Content Credentials check (C2PA)
FAST EXIT
The very first check. C2PA (Coalition for Content Provenance and Authenticity) is an
open standard supported by Adobe, Google, Microsoft, Sony, and others. Cameras, phones,
and AI generators that support C2PA embed a cryptographically signed record directly into
the file — stating who created it, with what device or software, and when.
If the file contains a valid C2PA signature that confirms AI generation
(e.g. from OpenAI Sora, Adobe Firefly, Google Imagen), the pipeline stops immediately and
reports AI-generated with high confidence. If the signature confirms
camera capture or a verified human creator, it reports Real. If there
is no C2PA signature — which is the case for most files today — the pipeline continues
to Stage 2.
This check runs on both images (JPEG, PNG, WebP) and
videos (MP4, MOV, WebM). OpenAI's Sora, for example, embeds
C2PA credentials in every video it generates — allowing instant, cryptographic
identification without running any ML models.