The model can ask; the customer decides: building a guarded AI banking agent

Design trade-offs from building an AI banking agent on MCP that can't move money without the customer, and how it held up against 50 scripted attacks and an adaptive LLM red team.