System
System Status
How Darknyx signals readiness and degraded mode, so you can check it before trading and back off when subsystems are down.
Liveness / degraded-mode snapshot. Public, unauthenticated.
TL;DR
GET /system/status is a public readiness snapshot: is matching running, is
settlement wired, is an oracle attached, and what slot the engine is on. A
degraded flag tells you, in one boolean, whether to back off before you hit a
write failure.GET /system/status
Public, with no authentication.Response
When degradation occurs
The venue isdegraded when a core subsystem is unavailable: the matching tick
is not running, the settlement pipeline is not wired, or the finalized
governance/signer view no longer matches the boot-approved configuration. On a
multi-market venue, a governed-market mismatch pauses new trading venue-wide
rather than leaving some books running against uncertain authority. An oracle
failure is narrower: it pauses only markets bound to the affected feed. In that
partial state degraded is true, matcher_running can remain true, and each
/instruments entry reports its own trading_enabled value.
Under a venue-wide readiness failure, new place and modify operations fail
closed with 503 Service Unavailable for every market. Under market-local
oracle degradation, only place/modify for the affected market fails; a healthy
symbol whose own trading_enabled remains true can continue even while the
venue-level degraded summary is true. Cancels, authenticated reads, and
reconciliation continue so a trader can reduce risk and the engine can resolve
already-pending settlements.
How it manifests
Best practices
- Use both readiness levels. Check
/system/statusfor venue health, then the chosen/instruments/{symbol}entry’strading_enabledvalue. Always handle a racing503from place/modify. Do not block a healthy symbol merely because another market makes the venue-leveldegradedsummary true. - Use it, not
/health, for readiness./healthanswers “is the process up”;/system/statusanswers “can I trade right now.” - Back off and poll. On a
503, refresh/system/statusplus the requested instrument. Resume that symbol when its owntrading_enabledis true; do not wait fordegraded=falsewhen only another market remains paused. A venue-wide failure keeps every instrument disabled until global readiness recovers. - Surface it. It is public and leaks nothing, so it is safe to show on a status page or wire into client-side health checks.
Response
Engine status snapshot.
true when any market is paused or matching/governance/settlement readiness is down.
true when at least one configured market can accept and match new orders.
The on-chain settle pipeline is wired.
An oracle cache (clearing-price reference) is attached.
Versioned oracle source selected exclusively at boot.
Available options:
pyth-router-quorum-v1, pyth-solana-push-v1, null Source-specific signed-price age budget.
Liveness / degraded-mode snapshot. Public, unauthenticated.