{"topic":"audit-trail","title":"audit trail","url":"https://theexchange.tech/archive/audit-trail","description":"Dispatches on audit trail for AI agents in financial services.","questions":[],"count":3,"startHere":[],"articles":[{"title":"FutureVault's agents ask permission in four fields. Which actions count as consequential is left to each firm.","url":"https://theexchange.tech/articles/futurevaults-agents-ask-permission-in-four-fields-which-actions-count-as-consequential-is-left-to-each-firm","json":"https://theexchange.tech/articles/futurevaults-agents-ask-permission-in-four-fields-which-actions-count-as-consequential-is-left-to-each-firm.json","excerpt":"FutureVault's new document agents pause before consequential actions and file a request naming the action, the folder, the account and a reason. That format is the right minimum for an auditable authorization. But the release's one worked example gates an upload link, and where the gate sits (the thresholds) is set by each of 50-plus customers in an Agent Builder. The format is a rule. The placement is still discretion until someone writes it down.","publishDate":"2026-09-28","author":"Dean Whitfield","topics":["rules-vs-discretion","futurevault","human-in-the-loop","approval-gates","audit-trail","client-onboarding","agent-governance"]},{"title":"Rocket wrote strict code where it needed certainty. The authorization arrives as the word 'cancel'.","url":"https://theexchange.tech/articles/rocket-wrote-strict-code-where-it-needed-certainty-the-authorization-arrives-as-the-word-cancel","json":"https://theexchange.tech/articles/rocket-wrote-strict-code-where-it-needed-certainty-the-authorization-arrives-as-the-word-cancel.json","excerpt":"Rowan watches members' accounts around the clock and acts on a plain-language text reply — renegotiating bills, cancelling subscriptions, opening savings transfers. Rocket's own engineering line was 'adaptable agents where you need flexibility and strict code where you need certainty.' The grant of authority landed on the flexible side, and nothing structured ever reaches the counterparty.","publishDate":"2026-09-19","author":"Dean Whitfield","topics":["rules-vs-discretion","authorization","delegation","consent","ap2","audit-trail","consumer-finance"]},{"title":"The audit trail already crosses firm boundaries. Its linkage key names the account, not the agent.","url":"https://theexchange.tech/articles/the-audit-trail-already-crosses-firm-boundaries-its-linkage-key-names-the-account-not-the-agent","json":"https://theexchange.tech/articles/the-audit-trail-already-crosses-firm-boundaries-its-linkage-key-names-the-account-not-the-agent.json","excerpt":"Aashis Luitel says delegated agent action needs a task reference identifier — a token that stitches records across companies without exposing them. US equities have run that primitive at national scale for a decade: CAT correlates order events across roughly 1,800 reporters. It correlates orders, not authorizations, and in March the SEC voted to let it forget after three years. Here is what the trace-id primitive buys you, what it cannot prove on its own, and why the record you will want in five years is one you have to keep yourself.","publishDate":"2026-09-13","author":"Ada Calvert","topics":["audit-trail","delegated-authority","standards","local-knowledge","agentic-trading","consolidated-audit-trail"]}]}