Prop Firm Turnkey Argent

I will transfer the entire file when an agreement has been made.

Argent is a self-hosted platform for running a proprietary trading firm. It covers the entire lifecycle: a public marketing site, program checkout, automated trade-server provisioning, a tick-level risk engine that breaches and flattens accounts in real time, KYC and sanctions screening, an e-signed funded-trader agreement, a trader dashboard with journal and analytics, an owner console with revenue, risk, fraud and payout desks, automated payout rails, multi-tier affiliates, and an AI support desk that answers only from a sealed rulebook.

On top of that it ships Forge Studio: a specification to ZIP generator. Compose a firm in the browser: name, domain, the client firm's legal company name, currency, theme, program tiers with exact counts and sizes, asset class per tier, payment gateways, robots, cron count, SEO, operator account, press Build, and receive a complete, self-provisioning firm. Extract it, npm install, npm run dev, and it provisions its own brand, programs, rulebook, robots, payment plugins and sealed ledger on first boot. Regenerating the same spec is a no-op.

That second part is the business model. You are not buying one website. You are buying the ability to sell branded firms to other operators without forking the code.

2. Why it exists at all

The median top-100 retail prop firm runs a vendor white-label (DXtrade, TradeLocker, MatchTrader, cTrader with a logo), a generic checkout, a generic helpdesk, end-of-day or balance-based risk checks, a PDF rulebook that changes without notice, and semi-manual payouts. Roughly 85 to 90 of the top 100 fit that description.

Argent was built against that baseline. Four things here are rare or absent in the vendor white-label stack:

1. A sealed rules ledger. Every rule and rule change is versioned and SHA-256 stamped, published on a public verification page next to a 40-firm industry table where each row links to that firm's official rulebook (CC BY 4.0 dataset included in the repo). Traders can prove what they signed up for.

2. Spec-driven firm generation. One codebase produces unlimited firms. No forks, no per-client branches, 1.2 MB per firm.

3. A rules simulator. Seeded Monte Carlo over a program's own exact rule semantics (static, trailing-EOD, trailing-intraday, equity- or balance-based daily loss, minimum-day gates) returning pass probability with 95% confidence intervals, days-to-funded percentiles, failure mix and attempt economics. Price a program before you sell it.

4. Code-level guardrails. A file the admin panel and the database cannot override: lock KYC-before-payout, force human approval on every payout, forbid a 0% loss limit or a 95% commission, keep demo payments off. The mechanism is deliberately outside the app's own authority.

3. Everything it does

Public site (8 pages) Home with live hero statistics (a guardrail forces them from real data, never typed), program catalogue tagged by asset class, transparent versioned rules, the rules benchmark page against 40 firms, FAQ, login, register, checkout success. Dynamic sitemap, robots directives, JSON-LD, Open Graph/Twitter cards, referral route /r/[code].

Checkout and payments (5 gateways) Stripe: cards, Apple Pay, Google Pay, Link and 40+ local methods. One-time and monthly subscriptions (plan.interval = month becomes a Stripe subscription). Checkout sessions, webhook signature verification, refunds. PayPal: Orders v2, capture on return plus verified webhooks, sandbox/live modes. PayFast: South Africa: cards, Instant EFT, SnapScan, Mobicred. Signed redirect, ITN signature validation, amount re-check. (Settles in the merchant account's currency, price plans in ZAR for this gateway.) Coinbase Commerce: USDC/USDT/BTC/ETH hosted checkout.

Ships disabled. Demo/manual: instant no-charge activation, also used to record a bank transfer or an off-chain payment by hand. Auto-off in production.

Orders provision accounts the moment payment is confirmed: return URL and webhook, whichever lands first, idempotent. Promotion codes, coupons, refunds, order ledger.

Trader dashboard (11 pages) Overview with equity, daily-loss/max-loss/target gauges per account, daily briefing generated from the trader's own numbers, rulebook change notices; accounts and risk detail; trade journal; analytics (equity curve, drawdown, R-multiples, profit factor, expectancy, streaks, by symbol / weekday / hour, consistency); AI assistant; payout requests with method-specific destination fields; verification (KYC + e-signed agreement); affiliate dashboard; settings; API keys; trading terminal and sandbox terminal.

Owner console (22 pages) Overview (revenue, orders, average order, visitors, conversion, active accounts, pass rate, pending payouts, AI usage, paid-orders curve, program mix); traders; accounts; payments & orders; payouts with method to rail mapping and auto-send control; live risk & fraud with equity/DDB/fraud queues; trade servers; compliance & KYC; affiliates with commissions, clawbacks and payouts; programs; rules; support & knowledge base; AI providers and routing; Forge Studio; automation; simulator; rules benchmark; perimeter; plugins; site settings; guardrails; audit log.

