FinBot interface adapter — 2026-10-15

This is an additive adapter, not the missing TradingBotEngine and not a host
deployment. The existing runtime has not been rewritten or installed on your Mac.
No database is opened and no listener is bound, including port 8080.

The supplied local_payment_server.py blueprint acknowledges GET requests and
returns a constant mock order ID for POST requests. Credential loading and broker
requests exist only as comments; requests is imported but never called. The
trade ledger table is created at startup, but no trade rows are inserted.
VERIFIED_AND_COMMITTED therefore means only a mock response in this interface.
There is no asynchronous second-stage status mechanism in the supplied source.

The server binds 0.0.0.0:8080, which differs from localhost-only binding. Its POST
route has no authentication, no bounded request size, no enforced allocation
checks, and parses financial values with float. Do not connect a real execution
engine to this handler as supplied. No supplied status string certifies commerce
readiness, upstream authentication, a broker order or a ledger commit.

Run isolated protocol checks:
  python3 -m unittest discover -s . -p test_adapter.py -v

Run one real unauthenticated GET to the owner-selected root:
  python3 finbot_proxy_adapter.py --check

The adapter validates content type, bounded JSON and expected status, refuses
redirects, performs no retries, and never sends POST requests or orders. POST
response parsing is exercised offline only. submit_order always rejects.

Live integration remains pending the actual TradingBotEngine source, a reviewed
host listener, upstream account evidence and explicit risk/allocation settings.
Keep all credentials and actual databases on the intended host.