{
  "fictional": true,
  "notice": "Example review — uses sample data.",
  "declarations": {
    "retryLimit": "2",
    "cooldownSeconds": "30",
    "providerLabel": "Example provider",
    "keyAgeDays": "",
    "rotationPolicyDays": "",
    "humanApprovalRequired": "unknown",
    "approvalThreshold": "",
    "marketDataSourceLabel": "",
    "marketDataObservedAt": "",
    "marketDataStatus": "not_supplied",
    "marketDataFreshnessPolicySeconds": "",
    "claimText": "",
    "claimSourceLabel": "",
    "agentName": "Example research assistant",
    "jobType": "read_only_monitoring",
    "permissionRead": true,
    "permissionTrade": false,
    "permissionTransfer": false,
    "permissionWithdraw": true,
    "permissionAccountManage": false,
    "permissionMarginOrLeverage": false,
    "emergencyStop": "present_untested",
    "manualOverride": "unknown",
    "ipAllowlist": "unknown",
    "sharedAccess": "single_operator",
    "maxOrderSize": "",
    "maxPositionSize": "",
    "maxDailyLoss": "",
    "maxLeverage": "",
    "evidenceNotes": "Setup review: read-only research job with withdrawal permission enabled."
  },
  "report": {
    "generatedAt": "2026-09-30T00:00:00.000Z",
    "agentName": "Example research assistant",
    "score": null,
    "scoreBand": "incomplete",
    "blockerCount": 1,
    "cautionCount": 4,
    "categoryScores": {
      "permissionSafety": 37,
      "executionGuardrails": null,
      "dataFreshness": null,
      "ruleAlignment": null,
      "evidenceQuality": null,
      "claimSafety": null,
      "reviewCompleteness": 100
    },
    "findings": [
      {
        "findingId": "finding_5546a2d0480d0ea6c134",
        "category": "permission_safety",
        "severity": "blocker",
        "title": "Withdrawal scope exceeds the reviewed job",
        "evidence": "You declared that this agent can withdraw funds.",
        "recommendation": "Remove withdrawal permission and use a separate non-withdrawal key."
      },
      {
        "findingId": "finding_c569749f46b67552ccbb",
        "category": "permission_safety",
        "severity": "caution",
        "title": "IP allowlist status needs evidence",
        "evidence": "You have not confirmed whether access is restricted to approved IP addresses.",
        "recommendation": "Require declared IP allowlist evidence."
      },
      {
        "findingId": "finding_29c46fc4e315c6e3a85e",
        "category": "execution_guardrails",
        "severity": "caution",
        "title": "Record the emergency-stop test",
        "evidence": "The reviewer reported an emergency stop with no completed test.",
        "recommendation": "Test the emergency stop and record the operator."
      },
      {
        "findingId": "finding_de76ce9be4c62deb4f1b",
        "category": "data_freshness",
        "severity": "caution",
        "title": "Submitted market-data evidence: Market-data evidence is not supplied",
        "evidence": "Customer-supplied snapshot; source not verified. marketData is empty.",
        "recommendation": "Add source identity and timestamped market-data evidence."
      },
      {
        "findingId": "finding_c739001e1002eff6a9ca",
        "category": "claim_safety",
        "severity": "pass",
        "title": "No performance claims to review",
        "evidence": "Phrase screening only; performance, supporting evidence and compliance were not verified. No claims were submitted for review."
      },
      {
        "findingId": "finding_7baff8bba7fba37f610a",
        "category": "review_completeness",
        "severity": "pass",
        "title": "Reviewer identity and role are recorded",
        "evidence": "Reviewer identity and role are supplied. Notes are optional."
      },
      {
        "findingId": "customer-safeguard-review-v2",
        "category": "rule_alignment",
        "severity": "caution",
        "title": "Safeguard baseline was not supplied",
        "evidence": "Add an observation to compare with the selected safeguard.",
        "recommendation": "Record the applicable safeguard baseline before drawing an adherence conclusion."
