JPMorgan's refusal to grant third-party AI agents direct account access redraws the open banking boundary at the infrastructure layer, not the regulatory one — establishing that credential delegation and permissioned data sharing do not automatically extend to agentic execution rights. For issuer processors and network operators, this sets a de facto access control precedent that will force AI orchestration platforms to route through bank-sanctioned APIs or payment rails rather than bypassing them entirely.