Agent Marketplace CBA side, mock catalogue
Illustrative reference model

This is a CBA side illustration standing in for the catalogue the bank already runs, such as ServiceNow or Backstage. It is deliberately thin. What is being demonstrated is the handoff, not the catalogue.

Catalogue ag-partner-ap

Ledgerline Payables Assistant

A payables assistant built by Ledgerline Software, for business banking customers who keep their books in Ledgerline.

Catalogue: registered Identity: recognised by federation production version 3.0.2

Held here, by the catalogue

Registration

Catalogue id
ag-partner-ap
Business unit
Business Banking, Partner Integrations
Legal entity
Commonwealth Bank of Australia
Division
agentic
Accountable owner
Partner Integrations, Business Banking
Version
3.0.2
Environment
production
Repository
https://github.com/ledgerline/payables-assistant
Software bill of materials
sbom/ledgerline-payables-3.0.2.cdx.json
Risk assessment
RA-2301
Change reference
CHG-4420
Registered by
Partner Integrations, Business Banking

None of this is in the Trust Controller, and none of it needs to be. This is what a catalogue is for.

Held elsewhere, by the Trust Controller

Identity

Entity id
https://payables-assistant.partner-agents.example.io
Authorisation server
CommBiz Identity Platform
Capability role
cba.agentic.partner.assistant
May request
supplier_invoiceaccounts_read
May move money
no
Federation roles
cba.oidc.participantcba.agentic.membercba.agentic.partner.assistantcba.accounts.readercba.supplier.reader
Manufacturer
Partner Agent Provider
Signing key
held by Ledgerline Software, never by CBA
Lifecycle state
recognised by federation

An agent built by an external software vendor, entitled to read a business customer’s invoices and nothing else.

Published by the group against the capability role. The catalogue does not write it and cannot change it.

Shown here as a last known outcome. This app did not decide any of it, cannot change any of it, and would be misrepresenting the model if it implied otherwise.

What this agent calls

Integration

The protected resources this agent is built to reach. Being built to call a resource is not the same as being entitled to, which is what the capability role decides and the delegated envelope then narrows.

Supplier and Invoice API

svc-supplier

Accounts API

svc-accounts