Case study · Thu Oct 22 2026 · ES DEC26 · gap-down day, 5-min Volumetric
Small Greens and the Last Buyer
Two things the footprint showed four times in one morning: a drift on small green prints that ends at the first real seller, and a giant green print at resistance that turns out to be the last buyer, not the breakout. You called the first one live, six minutes before the print. This is the evidence and the rules.
The day in one table
| Time | What happened | Rule | Result |
| ON | Opened 7797, sold 88 pts to 7709.25, balanced 7710–30 from midnight, POC 7724 | Gap-down below the prior range; the overnight box is the map | — |
| 9:30 | Open-drive up through the box top on stacked greens, +333 / +260 at the base, high 7740.50 | A fired. Don't chase; buy the pullback | pullback never confirmed |
| 9:40–45 | Closed back under 7730 on reds, then −421 / −471 / −321 push to 7720 | Look-above-and-fail = B | taken MES, paid |
| 9:55 | −468 / −453 absorbed at 7720, +299 / +194 back to 7737. Higher low | IB forming 7719.50–7740.50 | wait |
| 10:00 | +1,585 at 7740, +786 under it, high 7742.25 — two points for 2,400 contracts | Last buyer | 10:05: −1,440, −15 |
| 10:25–30 | −479 / −291 took 7719.50 and 7710 in one bar; +529 at 7700.50 sold through; −606 at the low | D, VIX 18.1 → 19.28 | T1 7695.50 hit |
| 10:40–45 | +844 answered −606; +538 / +318 answered −595; low 7686.75 two ticks above the balance stack | Bottom rule, VIX stalling | +19 to 7705 |
| 11:15–25 | Climb to 7712 on +177 … +353. Small greens | "I think it is short-lived" — called live | correct |
| 11:30 | +625 at 7710.50, −1,166 one tick under it, −11 inside the bar | Last buyer, again | one-bar event |
| 11:40–45 | +1,033 at the shelf, −1,055 under it next bar, both absorbed | Ledge at the lows | balance 7690–7700 |
| 11:55 | +1,848 at 7704.50, one tick under the −1,166 seller, VIX falling 18.53 | Pre-arm both sides, let the next bar decide | VIX back to 18.99 by 1:30 |
Done by 11:30 on both accounts. The rest of the morning was for the eyes, and it turned out to be the best part.
Two kinds of green
Every green number is aggressive buying. But two green prints can mean opposite things, and the difference is where the move is when they print.
AT THE LOWBig greens that answer reds
+844 under −606. +538 under −595. These are buyers absorbing a flush. They happen at a level, they answer a seller, and price stops falling after them. This is the bottom rule.
ON THE WAY UPSmall greens with no reds
+177, +197, +179, +270 — seven in a row, nothing over 360, no red answer. Price rises because nobody is selling, not because anyone is buying with conviction. This is covering. It has no defense of its own.
AT RESISTANCEOne giant green that goes nowhere
+1,585 at the IB high. +625 at the broken ON low. A huge print at a known seller's level that produces fewer than 3 points. That is the last of the shorts covering, and the next bar answers it with a bigger red. This is the last buyer.
Big greens at the low are the buyer. Small greens on the way up are the absence of a seller. One giant green at resistance is the last buyer. Same color, three different meanings, told apart by location and by what price does next.
The last buyer — four times in two days
The pattern: a rally made mostly of shorts covering reaches a level where a seller is known to live. The biggest green print of the move prints right there. Price makes two or three points past it, then the next bar makes no new high and a red bigger than the green shows up one tick below. The move is over in that bar.
Thu 10:00 → 10:05. +1,585 at 7740 and +786 under it; high 7742.25. Next bar: no new high, −1,301 at 7735 (closed as −1,440). Fifteen points down.
Thu 11:25 → 11:30. Drift on small greens to 7712. Then +625 at 7710.50 and −1,166 one tick under it in the same bar. Eleven points down before the bar closed.
Thu 10:30. The down-side version: +529 at 7700.50 mid-flush, then −606 at the low. A green that gets sold through to a new low is the same pattern upside down.
