docs: config model — strategy knobs in data/overrides.env via admin panel, compose keeps infra+secrets only

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

docs/LIVE-CUTOVER.md

@@ -45,6 +45,20 @@ construction. The paper stack stays untouched as the research substrate
 5. Host prerequisites: dirs `/mnt/Volume/Storage/Apps/momentum-live/data/backups`
    created; host ports **8865** (dashboard) and **5434** (postgres) free.
 
+## Config model (added 2026-07-22)
+
+Strategy knobs live in **`data/overrides.env`** on each stack's data volume —
+NOT in the compose file. Every service loads it at boot (override beats
+compose); the admin panel (paper :8767, live :8867) edits it via /api/config
+with a whitelist (`TRADING_*`, `TRIGGER_*`, `WATCHER_*`, `NEWS_*`, `OLLAMA_*`,
+`DISCOVER_*`; secrets refused) and can restart the loop to apply. Compose
+retains only infra + secrets (keys, URLs, DB). The live stack's knob seed is
+`deploy/docker/overrides.live.seed.env` — copy it to
+`/mnt/Volume/Storage/Apps/momentum-live/data/overrides.env` during setup
+(step 4 below). Flip-day knob changes (risk, regime gate, equity floor) happen
+in the admin UI / overrides file; only keys + ALPACA_BASE_URL remain compose
+edits (they're secret-marked, deliberately not UI-editable).
+
 ## Cutover procedure (~15 min, paper stack keeps running throughout)
 
 1. `mkdir -p /mnt/Volume/Storage/Apps/momentum-live/data/backups`
@@ -54,7 +68,8 @@ construction. The paper stack stays untouched as the research substrate
 3. Seed: `./bootstrap_live_db.sh <latest paper backup> <live-pg-container>`
    (paper backups land nightly 20:10 ET in
    `/mnt/Volume/Storage/Apps/momentum/data/backups/`).
-4. `cp .../momentum/data/learned_params.json .../momentum-live/data/`
+4. `cp .../momentum/data/learned_params.json .../momentum-live/data/` and
+   `cp deploy/docker/overrides.live.seed.env .../momentum-live/data/overrides.env`
 5. Shakedown on the SECOND paper key pair for 1-2 sessions: watch the 8865
    dashboard — armed triggers populate, entries fire, no stale-session banner,
    boot-reconcile quiet.