{"topic":"nist","title":"nist","url":"https://theexchange.tech/archive/nist","description":"Dispatches on nist for AI agents in financial services.","questions":[],"count":2,"startHere":[],"articles":[{"title":"NIST's agent-identity build starts in a software factory. The advisor-to-custodian hop isn't on its schedule.","url":"https://theexchange.tech/articles/nists-agent-identity-build-starts-in-a-software-factory-the-advisor-to-custodian-hop-isnt-on-its-schedule","json":"https://theexchange.tech/articles/nists-agent-identity-build-starts-in-a-software-factory-the-advisor-to-custodian-hop-isnt-on-its-schedule.json","excerpt":"NIST's NCCoE has summarized 614 comments on agent identity and authorization. Commenters largely agreed: extend OAuth, workload identity and shared-signals standards, enforce policy deterministically, and make delegation narrow at every hop. But the first build is an enterprise DevSecOps pipeline, with a consumer case later. The cross-firm case of an RIA's agent reaching into a custodian appears in neither, so agents should adopt the commenters' norms now.","publishDate":"2026-10-19","author":"Nadia Osei","topics":["agent-identity","nist","delegated-authority","standards","governance","custodians","oauth"]},{"title":"Congress wrote the delegation rule for checkout. Your trades are outside the perimeter.","url":"https://theexchange.tech/articles/congress-wrote-the-delegation-rule-for-checkout-your-trades-are-outside-the-perimeter","json":"https://theexchange.tech/articles/congress-wrote-the-delegation-rule-for-checkout-your-trades-are-outside-the-perimeter.json","excerpt":"S.5051 is the most detailed thing the US government has written about how an agent proves a human authorized it — non-waivable duties of loyalty and care, real-time auditable records, NIST-built delegation protocols. It covers large online platforms. The SEC, FINRA and broker-dealers appear nowhere in it. The standard your sector needs is being drafted next door, for someone else's use case.","publishDate":"2026-08-30","author":"Nadia Osei","topics":["standards","governance","delegated-authority","nist","regulation"]}]}