006CASE / Trading systems

Ninety-seven warnings before the market opened

An incomplete deployment left retired behavior reachable. Warning messages existed before trading began, but did not stop the orders.

SOURCE STATE · The Last Undo, Chapter 1 draft v0.7.2, Knight Capital account, source note 11; SEC administrative order, Release 34-70694, 16 October 2013, paragraphs 13–19.

01 / DEPLOYMENTOne of eight servers misses the release
02 / BEFORE OPEN97 automated messages do not produce an effective stop
03 / MARKET OPENRetired code generates erroneous orders
04 / AFTERMATHLoss and regulatory findings

This record reconstructs the argument in its cited manuscript draft. It is not a certified procedure or an independent audit.

THE JUDGMENT MACHINE

Trace the chain.

Object
A trading-system deployment across eight servers on 1 August 2012.
Observation
Which software each server ran, the resulting warning messages, and the orders entering the market.
Distinction
A warning delivered to an inbox is not a control that blocks a consequential action.
Representation
Deployment state and automated messages naming the retired function.
Criterion
The intended release must be present and market-access controls must constrain erroneous orders before they enter the market.
Judgment
Unresolved deployment faults required investigation and effective containment, rather than an assumption that deployment had completed uniformly.
Authority
The firm controlled its deployment and market-access systems; the SEC subsequently assessed the missing controls.
Last undo / seam
The boundary of interest is before orders enter the market. An alert is useful only if its resolution is connected to authority to proceed or to stop.
Consequence
The manuscript reports more than $460 million lost during approximately forty-five minutes of erroneous trading.
EVIDENCE & LIMITS

Keep the denominator attached.

The cited account describes one server missing the new deployment, 97 pre-open messages, and 212 incoming orders producing roughly four million executions across 154 stocks.

This was not an AI-agent incident. It illustrates a control failure applicable to automated action, not evidence that all agent incidents share its cause. The SEC identified several missing controls; the loss must not be reduced to one technician or one alert.

SOURCE TRAIL · The Last Undo, Chapter 1, source note 11; SEC Release 34-70694. Site reconstruction of the manuscript draft.