Transparency — how you check the numbers yourself

Level 1 — Integrity: does the data tie out? (10)

• PS02 — Spreadsheet route: petr4, PETR4.SA, BVMF:PETR4, PETR4F and a padded ticker are served as PETR4 with the same figures, HGLG11.SA as HGLG11 and an old ticker with a known change as the current one, using the same normalization as the other routes.
• PS04 — Spreadsheet route: a key is always required, even for the open sample tickers, with a 401 that says where to get the free key and where to store it in the spreadsheet; an unknown key gets 401, free and Pro keys get 200 with the plan, production without Stripe answers 503 and responses are never publicly cached.
• PS05 — Spreadsheet route: at most 300 tickers and 20 fields per call, an unknown field, a malformed, impossible or future date and an empty list answer 400 with the reason and use no quota, and exactly 300 tickers pass.
• PS06 — Spreadsheet route: a call uses 1 quota unit per 100 cells (non-blank ticker times field, minimum 1), so 30 assets with 10 fields use 3 units in the same per-key table as the dashboard, the whole template (about 30 units per full refresh) fits the free plan six times a day, and a call that would pass the limit gets 429 with Retry-After and the remaining count before using anything.
• PS07 — Spreadsheet route: the Google Apps Script user agent is not in the refused crawler list and gets 200, and robots.txt does not block the spreadsheet page.
• PS10 — The spreadsheet page in Portuguese and English shows the three steps, every field of the route and the macro codes, the limits taken from the gate with the Pro price, the per-100-cells rule and that the price comes from Google; without a template link it says it is being prepared, a Google Sheets link becomes a button and any other link is ignored; it has no licence claim, sits in the API hub, the API page, llms.txt and the sitemap, and the home page did not grow.
• PS11 — Static check of the Apps Script file: the key is only read and written through PropertiesService and no function that touches the key writes to a cell, the Dados B3 menu has the key, refresh and help entries, the custom function calls the batch route with the X-API-Key header in blocks of up to 300 tickers under 2 kB, caches up to 6 hours, has Portuguese messages for 401, 429 and network failure and no external library; the manifest is V8 with no dependencies and the template formulas use only known fields across the seven tabs and the brand colours are specified.
• PS12 — The logo field (link unit, all three classes) returns the absolute dadosb3.com address of the file the asset page shows: the company logo by CVM code for stocks and the fund manager logo for FIIs and ETFs (HGLG11 is Patria, BOVA11 is BlackRock from the CVM fund registry, not the B3 administrator); every address answers 200 with a cached PNG, a missing file returns the short reason sem logo, the field also works with a date, and the manager route only accepts 14 digits.
• PS13 — The manager logo collection maps each fund to its manager through the CVM fund registry (class to fund to manager tax ID) and takes the website the manager declares in the CVM portfolio manager registry; the icon comes only from that site with no Google favicon fallback, icons under 32 px or invisible on a light background are dropped, a blocked domain gets no request at all, an individual manager gets no logo, a withdrawn manager loses file and source line, and the source file records URL and date.
• PS14 — The FII and ETF pages show the manager logo like the stock page: an img with class logo-cia before the h1, served from our own domain, with a title in Portuguese and English saying where it came from and when; no third party image is loaded on visit and a fund without a file shows no image.

Level 2 — Semantics: does the account mean what the calculation assumes? (4)

• PS01 — Spreadsheet route: one request with stock, REIT and ETF tickers and several fields returns one row per ticker in the same order, a blank row where the cell was blank, and each figure equals what the site already publishes (latest-year ROE from the indicators route, the page P/E and P/B cards, the latest EV/EBITDA and EPS from the multiples route, the stock DY and 12-month payouts, the REIT P/B and DY of the fund page).
• PS03 — Spreadsheet route: every missing value comes with a short reason (a REIT has no P/E, an ETF has no ROE, not applicable to a bank, ticker not found and logged on the dashboard, index out of scope, statement not out yet on that date, today only for DY with a date, the right field for macro codes), never a blank cell, each reason within 60 characters.
• PS08 — Spreadsheet route with a date: the statement year is the latest whose annual filing the CVM had received on that date, ROE is that year value and P/E is the trailing figure of the screener point-in-time rule, so 2019-06-30 uses 2018 and 2015-06-30 uses 2014.
• PS09 — Spreadsheet macro codes on a database built in the test: latest period without a date, latest period up to the date for daily, monthly and quarterly series, percent as a fraction, the dollar in reais, the date field returning the period, and a short reason for a missing table, an empty series or a date before the first point.

Level 3 — Economic: is the result possible in the real world? (0)

Other product tests (0)

Access gate, navigation and the MCP connector — they test whether the product works, not whether a number is right, so they don't fit the 3 levels above by design. Still counted, still listed: