Example review — uses sample data.

BMM Safety Passport — worked example
Example research assistant
First review: 2026-09-30T00:00:00.000Z

1. Submitted settings
Maximum retries: 2
Cooldown (seconds): 30
Provider label: Example provider
Credential age (days): Not supplied
Credential rotation policy (days): Not supplied
Human approval required: Unknown
Approval threshold: Not supplied
Market-data source: Not supplied
Market-data observation (UTC): Not supplied
Reported market-data status: Not supplied
Freshness window (seconds): Not supplied
Claim wording: Not supplied
Claim source: Not supplied
Agent name: Example research assistant
Purpose: Read-only research
Read data: Yes
Place trades: No
Transfer funds: No
Withdraw funds: Yes
Manage accounts: No
Use margin or leverage: No
Emergency stop: Present; test not recorded
Manual override: Unknown
IP allowlist: Unknown
Access sharing: One operator
Maximum order size: Not supplied
Maximum position size: Not supplied
Maximum daily loss: Not supplied
Maximum leverage: Not supplied
Evidence notes: Setup review: read-only research job with withdrawal permission enabled.

2. Findings
Blocker: Withdrawal scope exceeds the reviewed job
You declared that this agent can withdraw funds.
Remove withdrawal permission and use a separate non-withdrawal key.
Caution: IP allowlist status needs evidence
You have not confirmed whether access is restricted to approved IP addresses.
Record whether access is restricted to approved IP addresses.
Caution: Record the emergency-stop test
The reviewer reported an emergency stop with no completed test.
Test the emergency stop and record the operator.
Caution: Add a market-data snapshot
No market-data snapshot was supplied for this review.
Add source identity and timestamped market-data evidence.
RECORDED: No performance claims to review
No claim text was submitted.

RECORDED: Reviewer identity and role are recorded
Reviewer identity and role are supplied. Notes are optional.

Caution: Safeguard baseline was not supplied
Add an observation to compare with the selected safeguard.
Record the applicable safeguard baseline before drawing an adherence conclusion.

Recommended fixes
Critical: Remove withdrawal permission from this agent/API key.
Reduces the risk of funds being withdrawn through the agent.
Critical: Require source timestamp evidence.
Prevents stale or unverifiable market evidence from being trusted.
Medium: Record the applicable safeguard baseline before drawing an adherence conclusion.
Keeps the evidence needed for follow-up visible.

3. Change recorded
Reviewer-reported status: Reported fixed by reviewer
Reviewer recorded withdrawal permission removed; read access retained.
Withdraw funds: Yes → No
Read data: Yes → Yes

4. Reassessment
Reviewed: 2026-09-30T01:00:00.000Z
Blockers: 1 → 0; cautions: 4 → 4
No longer recommended for the updated settings

Remaining findings
Caution: IP allowlist status needs evidence
Caution: Record the emergency-stop test
Caution: Add a market-data snapshot
Caution: Safeguard baseline was not supplied

The original review remains available alongside the reassessment.