Agent Marketplace CBA side, mock catalogue
Illustrative reference model

This is a CBA side illustration standing in for the catalogue the bank already runs, such as ServiceNow or Backstage. It is deliberately thin. What is being demonstrated is the handoff, not the catalogue.

Catalogue ag-retail-servicing

Retail Servicing Agent

Answers retail customer servicing questions in the CommBank app from account information, and cannot move money.

Catalogue: registered Identity: issued production version 1.8.4

Held here, by the catalogue

Registration

Catalogue id
ag-retail-servicing
Business unit
Retail Banking, Customer Servicing
Legal entity
Commonwealth Bank of Australia
Division
agentic
Accountable owner
Servicing Automation, Retail
Version
1.8.4
Environment
production
Repository
https://github.com/commbank-agentic/retail-servicing-agent
Software bill of materials
sbom/retail-servicing-agent-1.8.4.cdx.json
Risk assessment
RA-2291
Change reference
CHG-4418
Registered by
Servicing Automation, Retail

None of this is in the Trust Controller, and none of it needs to be. This is what a catalogue is for.

Held elsewhere, by the Trust Controller

Identity

Entity id
https://agent-servicing.demo.cba.raidiam.io
Authorisation server
NetBank Identity Platform
Capability role
cba.agentic.servicing.assistant
May request
accounts_read
May move money
no
Federation roles
cba.oidc.participantcba.agentic.membercba.agentic.servicing.assistantcba.accounts.reader
Manufacturer
CBA Agent Provider
Signing key
kms://cba-au/agentic/retail-servicing
Lifecycle state
issued

Answers retail customer servicing questions from account information. It cannot move money, which is what the read only guardrail proves on screen.

Published by the group against the capability role. The catalogue does not write it and cannot change it.

Shown here as a last known outcome. This app did not decide any of it, cannot change any of it, and would be misrepresenting the model if it implied otherwise.

What this agent calls

Integration

The protected resources this agent is built to reach. Being built to call a resource is not the same as being entitled to, which is what the capability role decides and the delegated envelope then narrows.

Accounts API

svc-accounts