Engineering note 2 · Risk controls

The breaker that could never reset

A drawdown breaker that flattens the portfolio needs a rule for coming back. Ours waited for a recovery that a portfolio sitting in cash can never produce, and four years of testing never noticed.

October 2026 · 3 min read

The momentum book has two controls that act on the whole portfolio rather than on individual stocks. Both make the same decision, get out, for different reasons.

Acting on the whole book is deliberate. A momentum book exits stocks when they drop out of the ranking, not when they hit a price stop, so there is no per-stock stop to fall back on. One decision about the market, applied to everything at once, is simpler to reason about and simpler to test. Over twenty years of history, switching both controls off roughly doubled the worst drawdown while adding only a little return.

The rule that looked sensible

The breaker's original rule read naturally: pause at a 20% drawdown, resume at 10%. Trip when things get bad, come back once they are half as bad. It sat in the configuration, was documented and reviewed, and looked like a control.

It could not work. Tripping the breaker flattens the book. A book holding only cash does not rise or fall with the market, so its drawdown cannot shrink from 20% to 10%. The condition for coming back depended on a recovery that the breaker itself had made impossible.

Why nobody noticed

The main four-year test never reached the breaker. Its worst drawdown stayed well short of 20%, so the trip never happened and the broken release was never exercised. A control that never fires in testing looks exactly like a control that works.

It took a twenty-year test on real daily prices to find it:

With that interest rate set to zero, as it should be for a delivery account, the breaker never released at all. The book would have sat in cash for the rest of the test.

The fix: come back on a market condition

Re-entry now depends on something a flattened book cannot freeze: the market itself. After a trip, the book waits at least 21 trading sessions and returns only once the benchmark is back above its trend average. Over the same twenty years the breaker now trips twice, in January 2008 and September 2018, and holds the book flat for 79 of 4,925 sessions, instead of three years.

The rule that matters: a control's exit condition must be reachable from the state the control puts you in. If tripping changes what you measure, you can no longer use that measurement to decide when to stop.

Testing controls, not just strategies

The broader change was in how controls are tested. A safety mechanism has to be exercised on a window long and bad enough to make it fire, and then checked for what happens after it fires. A backtest that never trips the breaker says nothing about the breaker, however good the rest of the numbers look.

The lesson

For every safety switch, ask two questions: does it fire, and once it has fired, can it ever turn off again?