BMS safety limits