Skip to content

test: add Tradernet chart, candle and mobile-route causal audit - #58

Open
safal207 wants to merge 17 commits into
agent/tradernet-lighthouse-auditfrom
agent/tradernet-chart-quote-audit
Open

test: add Tradernet chart, candle and mobile-route causal audit#58
safal207 wants to merge 17 commits into
agent/tradernet-lighthouse-auditfrom
agent/tradernet-chart-quote-audit

Conversation

@safal207

@safal207 safal207 commented Jul 18, 2026

Copy link
Copy Markdown
Owner

Summary

Adds a bounded LiminalQA investigation of the public Tradernet chart page, historical candle loading, interval transitions and mobile routing.

Target:

https://tradernet.ru/charts/MICEXINDEXCF

This is stacked on agent/tradernet-lighthouse-audit / PR #54.

Confirmed defect

Mobile user-agent receives the 404 route

Evidence run: 29662815487
Exact head: 0a4e364bc311b548c551a33b30adf9302872ab2b

User-agent Viewport Result
Desktop Desktop HTTP 200; chart visible
Desktop Mobile-sized HTTP 200; chart visible
Mobile Desktop-sized HTTP 404; no chart
Mobile Mobile-sized HTTP 404; no chart

Causal verdict: USER_AGENT_ROUTING_CONFIRMED

The failure follows the mobile user-agent independently of viewport width. This isolates server-side or early client-side device routing rather than responsive layout as the dominant cause.

Historical candle integrity

Evidence run: 29662815487

The public page naturally requested getHloc for MICEXINDEXCF:

  • timeframe 1440;
  • interval D1;
  • 137 candles;
  • 137 timestamps;
  • 137 volume values;
  • zero OHLC, timestamp, length or volume violations.

No direct API request was issued by the audit.

Interval transition

Evidence run: 29663112769
Exact head: b8e228aa2273a9e8f01b4d4c4c105c0781d8e63b

A visible trusted mouse click changed:

UI: Дневной → Часовой
request: timeframe 1440 / D1 → timeframe 60 / H1
data: 137 daily candles → 698 hourly candles

Both responses returned HTTP 200 and zero detected OHLC/timestamp/volume violations.

Verdict: TRANSITION_PASS

Follow-up signals

  • first visible desktop chart surface appeared at approximately 7.48 s in one bounded run;
  • console emitted ERROR: No context for render, but user impact is not yet established;
  • a narrow viewport under desktop UA shows toolbar/axis crowding;
  • minute interval labels appear malformed in DOM and require a visible-menu confirmation;
  • live quote liveness was not assessed because the evidence was collected during a UTC weekend.

Rejected detector false positives

  • an aborted Google Analytics request was initially grouped with market-data failures;
  • an untrusted synthetic click initially failed to switch intervals.

Neither is reported as a Tradernet product defect. The later trusted-click test passed.

Safety boundary

The workflows:

  • use one public ticker and public chart page;
  • do not authenticate;
  • do not call application APIs directly;
  • do not subscribe to market depth;
  • do not access portfolio data;
  • do not place, change or cancel orders;
  • do not fuzz or load test;
  • do not claim security vulnerabilities.

Reports

  • docs/audits/TRADERNET_CHART_QUOTE_CAUSALITY.md
  • audits/tradernet/chart-quote-causality-result.json

Evidence digests

  • public chart observation: sha256:4a93f7c93a668d88369414500ff3e860b433b91eb9a32256ee69b12541b1e305
  • mobile route matrix: sha256:223d10431960d0ca5fe181fbf22fe238e408ff72188ddb8daaca2d7e67d71395
  • daily HLOC integrity: sha256:591f9c5f286478eec7d037e59f1c9d58e17187193520796287c2a474d47359a4
  • interval DOM discovery: sha256:77f03dc492eda0c2ce4e323dd0a1bc57269c53d5b43f99f9b8d5af1bb490ff99
  • trusted D1 → H1 transition: sha256:ae749e087bbeac5d98ae63c7452835692bb2ee8f91a0862f3abfa04723fdb92f

@coderabbitai

coderabbitai Bot commented Jul 18, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: fbcb48a4-fab2-4bd7-aaa0-e268e44af9eb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch agent/tradernet-chart-quote-audit

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@safal207 safal207 changed the title test: add Tradernet public chart and quote causal audit test: add Tradernet chart, candle and mobile-route causal audit Jul 18, 2026

safal207 commented Jul 18, 2026

Copy link
Copy Markdown
Owner Author

Lotus Family pass 🌸

The confirmed Tradernet public-web findings were passed through the three Lotus projects without changing the external safety boundary.

Pythia judgment

  • PR: docs: add Tradernet Lotus external QA judgment pythiaLabs#235
  • exact head: aa169a3a897a61bb578816ea9e8fb3e374405b34
  • verdict: ESCALATE
  • four findings accepted for human reporting;
  • live quotes, render-context impact, minute labels, single-run chart latency, and one shared mobile root cause remain explicitly uncertain.

CML causal memory

  • PR: docs: add Tradernet mobile public QA Memory Pack Causal-Memory-Layer#213
  • exact head: 0a3995e2508d204cdff2a6817563fa7e3f7a46fe
  • canonical Memory Pack ID: f5bac00f1be20c9ca5717236b0e5d0b2c433bc8ff780101736fa267e1c097609
  • the pack is loaded by an executable regression test through the production parser;
  • the first test run rejected a manually supplied non-canonical ID; the pack was corrected rather than weakening the contract;
  • the recurring mobile-only pattern remains a 75/100 proposed cluster cause, not a verified shared root cause.

LS human-impact order

No Lotus artifact grants ownership, approval, execution, delivery, external-submission, or merge authority. The family pass does not make a security-vulnerability claim or contact Tradernet.

@safal207
safal207 marked this pull request as ready for review July 19, 2026 00:49
@qodo-code-review

Copy link
Copy Markdown

ⓘ Qodo reviews are paused because your trial has ended. Ask your workspace admin to add credits to resume reviews. Manage billing

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant