This Is Ledger
Glossary

agentic systems

AI agents · autonomous AI agents · agentic AI · agentic workflows

AI deployments that perceive an environment, set sub-goals, and execute multi-step actions autonomously toward an objective, with limited human intervention between decision and execution. In finance they span agentic trading, research, and operations — distinguished from generative AI by their capacity to act rather than merely produce outputs.

How it works

An agentic system couples a reasoning model (often an LLM) with tools, memory, and a feedback loop: it decomposes a goal into tasks, calls APIs or execution venues, observes results, and iterates without per-step human sign-off. Autonomy sits on a spectrum from human-in-the-loop approval to fully unsupervised action, which is the axis that matters for risk.

Why it matters now

Regulators including the BIS, FSB, and IOSCO are flagging financial-stability risks from agentic systems with limited human oversight — correlated behaviour from shared models, herding, and a widened attack surface — making the autonomy/oversight trade-off a live 2025-2026 supervisory question.

Example

If multiple trading desks deploy agents built on the same foundation model and similar prompts, a common signal could trigger synchronised liquidation — an algorithmic flash-crash analogue. The May 2010 flash crash, driven by automated but non-agentic order routing, is the canonical cautionary precedent; agentic autonomy raises the stakes by removing the human pause between decision and execution.

How desks use it

  • Mapping desk-level AI deployments along the human-in-the-loop to fully-autonomous spectrum for risk control.
  • Stress-testing for correlated liquidation when multiple agents share a foundation model and prompts.
  • Assessing shared attack surface and herding exposure flagged by BIS, FSB, and IOSCO.

Key moves

  • 2010-05Flash crash from automated, non-agentic order routing — canonical cautionary precedent for autonomous execution.
  • 2025BIS, FSB, and IOSCO flag financial-stability risks from agentic systems with limited human oversight.

Frequently asked

What are agentic systems in finance?
Agentic systems are AI deployments that perceive an environment, set sub-goals, and execute multi-step actions autonomously toward an objective with limited human intervention. In finance they span agentic trading, research, and operations. They are distinguished from generative AI by their capacity to act on the world — placing orders, calling APIs, executing workflows — rather than merely producing text or analysis as output.
How do agentic systems differ from generative AI?
Agentic systems act; generative AI produces. A generative model returns an output — text, code, a forecast — and stops. An agentic system couples that model with tools, memory, and a feedback loop, decomposing a goal into tasks, calling execution venues, observing results, and iterating without per-step human sign-off. The defining axis is autonomy: whether a human pause sits between decision and execution.
Why do regulators worry about agentic systems?
Regulators worry that agentic systems with limited human oversight create new financial-stability risks. The BIS, FSB, and IOSCO have flagged correlated behaviour from shared foundation models, herding, and a widened attack surface during 2025–2026. Because agents act without a human pause between decision and execution, errors or shared signals can propagate faster than supervisors or circuit-breakers can intervene.
Can agentic trading systems cause a flash crash?
Agentic trading systems can plausibly amplify flash-crash dynamics by removing the human pause between decision and execution. If multiple desks deploy agents on the same foundation model with similar prompts, a common signal could trigger synchronised liquidation. The May 2010 flash crash — driven by automated but non-agentic order routing — is the canonical precedent that agentic autonomy makes more acute.
What does the autonomy spectrum mean for agentic AI risk?
The autonomy spectrum runs from human-in-the-loop approval to fully unsupervised action, and it is the single axis that governs agentic AI risk. At the supervised end, a human approves each action; at the autonomous end, agents execute multi-step plans alone. Greater autonomy raises throughput and removes the human checkpoint, which is precisely the trade-off supervisors are scrutinising in 2025–2026.

Related

Recently in the wire

By The Ledger DeskLast reviewed 2026-06-07