The gold fill was a mistake. That does not make it reversible.

Three events that deserve different names

A working order can be cancelled before its remaining quantity executes. An executed trade can be questioned. A completed trade can later be adjusted or cancelled by the exchange under its rules. Those events should occupy different fields in a gold trading journal. A trader who types the wrong quantity has identified an operational error; that admission alone does not establish that the resulting market transaction will disappear.

This article concerns exchange-traded gold futures on CME Globex. A spot-gold or CFD provider has its own execution agreement and dispute arrangements. A chart carrying the symbol XAU/USD does not identify the legal venue behind an account. Before drafting an incident procedure, write down the actual product, exchange or counterparty, broker, contract month and escalation contact. That small inventory determines which procedure the desk can reasonably invoke.

Source notes: [1] CME Group · Exchange rulebook scope

What the exchange rule actually establishes

The joint NYMEX/COMEX Rule 588 gives the Global Command Center authority to review executions and adjust prices or cancel trades in specified circumstances. A participant’s review request must reach the GCC by telephone within eight minutes of execution; a different communication method does not satisfy that request provision. The GCC decides whether a review will occur. A timely request is therefore a procedural step, not a promised remedy.

For a reviewed trade, the GCC determines fair value and applies the relevant non-reviewable range. An execution inside that range stands under the ordinary review procedure. Outside it, the rule provides for a price adjustment, with cancellation possible in specified circumstances. The rule also preserves broader discretion to protect market integrity. This summary does not supply today’s product-specific range or predict any decision on an individual fill.

Source notes: [2] CME Group · Joint NYMEX/COMEX Chapter 5, Rule 588

Do not let a pending dispute erase the position

Consider a hypothetical operator who intended to buy one contract but entered ten. The confirmation shows ten filled, and the desk requests a review. Its immediate position record should still reflect the confirmed exposure unless and until an authoritative correction arrives. Writing “nine cancelled” in the spreadsheet because that is the desired outcome creates a second operational error: the risk display now disagrees with the execution record.

The appropriate response to that exposure depends on the account, existing hedges and the broker’s instructions. The useful general discipline is to assign responsibility for exposure management separately from responsibility for the review request. Record who is contacting the broker or exchange, who is monitoring orders, and what position is confirmed. A second operator should not submit an offset merely because the first operator’s message said “cancel it”; that phrase is too ambiguous to constitute an execution instruction.

Preserve an incident record that can survive a correction

I would retain the original order identifier, exchange execution identifier, contract, side, quantity, price, execution timestamp and timezone. Then add the time the error was recognized, the time and channel of escalation, the acknowledgement, and the final decision. Save the raw messages before changing any display. Screenshots can help describe what the operator saw, but they should accompany the message record rather than replace it.

The incident journal needs a correction chain. A later revised price should point to the original execution, identify its authority and show when the desk received it. Rule 588 provides for corresponding changes to the exchange’s official time-and-sales record. Consequently, a chart downloaded after the review may differ from the sequence visible during the incident. Keep the original observation and the corrected reference explicitly labelled; neither should silently overwrite the other.

Source notes: [2] CME Group · Joint NYMEX/COMEX Chapter 5, Rule 588

Turn the incident into an operational test

A useful rehearsal requires no real order. Give two colleagues an invented confirmation, a deliberately incorrect intended quantity and a clock. Ask them to identify the venue, locate the escalation route and produce a reconciled position record. The test is whether they can maintain one authoritative account of exposure while a separate question remains unresolved. It is not a competition to improvise the fastest compensating trade.

Finally, inspect the cause inside the workflow: a default quantity, a stale contract selector, a copied ticket or an unclear handover can each require a different control. Preserve the distinction between the operator’s intention and the exchange’s action. No actual incident, corrected fill, compensation, transaction cost or profit is reported here. The purpose is a repeatable response that does not depend on assuming an error will be forgiven.