The order of the modules was chosen after a real collapse in orders: the marketplace’s own signals move sales harder than our bids do, and aggressive edits during a crisis only deepen the spiral. So the first step is the market regime, and in a crisis regime raises and new campaign launches are forbidden.
Duplicate statistics batches are cut off on the way in: without that, spend was overstated several times over and the whole decision tree counted on an invented number.
Some brands are declared untouchable: the agents change no bids, no pauses and no negative keywords on them. The filter is hard-wired into the pause and recommendation scripts, but not into the bid-apply path - there the rule rests on the operating procedure and the agent’s prompt. The repository’s own audit says so rather than papering over it.
Reading agents and writing ones are separated on purpose: the digest, the campaign check and the bid calculator never write to the account at all, and the writing commands are not on the allowed list, so the system’s confirmation prompt always comes up before them. The overnight contour is built differently: there is no human beside it, and instead of a confirmation it is held by permitted windows, a daily spend kill-switch and auto mode being off by default.