Gine-ginen Banki na 2026: Tsari na Juriyar Aiki

TL;DR. Tsarin gini mai ginshiƙai uku ga manyan bankuna na Tier-1 da ofisoshin kuɗi na kamfanoni a 2026: kulawar cryptography, ISO 20022 a matsayin tushen bayanai mai sarrafa kansa, da orchestration mai 'yancin daga rail — an tsara shi don juriya na aiki a matakin DORA.

Mahimman Bayanai

Taƙaitawar shugabanci. Yanayin bankin na 2026 ya bayyana ne ta hanyoyi uku da ke tafiya tare.
Resilience Trinity. Mun ba da shawarar tsari mai ginshiƙai uku don sabunta tarin banki na asali: tsaro mai ƙarfi, bayanai na canonical, da orchestration mai hanyoyi da yawa.
Tafarkin aiwatar da gini. Matakai uku jere.
Agentic treasury — abin da gini ke ba da damar yi. Ginshiƙai ukun suna haɗuwa a tsari ɗaya na aiki: treasury agent wanda zai iya yin tunani a kan mahallin kuma ya aiwatar da biyan kuɗi, amma kawai a cikin iyakokin da gini da kansa ke tilasta.

Tsari gini mai ginshiƙai uku ga ƙungiyoyin CIB na Tier-1 da ofisoshin kuɗi na kamfanoni — kulawar cryptography, ISO 20022 a matsayin tushen bayanai mai sarrafa kansa, da orchestration mai 'yancin daga rail — an tsara shi don biya bukatun DORA, sauya SWIFT MT/MX na Nuwamba 2026, da bullowar ruwa-ruwa mai shirye-shirye a kan hanyoyi da yawa.

Taƙaitawar shugabanci #

Yanayin bankin na 2026 ya bayyana ne ta hanyoyi uku da ke tafiya tare.

Dokar Juriyar Aiki ta Dijital (DORA) ta ɗauke bashin cryptography na gargajiya — musamman password hashes da ba a sake juya su ba, da dogaro kan C dake fuskantar haɗari ta hanyar sarkar samar — daga damuwar tsabta zuwa nauyin doka da hukumar gudanarwa ke da hakkin amsa.

Sauyin SWIFT MT/MX na Nuwamba 2026 ya sa dabarun fassara da suka dogara kan MT103 sun zama tsoffi. Bankunan da har yanzu suke fitar da bayanai na remittance da adireshi marasa tsari za a sanya musu ƙarin caji a kan kowane saƙo kuma a yanke su daga abokan aikin da ke amfani da MX kawai. Binciken shirye-shirye na ISO 20022 wanda RedCompass Labs ta gudanar kan bankuna 200 ya gano cewa kashi 44 cikin 100 na masu amsa ba sa kan hanya don sauyin. Tare da sayayya, zaɓen mai siyarwa, da gudanarwa a layi daya da ke gaba, hanya ta watanni 12 tuni ta zama gibin watanni 3 ga waɗanda ba a shirye su ba.

Bullowar ruwa-ruwa a kan hanyoyi da yawa — SWIFT CBPR+, PSD3 / A2A, da tokenised deposits — ya canza tambayar gasa daga "wanne banki muke amfani da shi" zuwa "wanne rail wannan biyan kuɗi ke tafiya, kuma a ƙarƙashin wace manufa". Yanzu orchestration layer, ba rail ba, shi ne wurin da riba take.

Wannan takardar fata ta gabatar da tafarkin gini ga ƙungiyoyin CIB da ofisoshin kuɗi na kamfanoni don sauyawa daga bashin fasaha na gargajiya zuwa tsarin orchestration mai 'yanci daga rail kuma mai sarrafa kansa.

Resilience Trinity #

Mun ba da shawarar tsari mai ginshiƙai uku don sabunta tarin banki na asali: tsaro mai ƙarfi, bayanai na canonical, da orchestration mai hanyoyi da yawa. Kowane ginshiƙi ya yi daidai da labari da aka buga wanda ke ƙara fitar da cikakken bayanin injiniya.

