The AI briefing for people who run technology, not the people building it.

Three structural risks converged this week that collectively tighten the compliance perimeter around AI deployment at G-SIBs: Chinese open models (Qwen, DeepSeek) now dominate the open-model ecosystem by downloads, derivatives, and inference share — meaning banks with open-model strategies almost certainly have undisclosed Chinese-origin provenance somewhere in their vendor stack, whether they know it or not. At the same time, TraceSafe-Bench established the first formal benchmark for agentic mid-trajectory safety failures, quantifying a risk class that existing MRM frameworks treat as out of scope: the tool calls an agent makes between prompt and final output. The advertising-conflict research adds a third vector — hosted LLM outputs may be optimised for revenue rather than accuracy, a category of model risk that SR 11-7 and EBA validation guidance were not written to catch. Read together, these three signals describe the same underlying problem: G-SIB AI governance frameworks built for static, output-layer model risk are structurally mismatched to the supply chain, agentic, and commercial dynamics of 2026 deployment. The coming week should be spent identifying where each of these gaps sits in your current framework before a regulator or internal audit does it for you.