Agent layer vs control layer
SR 26-2, the revised model-risk guidance the Federal Reserve issued on April 17, 2026, supersedes SR 11-7 and SR 21-8 and puts generative and agentic AI out of scope. It calls them "novel and rapidly evolving" and states they "are not within the scope of this guidance".
The same footnote hands the problem back: a bank's own practices "should guide the determination of appropriate governance and controls for any tools, processes, or systems not covered in this document."
The regulator paused. The expectation did not.
Read as a builder, not a compliance expert: here is how those expectations land on AI agents. Source: Federal Reserve SR 26-2 (the gen-AI exclusion is in the attached guidance).
One set of expectations, two surfaces
SR 26-2's expectations group into roughly four areas: model development and use, validation and monitoring, governance and controls, and vendor products. For a statistical model they land in one place. For an AI agent that takes actions, the same expectations split across two surfaces that have to stay separate.
The two layers
- Versioned model, prompt, tools, and memory
- Pre-deployment evaluation and red-teaming
- Drift and behavior monitoring
- Documentation of model behavior and limits
- Owned by the ML / AI platform team
- Action grants: which tools, which data, which value thresholds
- Versioned policies with controlled rollout, and rollback by naming the previous version
- A decision record naming the policy version and the inputs it read
- Materiality-based human escalation
- Owned by risk and policy, with rollback authority
Why they have to be separate
Different cadence, different owners, different tooling. Mix them and you cannot change a policy without redeploying the agent, you cannot say from the record which policy version produced a disputed decision, and you cannot give risk an accountability surface independent of the platform team. Keeping them separate is what makes each expectation answerable.
Where Swiftward sits
Most banks already have the agent layer through a cloud model platform or an in-house stack. The control layer usually exists only in pieces: rules buried in application code, action limits hardcoded, audit logs that reference no policy version. Swiftward is that control layer, built as one product: action grants, versioned policy with rollback, a decision record per event, and escalation to a person when the stakes are high enough, on infrastructure you run. Risk and compliance.