This week, everybody discovered who actually holds the rulebook. Apple rewrote Safari's rules and The Trade Desk found out from its own bid logs. A New Mexico jury rewrote Meta's privacy promises one resident at a time. The IAB Tech Lab published a rulebook and asked for comments. IAB Europe found agents moving money with almost nobody trained to stop them. And WPP's chief integrator decided the best place to build is outside WPP.

The pattern is simple. The companies that write the rules keep winning, and the companies that follow them keep filing bug reports.

iOS 27 shipped September 14, and since then The Trade Desk has been unable to serve ads into Safari on updated Apple devices. WebKit expanded its blocklist of tracking and ID-matching domains, sweeping in Unified ID 2.0, ID5, Audigent, LiveRamp and Permutive. Those are identity businesses, and Apple has never hidden what it thinks of identity businesses. But the list also caught adsrvr.org, and TTD engineering director Ian Meyers told WebKit's bug tracker that domain is the DSP's core ad request and delivery domain, "not identity." Translation: this is not a targeting haircut. It is the front door.

Here is the part that should keep Jeff Green's team up at night. TTD's own bug report included a yahoo.com ad call where its bids were blocked and Google's, running through the old ad.doubleclick.net domain, went through clean. Apple's privacy manager John Wilander has said he will report back "if and when" there is anything to test. Apple has done this before to Meta and Criteo. The best case is an accident Apple fixes. The worst case is that the privacy blocklist that can find adsrvr.org somehow cannot find Google, and the open web's biggest independent buyer learns that Safari is a walled garden with Apple holding the key and Google holding a spare.

New Mexico asked Judge Francis Mathew this week to fine Meta between $35 billion and $40 billion, a week after a jury found the company deceived users about privacy and content moderation. The jury took Mark Zuckerberg's 2010 promise that users "have control over how your information is shared" and counted it once for every one of New Mexico's 2.1 million residents. Total violations found: more than 43 million, under a law that allows up to $5,000 each. Do that math and the statutory ceiling sits north of $215 billion, which makes the state's ask look almost polite.

Meta's lawyer called the penalty "astronomical" and unconstitutional. Meta's spokesperson, responding to the verdict, said the company is committed to giving users "control over their data." Read that twice. The defense is the exact sentence the jury just found deceptive. The state's attorney said the court should speak to Meta in the only language it understands, which is money. No ruling yet, but every privacy promise in every platform's help center just got a per-resident price tag.

The IAB Tech Lab's new Programmatic Governance Council released Programmatic Standard Practices v1 for public comment through October 16. CEO Anthony Katsur says the goal is a practical framework for using the standards that already exist. That is an honest sentence and a damning one, because the problem in programmatic was never a shortage of standards. ADOTAT's own count on the Tech Lab's Data Transparency Standard found adoption near zero. ads.txt, sellers.json and supply chain objects exist. Using them is optional, and optional is the industry's favorite word.

Look at who is co-signing. Omnicom's Ben Hovaness says public comment lets the industry "pressure-test that foundation." A holding company helping write the norms for how buyers and sellers transact, while principal media keeps holdcos on both sides of the trade, is not governance. It is the referee asking the players to vote on the rules. File comments by October 16. Then watch whether a single practice in v1 comes with a consequence for ignoring it.

Dailymotion's ad business has a new name. Again. In the U.S. it now sells as Audience Path, billed as "a new entity" running on a proprietary agentic AI called Ray. Before that it was Dailymotion Advertising. The SSP goes by DMX, which has also traveled as Dailymotion Pro. In July the ad arm added Motion, for stretching influencer campaigns beyond social. That is a lot of nameplates for one French video site, and the timing is not subtle. Everyone from Dr. Augustine Fou to this publication has questioned Dailymotion's numbers and whether the ads it sells actually run where, and in front of whom, it says they do. Fou has documented Dailymotion pages loading and refreshing ad slots in the background, piling up impressions per session.

Fraud researchers and two measurement founders told ADOTAT that DMX routes buyers into CTV endpoints that do not exist as real consumer destinations. The answer to all of it was not an audit. It was a new logo.

Now the claim to break. Ray is powered by "5 billion monthly viewers." RTL AdAlliance, which ALSO resells Dailymotion in Europe, pitches 450 million monthly active users. When Vivendi relaunched the platform, it said 400 million, with fewer than a quarter using the site directly. Five billion is roughly the entire internet-connected population of Earth.

So where does the other 4.5 billion come from besides bullshit? DMX plugs into more than 5,000 publisher partners and OEM channels. Those audiences belong to other companies. That is what Audience Path is: a broker reselling other people's inventory and audiences under the Dailymotion name, then counting them as its own viewers. Brokering is a legal business. Calling someone else's audience yours is a marketing choice, and it is the choice that makes a 450 million user site sound like a 5 billion viewer one.

