“How do we dare to do this in a bank? Well, we have the rules built in, and he doesn't have access to the customer data … And then he really tried to get the customer data. He tried to look at the … infrastructure and construct the connection string and all that, but we don't have secrets in our connection strings … managed identity to connect to the database, and his service principal … not have access to the database, so he couldn't get any data.”
Context. Asked how the team dares to run an autonomous agent in a bank, the speaker describes a test in which he tried to get the agent to hand over production customer data.
Hallstein Brøtan, Senior consultant, Novanet; developer on Nordic Corporate Bank's system. Works on the team that built and runs the agent he describes, so he is first-hand on how it works and what it produced; the pull request counts and cost are his own estimates from the team's own stats page, not audited, and his employer Novanet sells AI services.
How this was checked
Not yet checked by an independent second reader. The wording, speaker and date come from the source linked above; treat it as a lead until it is confirmed.
Two whisper passes of the original audio agree on every content word quoted: pass 1 is the full-audio transcription, pass 2 a separate re-cut clip with about 5 seconds of margin. YouTube's auto-captions were used only to navigate. Spoken filler and restarts are kept; every disagreement or likely mishearing is marked with …. Speaker: introduces himself in the talk; both transcripts garble his name, so it is taken from NDC Oslo's archived agenda page listing this talk under Hallstein Brøtan and from Novanet's staff page listing him as senior consultant. The video description says it was recorded at NDC AI in Oslo; the archived NDC Oslo agenda lists the talk, so the venue is given as NDC in Oslo. The agent has a Norwegian-sounding name that both passes spell differently each time, so every place it is named is cut with … . Cut: the story of how the speaker prompted the agent, between 'customer data' and 'And then he really tried'; the word before 'infrastructure' (pass 1 'bias of', likely a misheard product name); 'We use' against 'to use' before 'managed identity'; and 'did' against 'do' before 'not have access'. Normalization: both passes spell 'service principle'; written 'service principal' (the cloud term), since only the spelling differs. Punctuation and capitalization otherwise. Second reader (2026-11-08): dispute. Reviewer saw: All parts match except one word. The passage has 'his service principal … not have access'. Both whisper and captions say 'his service principle did not have access to the database' (captions: 'do not have access'). I could not hear the audio, so cannot confirm 'principal'. The Azure term is probably 'principal', but neither transcript supports it. The '…' parts cover omitted words such as 'did'.
How to cite this passage
Hallstein Brøtan (Nordic Corporate Bank), “How We Built an Autonomous Development Workflow at Nordic Corporate Bank”, NDC Conferences (YouTube); talk recorded at NDC in Oslo, 2026-06-29, at 23:32. https://www.youtube.com/watch?v=p8M8--12h1Y Archived at https://the-ai-record.com/passages/nordic-corporate-bank-agent-tried-to-get-customer-data-2026
Context. The speaker shows the team's monthly pull request chart and gives the figure for the first month after the agent went to production and the year-earlier figure.
Context. A consultant on the bank's two-person development team says when they started the coding agent and that they have not written code by hand since.
Context. Answering a question about taking the human out of the loop, the speaker says a person still approves the agent's pull requests and what would change that.
Nordic Corporate Bank