• SignalEBA published final guidelines on third-country branch authorisation (materiality 5/5), tightening the EU perimeter for non-EU banking establishments.
• SummaryOtherwise a quiet day: 1 signal, 0 critical alerts, 0 governance events, and 0 new scenario triggers recorded.

The EBA's finalisation of third-country branch authorisation guidelines is the highest-materiality item on the tape and directly affects any group operating EU branches from a non-EU parent — expect implementation planning, capital/liquidity self-sufficiency, and booking-model reviews to move up the agenda. Beyond this, the day is genuinely quiet on new inflow, but the open-item backlog tells a different story: five High/Medium emerging-theme alerts (Conduct, AML, Sanctions, Market Integrity, Cyber), a 17pp jump in Critical/High severity share, a 2.5× velocity spike, and two scenario-trigger matches against the AI credit-decisioning scenario remain unresolved. The quiet inflow is an opportunity to work down that backlog before the next surge.

1. 1Task Regulatory Affairs and Legal with a gap analysis of the EBA final third-country branch guidelines against current EU branch operating models, governance, and booking arrangements.
2. 2Use the low-inflow day to triage the open alert backlog — particularly the High-severity theme-emergence alerts on Conduct, AML, Sanctions and Market Integrity, and the severity-anomaly alert showing a 17pp rise in Critical/High share.
3. 3Convene Model Risk and ICT Risk to review the two open scenario-trigger matches against the AI Model Governance Failure in Credit Decisioning scenario, and confirm control readiness.
4. 4Close the four outstanding scenario-pack gaps (Cyber, Climate, Stablecoin, Operational Resilience & CTPs) so emerging themes have a landing scenario before signal velocity normalises upward.
5. 5Validate the trend-break and velocity-spike alerts with the analytics team to confirm they reflect real regime change rather than data artefacts before escalating to the Risk Committee.

• Whether the two open AI-scenario trigger matches escalate as further ESA communications on frontier AI ICT risks emerge.
• Persistence of the 17pp rise in Critical/High severity share — if it holds beyond a few days it signals a genuine risk-regime shift rather than noise.
• Trajectory of the four newly emerged High-severity themes (Conduct, AML, Sanctions, Market Integrity) — sustained volume would warrant dedicated horizon-scanning workstreams.
• Closure of the scenario-pack gap on Operational Resilience & Critical Third Parties, given ongoing EU supervisory focus.
• Whether the 2.5× velocity spike reverses or persists — today's single-signal day may be the leading edge of normalisation, or a lull before further acceleration.