Then come the numbers with no denominators: campaign activation under 60 seconds, 2.5x creative engagement, 70% better efficiency "on average," 44% higher recall, +10 points of brand lift, and reach expanded up to 5x through modeled audience "twins." No baseline, no methodology, no named third-party measurement. Expanding reach fivefold with lookalikes is also the fastest way to sell five times the inventory, most of it not Dailymotion's. CMI Media Group, a healthcare agency, is quoted praising Audience Path's "transparency" for reaching patients and caregivers. Here is the transparency test: which Audience Path impressions run on dailymotion.com, which run on someone else's site or app, which run on CTV, and will Dailymotion hand buyers log-level data by app bundle and domain? Until it does, Audience Path is a new questionable door on someone else's house.

IAB Europe's 2026 AI study, covered by Digiday, is being read as proof that agentic buying has arrived. It had 50 respondents. Of the 29 asked about workflows, 38% picked agentic buying and selling as a use case, which is not the same as handing an agent the budget. 36 of 47 said they have no agentic system in daily use, or one where humans still drive. Yet 58% expect agentic buying to be regular or a main buying method within a year. Respondents rated AI's current performance in ad ops 2.76 out of 5. That is the expectations-to-deployment gap in one number.

The real story is accountability. 78% named an AI governance owner. Only 48% had advertising-specific AI rules. And of 38 respondents whose companies offer AI training, just nine said it covers checking autonomous actions and knowing when to intervene. Meanwhile the seller side is getting more complicated, not less: Google Ad Manager evaluates per-bidder floors against the publisher's net after Google's cut, so a $1 bid on an 80/20 split counts as $0.80. Any vendor selling you an agent should show exactly what budgets, bids and floors it can touch, what needs a human, and an audit log, then beat a human baseline on advertiser outcomes and publisher net yield, not "time saved."

Ad Age reports Jon Cook is preparing to leave WPP after nearly three decades, the man who built VML from a Kansas City shop into a network WPP says runs in 60-plus markets with roughly 28,000 people. He ran the VML and Y&R combination, then the enlarged VML after the Wunderman Thompson merger. In February, WPP made him CEO of WPP Creative, the unit meant to fold VML, Ogilvy and the rest into one coordinated business.

Cindy Rose has been selling the restructuring as a move away from the holding company and toward a single operating company. Eight months later, the executive she picked to make that work is reportedly leaving to build something outside the holding-company structure. WPP now needs a successor at both VML and WPP Creative, during a lost Coca-Cola review, securities litigation and the Sony rebate allegations. When the integrator walks, the integration plan becomes a PowerPoint without a presenter.

Nike's fiscal first-quarter revenue fell 4% to $11.2 billion, missing expectations, and the company now forecasts a high-single-digit sales decline for the full year. Greater China fell 26%. Converse fell 28%. Jordan footwear dropped by the mid-teens, and CEO Elliott Hill admitted Nike has been "oversupplying" its iconic retros, which is the most expensive sentence a scarcity brand can say out loud. The new transformation plan, Pace, delivers its savings through layoffs beginning in 2027.

There were bright spots: running, football, the World Cup, and the Caitlin Clark shoe, Nike's biggest women's signature launch ever. But Hill also said "it's on us" to bring creativity back to Sportswear, which is roughly half the business and down low double digits. GlobalData's Neil Saunders put it plainly: brand heat keeps fading. For media sellers, the read is simple. Nike is not fixing this with more impressions. It is fixing it with fewer products, fewer people, and a forecast that tells every publisher pitching it to expect a smaller check.

Google updated its Search guidance to tell publishers to fact-check AI-generated content by hand, including titles, meta descriptions and alt text, because generative models predict words rather than retrieve facts. Merchant Center now wants AI product images and copy labeled. Google, the company putting AI Overviews above everyone's links, would like the rest of the web to check its work.

Instagram now lets creators boost livestreams into paid placements in Feed, Stories and Reels while they are live. Meta recommends scheduling the ad at least two hours before going live to avoid delivery delays. Live ads, with two hours' notice.

ADOTAT+ members got the File this week. You got the headline.

Here's what's on the other side. The company that announced a "new" pause ad pipe on Tuesday, and the public document from three months ago that says otherwise. The one number in the industry's favorite pause ad study that never makes it into the pitch deck, and why it guts the "high attention" claim. The headline statistic every trade outlet repeated this week that we could not find a single published method for. The "preference" finding that turns out to come from a very friendly room. The case study with a triple-digit lift and no base underneath it.

Then the part your SSP rep won't bring up at lunch: how the same pause moment can show up in your bidder more than once, with different fees each time. A claim-by-claim scorecard you can forward to your buying team. And the ten questions we're putting to Nexxen, which work just as well on any seller who uses the word "proven" in your next meeting.

Your competitors on the buy side read it this morning. Join ADOTAT+ and read it before your next CTV plan goes out the door.