{
  "apiVersion": "v1",
  "passage": {
    "id": "nordic-corporate-bank-agent-tried-to-get-customer-data-2026",
    "text": "How do we dare to do this in a bank? Well, we have the rules built in, and he doesn't have access to the customer data … And then he really tried to get the customer data. He tried to look at the … infrastructure and construct the connection string and all that, but we don't have secrets in our connection strings … managed identity to connect to the database, and his service principal … not have access to the database, so he couldn't get any data.",
    "context": "Asked how the team dares to run an autonomous agent in a bank, the speaker describes a test in which he tried to get the agent to hand over production customer data.",
    "speaker": "Hallstein Brøtan",
    "speakerId": "hallstein-brotan",
    "speakerUrl": "https://the-ai-record.com/people/hallstein-brotan",
    "speakerLevel": "practitioner",
    "role": "Senior consultant, Novanet; developer on Nordic Corporate Bank's system",
    "voice": "person",
    "organization": "Nordic Corporate Bank",
    "organizationId": "nordic-corporate-bank",
    "organizationUrl": "https://the-ai-record.com/organizations/nordic-corporate-bank",
    "aiVendor": false,
    "work": {
      "title": "How We Built an Autonomous Development Workflow at Nordic Corporate Bank",
      "type": "talk",
      "date": "2026-06-29",
      "publisher": "NDC Conferences (YouTube); talk recorded at NDC in Oslo",
      "locator": "23:32",
      "url": "https://www.youtube.com/watch?v=p8M8--12h1Y"
    },
    "grade": "B",
    "gradeMeaning": "The organization's own post, paper or talk.",
    "verification": {
      "status": "reported",
      "meaning": "Not yet confirmed against the source by an independent second reader."
    },
    "topics": [
      "agent-permissions",
      "regulated-ai",
      "security"
    ],
    "functions": [
      "engineering",
      "security",
      "risk"
    ],
    "figures": [],
    "url": "https://the-ai-record.com/passages/nordic-corporate-bank-agent-tried-to-get-customer-data-2026",
    "json": "https://the-ai-record.com/api/v1/passages/nordic-corporate-bank-agent-tried-to-get-customer-data-2026.json"
  },
  "notice": [
    "Every passage is reproduced word for word from the cited source.",
    "Check the verification status: \"reported\" means not yet confirmed by an independent second reader.",
    "Organizations flagged aiVendor sell AI tools or services and have a reason to publish flattering numbers.",
    "An empty result means the archive holds nothing on it, not that nobody has said anything."
  ]
}