POLICY & RESILIENCE
你的 DORA 退出计划只是算了价，没有做规划。一月，这个价格就消失了。
Supervisors have spent two years reading exit plans that assume an exit nobody has priced, budgeted or rehearsed. In January the most durable excuse for that stops being available.
FEED
Articles
POLICY & RESILIENCE
DORA 让你躲过了 NIS2，却躲不过 CRA。
Financial entities learned to answer the NIS2 question with one sentence about DORA. That sentence is correct, and it is about to be applied to a regulation it was never written for.
APPLIED AI
你的高风险期限挪到了2027年12月。你的聊天机器人没有。
Relief on the high-risk file arrived nine days ago. The risk now is that banks read one deferral and stand down a programme that still has an obligation biting today.
PAYMENTS & MONEY
钱包12月交付，银行一年后必须接受
For a decade banks have owned the login. eIDAS 2 turns identity into something the customer carries and the bank is obliged to accept on request.
PAYMENTS & MONEY
PSD2 让银行建了一个 API。FiDA 让银行加入一个市场。
Under PSD2 a bank could comply alone: build the endpoint, publish the spec, done. FiDA has no unilateral path. Compliance runs through a scheme, and the scheme is being designed right now.
APPLIED AI
不在适用范围内,不等于没有风险:2026 年模型风险规则重写,漏掉了银行真正在部署的模型
Fifteen years of model risk doctrine was rewritten in April, and the one paragraph that will matter most to a 2026 risk committee is the one that says which models the guidance does not cover.
INFRA & CRYPTOGRAPHY
红队已成为一条受监管的供应链:DORA 的 TLPT 制度究竟要求什么
Most banks have costed the test. Fewer have costed the supply chain it now depends on: an accredited tester market on a synchronised three-year clock, and threat intelligence that must come from outside every single time.
INFRA & CRYPTOGRAPHY
无法枚举,就无法迁移:银行仍然没有的那份密码物料清单
Every post-quantum roadmap assumes an inventory that does not exist. The asset register knows the server, the owner and the criticality; it does not know the algorithm, the key length, the library or the expiry.
PAYMENTS & MONEY
收款人验证进入生产:近似匹配、批量文件与未定价责任的九个月
Payee verification stopped being a competitive feature the day it became a legal obligation. What remains is an operations problem: a five-second budget, an ambiguous middle answer, and corporate files that must be taken apart before they can be checked.
APPLIED AI
从证据到真相：为何认证区块链将定义银行信任的下一个时代
Immutable is not the same as trusted. As instant settlement and probabilistic AI reshape banking, the uncertified ledger becomes the weak link, and a certifiable blockchain becomes the audit spine.
APPLIED AI
2026年全球支付展望：代理型、隐形化、实时化世界中的运营模式、风险与收入
Payments are now the core of bank technology strategy. This is the operating model, risk frontier and revenue playbook G-SIBs need to lead the agentic, real-time cycle.
POLICY & RESILIENCE
静态站点生成器(SSG):企业级战略解析与架构路线图
Compile-time WCAG gates, SHA-384 SRI, CSP injection and a local-first LLM pipeline set this Rust engine apart, but incremental builds, native minification and AVIF are still aspirational. Here is the honest gap analysis and the road to 1.0.
PAYMENTS & MONEY
从报文到地图：在 ISO 20022 与 Swift 之上构建全球企业标准
The industry finally has a global language for payments. It still does not have a global map for corporates to act on it. ISO 20022 and Swift's CBPR+ harmonised what a payment must say, not how a corporate uses it — the missing interface and behaviour layers, and how banks can build a global corporate standard on the rails they already have.
APPLIED AI
从碎片化到断层线：智能体时代企业银行缺失的 API 标准
Retail banking got its API standard a decade ago. Corporate banking never did — and now that AI agents and the Model Context Protocol have turned integration into a runtime decision, the gap has stopped being a nuisance and become a fault line. A concrete failure mode, the strategic choice it forces, and what a corporate banking API standard has to mandate.
