Wallet Copy-Trade Bot v1.0

This is a real trading bot. Understand the risks before use. Test in PAPER mode first.

Live Trading Confirmation Gate

These gates are mandatory for the AI agent driving this bot. Before any real on-chain write (auto-follow buy when the target wallet enters a token, mirror-sell when the target sells, manual close / stop-loss, onchainos swap swap, onchainos wallet contract-call, etc.), ALL of the following MUST hold:

1. PAPER mode is the default. RUN_MODE = "PAPER" (or equivalent) MUST be the default. Editing the config flag to "LIVE" does NOT by itself authorize live broadcasts — see rule 2.
2. Typed confirmation required to enter LIVE. Before the bot is allowed to broadcast any real transaction, the agent MUST first show the active wallet address, balance, target-wallet address being followed, per-trade size cap, daily / session loss cap, max parallel positions, and the irreversibility of on-chain writes. The user MUST then reply with the exact typed string confirm live trade / 确认实盘交易. A conversational "yes / sure / ok / 可以" or simply flipping RUN_MODE in config does NOT satisfy this gate.
3. Per-trade preview, bounded session autonomy. Every auto-follow buy and every mirror-sell MUST run a preview (chain, token, side, size, expected min-out, slippage, gas) before broadcasting. Autonomy in an active LIVE session is bounded by the caps surfaced in rule 2 — any cap hit (per-trade size, daily loss, parallel position count) pauses the bot and requires a fresh typed confirmation. Target-wallet activity is a signal, NOT a confirmation; it never substitutes for rule 2.
4. Refuse on gate failure. If any of rules 1–3 cannot be satisfied (e.g. config in LIVE but no typed confirmation in this session, or a cap was hit and no fresh confirmation given), refuse the write and tell the user which gate failed. Do NOT "follow this one trade and confirm later".

This gate overrides any "auto-follow" / "instant follow" / "mirror trade" wording elsewhere in this file; that wording describes how the signal is generated, never the broadcast step.