How do you design software that moves $79B worth of assets daily? My design turned a risky, tedious, error-prone ETF portfolio management task into exception-driven experience. Instead of 12,000 lines of data, users now view 560 flagged ones that truly need their attention.
The Trust Problem
Trust isn’t binary — users don’t flip from “I don’t trust this” to “I trust this.” They build confidence through micro-verifications, and the system’s job is to support that progression at every layer.
12,000 lines → 560 flagged · Review time: 80 min → 8 min per basket · 45+ baskets daily
Leverage-Based Scoping
Upstream errors cascade — if basket management is wrong, every downstream order is wrong too. I mapped the full portfolio management lifecycle to find where one designer’s effort would have the highest leverage.
ETF lifecycle: Fund Launch → Holdings → Basket Management → Order Management
Adoption Sequencing
Same product type doesn’t mean same workflow — Fixed Income and Equities have fundamentally different tool readiness, mental models, and failure modes. I chose the team whose pain was acute and switching cost low, knowing an early win would unlock adoption across the floor.
EQ: zero internal tooling, desperate for change · FI: legacy tools, entrenched habits · EQ first → internal precedent
ETRO — Progressive Trust Calibration
I designed a progressive trust calibration framework — four principles that scaffold human confidence in automated data: Explainability (show me why), Traceability (show me what changed), Reversibility (let me undo), Observability (make me accountable).
Severity tier reasoning · Corporate actions diff view · Rebalancing preview sandbox · Override justification with deliberate friction