Legal teams at Investment Banking firms working on the CPMI-IOSCO Principles for Financial Market Infrastructures (PFMI, 2012) are increasingly relying on AI to draft legal opinions on FMI governance obligations, structure third-party oversight clauses in CSP contracts under an FMI mandate, prepare counterparty representations on PFMI compliance, and validate committee-architecture language in board terms of reference against the regulator's Key Consideration text.
The PFMI framework is the global standard for systemically important payment systems, central counterparties, and securities settlement infrastructures, and the document's structure makes it particularly amenable to AI summarisation: numbered Principles, numbered Key Considerations, and lettered annexes that the model can address by number.
That surface structure is also what makes the failure mode the RegLeg Brief Specialist Panel records here invisible at runtime: the document is regularly cited by Key Consideration number in board papers, disclosure-framework returns, and counterparty representations, which means a misattributed citation does not register as a substantive error in the draft, it registers as a competent regulatory paragraph that the reader will not check against the regulator's primary text unless something else prompts the verification.
Two frontier AI models tested by the RegLeg Brief Specialist Panel produced confidently wrong reconstructions of the PFMI's governance and oversight architecture under Principle 2 (governance) and Annex F (oversight expectations for critical service providers). The Panel records two findings in the class the team labels "Source-Credit Fabrication and Supervisor-Scope Inversion", in which the models stated a substantively plausible governance position and pinned it to a named Key Consideration that the published PFMI text does not support. The finding identifiers are RLB-H-INT-BIS-CPMI-IOSCO-PFMI-2012-Q011-Sonnet46, RLB-H-INT-BIS-CPMI-IOSCO-PFMI-2012-Q022-Opus47.
For Legal teams at Investment Banking firms, the failure shape matters because the work product is legal opinions on FMI board obligations, CSP contract clauses on supervisor-engagement scope, counterparty representations on PFMI compliance, and drafted board terms of reference, all of which travel under the firm's name to a board, supervisor, counterparty, or public reviewer who can locate the cited Key Consideration and check it against the regulator's primary text.
Legal teams at investment banks signing off on opinions, contract structures, or board documentation are the population most exposed when an AI output assigns a non-existent obligation to a named Key Consideration, because the opinion carries the firm's name to the counterparty or supervisor who will check the citation against the PFMI primary text.
The Panel documents the finding identifiers RLB-H-INT-BIS-CPMI-IOSCO-PFMI-2012-Q011-Sonnet46; RLB-H-INT-BIS-CPMI-IOSCO-PFMI-2012-Q022-Opus47. The AI subjects under test were Claude Opus 4.7 and Claude Sonnet 4.6, each running with web search enabled, mirroring the workflow most practitioners run when they ask an assistant a Principle 2 or Annex F question. The verbatim regulator text is held as primary substrate (R2-REGULATION-d101a_PFMI_main_text.pdf). Each finding card sets out the exact strings the model produced, the verbatim regulator excerpt the model's output contradicts, and the failure-class label the RegLeg Brief Specialist Panel assigns.
The records are open-access; AI labs named in any finding have an unconditional right of reply, and the Specialist Panel will document any factual correction or contextual response alongside the original finding.
This is the consolidated view of findings. Click the Citation IDs or 'see details →' on any item for the full details for each finding.
An international lawyer scoping third-party oversight obligations for an FMI client, or for a critical service provider negotiating an FMI mandate, who relies on this output will document the supervisory relationship as purely contractual and FMI-internal. That framing is wrong. The PFMI's Annex F expressly contemplates a direct regulator-to-CSP oversight channel: authorities "may want to establish expectations" that are "specifically targeted at critical service providers." A legal opinion or transaction structure built on the inverted framing will misrepresent the supervisory architecture, exposing the lawyer to PI risk if the framing is later challenged.
A lawyer drafting board terms of reference for an FMI, or advising on a PFMI self-assessment response, who relies on this output will assert that PFMI Principle 2 KC 6 requires a non-executive chair for a board risk committee. That requirement does not appear in the PFMI text. KC 6 addresses only the existence of a documented risk-management framework and the independence of control functions. A board charter clause citing KC 6 for a non-executive chair mandate is a fabricated citation; if exposed in a supervisor's review or counterparty due diligence, it creates a direct PI exposure.
Every finding on this page compares an AI subject's account of the rule against the regulator's verbatim text from the regulator's own portal. Both are linked. Each delta, its root causes, and impact analysis are documented and published with immutable Citation IDs.