Retest Audit: does your AI adviser's allocation swing when the risk answer wobbles?
Stability audits of LLM financial advice under realistic risk-answer noise. Robo-advisers and wealth platforms pay per audit.
Early · Paper: one risk answer swings allocations
Written for: Small startup team
Next step
Call the chief compliance officer at a robo-adviser that has shipped an LLM assistant, and ask whether their Reg BI file shows how much the model's recommended allocation moves when a client's risk answer moves one point.
Why now
Wealth platforms are adding LLM advisers, and suitability rules require that advice fits the client. Nobody sells a test showing how far a model's recommendation moves on noise that is normal in client answers. The method is published and can be rerun against any adviser's prompt and model in days.
What became possible
A new audit ran seven LLMs from five providers on 800 real household profiles where only the stated risk answer changed. People do not answer that question the same way twice: 41% of US households gave a different answer two years later. Yet the models set stock allocations largely from that single answer. BizBench adds that in payments, an agent can break rules partway through a task even when the final result looks fine.
Two ways in
- Retest Audit
Runs a firm's adviser prompt and model across synthetic and real client profiles, varying the risk answer by realistic amounts. Reports how far allocations move, which profiles are most fragile, and which guardrails (multi-question scoring, allocation bands) reduce the swing.
- Customer
- Robo-advisers and broker-dealers with an LLM advice feature
- Model
- Fixed-fee audit ($25-60k), then a quarterly retest subscription
- Model Change Retest
Reruns the stability suite whenever the firm switches model or prompt and produces a before/after note for the compliance file.
- Customer
- Compliance teams at the same firms
- Model
- Per-release fee
Competition
I found no commercial product built specifically to perturb the risk-tolerance answer by realistic amounts and report how far an LLM adviser's allocation moves, which client profiles are most fragile, and which guardrails reduce the swing. The nearby players come in two kinds.
Full competition notes (9 competitors)
I found no commercial product built specifically to perturb the risk-tolerance answer by realistic amounts and report how far an LLM adviser's allocation moves, which client profiles are most fragile, and which guardrails reduce the swing. The nearby players come in two kinds. General LLM eval and model-risk platforms (Promptfoo, Openlayer, Patronus, ValidMind, CIMCON, QuantPi) offer the plumbing, and some market FINRA or SR 11-7 mapping. Academic papers from 2026 document that the instability is real. So the gap is a narrow, finance-native methodology: realistic noise models for questionnaire answers, allocation-distance metrics, fragility rankings by profile, and guardrail comparisons, packaged as an evidence artifact for Reg BI reasonable-basis and FINRA 3110 supervision files. Regulators have not prescribed a consistency methodology, so a credible, citable standard audit could become the reference. The Model Change Retest is the weaker of the two ideas on its own: Openlayer, ValidMind and Promptfoo already sell version-linked regression and sign-off records, and any of them could add a stability test cheaply. The main risks are that the market is still small (few robo-advisers ship LLM-generated allocations; most still use deterministic models with an LLM layer on top), and that firms may build this in-house on Promptfoo. A new entrant would win on domain credibility and on publishing benchmark fragility results that create demand, not on tooling.
- Promptfoo (finance solutions)
An open-source LLM testing and red-teaming tool. Its finance page maps test scenarios to FINRA 3110, 2210, Reg BI and the Advisers Act, and names robo-advisers and planning copilots as targets. Its focus is generic compliance and safety tests, not measuring how much allocations move when the risk answer is perturbed. A firm could build such a suite on it, which makes it the most likely do-it-yourself substitute.
- Openlayer
An eval and monitoring platform aimed at regulated industries. It stresses version-linked performance records and sign-off evidence for auditors, which overlaps directly with the Model Change Retest idea. It has no finance-specific allocation stability metrics.
- Patronus AI (financial services)
An LLM evaluation vendor with a financial services offering, focused on hallucination and accuracy tests. Not allocation stability.
- ValidMind
A model risk management and validation documentation platform for banks (SR 11-7, EU AI Act). It is the natural home for compliance-file validation reports and could add a stability test module.
- CIMCON AIValidator
A model risk platform that tests LLMs for hallucinations and vulnerabilities and generates validation documentation. It is not finance-specific.
- QuantPi PiCrystal
A black-box AI testing engine covering robustness, bias and fairness, used with Unique, a wealth-management AI vendor. Its robustness testing is the closest commercial analogue to a perturbation-based audit, but it is generic.
- BiasMix-Finance (academic)
A 2026 preprint on post-generation KYC guardrails. It treats LLM allocations as drafts and applies deterministic caps and repairs. This is related to the allocation-band guardrails the audit would evaluate. Research only, not a product.
- Post-Challenge Fragility of LLMs in Financial Decisions (NeurIPS 2026)
Academic work showing that financial recommendations flip under 'are you sure?' prompts at rates from 4% to about 50% depending on the model. This supports the problem, but it is a study, not a commercial service.
- One Size Fits None: Heuristic Collapse in LLM Investment Advice (academic)
A paper finding that LLMs overweight stated risk willingness relative to risk capacity. This is the fragility the audit would measure. Research only.
Checked 2026-10-19
Risks
- Many firms keep LLMs out of the actual allocation decision, which shrinks the market
- Regulators have not asked for this test yet, so it sells on fear rather than mandate
- Compliance buyers are slow and want references
- Paper results may not carry over to firms' own prompts
Strong buildability; market pull is the weak point (5).
tech 8 · pull 5 · space 7 · fit 8 · build 9
Exposed
Companies that could benefit or be threatened. News and context, not investment advice.
Momentum of its main topic
Sources
- Same Person, Different Advice: Auditing LLM Financial Advice with Repeated Risk-Tolerance ResponsesarXiv
- BizBench: Unveiling Hidden Challenges in Deploying Long-Horizon Agents for Real-World BusinessHF Daily Papers
- AI labs report benchmark scores 6.4% higher than independent testers, on averager/LocalLLaMA
Status history
- 2026-10-19 Flagged as buildable