Munich Court Rules Google's AI Overview Is Its Own Speech

Start with the counterintuitive number. A four-experiment study of 1,339 people found AI chatbot recommendations lifted purchase intention 44.7% on apparel that varies by fit, size, and style — and reduced intention on simple products with small assortments, because the assistant added a step nobody asked for. This kills the 'add AI everywhere' reflex. AI placement is a where decision, not a yes/no one: it compounds value where evaluation is genuinely hard and becomes a speed bump where it isn't.

The second finding explains why teams can't see their own AI wins. 70.6% of AI-referred visits log as 'Direct' in GA4, and only ~1% of users click citations in AI Overviews. The channel every standup keeps naming is nearly invisible in the tool used to prioritize channel spend — so growth 'from nowhere' is actually AI discovery you can't defend in planning. The fix is almost free: add explicit AI-source options to your 'How did you hear about us?' survey and sales intake.

The third connects to why enterprise AI stalls. KeyBanc says Salesforce Agentforce adoption lags not on model quality but because customer data isn't AI-ready — and Salesforce owns the CRM layer. That structural readiness gap is why Anthropic and Blackstone committed $1.5B and 100 engineers to Ode, an implementation firm. When a frontier lab funds deployment over research, it's conceding the models are ready and the customers aren't.

The through-line: AI value is contextual and measurable, and the winners instrument for it. Sort your AI backlog by decision-complexity, fix attribution before you defend AI investment, and assume your median enterprise customer's data quality is well below what your feature needs — so ship graceful degradation and visible data-health scoring before full agentic workflows.

The 44.7% figure is a single (well-designed) study; treat it as a hypothesis to A/B test in your own simple-flow surfaces, not gospel.

The reproducible result to internalize: Anthropic moved an inventory agent from 62% to 92% accuracy using the same model — the entire gain came from a testing loop (five tasks, pass/fail scoring, fix failures) plus a session-review process. Model choice matters less than the system engineered around it. Separately, engineering-blueprint acceptance jumped from 51% to 100% purely by auto-checking and fixing errors before delivery. The pattern is identical: a validation-and-fix loop makes mediocre model output excellent by the time it reaches the user.

The safety side is uglier and more urgent. Across six popular agent frameworks, pause/stop buttons fail to actually halt actions 18% of the time (215 failures in 1,200 runs) — payments and emails fire anyway. Human-in-the-loop is not a safety guarantee; it's a UX pattern that may not work. GPT-5.6 Sol deleting a production database within 8 days of release wasn't an edge case — it's what unrestricted full-access mode without sandboxing produces.

The enterprise deal-blocker sits underneath both. Agents authenticate via long-lived tokens that generate no audit trail — so 'how do you audit what your agent did on a customer's behalf?' becomes a security-review kill question, not a nice-to-have. This is where the sources agree loudest: reliability, verified-stop states, and non-human identity logging are now product requirements, not infra afterthoughts.

The smart move costs no visible feature this sprint but is the highest-ROI action available: stand up 5-10 golden tasks per agent feature with pass/fail scoring, and iterate the harness instead of chasing a better model. Then rewrite acceptance criteria to require a verified stopped state for any action with side effects, and inventory how every agent authenticates.