QIS-T-500 QISTRUST.COM THE GOVERNANCE LAYER REV 2026-08-28 · BUILD 44
The Governance Layer · MARQUE v1.0

MARQUE.

A letter of marque was a commission authorizing a private party to act with delegated sovereign authority — defined scope, defined term, and accountability running back to the grantor. It is the historical instrument for the problem autonomous finance has not yet solved: how to delegate consequential authority to an actor you do not directly control, and remain answerable for what it does.

MARQUE is a reference framework organized around eight questions an autonomous financial agent must be able to answer before capital is exposed to it. It is free to adopt, free to cite, and versioned so that conformance means something specific.

The Position

Existing regulation governs models. None of it governs an agent with a mandate.

Model risk management asks whether a model is fit for purpose. Disclosure regimes ask what was told to whom. Conflicts rules ask whose interest was served. All three assume a human decides and a model advises.

An autonomous agent inverts that. It researches, constructs, and executes — and the human contribution moves upstream, into the grant of authority itself. That grant is the governed object, and almost nothing has been written about it.

MARQUE does not attempt to be a control framework, a certification scheme, or a substitute for regulation. It is a question set: the eight things that must have answers, stated precisely enough that the absence of an answer is visible.

The claim

An institution that cannot answer all eight for a given agent has not deployed a governed system. It has deployed an ungoverned one with documentation.

The Framework

Eight questions autonomous finance must answer.

Each question is mapped to the published standards that touch it — and, more usefully, to the ones that do not.

01
AUTHORITY

Authority

What is the agent permitted to commit, and who granted that?

Why it binds

Every autonomous action is an exercise of delegated authority. The grant has to be explicit, bounded, revocable, and recorded — or there is no principled answer to what the agent was allowed to do.

Answered operatively byThe Agent Authority Grant

02
OVERSIGHT

Oversight

Who is accountable in the interval between decision and review?

03
DRIFT

Drift

How is behavioral change detected before it becomes loss?

Why it binds

Models degrade silently. The failure mode is not a wrong answer, it is a gradually less right one, arriving faster than quarterly review.

Answered operatively byThe Kill-Switch Covenant

04
AUDITABILITY

Auditability

Can a decision be reconstructed months later, exactly?

Why it binds

Not logged — reconstructed. Same inputs, same model state, same output. Anything less is a narrative about a decision, not the decision.

05
ACCOUNTABILITY

Accountability

When it goes wrong, who answers?

Why it binds

Liability does not distribute itself across a stack. Someone is the named person, and the framework has to say who before the loss, not after.

06
IDENTITY

Identity

What is the agent, legally, and to whom does its output belong?

Why it binds

An agent that generates a strategy raises a joint-authorship question wearing a fintech costume. Nobody has resolved who owns the output, and chain of title for the model behind it is largely unestablishable today.

Answered operatively byModel Provenance Representations

07
SYSTEMIC BEHAVIOR

Systemic behavior

What happens when many agents converge on the same trade?

Why it binds

Correlated automated behavior is a market-structure question, not a firm-level one. Individually compliant agents can be collectively unstable.

Answered operatively byThe Stressed Conditions Annex

08
STANDARDS & INTEROPERABILITY

Standards & interoperability

What does conformance actually mean here?

Why it binds

Without a conformance definition, 'AI governance' is a claim rather than a property. That is what this framework exists to fix.

Answered operatively byThe Schedule Set

Conformance

What conformance means, and what it does not.

A system is MARQUE-conformant at v1.0 when it can produce, on request and without preparation, a documented answer to each of the eight questions for a named agent in a named deployment.

That is a deliberately low bar and it is met by almost nothing today. It says nothing about whether the answers are good. It is a completeness test, not a quality test — and completeness is the thing currently missing.

  • Free to adopt. Cite the version. No permission required, no fee, no registration.
  • Not a certification. Nobody is accredited to assess MARQUE conformance, and any claim otherwise is unauthorised.
  • Versioned. The question set will change. A conformance claim without a version is meaningless.

MARQUE is an editorial framework published by the QIS Ecosystem. It is not legal advice, it is not a regulatory standard, and it has no official status with any authority.