FEED
POLICY & RESILIENCE
Financial entities learned to answer the NIS2 question with one sentence about DORA. That sentence is correct, and it is about to be applied to a regulation it was never written for.
APPLIED AI
Relief on the high-risk file arrived nine days ago. The risk now is that banks read one deferral and stand down a programme that still has an obligation biting today.
PAYMENTS & MONEY
For a decade banks have owned the login. eIDAS 2 turns identity into something the customer carries and the bank is obliged to accept on request.
PAYMENTS & MONEY
Under PSD2 a bank could comply alone: build the endpoint, publish the spec, done. FiDA has no unilateral path. Compliance runs through a scheme, and the scheme is being designed right now.
APPLIED AI
Fifteen years of model risk doctrine was rewritten in April, and the one paragraph that will matter most to a 2026 risk committee is the one that says which models the guidance does not cover.
INFRA & CRYPTOGRAPHY
Most banks have costed the test. Fewer have costed the supply chain it now depends on: an accredited tester market on a synchronised three-year clock, and threat intelligence that must come from outside every single time.
INFRA & CRYPTOGRAPHY
Every post-quantum roadmap assumes an inventory that does not exist. The asset register knows the server, the owner and the criticality; it does not know the algorithm, the key length, the library or the expiry.
PAYMENTS & MONEY
Payee verification stopped being a competitive feature the day it became a legal obligation. What remains is an operations problem: a five-second budget, an ambiguous middle answer, and corporate files that must be taken apart before they can be checked.
APPLIED AI
Immutable is not the same as trusted. As instant settlement and probabilistic AI reshape banking, the uncertified ledger becomes the weak link, and a certifiable blockchain becomes the audit spine.
APPLIED AI
Payments are now the core of bank technology strategy. This is the operating model, risk frontier and revenue playbook G-SIBs need to lead the agentic, real-time cycle.
POLICY & RESILIENCE
Compile-time WCAG gates, SHA-384 SRI, CSP injection and a local-first LLM pipeline set this Rust engine apart, but incremental builds, native minification and AVIF are still aspirational. Here is the honest gap analysis and the road to 1.0.
PAYMENTS & MONEY
The industry finally has a global language for payments. It still does not have a global map for corporates to act on it. ISO 20022 and Swift's CBPR+ harmonised what a payment must say, not how a corporate uses it — the missing interface and behaviour layers, and how banks can build a global corporate standard on the rails they already have.
APPLIED AI
Retail banking got its API standard a decade ago. Corporate banking never did — and now that AI agents and the Model Context Protocol have turned integration into a runtime decision, the gap has stopped being a nuisance and become a fault line. A concrete failure mode, the strategic choice it forces, and what a corporate banking API standard has to mandate.
APPLIED AI
Regulators have started scanning the horizon out loud. Reading the 2026 emerging-technology landscape for banks across three converging vectors — personalised AI intelligence, synthetic financial crime, and programmable finance — and a framework for turning weak signals into supervisory action before harm scales.
INFRA & CRYPTOGRAPHY
Immutability is not institutional trust. The 2026 Certified Blockchain Index scores ledger governance, consensus integrity, cryptography, smart-contract assurance and audit observability on a 0–5 CMM, mapped to DORA, CPMI-IOSCO PFMI, ISO/IEC TC 307 and Basel III — turning engineering metrics into board-auditable financial truth.
APPLIED AI
Agentic AI is operational infrastructure in 2026. This index measures it the way banks measure capital and credit: a six-dimension readiness score across autonomy tiers, the control plane, regulatory evidence, unit economics, organisational readiness, and global regulatory alignment.
INFRA & CRYPTOGRAPHY
As of June 2026, post-quantum cryptography (PQC) has transitioned from an experimental technical concern to a primary fiduciary obligation. Boards must now oversee the systematic migration of legacy encryption...
PAYMENTS & MONEY
Morgan Stanley, JPMorgan and Citi are doubling down on FINOS and the Linux Foundation. A Rust-and-zero-dependency stack — noyalib, http-handle, hsh, KyberLib — shows what the cloud-native CIB stack looks like in 2026 under PSD3, FiDA and DORA.
APPLIED AI
Agentic treasury co-pilots are moving from controlled pilots into production in 2026. The pattern is consistent across CIB treasuries: agents read ISO 20022 cash data, call bounded tools, and rebalance liquidity inside policy bands — with SR 11-7, DORA, and EU AI Act controls wrapped around them.
PAYMENTS & MONEY
Corporate and investment banks now treat cyber recovery, ISO 20022 fallback rails across RTGS, instant and tokenised networks, and quantum-safe treasury controls as one always-on operating model — the board-grade response to DORA Articles 5 and 6, FHE, QKD and PQC primitives, and ICT third-party concentration risk.
PAYMENTS & MONEY
Executive Order 14409, ANSSI's hard 2030 deadline and DORA Article 5 have moved post-quantum cryptography from a long-range technical goal to an active regulatory mandate. This index converts securing registries, high-frequency ledgers and SWIFT channels into a board-ready 0–5 scorecard that aligns ML-KEM, ML-DSA and SLH-DSA primitives with fiduciary liability and balance-sheet risk.
PAYMENTS & MONEY
The 2026 global payments cycle is defined by three converging forces — agentic commerce, invisible embedded payments, and real-time execution — sitting on top of a tokenised unified ledger under Project Agorá and a hard November 2026 SWIFT structured-address cut-over. This piece synthesises the J.P. Morgan, Global Payments, HSBC and Payments Association 2026 outlooks into a four-pillar G-SIB operating model.
INFRA & CRYPTOGRAPHY
BIS Quantum Dawn and the G7 January 2026 PQC roadmap have moved post-quantum cryptography from research to board agenda. This piece extends KyberLib from a toolkit into an enterprise CIB transition programme — covering high-value rails, trade finance, custody, and the disclosures regulators are now asking for.
PAYMENTS & MONEY
Cross-border corporate treasury in 2026 is a multi-rail engineering problem. ISO 20022 is the common grammar, A2A and open finance under PSD3/FiDA are the customer-facing rail, tokenised deposits handle the wholesale settlement leg, and SWIFT still anchors the long tail. The interesting work is in the orchestration layer, not the model.
No articles match the current filters.
