealed half was lower than Buy & Hold’s, 0.24 vs 0.30; an earlier version of this page reported those two figures the other way round, and that was wrong. Methodology note: that earlier basket is composed of tokens that survived to today (survivorship bias); see the stress test in section 8.6. Past results do not guarantee future performance.

8.6 Testing & Validation

The Deleverage Shield was measured on real market data, not hand-guessed. Every figure in section 8.5 comes from replaying the exact production path — a rolling 180-day window, the live strategic re-optimisation cadence, persisted shield state and turnover at the live fee rate — over two baskets, scored on drawdown, Sharpe, Calmar and CAGR. Earlier versions of this page quoted a continuous 8.7-year replay instead; that frame measures something production never does and its headline figures no longer reproduce from current data, so it has been retired rather than re-quoted.

✅ VALIDATED ON REAL DATA

Over 2,095 daily intervals (~5.7 years) on a large-cap basket and 2,316 intervals (~6.3 years) on a high-volatility alt basket, replayed through the exact production path, Proteus (v18) held peak drawdown to 23.1% against 55.9% for Buy & Hold on large-caps, and 29.4% against 59.8% on alts. It beat Buy & Hold on Sharpe on large-caps (1.63 vs 1.37) but not on alts (1.10 vs 1.18), and it beat its own fixed-threshold predecessor on Sharpe, Calmar and maximum drawdown on both baskets. Both engine selections passed their ship gate.

Validation Process

  • Signal construction — each bar we compute rolling drawdown from the running equity peak and downside volatility over a short rolling window, then map each to a 0–1 signal.
  • Exposure rule — the combined risk signal drives a continuous exposure dial with no hard floor and no correlation gate.
  • Hysteresis + threshold rebalancing — exposure moves smoothly toward target every bar in either direction, and Aegis (v14) only trades when the target drifts meaningfully from the held position — fewer rebalances with an identical signal. Parked USDC redeploys once exposure recovers.
  • Engine/backtester parity — the live engine and the backtester run the same shield function on the same drawdown definition, so the public comparison is measured on one basis rather than two.
Backtest Results: Drawdown Reduction
Buy & Hold 55.9% Max DD -32.8pp Proteus v18.0 Adaptive 23.1% Max DD Sharpe: 1.37 full exposure ~5.7y production path Sharpe: 1.63 Calmar: 2.00 CAGR: 46.2% Proteus v18.0 · PRODUCTION PATH

Validation Checks

The shield is validated through the following checks on the production path:

  • Formula parity — the live engine and the backtester call the same shield function on the same drawdown definition (the window-local basket curve), so neither leg of the public comparison is measured on a basis the other cannot see.
  • Drawdown reduction — on the production path, peak drawdown cut from 55.9% (Buy & Hold) to 23.1% on the large-cap basket, and from 59.8% to 29.4% on the alt basket.
  • Risk-adjusted return — large-caps: Sharpe 1.37 → 1.63 and Calmar 1.23 → 2.00 versus Buy & Hold. Alts: Calmar 1.23 → 1.29, but Sharpe 1.18 → 1.10, lower than Buy & Hold — stated here because it is the one metric the shield loses.
  • Threshold rebalancing — a steady smooth ramp in either direction, trading only on meaningful exposure drift, confirmed with no whipsaw.
  • Out-of-sample check (Aegis v14, historical) — on a sealed second half of an earlier 5-token survivor basket, never used to pick the preset, Aegis (v14) cut peak drawdown from 63.2% to 25.3%; that result reproduces. Its Sharpe on the same half was 0.24 against Buy & Hold’s 0.30 — lower, not higher. This page previously reported those two Sharpe figures reversed, and previously reported a full-sample CAGR that no current run produces; both corrections are deliberate and unfavourable to us. That study ran a retired v14 preset, so it is historical context rather than a current claim, and a fuller walk-forward multi-fold study is still worthwhile.
  • Survivorship stress (dead token) — the earlier basket is all survivors, which flatters both legs. Re-run on a window opening at Terra Classic’s April-2022 peak with LUNC (which fell from ~$121 to ~$0) added, Aegis (v14) held peak drawdown to 20.8% against 24.7% for the survivor-only basket — the defense did not degrade — while Buy & Hold worsened from 63.2% to 70.7%, a 7.5-point deterioration, and the shield still cut drawdown by ~50 points on that window. An earlier version of this page said Buy & Hold worsened by “up to ~18 points”; the measured figure is 7.5. Same retired v14 preset, so historical context (and raw return figures remain flattered by crypto’s post-crash rebounds).

LIVE ENGINE The deployed shield is Proteus (v18), a volatility-adaptive engine. Every figure in sections 8.5 and 8.6 is measured on the exact production path — a rolling 180-day window, the same 180-day strategic re-optimisation cadence, and persisted shield state — so the two sections describe one study, not two. Against its fixed-threshold predecessor Aegis (v14) it cut maximum drawdown on both a large-cap basket (25.7%→23.1%) and a high-volatility alt basket (36.8%→29.4%), with a higher Sharpe and Calmar. Aegis (v14) now runs only as a warm-up fallback, for portfolios with too little history for the adaptive threshold to calibrate; where v14 appears above it is labelled as historical.