Wed 2:20 → 2:25. +694 / +491 at the 7811.50 high after a two-hour ledge. Then −644, greens shrinking for four bars, and 30 points down at 2:50. The slow version.
Scoring them with the three questions
| Print | Where? | Price in the next bar? | Answered? | Verdict |
| +1,585 @ 7740 | IB high, one point under the 7743–46 ★★★ stack | no new high; −15 | −1,440 next bar | last buyer |
| +625 @ 7710.50 | broken ON low, the −479 shelf | no new high; −11 same bar | −1,166 one tick under | last buyer |
| +529 @ 7700.50 | mid-flush, no level | new low 4 pts under | −606 below it | sold through (trap) |
| +694 @ 7811.50 | top of a two-hour ledge, poor high | no new high for four bars | −644 next bar, then −652 | last buyer, slow |
| +844 @ 7690 | two ticks above the 7676–85 balance stack | higher low; +19 | it was the answer, to −606 | real buyer |
The last row is the control. +844 and +1,585 are both huge greens. One was at a support answering a seller and price rose afterward; the other was at a resistance with no seller yet, and price didn't. The number doesn't tell you. The next bar does.
Rule · for momentum entries
Breakout bar's biggest print at its top + under 3 points of progress = wait
Don't buy the close of that bar. Require the next bar to make a new high first. If it does, the breakout buyer was real. If it doesn't and a red ≥ the green prints under it, you just watched the last buyer, and the short is live.
The drift — called live
10:50–11:20. Left: the real buying (+568, +686, +487, +307) at the low. Right: the drift — +206, +353, +258, nothing bigger, no reds. Price rose 12 points on it.
At 11:24 you wrote: "the green numbers are small. I think it is short-lived." At 11:30 the −1,166 printed. That was the drift rule read correctly, under pressure, before the evidence arrived.
Why small greens mean "no sellers" rather than "weak buyers": delta measures how hard one side is pushing. When nobody is leaning on the offer, it takes very little to lift it. The big buying already happened at the low; what lifts the drift is the 10:25 shorts covering into no supply. That kind of move has no defense. It ends the moment a seller of size shows up — and the known seller lived at 7709–10, the broken overnight low.
The same drift on Wednesday — with a different ending
Wed 10:25–10:30. Seven greens, none over +360, price +7.
Wed 10:35–10:45. The seller showed (−344), got absorbed, and the drift turned into a real move: nine greens, +300 / +263 through the shelf.
Same drift, opposite outcome. Wednesday's seller was small and got eaten; Thursday's was −1,166 and wasn't. You can't know which in advance. What you can know is where the seller will show — the first known resistance — and that the drift is over the moment he does unless he's absorbed. So: don't chase a drift, and arm the short before it gets there.
The bottom — the full checklist, live
10:25–10:35. D through two levels in one bar (−479), +529 sold through, −606 at 7688. VIX 19.28. No bottom yet — the green got sold through and VIX was rising.
10:40–10:45. +844 answers −606. −595 at 7689 answered by +538 / +318 above it; low 7688.75 > 7686.75. VIX 19.28 → 19.20. Three of four, buy the close above 7692.
| Sign | 10:35 | 10:45 |
| Undercut shallow | — | ✅ 7686.75, two ticks above the stack; buyers front-ran it |
| Price stops making new lows | ❌ −606 new low | ✅ 7688.75 > 7686.75 |
| Other side answered | ❌ +529 sold through | ✅ +844 vs −606; +538 vs −595 |
| Close back above the last big red | ❌ | ✅ above 7689 |
| VIX stalling | ❌ rising 19.28 | 🟡 19.20, stopped |
Ten minutes apart, same price area, opposite verdicts — because the checklist is about sequence, not price. The 10:35 bar had a green print and a new low; the 10:45 bar had a green answer and a higher low. Target 7700 hit at 11:00, 7705 at 11:20. Scalp size, because VIX was still 19.
The ledge at the lows
11:40–11:45. +1,033 at the shelf. One bar later −1,055 directly under it. Price finished the bar above the −1,055. Both giants failed.
