Home / Replicate / The Pellbridge agents: agentic finance, at play, in a vault

A vault

The Pellbridge agents: agentic finance, at play, in a vault

Six agents, four elements, one day at the gate, in a vault you can open.

Pellbridge: agentic finance, at play

A reply to the FCA's plan for a trusted framework for agentic finance, a tour of the vault that shows it working, and the vault itself to use.

1 · The replyA trusted framework for agentic financeHow our open behaviour policies line up with the FCA's four elements, and what they look like at play.
2 · The tourInside the Pellbridge agentsSix policies, one day at the gate, the blast radius of each agent, and every gap with a holder.
you are here
3 · The vaultThe Pellbridge agentsReplay the day, step through the gate, watch each agent's blast radius, and read every policy.Use itOpen the vault ↗The FCA speech ↗
Everything in this vault is synthetic. Pellbridge Bank is invented, and so are its people, agents, customers, systems and every number. The four elements are from the FCA: Jessica Rusu, Building the future of finance in the age of AI (19 October 2026). The FCA has not endorsed any of this. No model is called: the engine is a small deterministic program, so the day replays exactly. The reply makes the argument; the tour walks through the vault.
Open it yourself. The key is the whole credential.
Read key: sgit_public_read_837013965d5c11e34fa9f88c4ac45eae83b06e2305b295e42618c195b4aceb73:c4cxuu1w
In the official UI: open it read-only in a new tab · From the CLI: sgit clone sgit_public_read_837013965d5c11e34fa9f88c4ac45eae83b06e2305b295e42618c195b4aceb73:c4cxuu1w
Published deliberately under the sgit_public_read_ prefix, and derived one-way from a vault key that is not in this repository. Read back with this key before it was published: the same files, the same app.

Open the vault, full screen → or use it here, below

Opens in the vault's own app, read-only, with the published key: the six agents and their policies, the gate replaying the day, each agent's blast radius, the chain to the board, the test pack and the outage, and the four elements side by side.

Use it here

Open the gate and press play: each action leaves its agent and meets the gate, or the gap. Step through it one action at a time. Then open the blast radius and pick an agent.

The six agents

AgentIts jobRowsGaps
Payments assistantPays bills for one customer, and asks before anything unusual.123
Customer support agentAnswers customers in chat, finds recent payments, routes to the right team.93
Lending pre-check agentA soft search and an affordability estimate on a loan application.62
AML alert reviewerReviews transaction-monitoring alerts and recommends close or escalate.62
Fraud triage agentTriages card-fraud signals and can freeze a card for 24 hours.62
Transaction reporting agentPrepares and submits the day's transaction reports.41

A gap is a row the agent can do, may not do (or may only with approval), and that nothing out of its reach stops: only the prompt, a setting its own account can change, a check that can miss, or nothing.

What is in it

PathWhat
index.htmlThe app: overview, the agents, the gate, blast radius, accountability, assurance, the four elements, and the files; the data and the engine inlined.
content.jsonThe bank: its roles and chain to the board, its systems and service accounts, the six agents and their 43 rows, and one day of 40 events.
engine.jsThe deterministic engine: PellbridgeTwin.make(content), with policy, delta, blast, chain, run, incidents, tests and crosswalk.
policies/One Agent Behaviour Policy per agent, with the four elements filled in and its hash.
receipts/day.jsonEvery decision of the day, each with the hash of the one before.
decisions/The thirteen gaps, one file each, with holder, door and interval.
incidents/, tests/, blast/The day's breaks and near misses, the test pack run on the model change, and each agent's blast radius.
tools/The scripts that build all of it. Change a row, rebuild, and the day, the receipts and the decisions follow.

A tour

The gate, animated: from 10:02 to 12:10 of the invented day. A new payee approved by the customer, a hidden instruction in a bill declined by the model, advice caught by the output check, a vulnerability routed to a person, an alert closed with a second person's approval, a full credit search that nothing stopped, and an email the model declined to send.
The gate, animated: from 10:02 to 12:10 of the invented day. A new payee approved by the customer, a hidden instruction in a bill declined by the model, advice caught by the output check, a vulnerability routed to a person, an alert closed with a second person's approval, a full credit search that nothing stopped, and an email the model declined to send.
15:30: the payments assistant changes a standing order. The approval rule is a setting in the agent's own profile, and it was off, so the action goes through the gap and the row is broken.
15:30: the payments assistant changes a standing order. The approval rule is a setting in the agent's own profile, and it was off, so the action goes through the gap and the row is broken.
17:00: model provider B changes version. Every row of every policy on that provider is a test; two that only the model kept fail, and the release stops.
17:00: model provider B changes version. Every row of every policy on that provider is a test; two that only the model kept fail, and the release stops.
The fraud triage agent's blast radius: what it may reach, what it can reach through a gap, and the core ledger it can reach through a service account secret it can read.
The fraud triage agent's blast radius: what it may reach, what it can reach through a gap, and the core ledger it can reach through a service account secret it can read.
The payments assistant's policy, with the four elements filled in: identity, delegated authority (can it, may it, what stands in the way), accountability, and execution, with every decision it made that day and its receipt.
The payments assistant's policy, with the four elements filled in: identity, delegated authority (can it, may it, what stands in the way), accountability, and execution, with every decision it made that day and its receipt.
Every row has a holder and every holder a chain to the board; the thirteen gaps each have a decision; the day's breaks and near misses go to their holders.
Every row has a holder and every holder a chain to the board; the thirteen gaps each have a decision; the day's breaks and near misses go to their holders.
Continuous, conditional assurance: the test pack on a model change, a provider outage with its fallbacks, and the near-miss register.
Continuous, conditional assurance: the test pack on a model change, a provider outage with its fallbacks, and the near-miss register.
The four elements of the FCA's planned framework, filled in for each of the six agents.
The four elements of the FCA's planned framework, filled in for each of the six agents.
The same app, opened from the vault in the official vault UI, read-only, with the published key.
The same app, opened from the vault in the official vault UI, read-only, with the published key.

For an agent