APPLIED AI
Reading the Emerging-Technology Risk Horizon for Banks in 2026
Regulators have started scanning the horizon out loud. Reading the 2026 emerging-technology landscape for banks across three converging vectors — personalised AI intelligence, synthetic financial crime, and programmable finance — and a framework for turning weak signals into supervisory action before harm scales.
INFRA & CRYPTOGRAPHY
从证据到真相：为何认证区块链将定义银行信任的下一个时代
Immutability is not institutional trust. The 2026 Certified Blockchain Index scores ledger governance, consensus integrity, cryptography, smart-contract assurance and audit observability on a 0–5 CMM, mapped to DORA, CPMI-IOSCO PFMI, ISO/IEC TC 307 and Basel III — turning engineering metrics into board-auditable financial truth.
APPLIED AI
2026 年银行 Agentic AI 指数：衡量自主性
Agentic AI is operational infrastructure in 2026. This index measures it the way banks measure capital and credit: a six-dimension readiness score across autonomy tiers, the control plane, regulatory evidence, unit economics, organisational readiness, and global regulatory alignment.
INFRA & CRYPTOGRAPHY
2026 后量子安全记分卡：面向董事会的度量框架
As of June 2026, post-quantum cryptography (PQC) has transitioned from an experimental technical concern to a primary fiduciary obligation. Boards must now oversee the systematic migration of legacy encryption...
PAYMENTS & MONEY
开源、FINOS 与云原生 CIB 技术栈
Morgan Stanley, JPMorgan and Citi are doubling down on FINOS and the Linux Foundation. A Rust-and-zero-dependency stack — noyalib, http-handle, hsh, KyberLib — shows what the cloud-native CIB stack looks like in 2026 under PSD3, FiDA and DORA.
APPLIED AI
2026 智能体司库：从自治司库指数到生产级副驾
Agentic treasury co-pilots are moving from controlled pilots into production in 2026. The pattern is consistent across CIB treasuries: agents read ISO 20022 cash data, call bounded tools, and rebalance liquidity inside policy bands — with SR 11-7, DORA, and EU AI Act controls wrapped around them.
PAYMENTS & MONEY
持续在线的 CIB：网络恢复、回退轨道与抗量子司库
Corporate and investment banks now treat cyber recovery, ISO 20022 fallback rails across RTGS, instant and tokenised networks, and quantum-safe treasury controls as one always-on operating model — the board-grade response to DORA Articles 5 and 6, FHE, QKD and PQC primitives, and ICT third-party concentration risk.
PAYMENTS & MONEY
2026 年后量子银行韧性指数：EO 14409、全球期限与受托密码敏捷性
Executive Order 14409, ANSSI's hard 2030 deadline and DORA Article 5 have moved post-quantum cryptography from a long-range technical goal to an active regulatory mandate. This index converts securing registries, high-frequency ledgers and SWIFT channels into a board-ready 0–5 scorecard that aligns ML-KEM, ML-DSA and SLH-DSA primitives with fiduciary liability and balance-sheet risk.
PAYMENTS & MONEY
2026年全球支付展望：代理型、隐形化、实时化世界中的运营模式、风险与收入
The 2026 global payments cycle is defined by three converging forces — agentic commerce, invisible embedded payments, and real-time execution — sitting on top of a tokenised unified ledger under Project Agorá and a hard November 2026 SWIFT structured-address cut-over. This piece synthesises the J.P. Morgan, Global Payments, HSBC and Payments Association 2026 outlooks into a four-pillar G-SIB operating model.
INFRA & CRYPTOGRAPHY
CIB 的量子曙光：从 KyberLib 到量子韧性支付栈
BIS Quantum Dawn and the G7 January 2026 PQC roadmap have moved post-quantum cryptography from research to board agenda. This piece extends KyberLib from a toolkit into an enterprise CIB transition programme — covering high-value rails, trade finance, custody, and the disclosures regulators are now asking for.
No articles match the current filters.