On the latest Bits & Banks, Brynn Ammon, President of Credit Union Solutions at Jack Henry, unpacked how agentic AI is reshaping core banking, from Symitar's role as the system of record to where human oversight still has to sit as agents start working across systems.

Key ideas:

• Match autonomy to risk, not convenience — Marketing copy and PowerPoint updates can run fully automated, but credit decisioning, wire transfers, and fraud review still require a human to sign off on the recommended action before it moves.
• Identity is the real access control — As agents start working across systems of record, Jack Henry is building tight RBAC around agent identities, so every action can be traced back to who told the agent what to do once a regulator asks.
• Governance built the consulting practice — Clients watched Jack Henry roll out AI internally under a "responsibly bold and balanced" approach and asked for help doing the same, turning internal experience into a formal AI consulting arm.
• The core stays the lighthouse — Symitar remains the system of record even as agents span core, LOS, and AML/KYC systems; opening data through API and MCP access happens inside guardrails, not instead of them.
• Guardrails get finished in production — Some control gaps only surface once something fails live, so production trace and continuous audit matter as much as the controls set up in advance.