APPLICATION / FINANCIAL INSTITUTIONS

Fraud, error, misuse and autonomous action cross one point before they become loss.

OATHOR names that point the Execution Boundary. Execution Control Infrastructure governs it for consequential financial action: whether a specific payment, transfer, settlement or operational instruction is cleared to proceed, independently of the system that produced it. Financial institutions are an early environment for the category, not its boundary.

One position

Existing controls each guard a source of loss. The point every source must cross needs its own control.

Identity, authorisation, transaction monitoring, fraud, sanctions, risk, compliance, cybersecurity and payment controls each remain necessary. Each addresses a source of risk. None makes an independent determination of whether a specific financial action is cleared to become consequence.

Execution Control Infrastructure does not replace the systems that detect loss. It governs whether consequential execution proceeds.

Independence from the provider

The provider of the acting system should not determine whether its own actions are cleared.

Financial institutions increasingly act through systems, models and agents supplied by third parties. Where the determination of whether an action proceeds rests with the same provider, the institution relies on that provider’s self-validation at the point of greatest consequence.

Execution Control Infrastructure requires the determination to sit outside the acting system, and outside the control of the function or provider that operates or supplies it. Third-party capability can grow. Accountable human authority remains effective over consequence.

Definition of independence

Record

Authority at the moment of consequence, recorded at the same moment.

After a consequential action, the question an institution must answer is who held authority over it at the moment it proceeded. Controls that record only what happened answer a different question.

Execution Control Infrastructure places the determination before consequence, and its record is created when the determination is made, not reconstructed afterwards. The institution can show what was determined, and when, for the specific action concerned.

Accountability reconstructed after consequence explains what happened. Accountability recorded at the moment of determination shows that control was present.

This is the Human Authority Layer in financial terms: accountable authority that remains effective at the point of consequence.

Supervisory Question Set Human Authority

Relevant environments

Where financial permission becomes financial effect.

Payments and treasury

The movement of funds and institutional assets, where an authorised instruction can become irreversible loss.

Digital asset custody and settlement

Custody, transfer and settlement instructions, where an action becomes final once it settles.

Automated execution

Rules-based, workflow-driven and AI-enabled actions that carry financial decisions into effect at machine speed.

Privileged operations

Operational activity carried out with elevated permissions, where a single action can affect critical systems.

Evaluation

Evaluation is proposed outside production, subject to each institution’s security approval.

Terms are set with each institution.

Institutional Contact Evidence Applications