ABS Core
Banking

Banking Overview

Sovereign Mode for Regulated Financial Institutions

ABS Core: Banking Edition

The Banking Edition is the enterprise-grade, sovereign deployment of ABS Core designed for:

  • Central Banks & Regulators (BACEN, SEC)
  • Financial Institutions (Banks, Fintechs)
  • High-Assurance Environments (Defense, Gov)

Sovereign Mode

Unlike SaaS AI wrappers, the Banking Edition runs 100% On-Premise (or Private VPC). No data ever leaves your controlled infrastructure.

Key Features

  1. Air-Gapped Execution: Run LLM agents without external API calls (using local models like Llama 3 or DeepSeek via Ollama).
  2. Financial Engine: Native PIX integration, anti-fraud barriers, and real-time risk analysis.
  3. Immutable Ledger: All agent decisions are hashed (SHA-256) and stored in a tamper-proof audit log.

Architecture

┌──────────────────────────────────────────────────────┐
│               FINANCIAL INSTITUTION (On-Prem / VPC)  │
│                                                      │
│  ┌─────────────┐    ┌────────────────┐    ┌───────┐  │
│  │ AI Agent(s) │───▶│  ABS Sentinel  │───▶│  LLM  │  │
│  │ (CrewAI /   │    │  (Policy Gate) │    │(Local │  │
│  │  LangGraph) │◀───│  WASM Kernel   │    │ /API) │  │
│  └─────────────┘    └───────┬────────┘    └───────┘  │
│                             │                        │
│         ┌───────────────────┼──────────────┐         │
│         │                   │              │         │
│  ┌──────▼──────┐  ┌─────────▼──────┐  ┌───▼──────┐  │
│  │   Cortex    │  │  Immutable     │  │  Vault   │  │
│  │  (Memory /  │  │  Ledger (D1 /  │  │  (JIT    │  │
│  │   Context)  │  │   Postgres)    │  │  Creds)  │  │
│  └─────────────┘  └────────────────┘  └──────────┘  │
│                                                      │
│  Polygon L2 anchor (async, non-blocking) ──────────▶ │
└──────────────────────────────────────────────────────┘

The architecture is composed of three layers:

  • Sentinel: Policy enforcement point (PEP). Intercepts every agent action and evaluates it against versioned YAML policies before execution.
  • Cortex: State management and memory. Tracks agent context, risk scores, and conversation history across sessions.
  • Vault: Secret management and key rotation. JIT credential injection ensures no agent code ever touches raw API keys.

Regulatory compliance

The Banking Edition ships with pre-audited policy packs for:

RegulationCoveragePolicy Pack
BACEN 4.893Data residency, audit trailpolicy-br-bacen
LGPDPII redaction, consent loggingpolicy-br-lgpd
PCI-DSSCard data protection, access controlpolicy-pci
HIPAAPHI isolation, break-glass auditpolicy-hipaa
SOC 2 Type IIContinuous control monitoringpolicy-soc2

All policy packs are signed, versioned, and eligible for Certified Vault liability coverage.

PIX Governance Engine

ABS Core includes native PIX integration for Brazilian financial institutions. Every PIX transaction initiated by an AI agent passes through the Governance Kernel before being submitted to the SPI (Sistema de Pagamentos Instantâneos):

Agent intent → [CHI risk assessment] → [Policy evaluation (WASM)]
             → [PIX pre-flight check] → Submit to SPI
             → Receipt → [Immutable ledger] → [BACEN audit export]

Suspicious patterns blocked by default:

  • Transactions to unknown recipient PIX keys from new agents (first 24h)
  • Amounts exceeding configurable per-agent daily limits
  • Sequential transfers to the same destination within cooldown windows
  • Transfers initiated outside business hours without explicit authorization

Deployment options

ModeInfraData stays inCompliance
SaaS ManagedCloudflare Workers + D1Cloudflare Brazil PoPsLGPD, BACEN advisory
Private VPCYour AWS/GCP/Azure accountYour VPCFull sovereignty
Air-GappedOn-premise bare metalYour data centerBACEN 4.893 compliant

For air-gapped deployments, see the On-Premise VPC Strategy guide.

Get started

On this page