An order whose answer never came
During a June 2026 session the exchange's gateway returned errors after orders had been sent. The client library had also, on other nights, crashed while parsing a successful reply. In both cases the order might exist with fills the process knew nothing about.
An exception after the request leaves the process is not evidence that nothing happened. Treating it that way would either retry into a duplicate or abandon a live position.
Every attempt carries its own client order id. On any error after send, the thread queries the exchange for that id before believing the error. When the order is found, or the reply was unparseable, fills are cross-checked against the signed change in the account position; otherwise the error stands and any retry is bounded by a hard cap on contracts submitted per launch.
Unknown outcomes are resolved from the exchange when it is reachable and stay explicitly unknown when it is not. Tests pin that the retry loop never submits more than requested when a fill is unknown.