Ginshiƙi I — Kulawar cryptography #

Tushen. A zamanin DORA da barazana masu saurin GPU, password hashing irin "tura-ka-manta" wani nauyi ne na tsarin. Ruɓewar cryptography — parameters na Argon2id da ba a sabunta su ba, hashes ba tare da pepper ba, C FFI da ke fuskantar haɗari ta sarkar samar — ba ya cikin layin bashin fasaha kawai; sakamako ne na doka da ke jiran a rubuta.

Tunani. Ku wuce C-based FFI zuwa tsarin cryptography na Rust mai tsabta tare da multi-algorithm dispatch, peppering wanda HSM ta haɗa, da semantics na verify_and_upgrade da ke sake yin hash a kowane shiga ba tare da dakatarwa da mai amfani zai gani ba.

Karatu na musamman. Tabbatar da Sarrafa Password a Banki na Kamfanoni: Hashing Mai Algorithms da yawa da Haɓakawa tare da hsh

Ginshiƙi II — ISO 20022 a matsayin tsarin jijiyoyi mai sarrafa kansa #

Harshen. Tare da sauyin SWIFT MT/MX na Nuwamba 2026, ISO 20022 shi ne tushen bayanai wanda ba a iya tattaunawa a kansa. Ba aikin ƙaura ba ne; shi ne wayoyin agentic treasury. Ba tare da lambobi na <Purp> da aka tsara, filayen <PstlAdr> da aka tsara, da remittance na <RmtInf> da aka tsara ba, treasury agent ba shi da abin da zai yi tunani a kansa — kawai prose.

Tunani. Ku karɓi canonical schema ta ISO-first a kan kowane API contract, validation gate, da masu amfani na ƙarshe. Ku ƙi a parse, ba a settlement ba. Ku daina fassara MX zuwa MT a edge — ku fassara MT zuwa MX sau ɗaya kuma ku jefar da MT.

Karatu na musamman. Daga Pain.001 zuwa Kuɗi Mai Shirye-shirye: ISO 20022 a Matsayin Tsarin Jijiya na Baitulmali a 2026

Ginshiƙi III — Orchestration mai hanyoyi da yawa #

Aiwatarwa. Treasury a 2026 ba game da zaɓen banki ba ne — game da zaɓen rail ne. SWIFT CBPR+, PSD3 / A2A, da tokenised deposits sun zama wuraren aiwatarwa na yau da kullum. Nasara tana cikin orchestration layer wanda ke haɗa su — kuma a kiyaye wannan layer a waje da agent ɗin domin haɗarin model, audit, da hakkin DORA su kasance masu yiwuwa.

Tunani. Ku ɗauke orchestration daga model ku saka shi a cikin injin policy-as-code wanda ke shirya biyan kuɗi bisa corridor, girman ticket, haɗarin settlement, da dangantakar counterparty — agent ɗin yana aiki kawai a cikin iyakokin da policy ta bayyana.

Karatu na musamman. Ƙetare Iyaka 2026: ISO 20022, Open Finance da Tokenised Deposits a Kuɗin Kamfanoni

Misali mai aiki. Biyan kuɗin kamfani na €4.2 M daga London zuwa mai samar da Spain, T+2 ya yarda, counterparty na matakin investment-grade, babu sashin FX. Injin policy-as-code yana auna shigarwa huɗu a kan rail matrix:

Rail	Cancanta	Settlement	Farashin kowane sashi	Tasirin liquidity	An zaɓa
SEPA CT Inst	eh	T+0 (≤10 s)	€0.20	nostro debit, nan take	—
SEPA CT	eh	T+1	€0.20	nostro debit, T+1	✓
SWIFT CBPR+	eh	T+0–T+2	€15	sashin correspondent	—
Tokenised deposit	a'a	n/a	n/a	counterparty ba ya kan hanyar sadarwa	—

Agent ɗin ba ya taɓa ganin zaɓen rail. Yana karɓar sakamako — "An zaɓi SEPA CT, an haɗa audit trail, settlement T+1" — kuma ya ci gaba da tattaunawa. Audit, model-risk, da hakkin DORA Article 5 sun zauna a policy layer, inda za a iya kāre su a duban bita. Ku canza corridor zuwa GBP → SGD ko girman ticket zuwa €40 K, kuma wannan matrix ɗin zai zaɓi CBPR+ ko SEPA CT Inst bi da bi, ba tare da canji ko kaɗan a agent prompt ba.

