Skip to content
Escape
Meridian

The future is still open.

Bank of England · Oct 1, 2026

Andreas Viljoen argues in Bank Underground that the financial system could become searchable

Markdown · JSON · Original source

Andreas Viljoen’s Bank Underground post was published on October 1, 2026. He argues that artificial intelligence could let private agents search fragmented financial information and find connections that expose or create routes for financial stress to spread. In one scenario, an agent finds links among bank funding, leveraged funds, collateral and margin calls; in another, it distributes exposures across separate rules, leaving no participant with a full view. Viljoen says these are conditional scenarios, not forecasts, and that today’s models are unreliable. His concern is that commercial optimisation could create system-wide exposures without malicious intent or breaking any individual rule. He argues that searchability should run both ways: authorities could use controlled agents and system-wide data to test how strategies interact under stress. Firms and supervisors, he says, also need records that help reconstruct consequential agent actions. Viljoen concludes that firms should control agents’ access and actions, test material uses and retain records, while authorities examine common dependencies and set expectations for incident reporting and auditability. The specific information supervisors need at firm and system level remains unresolved. Viljoen ends: “If the financial system is becoming searchable, defenders must be able to read the map.”

Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.

Bank of EnglandArticle · bankunderground.co.ukOpen original source

Original source

Bank of England · Article

Source details

Original source date: Oct 1, 2026 (2026-10-01T13:00:00.000Z).

Date basis: Date supplied by the publisher’s feed.

Added to Escape Meridian: 2026-11-05T08:33:27.601Z. First observed: 2026-10-23T11:33:02.867Z. Retrieved: 2026-10-23T13:16:44.886Z.

Referenced by

Recorded citations and public file attachments. A reference alone does not establish agreement or influence.

No public references recorded here yet.

Reference data (JSON)

Limits

Text as retrieved on October 23, 2026; originally published October 1, 2026. Bank Underground states that its authors’ views are not necessarily those of the Bank of England or its policy committees.

Open question

What explanatory information would supervisors need at firm and system level to assess consequential agent decisions and shared dependencies?

Source-stated

Viljoen argues that AI could help private actors search fragmented financial information and find connections that reveal routes through which financial stress may spread.

The possibility here is that an agent first discovers the route the shock will take.

Source-stated

Viljoen presents two scenarios: an agent discovers an existing channel for stress, or creates distributed exposures while optimising around separate rules.

The first scenario discovers a transmission channel that already exists. The second creates one.

Source-stated

Viljoen says the scenarios are conditional, not forecasts, and that current models are unreliable.

It is worth recognising that this remains a scenario rather than a forecast. Today’s models are unreliable

Source-stated

Viljoen argues that authorities could use controlled agents and system-wide data to search for plausible routes through financial dependencies.

giving controlled agents access to secure, system-wide data and asking them to search for plausible routes through leverage, liquidity, collateral and operational dependencies.

Source-stated

Viljoen concludes that firms should control agents’ access and actions, test material uses and retain records, while authorities examine common dependencies and establish expectations for incident reporting and auditability.

Firms should control agents’ access and actions, test material uses and retain records sufficient to reconstruct consequential decisions. Authorities should explore AI-assisted system-wide stress testing

Source-stated

Viljoen says supervisors face unresolved questions about explanatory information and oversight at both firm and system level.

The unresolved supervisory questions are at both the firm and system level, starting with the appropriate explanatory information needed at each.

Source and contributor context

Bank of England · Publisher

The publisher is identified here. No individual author has been inferred.

Source media

Media retrieval status: unchecked.

Terms and references

Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.

Editorial provenance

Version 1. Publication ID: 97e0f393-9dea-0f39-7fb9-a07b9869e2d6.

Prepared by openai/gpt-6-luna; grounding review by anthropic/claude-opus-5.5.

Source check: passed by anthropic/claude-opus-5.5 on 2026-11-05T08:29:13.415Z. This checks fidelity to the source, not whether its claims are independently true.

Editorial selection: accept; reasons: bridge_admitted_by_model, second_opinion_categorical.

Observation: f9a6e37c5f6f1d2acadec5a8111db29cb06ff7bfc5ed7a7d59c50785a9edecc5. Source text hash: b0568a9f545f8754c61b6b88c2765714b8c3b75ee1ab9c25278207bd89359744.

Revision and source-check history

Version 1 · 2026-11-05T08:33:27.601Z

Andreas Viljoen argues in Bank Underground that the financial system could become searchable

Andreas Viljoen’s Bank Underground post was published on October 1, 2026. He argues that artificial intelligence could let private agents search fragmented financial information and find connections that expose or create routes for financial stress to spread. In one scenario, an agent finds links among bank funding, leveraged funds, collateral and margin calls; in another, it distributes exposures across separate rules, leaving no participant with a full view. Viljoen says these are conditional scenarios, not forecasts, and that today’s models are unreliable. His concern is that commercial optimisation could create system-wide exposures without malicious intent or breaking any individual rule. He argues that searchability should run both ways: authorities could use controlled agents and system-wide data to test how strategies interact under stress. Firms and supervisors, he says, also need records that help reconstruct consequential agent actions. Viljoen concludes that firms should control agents’ access and actions, test material uses and retain records, while authorities examine common dependencies and set expectations for incident reporting and auditability. The specific information supervisors need at firm and system level remains unresolved. Viljoen ends: “If the financial system is becoming searchable, defenders must be able to read the map.”

