This week on Nexus 07.22.26

A steady week across trading, account data, deposits, price integrity, and the SDKs you build with. Here is what shipped.

Trading

• Advanced order types in the order form. The order form now supports advanced order types directly, so you can set them up without leaving the ticket.
• Triggers survive a halt. Trigger orders now stay pending while a market is halted instead of being dropped, so they are still working when trading resumes.
• Consistent order errors. Batch and single order placement now draw rejections from one shared error table, so the same problem reads the same way on either path.

Account history and market data

• Withdrawable balance, and your account in one call. /account/summary now reports withdrawable balance, and a new consolidated /account/state returns your full account in a single request.
• Funding aligned to spec. The funding rate cap and its interest component now follow the ratified funding spec, so funding charges match what the spec defines.
• Honest PnL when a mark goes stale. PnL and equity now treat a stale mark as unavailable rather than computing against it, so a frozen price does not quietly move your numbers.

Deposits

• Deposits credit faster and more reliably. The deposit ingestor no longer stalls behind a single slow item, and transient engine errors are retried instead of dropped.

Price feeds

• Suspect ticks held before they post. The oracle now holds a tick that deviates suspiciously and checks it before posting, so a single bad print does not reach the book.
• No cross orders against a stale leg. A cross-margin order is now rejected when a market it depends on has no fresh price, rather than being risked against a stale one.

Safety and reliability

• Zero-loss recovery from a durable log. Sealed write-ahead-log segments are uploaded to durable storage as they seal, superseded segments are cleaned up, and a fresh machine restores exactly from them — so recovery loses nothing.
• Deterministic auto-deleveraging. Auto-deleveraging now records the victim debit cap and merges closures per account before emitting settlement, so the same events replay to the same result — and stay provable.
• Clearer risk limits. BTC, ETH, and SOL carry their ratified launch margin profiles, price bands are calibrated per asset class, and uncovered shortfalls are latched under a defined fund-exhaustion policy.

Developer tools and SDKs

• Python. The TrailingLimit order type is now modeled, the account cancel-on-disconnect endpoints are wrapped, and releases are automated from tag to published package.
• Rust. Trailing-limit orders now surface their limit offset on read-back, and empty signed POST requests send a content length so they authenticate cleanly.
• CLI. The CLI now targets API spec v0.7.1 and reports its spec tag in nexus --version.

Behind the scenes

Broader observability across the indexer, engine, and risk — net-new metrics, per-store hit/miss counts, settlement-credit legs on the operational stream, and an insurance-fund-drawdown alert; a hardened deposit watcher with heartbeat health, bounded RPC timeouts, and faster polling; epoch-aware, multi-instance indexer delivery; oracle stale-tick throttling and an observe-only shadow price benchmark; and geo enforcement wired end to end. Groundwork you should not notice, in service of an exchange that behaves the same on a quiet day and a busy one.