Hariprasad Bantwal

2026 · Agentic AI · Live product · Pre-launch

Judex

It weighs the evidence. You deliver the verdict.

Judex is an investment copilot that watches the market every day, recommends with written reasons, asks for a human verdict, and executes only on approval. Then it does the thing most systems avoid: it grades its own calls — and yours — in public.

Deployed, not demoed

Most AI investment tools are demos: impressive on stage, untested where it hurts. Judex was built the other way round — for the hardest first customer, myself, with my own money on the line, in production from the first week. Every design decision was made next to the problem, not in a slide deck: the daily brief exists because I needed one; the approval flow is one tap because a second tap was one too many; the scorecard grades my verdicts, not just the system's, because both can be wrong.

Once the loop held up under real use, the platform was made multi-tenant — per-user portfolios, keys, briefs, and strict isolation — and opened to family and friends pre-launch.

The daily rhythm

Judex runs on a clock, not on a prompt. Every trading day:

  1. Afternoon · after the data lands

    Prices, fundamentals, and portfolio positions refresh; the decision engines evaluate every holding and every candidate against versioned rules.

  2. Minutes later

    Briefs arrive by email: what the system recommends, why, and what it deliberately did not recommend. Reading them takes two minutes.

  3. Your move

    One tap opens the approval page. Agree, reject, or deselect individual items — the human always holds the pen.

  4. On approval

    The agent account executes; fills are captured and reconciled. On the main account nothing is ever placed automatically — approvals are recorded, and a reconciler verifies what you did by hand.

  5. Always

    Every recommendation enters a ledger with your verdict, and a monthly scorecard grades what the advice was worth — and what your decisions were worth.

Two engines, one discipline

Control Tower

Defends what you hold. A risk ladder walks each position from hold to trim to sell all as evidence deteriorates — trend, momentum, thesis, and market regime, re-judged daily.

Opportunity Finder

Hunts for entries with one rule: qualify on strength, buy on weakness. A stock must first prove it is strong; only then may a real dip — whose cause is examined, not assumed — become a buy proposal.

In both engines the division of labour is strict: rules decide; AI only explains. The language model writes the reasons a human can read — it never picks the trade. And missing data is never guessed: a name with an unknown fundamental is excluded, not assumed healthy.

Where the agents work — and where they may not

Agentic AI earns its place in Judex at two points, each inside a fence:

The dip evaluator

When a qualified stock dips, a depth number cannot answer the question that matters: why did it drop? An agent examines the candidate from multiple angles — it reads the day's headlines and classifies the drop's cause, checks whether the market or the sector fell too, and weighs fundamentals, cash flow, valuation, technicals, and portfolio fit. Real damage — guidance cuts, accounting trouble, lawsuits — is rejected outright, whatever the discount. The output is a scored verdict with a one-sentence reason, written to the ledger. The fence: the agent scores against a published rubric and can only rank or reject what the rules already qualified — it can never promote a stock past a gate.

The Ask agent

In the portal, a conversational agent answers questions — "why was CSX recommended?", "what did I ignore last month?" — with every tool it holds scoped to the signed-in user's own data, enforced server-side, not by the prompt. It runs on the user's own model key, and the guardrails are structural: it can read, explain, and trace; the few actions it can propose require an explicit, code-confirmed approval in the chat itself. The fence: the agent works for exactly one tenant, sees exactly that tenant's data, and can never act on its own signature.

That is the pattern throughout: agents do real analytical work — multi-angle, contextual, language-native — but always inside boundaries drawn in code, never on trust.

Trust is engineered, not promised

Advice you cannot audit is opinion. Judex treats auditability as a feature with an architecture:

The loop: field evidence changes the rules

Because every evaluation of every stock is logged, the system's flaws have nowhere to hide. A recent example: the trend rule required a stock to stay above its 50-day average every day — which disqualified names in the middle of exactly the dip the strategy exists to buy. The rule was closing the window it was built to open.

The revision tests the structure of the trend instead — the moving averages stacked in order, which an ordinary pullback cannot break — and it shipped the way every rule change ships: versioned, dated, documented in the method statement, with prior recommendations untouched. Log everything, find the flaw, revise the rule, keep the history. That loop is the product.

Under the hood

A medallion lakehouse (Databricks Delta on Azure) holds the data and decision history; Windmill orchestrates the pipelines, emails, and approval flows; a Next.js portal with a Postgres serving layer keeps every page around a second; the broker is reached through per-portfolio API keys with the agent account as the only write path. The whole platform — three clouds, two engines, full audit history — runs at a fraction of typical platform cost, tuned the same way it was built: by watching it run.

And Judex practises what it preaches: the platform itself was built end to end with AI — design, architecture, engineering, deployment, and operations, all done in partnership with AI agents, under the same discipline the product applies to investing: the AI does the work, the human directs and holds the verdict. One person, AI at every stage, a production system a team would once have taken years to build.

Built with AI does not mean built without discipline. The lifecycle is the classical one, kept honest in the open: work is tracked as GitHub issues — from epic-sized initiatives down to single tasks — every change reaches production through a reviewed pull request on a feature branch, and architecture decisions are written down as ADRs with a C4 model of the system. Rule changes are gated by backtests and calibration notes before they ship; a tenant-isolation regression suite runs against the live system after every relevant deploy; and releases are tagged with a rehearsed restore runbook. The AI accelerates every one of those steps — it skips none of them.

Databricks · Delta · Unity Catalog Azure Windmill Next.js PostgreSQL OCI Terraform eToro API LLM explanations Multi-tenant

Judex is live at judex.simplificare.ch — currently a pre-launch for family & friends.

Visit the portal