Sebastien Rousseau

AI

AI governance

Model risk, EU AI Act conformity, NIST AI RMF, board-level accountability, third-party AI vendors, and the compliance stack for AI in banks.

5 articles

APPLIED AI

The Agentic AI Index for Banks in 2026: Measuring Autonomy, Governance, Auditability, and Business Impact

An engineering blueprint for agentic AI in tier-1 banks: classify by permissions not intelligence, treat every production agent as an SR 11-7 / SS1/23 model from day one, and build the five-component control plane — OAuth-scoped service accounts, deterministic semantic routing, OPA policy gates, immutable WORM audit logs, and a tested kill switch — that turns autonomous workflows into auditable evidence.

APPLIED AI

DORA, the EU AI Act, and Data Sovereignty: The 2026 Compliance Stack for Banks

DORA, the EU AI Act, GDPR, cloud concentration risk, and data sovereignty converge into one 2026 compliance stack for banks. The strategic question is design discipline — running compliance, AI governance, ICT-resilience evidence, and sovereign-data choices as one architecture, not five parallel programmes.

APPLIED AI

Generative AI in 2023: How It Works, Where It Lands

Generative AI crossed from research curiosity to production deployment in 2023. GPT-4, Claude 2, Llama 2, and Mistral demonstrated that large language models could handle legal document review, code generation, and customer dialogue at human-comparable quality — raising immediate governance questions about hallucination, data leakage, and regulatory compliance in financial services.