Tafarkin aiwatar da gini #

Matakai uku jere. Kowanne yana da daraja shi kaɗai; tare suna haɗa Resilience Trinity daga ƙarshe zuwa ƙarshe.

Mataki 1 — Audit da tsaro #

Ku gyara ruɓewar cryptography ta amfani da primitives masu tsaro na memory don biya bukatun juriyar DORA. Ku yi ƙididdigar kowane password store, saitin parameters na KDF, da library na cryptography — ciki har da dogaro kan C ta hanyar FFI layers. Ku ƙaura zuwa tsarin cryptography na Rust mai tsabta tare da verify_and_upgrade dispatch, peppering wanda HSM ta haɗa, da telemetry na key-rotation na matakin audit. Ku rubuta ƙaurar a matsayin canji da hukumar gudanarwa ke da hakkin amsa a ƙarƙashin DORA Article 5.

Mataki 2 — Daidaita #

Ku haɗa API contracts na ciki tare da canonical schemas na ISO 20022 don tabbatar da amincin bayanai daga ƙarshe zuwa ƙarshe. Ku tilasta bayanan saƙo da ya fi tsanani fiye da abin da CBPR+ ke buƙata. Ku ƙi a parse. Ku fassara MT zuwa MX sau ɗaya a ingress; kada ku ɗauki MT zuwa downstream. Ku tabbatar <Dbtr> / <Cdtr> / <DbtrAgt> / <CdtrAgt> suna ɗauke da nassoshi na LEI daga ƙarshe zuwa ƙarshe domin sanctions screening ya zama mai yiwuwar audit ba ta hanyar zato ba.

Mataki 3 — Orchestrate #

Ku tura control plane mai 'yanci daga rail wanda ke ɗaukar SWIFT CBPR+, A2A / PSD3, da tokenised deposits a matsayin wuraren aiwatarwa na yau da kullum waɗanda policy-as-code ke shugabanta. Ku rubuta bayanan credit-exposure kowane rail kowane corridor. Ku ɗaure agent ɗin zuwa policy, ba rail ba. Ku haɗa shugabancin haɗarin model na SR 11-7 da hakkin DORA Article 5 a cikin orchestration layer, ba a model ba.

Agentic treasury — abin da gini ke ba da damar yi #

Ginshiƙai ukun suna haɗuwa a tsari ɗaya na aiki: treasury agent wanda zai iya yin tunani a kan mahallin kuma ya aiwatar da biyan kuɗi, amma kawai a cikin iyakokin da gini da kansa ke tilasta.

Ginshiƙi I ya sa credentials, signing keys, da sirrika waɗanda HSM ta haɗa su zama masu kāriya — wani sharadi ne na kowane principal ba ɗan adam ba a sarkar biyan kuɗi. Ginshiƙi II ya ba agent ɗin abin da zai yi tunani a kansa: <PstlAdr>, <Purp>, <RmtInf> da aka tsara, da nassoshi na counterparty waɗanda LEI ta tabbatar — ba prose na remittance da LLM zai zato ba. Ginshiƙi III ya zana layi: agent ɗin zai iya neman biyan kuɗi; injin policy-as-code ne ke yanke shawara wanne rail, wace iyaka, wace hedging tail, da wace audit attribution ke aiki.

Wannan rabuwa ba zaɓi na UX ba ne. Ita ce iyakar haɗarin model ta SR 11-7 da layin hakki na DORA Article 5, an zana ta inda governance zai iya gaske duba shawarar. Banki mai yin wannan daidai yana tura agents waɗanda suka wuce duban haɗarin model a rana ta farko domin an iyakance ikon agent ɗin, an saka version ga policy, kuma za a iya sake kunna trace. Banki da bai yi daidai ba yana tura agent wanda yake zaɓen rails, ya saita iyakokin sa, kuma ya rubuta audit log nasa — kuma yana tura shi kai tsaye cikin sakamako na doka.

Tattaunawar 2027 ba za ta kasance game da "shin za mu tura AI a treasury ba". Za ta kasance game da "ina muka zana layin, wa ya sa hannu kan policy, kuma yaya za mu tabbatar wa mai gudanarwa". Ginin da ke sama shi ne layin.

