Flashy Financial is governed by three rules that are enforced rather than described. They are why a financial organisation is safe to expose to autonomous agents at all.
The doctrine
Agents suggest; humans consent
An agent may draft any value-moving action; only the holder approves it. No auto-approval, at any tier.
Delegation is attenuation
A grant is a strict subset of the granter’s authority; a child can never hold what its parent lacks.
Enforcement before minting
No authority is issued ahead of the thing that checks it. Identity that nothing enforces is theatre.