Governed Autonomy
How Private Banks Can Industrialise AI Within Regulatory Boundaries
Adrien Pesa
Published 25 March 2026
Version 1 is accompanied by errata and clarifications dated 7 September 2026. The original PDF remains unchanged.
Publication context
- Paper type
- Strategic architecture paper grounded in regulatory analysis and published supervisory observations.
- Jurisdiction
- Singapore private banking. Regulatory references reflect the publication date, 25 March 2026.
- Provenance
- Adrien Pesa’s independent analysis of publicly available laws, regulatory publications, academic literature and industry frameworks.
- Contribution
- A synthesis of regulatory mapping, a proposed AI deployment architecture, a client-review workflow and a governance gate for institutional decisions.
- Limits
- A research proposal, with directional economic claims. It does not report a validated bank implementation. See the scope and limitations on page 39 of the paper.
Abstract
Private banking stands at an inflection point that is architectural, not incremental. Most institutions have deployed machine learning in isolated functions—transaction monitoring, name screening, risk scoring, and in some cases portfolio analytics or client segmentation—and reasonably concluded that AI is useful but peripheral. That conclusion is now outdated. For institutions already deploying AI in compliance and analytics, the strategic question has shifted: not whether to adopt AI, but whether to redesign the operating model around it.
This paper argues that the competitive frontier in private banking is shifting from better models toward governed autonomy: the capacity to embed AI-driven decision support within productised client journeys while maintaining—and indeed strengthening—regulatory defensibility. Achieving this requires a three-layer architecture enveloped by a governance wrapper: a control plane, an LLM workflow layer, and an ontology-bounded autonomy layer—three technical tiers through which regulatory requirements are translated into machine-enforceable boundaries.
The paper uses the periodic client review as its exemplar productised client journey: a single workflow spanning data gathering, suitability analysis, documentation, client communication, and record keeping that requires all three layers to operate in concert. It identifies three concrete actions for boards and management committees: assess the institution's current maturity against a diagnostic framework of institutional archetypes, commission an architecture review to determine readiness for a phased deployment programme, and establish a governance-first deployment protocol operationalised through a defined governance gate.
For institutions with sufficient scale and data maturity, the cost of inaction is not stasis. It is a widening gap in service capacity, cycle time efficiency, and regulatory standing that is likely to prove progressively harder to close.
Addenda
The addenda develop the paper’s operational implications. The reference architecture is available as a working draft; further work is planned.
- Reference architectureWorking draft
A working specification for the governed workflow architecture, illustrated through a fictional client review.
- Organisational structure and operating culturePlanned
The programme also provides a free governance readiness diagnostic. It is a separate research instrument, with its own method and limitations.
Citation
Pesa, A. (2026). Governed Autonomy: How Private Banks Can Industrialise AI Within Regulatory Boundaries. Governed Autonomy. https://governed-autonomy.com/papers/governed-autonomy-i/
Version history
25 March 2026 — Initial publication, version 1.
7 September 2026 — Errata and clarifications added to the publication record.