      }
    ],
    "fixRecommendations": [
      {
        "fixId": "fix_444de8f7c1edf24191d4",
        "recommendationId": "permission_remove_withdrawal",
        "libraryCategory": "permission",
        "priority": "critical",
        "affectedArea": "permissions",
        "recommendation": "Remove withdrawal permission from this agent/API key.",
        "evidence": "Withdrawal permission is present.",
        "expectedBenefit": "Reduces the risk of funds being withdrawn through the agent.",
        "implementationSteps": [
          "Create or edit the agent credential so withdrawal scope is disabled.",
          "Keep funds movement in a separate human-controlled account path."
        ],
        "verificationEvidence": [
          "Permission screenshot or provider metadata showing withdrawal is disabled.",
          "Reviewer note confirming the trading-agent job does not require withdrawals."
        ],
        "status": "open"
      },
      {
        "fixId": "fix_62e3236e867a1ba96d80",
        "recommendationId": "stale_data_require_timestamp",
        "libraryCategory": "stale_data",
        "priority": "critical",
        "affectedArea": "market_data",
        "recommendation": "Require source timestamp evidence.",
        "evidence": "No market-data rows were supplied.",
        "expectedBenefit": "Prevents stale or unverifiable market evidence from being trusted.",
        "implementationSteps": [
          "Require each market-data source to include an observed timestamp.",
          "Reject or downgrade evidence that cannot prove timestamp freshness."
        ],
        "verificationEvidence": [
          "Timestamped source metadata.",
          "Freshness policy comparison showing the evidence is current or stale."
        ],
        "status": "open"
      },
      {
        "fixId": "customer-safeguard-evidence-v2",
        "libraryCategory": "rule_alignment",
        "priority": "medium",
        "affectedArea": "rule_alignment",
        "recommendation": "Record the applicable safeguard baseline before drawing an adherence conclusion.",
        "evidence": "No observed behavior is available for comparison. A selected safeguard alone does not prove adherence.",
        "expectedBenefit": "Keeps the evidence needed for follow-up visible.",
        "status": "open"
      }
    ],
    "ruleReview": {
      "version": 1,
      "basis": "customer_supplied_review",
      "rule": null,
      "observation": null
    },
    "schemaVersion": 1,
    "evaluatorVersion": "customer-safeguard-review-v5-expanded-declarations",
    "evidenceBasis": "customer_supplied_declarations",
    "externallyVerified": false
  },
  "followUp": {
    "declarations": {
      "retryLimit": "2",
      "cooldownSeconds": "30",
      "providerLabel": "Example provider",
      "keyAgeDays": "",
      "rotationPolicyDays": "",
      "humanApprovalRequired": "unknown",
      "approvalThreshold": "",
      "marketDataSourceLabel": "",
      "marketDataObservedAt": "",
      "marketDataStatus": "not_supplied",
      "marketDataFreshnessPolicySeconds": "",
      "claimText": "",
      "claimSourceLabel": "",
      "agentName": "Example research assistant",
      "jobType": "read_only_monitoring",
      "permissionRead": true,
      "permissionTrade": false,
      "permissionTransfer": false,
      "permissionWithdraw": false,
      "permissionAccountManage": false,
      "permissionMarginOrLeverage": false,
      "emergencyStop": "present_untested",
      "manualOverride": "unknown",
      "ipAllowlist": "unknown",
      "sharedAccess": "single_operator",
      "maxOrderSize": "",
      "maxPositionSize": "",
      "maxDailyLoss": "",
      "maxLeverage": "",
      "evidenceNotes": "Reviewer recorded withdrawal permission removed; read access retained."
    },
    "report": {
      "generatedAt": "2026-09-30T01:00:00.000Z",
      "agentName": "Example research assistant",
      "score": null,
      "scoreBand": "incomplete",
      "blockerCount": 0,
      "cautionCount": 4,
      "categoryScores": {
        "permissionSafety": 92,
        "executionGuardrails": null,
        "dataFreshness": null,
        "ruleAlignment": null,
        "evidenceQuality": null,
        "claimSafety": null,
        "reviewCompleteness": 100
      },
      "findings": [
        {
          "findingId": "finding_c569749f46b67552ccbb",
          "category": "permission_safety",
          "severity": "caution",
          "title": "IP allowlist status needs evidence",
          "evidence": "You have not confirmed whether access is restricted to approved IP addresses.",
          "recommendation": "Require declared IP allowlist evidence."
