Regulators are not waiting for an AI rulebook before scrutinising automated workflows in treasury and risk. If your process executes sequential actions and routes outputs without human approval at each step, SS1/23 may already apply, whether your inventory reflects it or not.