cortazar.labs— signals
17:27:06Z
signals / spoof score

Spoof score.

A composite measure of layered, intent-to-cancel pressure on the visible book. We compute it on every aggressive print and aggregate across exchanges with venue-specific weights. It is not a prediction; it is a measurement of what just happened to depth.

● live · 5m windowBTC-PERP compositescale 0–100last revision · 2026-05-04
last 4 hours · 5m bins

Reading over time.

The current reading sits above the 6-month median but well below the 90th-percentile band where we begin to consider the signal actionable. The shaded band marks that threshold.

definition · signal-as-code

How this number is computed.

Signal is defined in cortazar/march · signals/spoof.sql. The same SQL runs intraday and against the 365-day backfill in Iceberg. Parameters are versioned; changes go through review.

-- spoof.sql · signals layer · v6 · 2026-05-04 WITH trades AS (SELECT ts, venue, side, price, qtyFROM iceberg.bronze.tradesWHERE symbol = 'BTC-PERP'AND ts > now() - INTERVAL '5' MINUTE), cancels AS (SELECT ts, venue, side, level, qtyFROM iceberg.bronze.book_opsWHERE op = 'cancel' AND level BETWEEN 2 AND 6)SELECT spoof_composite(trades, cancels, window => 120) AS scoreFROM trades JOIN cancels USING (venue, side);
distribution · 6-month, 5m bins

Where today sits in history.

0median · 38current · 52threshold · 74100

The amber tail at the right is the small-but-meaningful set of minutes where this signal flagged events we later traced to identifiable layering campaigns. The current reading is in the normal bulk; nothing on the desk treats this as urgent.