Risk engine Tick-level floating-equity enforcement with instant liquidation. Static, trailing end-of-day and trailing intraday floors. Daily loss measured on equity or balance: firm timezone, not UTC. Phase promotion challenge to verification to funded. Per-account frozen terms, so a later admin edit can never retroactively breach a trader. Futures sessions flatten at the Globex close and the weekend close; crypto windows reset on UTC midnights; consistency caps per program.

Asset classes CFD/FX: 24/5, the default for every legacy program. Futures: 21 CME/CBOT/NYMEX/COMEX contracts, micros first-class, tick-value maths pinned by test vectors ($1.25/MES, $12.50/ES), Globex session calendar with the daily break. Crypto: 24/7 including weekends, keyless public price feed, UTC daily windows, on-chain payouts with checksum-verified addresses.

Trade servers and market data Built-in sandbox (executes all three asset classes: the whole platform runs end to end with zero external services), MT5 WebAPI, MT4/cTrader Manager Gateway (signed HMAC contract documented), DXtrade, TradeLocker. Price feeds: simulated, WebSocket, FIX 4.4, crypto HTTP. Plus an inbound bridge API so an EA or an external server can push trades, positions and ticks.

Compliance KYC orchestration (manual review queue, Sumsub, Veriff, Persona) with private document storage; OFAC SDN sanctions screening with configurable match/review thresholds and auto-refresh; blocked countries; Funded Trader Agreement generated per trader and e-signed either in-app (audit trail + signature capture) or through DocuSign; gates enforced on funding and on payouts.

Payouts Full state machine (requested to approved to processing to paid, with failed to retry and reject). Approval re-checks KYC, agreement, sanctions and risk flags. Rails: PayPal Payouts, Deel off-cycle, a signed REST payout gateway (Rise, Wise, any bank API), Coinbase USDC/USDT on six networks, plus manual bank with "mark paid". Compare-and-set claim so two clicks never pay twice; payout id used as the idempotency key; unknown-outcome failures stay in processing with an alert instead of being silently retried. Floating profit is not withdrawable.

Anti-fraud Cross-account correlation, group hedging and copy-trading detection, HFT and latency-arbitrage flags, tick-scalping, device and network fingerprints, self-referral detection, severity-based payout holds, and a live risk desk that surfaces it all.

AI and support Four public-facing robots: Verum (rulebook), V (rapid responder), Verity (verification and payouts), Arvo (operator analyst), each with its own persona, voice and ledger scope, in a floating text-or-voice widget. Speech-to-speech with server TTS by default and browser voices as fallback. Providers: OpenAI, Gemini, Anthropic, an offline Local Brain that needs no key at all, and an OpenAI-compatible gateway that covers OpenRouter, Groq, NVIDIA NIM, DeepSeek, Together or local Ollama in one line.

Route each input type (support, assistant, ops, analysis, STT, TTS) to a different provider with ordered fallbacks. Answers are grounded in the sealed rulebook; when an admin changes a rule, the knowledge base rebuilds and every open widget announces it.

Automation A 32-job catalog on 5-field cron: heartbeats, queue drains, DB checkpoints and backups, dead-letter retries, provisioning reconcile, deal import, metrics, payout polls, fraud scans, KYC sweeps, sanctions refresh, knowledge rebuilds, ledger seals, benchmark syncs, proxy health, edge reports, operator briefs. Per-run logs with duration and output, manual runs, self-healing rescheduler, per-job enable/disable.

Growth Affiliate and referral program: codes, cookie window, rank-based and multi-tier commissions, refund holds, clawbacks, affiliate payout queue, self-referral detection. Coupons and promotion codes on checkout.

Security and operations JWT sessions (jose) + bcrypt; AES-256-GCM sealing of trade-server credentials; every admin mutation audit-logged; webhook signatures verified (Stripe, PayPal, PayFast, Coinbase, KYC, e-sign, payout rails); SSRF-guarded outbound fetcher (DNS-validated, private and reserved ranges refused, redirects re-validated hop by hop); outbound proxy pool with health checks and demotion; sliding-window rate limits per route class with exemptions for payment webhooks; global DDoS spike detection that raises strictness automatically; Dockerfile, compose with Postgres, nginx notes, Vercel notes.

