# Recipe: first protected trade

1. Auth: on www/mainnet phone OTP → `POST /v1/keys`; on https://sandbox.ylalo.com optionally `POST /v1/sandbox/accounts` → `YLALO_API_KEY`
2. `GET /v1/account` — confirm balance / limits
3. `POST /v1/orders/suggest` with small `usdAmount`
4. Show the plan to the user; wait for yes
5. `POST /v1/orders` with `dryRun: true` → `POST /v1/orders/confirm` with `Idempotency-Key`
6. `GET /v1/account` + `GET /v1/orders` — report armed stops / guardians
7. On resume: `GET /v1/events?since=<lastEventId>`