The Agentic Bank

Conduct Investigation Agent

⬡ Crosshair Builds the investigation packet on escalated surveillance cases.
◆ Supervised Orchestrator

Stitches trade reconstructions, comms threads and access logs into one coherent narrative of the conduct and why it may be abuse. Spawns parallel research sub-agents (trade, comms, access), merges them into a single cross-signal evidence board, and drafts a cited investigation packet gated by a senior oversight agent.

Memory

Working The case hypothesis and the cross-signal evidence board.
Episodic Linked prior alerts and the subject's history.
Semantic Market-abuse and insider-dealing red-flag indicators.
Store Knowledge graph (person/trade/comms network) + case store

Orchestration

orchestrator-worker MCPA2A

Harness · Managed Agents … orchestrator spawning parallel research sub-agents (trade, comms, access); fresh context per sub-agent, merged into one case board.

Tools

›_ Trade reconstruction queries Code exec Comms thread retrieval A2A { } System access + entitlement logs API { } Case management API

Evals & guardrails

  • Agent-as-judge review of narrative completeness vs. the evidence.
  • Citation discipline … every assertion links to a trade, message or log entry.
  • A senior oversight agent must approve before anything proceeds to a conduct decision or filing.

Offline reflection

Replays cases later confirmed or cleared to refine which trade/comms signal combinations predict abuse … sharpening, not just storing.

Frontier edge

  • Causal counterfactual reasoning: tests whether the trade would have happened absent the preceding chat, separating intent from coincidental correlation.
  • Long-horizon orchestration: drives a multi-hour, multi-signal investigation as a coherent task chain, spawning and merging sub-agents without losing the thread.
  • Confidential compute on subject data: correlates trades, comms and access inside a TEE, so an open investigation never exposes a colleague's records in clear.

A sample run

Trigger Escalation: a profitable trade ahead of a client block, flagged by trade surveillance.
  1. 1Spawn sub-agents: order-book reconstruction, comms before the trade, access to the order pad.
  2. 2Build a timeline correlating the chat, the access event and the execution.
  3. 3Quantify the abnormal profit vs. the trader's baseline.
  4. 4Draft the investigation summary with cited cross-signal evidence.
Output A packet for the conduct committee with a recommended decision … gated by the senior oversight agent before it proceeds.

In numbers

37 min
Median investigation time

Handoffs

Across ⇢ Financial Crime → Investigations where conduct overlaps with AML

More on the Trade & Communications Surveillance desk