← All media signals
Infrastructure

The Provenance Web

Every image and claim carries a signed trail of where it came from, and the internet grows a memory of its own origins.

What is it?

A signed history starts attaching to media at capture, edit and upload, so a photo or video can, in principle, be traced back to everyone who touched it. Billions of AI posts already carry the label. Whether that history survives the trip stays open.

Why now?

Trust in digital images broke down as generation got cheap and convincing, and the old proxies — a plausible source, a familiar face — stopped working. Regulation didn’t invent the fix; it forced a timetable onto plumbing the industry was already building. The infrastructure moved first; the law made it mandatory.

Who’s building it?

Camera makers, platforms and a standards consortium build the rails; regulators set the deadline above them.

C2PA consortiumPlatform integratorsCertificate authoritiesCamera/device makersRegulators · EU · CA
The full read
Why now, who is building it, where the market goes, and what stays unsettled.
Get weekly →
01 · The market
Who’s in it
Builders — the standards body and platforms wiring in signed history.
Buyers — regulated industries and platforms required to disclose AI-generated content by law.
Gatekeepers — the platforms deciding whether credentials survive the upload, or get stripped.
What’s at stake
Compliance spend flows to whoever platforms trust to verify credentials — a market defined by gatekeeper choice, not open competition.
The chain breaks the moment metadata gets stripped.
Regulation sets a deadline the plumbing may not meet.
What’s unsettled
Whether preservation becomes the platform default, or stays the exception.
Whether users check credentials at all, or ignore them.
Whether verification consolidates into a few standards bodies, or stays fragmented across vendors.
02 · How the demand matureda progression, not a timeline
Capture
Cameras and editing tools begin signing media the moment it is made.
Circulation
Files move through uploads and reposts, some losing signed history en route.
Verification
Regulators and platforms start checking whether the credentials that remain are still intact and trustworthy.
Standard
Enough intact chains accumulate that provenance becomes assumed infrastructure, not a novel feature.
03 · Where the market goesthe forks, not a prediction
→Preservation or erosion — whether platforms come to treat credentials as a feature worth protecting, or overhead worth quietly stripping.
→Camera-level signing at the hardware layer could make provenance the default, sidestepping the platform question.
→Certificate authorities could become the new gatekeepers, or the standard stays open and uncontested.
→Enforcement could genuinely tighten platform behaviour, or the disclosure rule stays largely symbolic.
Regulation sets the deadline and the rails are shipping; the genuinely open part is whether preservation reaches the ordinary upload, not just the compliant one.
04 · The Verification Stack deskadjacent markets, moving now
The Trust Layer
Google’s answer to labelling AI media.
SynthID watermarked over 100 billion images and videos.
Mashable
The Consent Layer
Sites can now set separate permissions for each kind of crawler.
Cloudflare lets sites set separate rules for search, agent and training bots.
Help Net Security
Post-Password
Passkeys are becoming the default proof of identity.
Microsoft sets passkeys as the default for new accounts; Google did so in 2023.
The Hacker News
05 · The Wire
01
TikTok labeled over 3 billion AI-generated posts via C2PA.
C2PA ↗
02
EU AI Act, California SB 942 both start disclosure Aug 2026.
European Commission ↗
03
Platforms often strip metadata on upload, breaking C2PA chain.
World Privacy Forum ↗
04
OpenAI commits to C2PA metadata and partners with Google on SynthID watermark
TechCrunch ↗
05
Outside one viewer site, Content Credentials icon is missing from public platforms
PetaPixel ↗
The panel on this signal
They agreed on
–The infrastructure is real and already shipping at scale, well ahead of most users’ awareness of it.
–Regulation forced a firm deadline onto existing plumbing.
–Platforms, not certificate issuers, hold the real power over whether credentials survive.
The security researcher disagreed on
–Metadata stripping remains the default behaviour across most platforms and sharing pipelines today; an intact, verifiable provenance chain reaching the average viewer is currently the exception, not the baseline condition.
Know more about the method →
✦How this signal was built
01 · Panel
A Delphi panel of 4 AI analysts, each reasoning independently.
→
02 · Debate
They challenge and revise each other’s reads over two rounds.
→
03 · Evidence
Every claim is tied to a cited, linked source on The Wire.
→
04 · Synthesis
A moderator writes it into one read, disagreement and all.
✦Signal changelogre-read as evidence changed
2025
Every image and claim carries a signed trail of where it came from, and the internet grows a memory of its own origins.
→
2026
As of August 2026 the EU AI Act’s Article 50 and California’s AI Transparency Act both took effect, requiring machine-readable marking of synthetic content, with platforms required to preserve provenance data from January 2027. AI Frontiers ↗