Game da marubucin #

Bayani kan gini — sauke PDF #

Kuna buƙatar raba wannan tsari tare da ƙungiyoyin tsaro, treasury, ko architecture-review na ciki? An haɗa rahotanni a cikin PDF guda ɗaya — an tsara shi don Architecture Review Boards (ARB), kwamitocin yarda da DORA, da zaman shirin matakin C-level. Yana ɗauke da nassoshi na binciken (binciken shirye-shirye na bankuna 200 na RedCompass Labs, McKinsey Global Payments Report), tsara doka mai jurisdictions da yawa (DORA, Fed SR 21-14, OCC, MAS TRM, HKMA C-RAF, APRA CPS 230), tsararren model na barazana tare da ƙaurar bayan ƙididdiga na NIST FIPS 203/204/205, kulawar Basel ta LCR/NSFR/intraday-liquidity ga tokenised settlement, posture matrix mai kwatanci da vendor core-banking, API-first, da hanyoyin da CBDC-rail ke jagoranta, da rajistar haɗari mai abubuwa 10. Sigar: Yuni 2026. Tsari: US-letter, shirye don bugu, single-column arxiv-style preprint, shafuka 16.

Haɗari uku daga rajistar shirin #

Rajistar haɗarin shirin mai abubuwa 10 a cikin PDF an daidaita ta zuwa bambance-bambancen da hukumomin gudanarwa suka ƙayyade kan zagayowar 2024 / 2025. Uku sun cancanci sanyawa suna a nan:

Tara mai siyarwa a cikin tarin policy-as-code. Orchestration layer ɗin shi ne sabon ma'auni guda ɗaya na ƙarfi. Tara kan mai siyarwa ɗaya don bayyana policy, rikodin shawara, da abstraction na rail yana haifar da DORA Article 28 critical-ICT-third-party exposure wanda kwamitocin haɗari yanzu suke yin tambaya a kai. Maganin shi ne dabara ta masu siyarwa biyu tare da portability na policy da ake gwada shi kowace shekara, ba hanyar mai siyarwa ɗaya mai rahusa ba.
Asarar bayanai shiru daga MT zuwa MX. Bankunan da ke fitar da MT103 tare da adireshi ko bayanan remittance da aka yanke suna shiga MX channels lafiya — amma filayen da aka tsara sun kasance fanko. Sakamako na ƙasa (sanctions screening da ya gaza, AML triggers da aka rasa, raɓen sulhu) yana bayyana kwanaki 30–90 bayan sauyin, da yawa bayan forensics na canjin window. Rajistar ta kiyasta tsadar gyaran back-book da ake tsammani kowane €1 bn na biyan kuɗi.
Attribution na aikin agent. Lokacin da treasury agent wanda LLM ke goyan baya ya kawo sarkar biyan kuɗi, principals uku za su iya neman mallaka — mai mallakar model, mai ba da rail, marubucin policy. Ba tare da shawarar attribution ta bayyananniya da aka shiryata cikin orchestration layer ba, banki ya gaji dukkan nauyi uku. Rajistar ta bayyana itacen attribution da sarkar shaida ta SR 11-7 da ake buƙata don kāre shi.

Sauke takardar PDF Duk takardun fata

Taƙaitawar bita na ciki #

Sashin da ke ƙasa shi ne shafin shugabanci na PDF, an rubuta shi don masu ruwa da tsaki da ke gudanar da shirye-shiryen sabuntar architecture, haɗari, da treasury.

Manufa #

Wannan takardar ta ba da tsari gini mai haɗin kai don magance haɗarin tsarin da bukatun gini da ke fuskantar ayyukan banki na Tier-1 da treasury na kamfanoni a 2026. An nufa ta don Architecture Review Boards (ARB), Kwamitocin Haɗari, da ƙungiyoyin shugabanci na Sauyin Dijital.

Ƙalubalen shugabanci #

Masana'antar tana fuskantar matsa lamba uku masu haɗuwa:

Nauyin doka. DORA ta ɗauke bashin cryptography na gargajiya — musamman password hashes da ba a sake juya su ba, da dogaro kan C dake fuskantar haɗari ta sarkar samar — zuwa sakamako na doka mai mahimmanci.
Sauye-sauyen bayanai na tsarin. Sauyin SWIFT MT/MX na Nuwamba 2026 ya sa dabarun fassara da suka dogara kan MT103 sun zama tsoffi. Bankunan da suka kasa aiwatar da tushen bayanai na ISO-first suna fuskantar lalacewa mai mahimmanci na riba ta hanyar jadawalin surcharge na correspondent da farashin ƙin saƙo.
Rikitarwa na orchestration. Bullowar ruwa-ruwa a kan hanyoyi da yawa — SWIFT CBPR+, A2A / Open Finance (PSD3), da tokenised deposits — ya canza nauyin gasa daga "samun rail" zuwa "orchestration a tsakanin rails".

