Finance

Revolut disclosed customer information after fraudulent requests arrived through a legitimate government email domain. The incident shows why authentication is not institutional authority—and why the same distinction matters for AI agents acting through valid enterprise credentials.

GAO continues to report material weaknesses in reconciling intragovernmental transactions and demonstrating that consolidated U.S. government financial statements are consistent with underlying entity records. The case shows that records become institutional memory only when cross-entity relationships can be reconstructed and reconciled.

Mandiant reported an AI agent that made more than 15,000 repeated API calls, incurred about $50,000 in cloud costs, and locked billing databases—showing why authority must change when failure state changes.

GAO found that EXIM did not consistently use authoritative federal debt data available through SAM and Treasury’s Do Not Pay system before approving loan guarantees. The case shows that information availability is not enough: required evidence must be admitted into the decision context across every approval path.

PBGC OIG found potential fiduciary-breach cases fragmented across a spreadsheet, case-management locations, notes, and SharePoint, leaving no consistently maintained authoritative case state. The case closely illustrates GovKM’s distinction between repository location and institutional continuity.

FDIC OIG found that some emulated cyber tests did not generate notable events and recommended stronger detection engineering, access controls, and incorporation of testing lessons into response plans. The case demonstrates both a Source-to-Evidence detection failure and a Record-to-Institutional-Memory learning failure.

GAO found that banks could disclose internal risk thresholds without disclosing that those thresholds had been breached or how management responded. The case shows how authoritative internal evidence can fail to propagate into the downstream record used by investors and other external decision-makers.

PBGC OIG found completeness and accuracy problems in obligation and outlay information reported to USAspending.gov, including contract actions not properly reflected. The case shows how a completed institutional transaction can fail to propagate into the downstream record later used for oversight, transparency, retrieval, and reuse.