Wednesday's ledge was at the top of the day (7789–96, both sides absorbed for 55 minutes, broke toward the absorbing side). This one formed at the bottom third, 7690–7700, under a −1,166 and a −1,055. A ledge is acceptance: time and volume at a price. Acceptance in the lower third of a gap-down day is not a V; it's the market agreeing that lower prices are fair. The afternoon lean from a low ledge is "sell bounces at the first shelf above" until a close above it says otherwise.
11:55. +1,848 at 7704.50 — biggest print of the day — one tick under the −1,166 seller, with VIX falling to 18.53. The fourth giant green at a seller's level. The honest answer at the time was "let the next bar decide, and arm both sides." VIX was back at 18.99 by 1:30.
Pre-arm: the only way to take a one-bar event
You couldn't take the −1,166. Nobody could by hand — it printed and the bar was 11 points lower before the close. The rule says enter on the close of the reversal bar, and by the close the trade was at its target. There was nothing to take by the rule.
There was something to take before the rule: when a drift on small greens reaches a known seller's level, the order goes in first.
| At 11:25, price 7712, drift into the −479 shelf | Order | Stop | Target |
| 🔴 the seller shows and works | sell-stop 7704.75 (under the 11:25 bar's low) | 7713.25 | 7700 → 7697 |
| 🟢 the seller is absorbed | buy-stop 7712.75 (above the 11:25 high) | 7704.25 | 7719.50 → 7724 |
| Cancel whichever side doesn't fill within two bars. The −1,166 fills the sell-stop at 7704.75 on its way to 7699 — mechanically, with no three-second window. |
Reacting to a −1,166 is a 3-second window. Arming under the prior bar's low turns it into a fill.
What else the day taught
The overnight box is the open's map
A 90-point overnight drive then a balance 7710–30 with POC 7724. Opening at the POC of the overnight box = open-auction; the only trades were at the box edges or on a close outside it. The four confirmations page was built for exactly this.
The ONL-buyer check
The overnight low was made on sellers running out (−376, −327, −273), not on a +500 absorber. So the 7711.25 resting limit was a bet on an untested low. It got cancelled; the low broke at 10:25. The check took thirty seconds on the night tab.
A look-above-and-fail is a one-bar trade
9:30 drove through 7730; 9:40 closed back under it on reds; 9:45 confirmed with −421 / −471. B, in MES, paid. The rule: a close back inside the box after a poke above it is the fade — and the first close is the entry, not a lower-high wait.
VIX was the referee all morning
18.10 at the open → 17.71 on the drive (A permission) → 18.13 at 10:12 (downside branch) → 19.28 at the flush (no longs) → 18.84 on the bounce (scalp permission) → 18.99 by 1:30 (bounce sold). Every change of regime showed in VIX one bar before it showed in price.
Two levels in one bar
The 10:25 bar took 7719.50 and 7710 together. When the IB low and the overnight low are 9 points apart and VIX is rising, don't expect a pause between them. The target is the next mapped level below both — 7695.50 — and the stop goes above both.
The balance low worked without being touched
7676–85 was the week's ★★★ floor. The low was 7686.75 — two ticks above it. Big buyers front-run a known stack; they don't wait for the exact price. Same as the ON low on Tuesday (7710.50 vs 7704). Buy the flow turning near the stack, not a limit at it.
Rules added
Oct 22
Small greens = no sellers; the drift ends at the first one
Don't chase it. Know where the seller lives (first mapped resistance) and pre-arm the short under the prior bar's low before price gets there. If he's absorbed instead, the buy-stop above the prior high takes the other side.
Oct 22
Last-buyer check on momentum entries
When the breakout bar's biggest green sits at its top and price makes under 3 points beyond it, do not buy the close. Wait for the next bar's new high. (Goes into PlanWriter's A trigger text.)
Oct 22
A green that gets sold through is a trap, upside down
+529 → −606 new low. +1,033 → −1,055. The answer from the other side, one tick away and bigger, is the tell both ways.
Oct 22
Ledge in the lower third = acceptance of lower prices
Afternoon lean: sell bounces at the first shelf above until a close above it. A ledge at the top (Wed) leans the other way.
Oct 22
ONL-buyer check before arming C
Night tab, 7709–12: +500 prints → the long is the first reclaim; small prints → the low is untested, make the limit conditional or skip it.