Home / Plugins / C2PA Content Credentials
C2PA Content Credentials
C2PA 2.1 content credentials: generate, sign (Ed25519) and embed provenance manifests on digital objects (JUMBF via c2patool, PDF associated files, or .c2pa.json sidecars), record signed digitisation provenance automatically when a digital object is created, sign manifests for AI outputs, carry embedded EXIF/IPTC/XMP as C2PA metadata assertions, declare an AI training and data-mining stance, and verify manifests on public pages. Shares its signing key chain with the AI Compliance plugin.
Part of the Provenance & Audit capability. Watch the walkthrough.
| Category | Provenance |
|---|---|
| Package | ahgC2paPlugin |
| Version | 0.2.0 |
| Requires | Core |
| Licence | AGPL-3.0-or-later |
| Install | From the source repository, following its README. No packaged download yet. |
C2PA (Coalition for Content Provenance and Authenticity) 2.1 content credentials for AtoM-AHG. PSIS twin of Heratio's ahg/c2pa package. Generate, Ed25519-sign, embed and verify signed provenance manifests on digital-object derivatives and AI outputs: - Build a C2PA manifest from assertions + a host asset (file or text). - Sign it with the shared Ed25519 key chain (ahg/inference-receipts, the same key ahgAiCompliancePlugin installs). - Embed the manifest as JUMBF inside a JPEG via the c2patool binary, or fall back to a .c2pa.json sidecar when c2patool is absent. - Surface embedded EXIF/IPTC/XMP as C2PA Standard Metadata Assertions (stds.exif, stds.iptc, stds.xmp) read from digital_object_metadata, dam_iptc_metadata, media_metadata. - Declare the claimer's AI training-mining stance (c2pa.training-mining). - Verify a manifest end-to-end: re-hash every assertion against its claim-pinned hash, then verify the Ed25519 claim signature. - Persist every signed manifest to ahg_c2pa_manifest for audit + reissue.