Database One Kysely schema, three engines: SQLite by default (zero config), PostgreSQL or MySQL. Two paths, both shipped: point DATABASE_URL at an empty Postgres/MySQL and the app migrates and seeds on boot; or move a live firm with npm run db:copy, which builds the target schema, copies every table parent-before-child in foreign-key order, converts 0/1 flags to real booleans, verifies each table's row count and refuses a non-empty target. Postgres returns big integers as text, which would break money arithmetic, so the client coerces int8/numeric to numbers.

What has been independently confirmed: the database contains 44 user tables, all five migrations compile cleanly for Postgres, MySQL and SQLite (15 of 15, identical statement counts, real boolean/bigint/double precision in the Postgres output), and the copy tool's safety semantics are as described above. What is the seller's record rather than an audit: one end-to-end run on 17 October 2026 in which 48,331 rows across those 44 tables were copied into Postgres with matching counts and every trader and owner screen loaded.

Treat that as a documented run to reproduce, not a certified fact. The commands to repeat it are in docs/DATABASE.md, and the docs' own guidance is that SQLite is fine to a few hundred active traders while Postgres should come before ~1,000 concurrent traders or more than one server.

4. Evidence you can check

Claim | How to check it Boots from clean clone and from the packaged build | node scripts/verify-turnkey.mjs (two independent round-trips, exits non-zero on failure) Handles load | scripts/load-test.mjs + the two recorded runs in docs/load-tests/: 3,000 traders, 81,530 requests / 2 min, 40,765 req/min, 0 problem requests, p95 230 to 280 ms, 900 concurrent streams, 69,820 events, 0 failures Futures tick maths | scripts/tests/market-test.mts: CME tick-value vectors Crypto address validation | scripts/tests/wallet-test.mjs: EIP-55 + bech32/bech32m, 16 vectors Dialect parity | scripts/check-dialects.ts compiles every migration for Postgres, MySQL and SQLite without connecting A live firm moves to Postgres | npm run db:copy -- --to postgres://… row counts verified per table.

Recorded result on 17 Oct 2026: 48,331 rows / 44 tables, matching counts, all screens loaded. Not reproduced by the seller's agent; the repeated-run commands are in docs/DATABASE.md Schema really ports | npx tsx scripts/check-dialects.ts --sql ran clean: 5 migrations x 3 dialects = 15/15, no errors, identical statement counts The database's actual shape | 44 user tables and 48,486 rows counted directly in SQLite on 20 Oct 2026 (155 rows more than the 17 Oct record, a live database) Rules are really sealed | The public /rules/benchmark page shows each entry's hash and version The Forge really emits firms | Two built firms sit in data/forge/ as 1.2 MB ZIPs with firm-manifest.json, firm.config.json and DEPLOY-THIS-FIRM.md

5. What is included in the sale

Full source: TypeScript, 361 files, migrations, scripts, 34 plugins, 13 technical documents. Windows package: ARGENT.exe launcher plus the built server and a 30 MB release zip. Requires Node 20+ on the machine (or drop a portable runtime beside it); a first run generates its own AUTH_SECRET, migrates, seeds and prints credentials. Docs: buyer overview, owner manual, trader guide, quality & performance audit, e-valuation, plus PAYMENTS, PAYOUTS, BROKERS, RISK, COMPLIANCE, GUARDRAILS, PLUGINS, BRIDGE, DATABASE, DEPLOY, OPERATIONS, AI, AFFILIATES.

Brand: the Argent name and marks as used in this build, plus the liquid-obsidian / pearl / cotton-paper theme system. Data: the CC BY 4.0 prop-firm rules dataset (40 firms) and the futures contract specification data, both with their licence notices. Handover: a recorded walkthrough, the third-party licence file, and 30 days of email support for questions about the code.

What is released, and when:

Stage | What you get | Protected by Public listing | This page, the buyer overview, the capability audit (CAPABILITIES.md), the recorded load tests, the quality audit, the e-valuation, screenshots, the third-party licence file, and the software licence itself | Nothing needed, it is all publishable On request, before a term sheet | Full source archive, the 13 technical documents, the owner manual and trader guide, a throwaway demo instance with its own database, the sealed-ledger and rules-dataset schema, and the seller's own defect audit | The included proprietary licence, whose clause 3 already permits install-and-evaluate and forbids copying, publishing, reselling, sublicensing or production use until the sale completes.

A short evaluation agreement (2 pages) on top of it is normal and healthy. An NDA is available if you want one, but it is not the gate: the licence is After a signed term sheet | Repository history, keys and credential custody, the delivery checklist, and escrow instructions | Sale agreement