9. Privacy & Data Separation

AQMath’s privacy is not a feature bolted onto the product — it’s the foundational architectural principle. The system is designed so that your financial data is mathematically isolated from the computation layer.

🔵 Stays in Browser (localStorage)

  • All token amounts and quantities
  • Entry prices and cost basis
  • Target allocation percentages
  • DCA history and portfolio snapshots
  • Safe-haven toggle state
  • Portfolio ATH tracker
  • 30-day price history cache
  • Beta key JWT token

🟢 Backend Receives (ephemeral — plus opt-in stored data)

  • Token symbols (e.g., BTC, ETH)
  • Current amounts and prices
  • Target percentages
  • DCA budget amount
  • Cost basis and total tokens
  • Frozen and safe-haven flags
  • Backtest price series (CSV you upload) — processed in-memory, then discarded
  • Opt-in signal & notification service (stored, deletable): token symbols + amounts and the frozen weight plan, under the hash of your key
  • Consent receipts and must-read acknowledgements — GDPR audit records
  • Notification setup — a random unguessable topic; the read token is stored only as a hash
  • Black chat messages (stored, deletable): pseudonymous messages (≤200 chars) under the hash of your key, rolling cap of 20 messages + daily sweep of the oldest

9.1 What the Backend NEVER Sees

This is the most critical section. The following data is architecturally impossible for the backend to access:

🔒 ARCHITECTURAL PRIVACY GUARANTEES

By default, no database table maps users to portfolios and no log records your holdings. The exception is the opt-in signal & notification service (Section 9): holdings, the frozen plan and consent receipts are stored under the one-way hash of your activation key — never your name, wallet, or exchange keys. Even with full server access, an attacker would find no other information about any user’s financial state.

DataWhy Backend Can’t See It
Wallet addressesNever entered — AQMath doesn’t connect to wallets
Exchange API keysNever requested — price sync uses public endpoints
Transaction historyNever transmitted — only current state during DCA
User identityNo accounts, no email, no registration
Total portfolio valueSent during DCA, never persisted — stored only if you opt in to the signal service
Historical allocationsSnapshots exist only in localStorage
Entry pricesSent during DCA, not stored — saved only if you opt in to the signal service (UI bookkeeping)
Beta key identityNever your raw key — everything is linked to a one-way hash; no name, email, or wallet

The backend processes your DCA request in a single HTTP round-trip: receive positions → compute allocation → return results → discard. By default, there is no database table that maps users to portfolios (the only exception is the opt-in signal & notification service: holdings stored under the hash of your activation key). There is no log file that records your holdings. Even if someone gained full access to the server, they would find no other information about any user’s financial state.

9.2 Non-Custodial Privacy Model

AQMath implements a practical non-custodial privacy model:

  • The backend proves that the DCA allocation is mathematically optimal through detailed buy summaries (e.g., “BTC: +$142.30 (0.002371 tokens)”).
  • The backend does not retain the inputs. After the HTTP response is sent, the request data is garbage-collected from memory. No disk write. No database insert. (The opt-in signal & notification service is the documented exception — Section 9.)
  • The browser verifies the results by applying updated amounts and re-rendering the portfolio.

The backend does not retain your data after the HTTP response is sent — request data is garbage-collected from memory with no disk write, no database insert, and no logs of your holdings. Your portfolio lives in your browser’s localStorage — the only server-side mirror is the pseudonymous one you opt into (Section 9).

🔐 COMPARISON WITH TRADITIONAL TOOLS

Traditional trackers store everything on centralized servers — one breach exposes all users. AQMath stores nothing by default; the only stored data is what you opt into — pseudonymous and deletable. No accounts, no wallet connections, no analytics tracking.

FeatureTraditional TrackersAQMath
Data storageCentralized server databaseBrowser localStorage; opt-in pseudonymous signal data only
Account requiredEmail + password + often KYCNone — zero registration
Wallet connectionOAuth or wallet connectNever — manual input only
Breach riskSingle DB exposes all usersNothing to breach
Data portabilityExport via API (if allowed)JSON export/import from localStorage
Analytics trackingGoogle Analytics, MixpanelSimple Analytics (privacy-first)

AQMath gives you the computational power of a quantitative hedge fund’s allocation engine while maintaining the data sovereignty of a paper notebook.

9.3 Black Chat

Black users have access to a shared internal chat visible only to active Black members. The chat is designed for direct communication between Black members and the team — no automated onboarding, no helpdesk.

  • Pseudonymous: messages are shown under a short code (e.g., B-XXXXXX) derived from the hash of your activation key. Your real key, IP, and identity are never displayed.
  • Rolling buffer: only the 20 most recent messages are kept. The oldest message is additionally swept once per UTC day.
  • 200-character limit per message, with a 3-second cooldown between posts to prevent flooding.
  • Deletable: you can clear your own messages anytime via the Clear button. Deactivating your Black key deletes all your chat data.

The chat is stored server-side in the same pseudonymous manner as the opt-in signal service — under the one-way hash of your activation key, never under your name or wallet.