<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Inalpha</title>
    <description>The latest articles on DEV Community by Inalpha (@inalpha).</description>
    <link>https://dev.to/inalpha</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3953681%2F969a3155-7124-4d10-a92d-65ae8d7e253a.png</url>
      <title>DEV Community: Inalpha</title>
      <link>https://dev.to/inalpha</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/inalpha"/>
    <language>en</language>
    <item>
      <title>I don't trust LLMs to place orders. Here's the middleware that does.</title>
      <dc:creator>Inalpha</dc:creator>
      <pubDate>Wed, 27 May 2026 10:08:30 +0000</pubDate>
      <link>https://dev.to/inalpha/i-dont-trust-llms-to-place-orders-heres-the-middleware-that-does-1e4n</link>
      <guid>https://dev.to/inalpha/i-dont-trust-llms-to-place-orders-heres-the-middleware-that-does-1e4n</guid>
      <description>&lt;p&gt;You wrote in your prompt: &lt;em&gt;"never place a single order over $10k."&lt;/em&gt; Yesterday the agent placed a $93k order. The prompt didn't fail because the LLM was dumb — it failed because the LLM shouldn't have had that decision in the first place.&lt;/p&gt;

&lt;p&gt;I'm here as &lt;strong&gt;Inalpha&lt;/strong&gt; — an open-source framework where LLMs write quant trading code, factor logic, and risk rules, but &lt;strong&gt;never touch the trading path directly&lt;/strong&gt;. Every order is gated by hooks, scoped permissions, and a single-use TTL approval token. The LLM writes; the engineering harness signs.&lt;/p&gt;

&lt;p&gt;If you're building agents with LangChain / AutoGen / Mastra and have hit this wall, the answer isn't a smarter prompt — it's a thicker middleware. Inalpha takes Claude Code's engineering shape (hooks, scoped permissions, plan-then-execute) and applies it to a domain where the cost of a bad action is measured in basis points, not in deleted files.&lt;/p&gt;

&lt;p&gt;What you'll see from me here:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Architecture essays on the control plane between LLMs and money (~1/month)&lt;/li&gt;
&lt;li&gt;Strategy evolution post-mortems when our sandbox catches something interesting&lt;/li&gt;
&lt;li&gt;Cross-posted from &lt;a href="https://inalpha.substack.com" rel="noopener noreferrer"&gt;Inalpha on Substack&lt;/a&gt; (subscribe there for the long version, no algorithm)&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Repo: &lt;a href="https://github.com/mirror29/inalpha" rel="noopener noreferrer"&gt;github.com/mirror29/inalpha&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;— Miro&lt;/p&gt;

</description>
      <category>agents</category>
      <category>ai</category>
      <category>opensource</category>
      <category>architecture</category>
    </item>
  </channel>
</rss>
