Europe’s Digital Operational Resilience Act is now an operating test for any AI that sits in a critical function: payments, lending, reporting, or the vendor that runs them. Accuracy is not the exam. Concentration risk, ICT third parties, incident reporting, and a kill switch that actually works are. If your agent cannot be halted by role, replayed, and failed over, it is not production-ready — no matter what the confusion matrix says.
Resilience is now a product requirement
DORA did not invent operational risk. It made it examinable in a way that catches AI programs off guard. A credit model that is 40 basis points better is still a concentration risk if it runs on one vendor, one region, and one prompt pipeline nobody can freeze. A payments agent that cannot be disabled by role is an incident waiting for a reporting clock.
US firms are not exempt in practice. Supervisors already ask the same questions under operational-resilience and third-party guidance. The label is European. The failure mode is global: an intelligent system with no graceful stop.
Four tests before an agent is a critical function
First: identity. Every agent class has a named owner, a system identity, and a mandate written in operations language, not research language. Second: halt. You can disable that class in seconds without taking down the rail. Third: replay. You can reconstruct the last N actions from the log, not from Slack. Fourth: failover. If the model host or the orchestration layer dies, the workflow degrades to a human queue — it does not silently pass.
Those tests sit on the Foundational Data Layer as much as on MLOps. If lineage and access control are optional, the kill switch is theatre.
Vendors are in scope, including yours
If a fintech, a BaaS partner, or a model host sits in a critical or important function, their incident is your incident. Contract for logs, for halt rights, and for a tested failover. Then exercise it. DORA’s point is not paperwork. It is whether the institution can still serve customers when the clever part of the stack misbehaves.
