Bank directors need enough training to turn risk appetite into agent authority and to challenge management on it. That means understanding depth, how certification earns and removes that depth, what the decision record lets the bank reconstruct, and which named people remain accountable. A half-day of focused literacy, tested, is the right starting point.
Why is a bank board's need different?
Banks already govern models. Model risk is supervised in most banking markets, operational resilience is a board matter under Basel principles, and credit scoring of individuals is listed as high-risk in Annex III of the EU AI Act. Agents add something new: they act. A credit model scores; an agent can draft the decision, prepare the disbursement and hold it for release. The board's question shifts from "is the model accurate?" to "how far may this agent act, and who stops it?"
How does board risk appetite become agent limits?
Every agent action meets five bounds at once: its role scope, its certificate, its sources, the bank's own limits and the platform guardrails. The lowest bound wins, and the verdict names it.
The bank's own limits are where the board's risk appetite lands. If the board sets a ceiling on unsecured lending that any one approver can sign, that ceiling becomes a limit the agent cannot exceed. Above it, the action is held for a named person. Directors should understand this chain well enough to ask where their appetite statement is enforced, at the moment of action, and where it is only written down.
What stays with people in a bank?
| Capability | Agent depth | What stays with a person |
|---|---|---|
| Reading statements and bureau data | 1 | Interpreting unusual patterns |
| Drafting a credit decision with reasons | 2 | Making the decision |
| Routine account servicing within limits | 3 | Anything outside the bank's limits |
| Disbursing or moving money | 4, only if certified | Releasing each held payment |
| Reversing a settled payment on Pryme's own rail | Withheld for every agent | Outside the agent entirely |
Withheld actions are a platform decision, not a bank setting. The bank narrows authority through its own limits; it cannot widen what the platform floor withholds.
How should directors test their own literacy?
Attendance at a briefing is weak evidence. A short test drawn from a question bank set in banking, scored by concept, shows which directors understand depth and which still think of agents as chatbots. Results by concept also tell the company secretary what the next briefing should cover. The board AI literacy briefing template gives a structure for that session.
The executives who lead regulated, multi-agent deployments need much more. Their competence is best shown by a capstone and a board review by independent assessors, the same idea of being examined by peers that directors apply to senior hires.
What evidence should reach the board?
Ask for a short, regular report that shows:
- Each agent at depth 3 or above, with its certificate date and expiry.
- Any failed certification run and the drop in depth that followed.
- Held actions released by people without a current credential (the answer should be none).
- A sample decision reconstructed from the append-only record, end to end.
- Coverage of training among approvers, by team.
That report lets a board challenge management on facts. Compare the questions a fintech board and a contact centre board should ask, and see the whole model in AI literacy and certification for people who work with agents.
Where the Academy fits
Pryme Intelligence Academy offers Foundations to directors, about four hours with a free badge stamped with the product version. Executives running regulated multi-agent deployments take the Architect track, which ends in a capstone and a board review with two Pryme assessors and is valid for 24 months.
Questions people ask
Should non-executive directors be certified?
They need literacy, not a professional certificate. Certification is for those who build, approve or lead deployments.
Who is accountable when an agent makes a wrong payment?
The bank and its named people. The record shows which bound allowed or held the payment and who released it, which is where accountability attaches.
How often should the board receive agent reporting?
At each risk committee meeting at least. Agent certificates lapse after 90 days, so a quarterly view already spans a full certification cycle.