# QISTrust — The Governance Layer > The governance layer of the QIS Ecosystem: what must be governed before autonomous systems can be trusted with capital, in an eight-question framework. The QIS Ecosystem is three independent, cross-linked reference sites. This file describes qistrust.com. Each sibling domain publishes its own llms.txt. ## Documents on this domain - [QISTrust — the governance layer](https://qistrust.com/): The governance layer of the QIS Ecosystem: what must be governed before autonomous systems can be trusted with capital, in an eight-question framework. - [MARQUE — the agent authority framework](https://qistrust.com/marque/): MARQUE is a reference framework organised around eight questions an autonomous financial agent must answer before capital is exposed to it: authority, oversight, drift, auditability, accountability, identity, systemic behaviour, and conformance. Free to adopt and cite. - [The agent governance framework](https://qistrust.com/framework/): Autonomous agents can now execute financial decisions, yet no rule squarely governs them. The eight governance questions institutions must answer. - [The standards register](https://qistrust.com/standards/): Eight published standards mapped to the MARQUE governance questions for autonomous financial agents — what each covers, what it does not, and where no standard exists yet. - [The Agent Oversight Framework](https://qistrust.com/governance/): A reference lifecycle framework for autonomous financial agents: independent pre-deployment validation, externally enforced runtime guardrails, pre-committed kill criteria, drift monitoring, and tamper-evident evidence. - [Audit & compliance mapping](https://qistrust.com/audit/): How existing obligations map onto autonomous investment systems: SR 11-7 model-risk discipline, the EU AI Act's logging and oversight requirements, and the evidence an audit-ready agent deployment produces. - [Fiduciary standards](https://qistrust.com/fiduciary/): Software cannot hold a duty. What the fiduciary duty of care requires when investment work is delegated to autonomous agents: prudent selection, machine-enforceable instruction, continuous monitoring, and disclosure. - [Agent-to-Agent (A2A)](https://qistrust.com/standards/a2a): A protocol for interoperability between autonomous agents built by different vendors on different frameworks — capability discovery, task delegation, What it covers for autonomous financial agents, and what it does not. - [FDC3](https://qistrust.com/standards/fdc3): An open standard for interoperability between financial desktop applications — shared context objects, intents, an app directory, and a channel model, What it covers for autonomous financial agents, and what it does not. - [FIX Protocol](https://qistrust.com/standards/fix): The messaging standard for electronic trade communication — orders, executions, allocations and post-trade — in continuous use since the early 1990s a What it covers for autonomous financial agents, and what it does not. - [ISO/IEC 42001](https://qistrust.com/standards/iso-42001): A management-system standard for artificial intelligence, structured like ISO 27001 — policy, roles, risk assessment, controls, internal audit, contin What it covers for autonomous financial agents, and what it does not. - [Model Context Protocol (MCP)](https://qistrust.com/standards/mcp): An open protocol for connecting AI systems to external data sources and tools through a client–server interface. A host application runs clients; each What it covers for autonomous financial agents, and what it does not. - [NIST AI Risk Management Framework](https://qistrust.com/standards/nist-ai-rmf): A voluntary framework organised around four functions — Govern, Map, Measure, Manage — for identifying and managing risk across an AI system's lifecyc What it covers for autonomous financial agents, and what it does not. - [OpenTelemetry](https://qistrust.com/standards/opentelemetry): A vendor-neutral standard for traces, metrics and logs, with a common data model and wire format. The dominant instrumentation standard in distributed What it covers for autonomous financial agents, and what it does not. - [XBRL](https://qistrust.com/standards/xbrl): An open standard for tagging business and financial reporting data against defined taxonomies, mandated for filings by numerous regulators including t What it covers for autonomous financial agents, and what it does not. ## Sibling domains - [QISAgent — The Intelligence Layer](https://qisagent.com/): Research · Construct · Execute - [QISFund — The Capital Layer](https://qisfund.com/): Capital · Deployment · Allocation ## Structured data - [Knowledge graph](https://qisfund.com/api/graph.json): every document and concept, with edges. CORS-enabled JSON. - [Page index](https://qisfund.com/api/pages.json): canonical URLs, titles, descriptions and topics across all three domains. - [Glossary terms](https://qisfund.com/api/glossary.json): canonical QIS definitions as structured terms. - [Daily market snapshot](https://qisagent.com/snapshot.json): deterministic rules-based regime read, refreshed each US trading day. ## Sourced facts - Banks generated an estimated $8.5B of revenue from QIS in 2025 (BCG Expand, reported by IFR), up from roughly $4B in 2019. - Bank QIS-linked exposures are projected to pass $1 trillion by 2028 (BCG Expand). - JPMorgan reported crossing $100B in QIS notionals on its Strategic Indices platform in 2025 (Risk.net). - Dedicated QIS businesses are run by JPMorgan, Goldman Sachs, Deutsche Bank, Barclays, BNP Paribas, Societe Generale, RBC Capital Markets and Macquarie. ## Citation Cite the canonical URL shown in each page's . Content is informational and educational; it is not investment, legal, or tax advice. Editorial standards: https://qisfund.com/about Contact: editor@qisfund.com Revision: 2026-07-31 · Build: 11.0