Resilience Trinity da aka gabatar #

Dabarar sabuntawa ta modular da aka gina a kan ginshiƙai uku.

Ginshiƙi I — Kulawar cryptography. Ku tashi daga libraries na C gargajiya masu rauni zuwa Rust mai tsabta da memory-safe tare da peppering wanda HSM ta haɗa. Yana biya bukatun juriyar DORA kuma yana kawar da rukunin attack vectors na sarkar samar wanda aka rubuta.
Ginshiƙi II — Tushen bayanai na ISO 20022. Sauya daga "translation-at-the-edge" zuwa canonical data model na ISO-first. Yana ba da damar bayanan manufa, remittance, da bayanai na doka da ake iya karantawa ta na'ura waɗanda injuna na agentic treasury ke buƙata.
Ginshiƙi III — Orchestration mai 'yanci daga rail. Karɓi policy-as-code orchestration layer wanda ke raba execution rail daga payment logic. Yana rage credit-risk exposure kuma yana ƙara amfani da capital a tsakanin corridors.

Manufofin dabaru na 2026 / 2027 #

Yarda. Cikakken gyara ruɓewar cryptography don dacewa da matakan DORA na 2026 kafin Q4 2026.
Inganci na aiki. Cimma matakan auto-reconciliation na 95%+ ta hanyar tilasta tsayayyen CBPR+ ISO 20022 schemas a kan dukkan API endpoints na kamfanoni.
Sarrafa haɗari. Rubuta bayanan credit-exposure ga kowane settlement rail da corridor da treasury control plane ke amfani da shi.

Kammalawa #

Wannan tsari ya sauya gini na banki daga cibiyar tsada mai nauyin kulawa zuwa injin treasury mai shirye-shirye, mai juriya, kuma mai shirye-shirye na audit. Labaru uku da aka yi nuni da su sun bayyana aiwatarwa na fasaha ga kowane ginshiƙi, ciki har da samfuran matakin code, sauye-sauyen jeri, da trace na orchestration mai hanyoyi da yawa.

Sauke takardar PDF

Sanarwar rarrabawa. An nufa wannan takardar don amfani na ciki da ƙungiyoyin fasaha da risk-architecture suke amfani da shi don tantance tafarkin sabuntawa. Don aiwatar da code mai rai da samun damar repository, ku duba digital appendix a sebastienrousseau.com.

Bita ta ƙarshe 2026-08-28.

Sake buga wannan labari

Gine-ginen Banki na 2026: Tsari na Juriyar Aiki — Sebastien Rousseau

Tsarin gini mai ginshiƙai uku ga manyan bankuna na Tier-1 da ofisoshin kuɗi na kamfanoni a 2026: kulawar cryptography, ISO 20022 a matsayin tushen bayanai mai sarrafa kansa, da orchestration mai 'yancin daga rail — an tsara shi don juriya na aiki a matakin DORA.

An lasisin wannan labari a karkashin Creative Commons Attribution 4.0 International. Sake bugawa na bukatar nuna asalin URL na asali.

Gine-ginen Banki na 2026: Tsari na Juriyar Aiki — Sebastien Rousseau

Tsarin gini mai ginshiƙai uku ga manyan bankuna na Tier-1 da ofisoshin kuɗi na kamfanoni a 2026: kulawar cryptography, ISO 20022 a matsayin tushen bayanai mai sarrafa kansa, da orchestration mai 'yancin daga rail — an tsara shi don juriya na aiki a matakin DORA.

Originally published at https://sebastienrousseau.com/ha/2026-06-21-gine-ginen-banki-2026-tsari-juriyar/ by Sebastien Rousseau.
Licensed under CC-BY-4.0.

SEBASTIEN ROUSSEAU FOUNDER · ENGINEER