Weekly Brief / Edition 18 · 18 Oct 2026
Live edition · 18 Oct 2026 · Vol. XVIII
Japan’s finance minister says G7 finance ministers and central bank governors agreed to tabletop exercises on AI-driven cyberattacks; design and dates are unspecified. This edition asks whether firms can contain correlated behaviour across shared systems and recover from a common shock.
Five-minute read / one-minute scan
The weekly readout
Japan’s finance minister says G7 finance ministers and central bank governors agreed to tabletop exercises on AI-driven cyberattacks; design and dates are unspecified. These are research and planned policy signals, not a live failure or a new requirement.
BIS Project Agenti is testing a controlled payment simulator to see how agents with different objectives and strategies affect payment timing, liquidity demand, gridlock and shock propagation. It is controlled research, not a live-market result.
Several agents may respond to the same signal and shift payment timing or liquidity demand together. A failure in a shared payment or orchestration service could compound the outcome. The September Financial Policy Committee record says recent frontier-AI test-environment incidents reinforce the need to prepare for cyber and operational risks, and warns that interconnected vulnerabilities may crystallise together. BIS Project Agenti is controlled research, not a live-market result or a new requirement.
Ask payments and resilience owners to test a common liquidity shock with the loss of a shared payment or orchestration service. Measure payment delays, containment and minimum-service recovery, then record the first recovery step that fails.
Retain agent objectives, shared inputs, payment queues, liquidity usage, dependency failures, intervention points and recovery times. State which assumptions came from the simulator and which outcomes were observed in the firm’s own exercise.
Top 5
Each title links to its primary source. The Signals pages carry the wider source trail and retained material.
Ask for the scenario assumptions, shared signals and payment outcomes needed to test the combined behaviour of system participants.
Ask for the simulator assumptions and a firm-specific result from a test that includes a common shock.
The judgement is an editorial interpretation. The G7 exercises are planned; the FSB describes its final practices as a practical toolkit.
Regulatory Horizon
Use the published horizon to review official dates, evidence and action windows alongside this week’s operating questions.
A practical register of upcoming regulatory dates and their operating implications.
Permanent edition
This edition has a fixed URL for reading, citation and search discovery.
Latest Deep Dive
Source-backed analysis for a question that deserves more room than the weekly Brief.
The FSB’s AI sound practices are a benchmark. The ECB’s date-certain action-plan request is a supervisory deliverable. Together with the ESRB’s sharper warning, they put a practical question to EMEA banks: are governance, response and recovery keeping pace with a faster threat?
Reading the signals
Separate controlled research from observed outcomes, map shared dependencies, and test recovery when agents respond to the same shock.
Use the project’s variables—payment timing, liquidity use, queue effects and shock propagation—to shape a firm-specific scenario. Keep simulator assumptions separate from evidence observed in the firm’s own test.
The FSB describes its 12 sound practices as a practical toolkit that financial institutions can tailor and integrate into existing frameworks. Boards and senior management are encouraged to use them when refining AI governance, risk management and controls; the release presents no new rule.
Anthropic says six METR researchers have employee-like access to internal tools and risk-assessment material. METR can publish its findings and Anthropic says it cannot veto publication, though it can require redaction of defined categories such as customer data, privileged material and model architectures. This is a provider-specific arrangement, not a sector-wide standard.
Executive challenge
Carry one into a committee, 1:1 or control review.
Weekly, direct
One email a week. The so-what, the Top 5, and the board question — nothing else.