        },
        {
          "findingId": "finding_9cf339e24468cbff8f05",
          "category": "permission_safety",
          "severity": "pass",
          "title": "Permissions match a limited job",
          "evidence": "No withdrawal, transfer, or unnecessary account-management scope detected."
        },
        {
          "findingId": "finding_29c46fc4e315c6e3a85e",
          "category": "execution_guardrails",
          "severity": "caution",
          "title": "Record the emergency-stop test",
          "evidence": "The reviewer reported an emergency stop with no completed test.",
          "recommendation": "Test the emergency stop and record the operator."
        },
        {
          "findingId": "finding_de76ce9be4c62deb4f1b",
          "category": "data_freshness",
          "severity": "caution",
          "title": "Submitted market-data evidence: Market-data evidence is not supplied",
          "evidence": "Customer-supplied snapshot; source not verified. marketData is empty.",
          "recommendation": "Add source identity and timestamped market-data evidence."
        },
        {
          "findingId": "finding_c739001e1002eff6a9ca",
          "category": "claim_safety",
          "severity": "pass",
          "title": "No performance claims to review",
          "evidence": "Phrase screening only; performance, supporting evidence and compliance were not verified. No claims were submitted for review."
        },
        {
          "findingId": "finding_7baff8bba7fba37f610a",
          "category": "review_completeness",
          "severity": "pass",
          "title": "Reviewer identity and role are recorded",
          "evidence": "Reviewer identity and role are supplied. Notes are optional."
        },
        {
          "findingId": "customer-safeguard-review-v2",
          "category": "rule_alignment",
          "severity": "caution",
          "title": "Safeguard baseline was not supplied",
          "evidence": "Add an observation to compare with the selected safeguard.",
          "recommendation": "Record the applicable safeguard baseline before drawing an adherence conclusion."
        }
      ],
      "fixRecommendations": [
        {
          "fixId": "fix_62e3236e867a1ba96d80",
          "recommendationId": "stale_data_require_timestamp",
          "libraryCategory": "stale_data",
          "priority": "critical",
          "affectedArea": "market_data",
          "recommendation": "Require source timestamp evidence.",
          "evidence": "No market-data rows were supplied.",
          "expectedBenefit": "Prevents stale or unverifiable market evidence from being trusted.",
          "implementationSteps": [
            "Require each market-data source to include an observed timestamp.",
            "Reject or downgrade evidence that cannot prove timestamp freshness."
          ],
          "verificationEvidence": [
            "Timestamped source metadata.",
            "Freshness policy comparison showing the evidence is current or stale."
          ],
          "status": "open"
        },
        {
          "fixId": "customer-safeguard-evidence-v2",
          "libraryCategory": "rule_alignment",
          "priority": "medium",
          "affectedArea": "rule_alignment",
          "recommendation": "Record the applicable safeguard baseline before drawing an adherence conclusion.",
          "evidence": "No observed behavior is available for comparison. A selected safeguard alone does not prove adherence.",
          "expectedBenefit": "Keeps the evidence needed for follow-up visible.",
          "status": "open"
        }
      ],
      "ruleReview": {
        "version": 1,
        "basis": "customer_supplied_review",
        "rule": null,
        "observation": null
      },
      "schemaVersion": 1,
      "evaluatorVersion": "customer-safeguard-review-v5-expanded-declarations",
      "evidenceBasis": "customer_supplied_declarations",
      "externallyVerified": false,
      "reassessment": {
        "parentReportId": "00000000-0000-4000-8000-000000000001",
        "fixAssertions": [
          {
            "fixId": "fix_444de8f7c1edf24191d4",
            "status": "claimed_fixed",
            "note": "Reviewer recorded withdrawal permission removed; read access retained.",
            "recommendation": "Remove withdrawal permission from this agent/API key.",
            "comparison": "not_recommended_in_new_report"
          }
        ],
        "comparison": {
          "sameEvaluator": true,
          "parentBlockers": 1,
          "currentBlockers": 0,
          "parentCautions": 4,
          "currentCautions": 4
        }
      }
    }
  }
}