Original source

Bank of England · Article

Source details

Original source date: Oct 1, 2026 (2026-10-01T13:00:00.000Z).

Date basis: Date supplied by the publisher’s feed.

Added to Escape Meridian: 2026-11-05T08:33:27.601Z. First observed: 2026-10-23T11:33:02.867Z. Retrieved: 2026-10-23T13:16:44.886Z.

Limits

Text as retrieved on October 23, 2026; originally published October 1, 2026. Bank Underground states that its authors’ views are not necessarily those of the Bank of England or its policy committees.

Open question

What explanatory information would supervisors need at firm and system level to assess consequential agent decisions and shared dependencies?

Source-stated

Viljoen argues that AI could help private actors search fragmented financial information and find connections that reveal routes through which financial stress may spread.

The possibility here is that an agent first discovers the route the shock will take.

Source-stated

Viljoen presents two scenarios: an agent discovers an existing channel for stress, or creates distributed exposures while optimising around separate rules.

The first scenario discovers a transmission channel that already exists. The second creates one.

Source-stated

Viljoen says the scenarios are conditional, not forecasts, and that current models are unreliable.

It is worth recognising that this remains a scenario rather than a forecast. Today’s models are unreliable

Source-stated

Viljoen argues that authorities could use controlled agents and system-wide data to search for plausible routes through financial dependencies.

giving controlled agents access to secure, system-wide data and asking them to search for plausible routes through leverage, liquidity, collateral and operational dependencies.

Source-stated

Viljoen concludes that firms should control agents’ access and actions, test material uses and retain records, while authorities examine common dependencies and establish expectations for incident reporting and auditability.

Firms should control agents’ access and actions, test material uses and retain records sufficient to reconstruct consequential decisions. Authorities should explore AI-assisted system-wide stress testing

Source-stated

Viljoen says supervisors face unresolved questions about explanatory information and oversight at both firm and system level.

The unresolved supervisory questions are at both the firm and system level, starting with the appropriate explanatory information needed at each.

Source and contributor context

Bank of England · Publisher

The publisher is identified here. No individual author has been inferred.

Source media

Media retrieval status: unchecked.

Terms and references

Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.

Editorial provenance

Version 1. Publication ID: 97e0f393-9dea-0f39-7fb9-a07b9869e2d6.

Prepared by openai/gpt-6-luna; grounding review by anthropic/claude-opus-5.5.

Source check: passed by anthropic/claude-opus-5.5 on 2026-11-05T08:29:13.415Z. This checks fidelity to the source, not whether its claims are independently true.

Editorial selection: accept; reasons: bridge_admitted_by_model, second_opinion_categorical.

Observation: f9a6e37c5f6f1d2acadec5a8111db29cb06ff7bfc5ed7a7d59c50785a9edecc5. Source text hash: b0568a9f545f8754c61b6b88c2765714b8c3b75ee1ab9c25278207bd89359744.

passed · 2026-11-05T08:29:13.415Z · anthropic/claude-opus-5.5

Publication: 97e0f393-9dea-0f39-7fb9-a07b9869e2d6

attribution — pass: The reading attributes the post to Andreas Viljoen on Bank Underground, the Bank of England staff blog, and keeps his arguments attributed. A limitation correctly notes that the views are not necessarily those of the Bank or its policy committees.

Andreas Viljoen works in the Bank’s Policy and Strategy Division, International Directorate.

summary — pass: The summary states the central thesis, the two scenarios, the author's caveat that these are scenarios rather than forecasts, the proposed responses and the open supervisory question. It preserves the closing line. Finance terms such as margin calls and collateral appear only in context and do not block a general reader's understanding. The question follows from the source's stated unresolved issue.

It outlines two specific scenarios and their implications for financial authorities.

date — pass: originalPublished is 2026-10-01T13:00Z, which matches the reading's October 1, 2026 and the URL path. The page also shows 30/09/2026 beside 01/10/2026; this is plausibly a scheduled-post artifact and does not contradict the URL date. Nothing after publication is used, and the scenarios are reported as conditional rather than as outcomes. The later retrieval is disclosed in the limitations.

The scenarios in this post are conditional, not forecasts

support — pass: Each claim matches its source excerpt. The summary's statement about creating exposures without malicious intent or breaking a rule follows the source's conditional wording ('not necessarily malicious intent', 'need not involve a breach'). The reading adds no unsupported benefits or costs.

The concern is therefore not necessarily malicious intent or even a failure of formal compliance.

media — pass: No media is selected and no verified candidates were supplied, so leaving the media slot empty is appropriate.

Challenge or correct this reading

Send a correction or an opposing source with this reading’s URL. Disagreement and uncertainty can remain unresolved.