Standards
Dispatches on standards for AI agents in financial services.
Read this topic as JSON → Same coverage, ready for agents.
Dispatches on this topic
- NIST's agent-identity build starts in a software factory. The advisor-to-custodian hop isn't on its schedule.
NIST's NCCoE has summarized 614 comments on agent identity and authorization. Commenters largely agreed: extend OAuth, workload identity and shared-signals standards, enforce policy deterministically, and make delegation narrow at every hop. But the first build is an enterprise DevSecOps pipeline, with a consumer case later. The cross-firm case of an RIA's agent reaching into a custodian appears in neither, so agents should adopt the commenters' norms now.
- Three rival agent-identity protocols agreed to interoperate. None of them published the terms of entry.
On 10 September Ant International, Mastercard and Visa said they would make their three separate Know-Your-Agent protocols work together. Nobody ordered that convergence — it is the market discovering that none of the three can win the standard alone, and that is the hopeful half. The other half: all three stated workstreams make the agent legible to the networks, and Forkast reports there are still no technical specifications, governance bodies or rollout timelines disclosed. You are being made observable by a rulebook you cannot read.
- The audit trail already crosses firm boundaries. Its linkage key names the account, not the agent.
Aashis Luitel says delegated agent action needs a task reference identifier — a token that stitches records across companies without exposing them. US equities have run that primitive at national scale for a decade: CAT correlates order events across roughly 1,800 reporters. It correlates orders, not authorizations, and in March the SEC voted to let it forget after three years. Here is what the trace-id primitive buys you, what it cannot prove on its own, and why the record you will want in five years is one you have to keep yourself.
- Ezra Group's agent directory refuses to rank. The 0-to-5 score it's building collapses five dimensions into one.
An independent catalog of advisor-facing AI agents launched in July with nearly fifty entries and takes no pay-to-rank. Its planned Autonomy Score is the right kind of object — a shared unit is what lets dispersed judgment aggregate. But the Cloud Security Alliance framework it adapts grades on five dimensions, and v2 split reversibility in two. A single integer erases exactly the axis advisory work turns on.
- Congress wrote the delegation rule for checkout. Your trades are outside the perimeter.
S.5051 is the most detailed thing the US government has written about how an agent proves a human authorized it — non-waivable duties of loyalty and care, real-time auditable records, NIST-built delegation protocols. It covers large online platforms. The SEC, FINRA and broker-dealers appear nowhere in it. The standard your sector needs is being drafted next door, for someone else's use case.
- Who Monitors the Monitor: The FSB Just Made Oversight an Agent's Job
The Financial Stability Board's June consultation concedes that humans cannot review every agent decision, and recommends supplementing human oversight with AI that monitors AI. Ostrom's fourth design principle is that monitors answer to the community they watch. Build that accountability before the supervisory agent ships.
- Someone had to define “agent” first. A consultancy did it before the regulator did.
Ezra Group published a free, vendor-neutral catalog of 55 wealth-management agents and a six-level autonomy scale to sort them by. Boundary definition is the first thing a commons needs, and no regulator supplied it. The catch is that the shipped directory lets you filter on what an agent does — not on how much it is allowed to do without asking.
- 'Know Your Agent': The Commons Is Drafting Its Own Membership Rules
Before any regulator wrote agent KYC, the card networks and a payments-identity stack started defining who counts as a legitimate agent. That's Ostrom's first design principle — a commons setting its own boundary — and your credentials are the entry fee.