The word agent gets used for anything with a loop and an API key. In a finance system it has to mean something narrower.

The control model

Every Ledger agent runs inside four walls: a scoped mandate (one job, named), explicit thresholds (what it may post without you), a full evidence trail (every action sourced and reversible), and graduated autonomy (trust is earned per task, never assumed).

This is the boring part of AI, which is exactly why it is the part your auditors will read first.