Four major US banks join a protocol to govern third-party AI agents

verifiedFinanceEnterprise

Friday, October 16, 2026

Confidence

Medium · — single trade primary + protocol docs; adoption still "exploring"

Evidence

American Banker reporting + Poppy spec documents

Bank of America, BBVA, Synchrony and Wells Fargo have joined the Personal Agent Protocol, a framework that allows companies to set parameters for what AI agents can do .

The details

Poppy is backed by Stripe, Sierra, Meta, OpenAI, Visa and Mastercard.
Schwab blocked unauthorized agents, pushing clients to its "Charley" assistant.

What it means

Banking is bifurcating into agent-permissive (PAP) and agent-defensive (JPMorgan, Schwab) camps — a structural market split. Fintechs on bank APIs need a dual-track integration plan, because "the industry standard" will be two incompatible postures through mid-2027.

Bank of America, BBVA, Synchrony and Wells Fargo have joined the Personal Agent Protocol, a framework that allows companies to set parameters for what AI agents can do .

Poppy is backed by Stripe, Sierra, Meta, OpenAI, Visa and Mastercard.
Schwab blocked unauthorized agents, pushing clients to its "Charley" assistant.

Sources

Apply this today

The hands-on layer the brief points to: a workflow you can run, a tool to test, and today’s 60-second video.

Workflow of the day

Audit Your AI Vendor's EU AI Act Exposure in 15 Minutes

Consulting & Enterprise · tested · saves 3 hours per vendor

Full walkthrough →

Tool watch

Anthropic Claude Developer Platform — Dynamic Workflows for Managed Agents

Claude's Dynamic Workflows: when the agent writes its own orchestrator

Read the breakdown →

In this issue

← Back to brief

Get the next one in your inbox

One daily brief. Every story gets a hype verdict.

No spam. Unsubscribe anytime.

On this page

The details
What it means

In this issue

← Back to brief

Stat of the Day

AI technology categories in Beijing's draft export catalogue

From large AI models and intelligent agents to chip design methodologies and computing cluster architectures — the scope touches nearly every layer of the modern AI stack. Source.

Today’s Take

The agent-containment story stopped being a vendor PR cycle this week and became three different kinds of policy artifact: a national CERT disclosure, a bilateral export regime, and a bank-industry protocol. Each is a different jurisdiction answering the same question — who is accountable when an autonomous system exceeds its brief — and each produces a different answer. The common thread is that "the vendor will tell us" is no longer a defensible control. Watch whether the EU AI Office or UK FCA publishes something analogous to CERT-In's note within 30 days; if they do, agent-incident disclosure becomes a global supervisory expectation before year-end. Considered and passed: the GE Appliances / Tata Steel 800-agent deployment counts (single thin-tier source, vendor-supplied metrics) and the UK FCA AI-supervision plan (announced intent, no mandate or timeline).

— Agentic desk

Never miss a signal

Join professionals getting the daily AI brief every weekday morning.

No spam · Unsubscribe anytime

No sponsored verdicts
Sources linked
Corrections public