We Passed the Audit. We Failed the Agent Red Team. The Gap Killing AI Programs in Regulated Industries

A financial services customer had every checkbox: SOC 2, model cards, an AI governance committee, the works. Their agent failed our red team in eleven minutes. The talk will unpack the widening gap between AI compliance and AI security — why the frameworks your auditors love are systematically blind to the attacks that actually matter, and what a real defensive program looks like in 2026. I will share the specific findings from three regulated-industry engagements, the questions auditors aren't asking yet, and the controls that distinguish programs that look secure from programs that are. If you're building an AI governance function, signing off on a model risk policy, or sitting across from a regulator next quarter, this is the briefing you want before that meeting.