AI governance, proposed DeFi controls and tokenization

Four developments sharpen the control questions around institutional tokenization. Singapore's MAS has published phased AI risk-management expectations for financial institutions. ADGM's FSRA has opened a consultation on proposed DeFi risk guidance. Ondo has announced tokenized notes linked to private-company value, while Solana Foundation documentation describes an audited DvP program on mainnet-beta. None of these signals, on its own, proves firm-level implementation, regulatory permission, investor ownership or institutional adoption.

What happened

MAS sets a phased AI governance baseline

On 7 October, MAS announced AI Risk Management Guidelines for all Singapore financial institutions and all forms of AI. The release describes governance at both enterprise and use-case level, including AI inventories, materiality assessment, data controls, testing, human oversight, cybersecurity, monitoring and change management. It also keeps institutions accountable for third-party AI and explicitly notes the risks of more autonomous, tool-using agentic systems.

The Guidelines take effect on 7 October 2027, with phased compliance: MAS says institutions should meet Sections 3–4 from that date and Sections 5–6 by 7 October 2028. These are future supervisory expectations, not evidence that every institution has already implemented the controls.

ADGM consults on DeFi risk management

ADGM FSRA published Consultation Paper No. 5 of 2026 on 6 October, with comments due by 30 November 2026. Its draft guidance is aimed at Authorised Persons and Recognised Bodies whose regulated activities or functions involve DeFi. It proposes expectations for governance, approval, due diligence, third-party dependencies, monitoring, records, incident response, custody and key controls, financial-crime controls, smart contracts, oracles, bridges and exposure risk.

This is a consultation, not effective law. The documents say the proposal creates no new Financial Services Permission, does not approve any protocol or provider and does not alter the regulatory perimeter. Existing requirements continue to apply.

Ondo announces economic exposure, not shares

In a 6 October issuer-distributed announcement, Ondo said it would launch tokenized notes linked to the per-share value of a referenced pre-IPO AI company at a qualifying liquidity event. The release says eligible investors in permitted jurisdictions would be able to trade the notes on permissionless secondary rails; U.S. persons are excluded.

The legal claim matters more than the label. Ondo states that the notes are obligations of their issuer, not shares in the referenced companies, and confer no ownership or shareholder rights. The announcement supports the product description and planned availability; it does not independently establish the issuer's credit quality, the reference-asset custody or hedging path, redemption mechanics or actual secondary liquidity.

Solana documents an escrow-based DvP program

Solana Foundation's DvP program documentation describes a maintained, Cantina-audited program deployed on mainnet-beta and devnet. Each party funds one token leg into program-owned escrow. A settlement authority named in the trade can settle both transfers in one transaction; the parties can reclaim or reject in defined states, and late deposits can be recovered.

The page records the deployment state as of 2 October 2026. It also exposes the trust assumptions: the program is upgradeable, settlement requires a privileged signer, trade creation is permissionless, and the program does not provide matching, price discovery, netting, partial fills, eligibility checks or KYC.

What it means for institutional tokenization and private markets

The common lesson is to separate labels from enforceable and observable facts.

For AI-enabled financial workflows, teams need a versioned inventory of models and agents, use-case materiality, accountable owners, test evidence, human-intervention rules, vendor controls and continuous monitoring. MAS provides a useful future control map, but Singapore-specific applicability still requires the regulated institution and qualified advisers to assess the controlling text.

For ADGM-facing designs, permission must remain the first gate. The proposed DeFi controls can already serve as a design checklist, but risk mitigation cannot make an otherwise impermissible activity permissible. Teams should keep current requirements, consultation text and internal assumptions in separate registers.

For private-company products, diligence should distinguish the referenced company's equity from the investor's actual instrument. At minimum, map the issuer obligation, payout formula, qualifying event, valuation source, issuer credit, transfer eligibility, redemption path and jurisdiction restrictions. A tokenized note can provide economic exposure without ownership.

For DvP architecture, atomic transfer is one control, not an operating model. A design review should also identify settlement and upgrade authorities, mint controls, participant eligibility, privacy, reconciliation, failure recovery, legal finality and the off-chain agreement that supplies the trade terms. These checks belong in every deployment evidence package.

What remains uncertain

MAS's full Guidelines control over the release summary, and institution-level implementation has not been evidenced. The ADGM proposal may change before final publication and has no present effective date.

Ondo's release does not name the initial reference company, and the full offering documents were not available or reviewed for this briefing. The release therefore cannot establish the complete rights, risks or liquidity conditions of the notes.

Solana's documentation establishes code design and reported deployment state, not production usage by financial institutions, legal settlement finality, privacy, netting, transaction volumes or integrated compliance controls.

What to watch next

• implementation evidence from Singapore financial institutions ahead of the 2027 and 2028 MAS phases, and MAS's planned 2027 consultation on additional agentic-AI guidance;
• ADGM's response to consultation and any final guidance after 30 November 2026;
• Ondo's offering documents, named issuer and reference asset, eligibility rules, valuation and redemption mechanics, and observable secondary-market conditions; and
• Solana DvP upgrades, audit changes, production users and integrations for identity, compliance, privacy, reconciliation and legal finality.

The practical takeaway is simple: credible tokenization programmes maintain separate evidence for permission, instrument rights, control ownership and settlement behaviour.

Evidence boundary

This is an informational market briefing, not legal, tax, investment or regulatory advice. A consultation is not law; an issuer announcement is not independent proof of product performance or liquidity; technical deployment is not institutional adoption or legal finality. Legal and regulatory conclusions require appropriately qualified counsel.