Does an image’s provenance prove that it is true?
Content Credentials can record how an image was made. Verifying that record and verifying an event are different jobs. Four fictional cases make the boundary visible.
Estimated time for the article text only. Allow extra time for figures, comparisons and interactive exhibits.

Provenance validation can establish relationships between records, signers and assets. It does not certify the depicted event, the accuracy of every caption or the completeness of the history.
“Is it real?” can mean several things
Someone sends you a photograph of a bridge and asks, “Is it real?” Do they mean that a camera captured it, that nobody edited it, that it shows the place named in the caption or that the event happened this morning? One short question contains several different checks.
Content Credentials provide a way to describe the provenance of digital images, video and other media. The C2PA explainer distinguishes verification of that record from a judgement that the depicted content is true.
This background article uses the public version 2.4 documents checked on 6 November 2026. It does not authenticate a particular post, and this page is not a file-signature verification service. The fictional cases above help us decide which question a piece of evidence can answer.
An idea to explore
Four questions beyond the badge.
Open each case to separate the available evidence from the conclusion it cannot establish.
An invented bird made with AIA valid record says it was generated.What can this tell us?
It can provide a verifiable connection to the recorded creation method. It does not establish that this bird existed at this location. A valid record is compatible with an AI-generated image.
A camera photograph with no recordNo Content Credentials can be found.What remains open?
The absence alone does not prove fabrication. Compatible tools may not have been used, or the available information may be incomplete. Find other evidence about its origin and context.
An old photo with a new captionThe image record validates; the caption says “today”.What needs another check?
The surrounding claim about time and place needs corroboration. A valid history for the photograph does not make a newly added caption accurate.
A record that cannot be validatedThe viewer reports a validation problem.What should we avoid concluding?
Do not silently turn “cannot validate this record” into “the event never happened”. Check the stated problem and seek the original file or other evidence.
All four cases are fictional. This exhibit does not authenticate images, issue C2PA signatures or validate real files.
Model assumptions and sources
These original explanatory models simplify the conditions in the article. They are not measurements or evaluations of a particular service.
- Coalition for Content Provenance and Authenticity — C2PA and Content Credentials Explainer, version 2.4 (new tab)
- Coalition for Content Provenance and Authenticity — Content Credentials: C2PA Technical Specification, version 2.4 (new tab)
- Coalition for Content Provenance and Authenticity — C2PA Harms Modelling, version 2.4 — Section 6.2 (new tab)
Separate the record, the signature and the binding
Three pieces help explain the system: statements about creation or editing, a digital signature over the relevant record, and information that binds the record to the asset. C2PA combines these pieces rather than relying on a label pasted beside a picture.
Validation can establish a relationship with a signer and check the integrity of the associated record. A signer is not automatically the real name of the person who pressed the shutter. Information about a tool or device and information about a human creator answer different questions.
Likewise, seeing a symbol on a page is not the same as validating the underlying record. A useful reading process asks what was recorded, which signer is involved and what validation result the viewer reports. A decorative badge alone cannot do that work.
An AI-generated picture can have valid provenance
Imagine an AI-generated blue bird whose creation method is recorded. Validating the record and its signature would not establish that the bird stood in that location. It could instead provide a verifiable connection to a statement that the image was generated.
The technical specification includes examples of recording generative-AI creation. A valid provenance record and an explicit AI origin are compatible. Content Credentials are not a pass mark reserved for camera photographs.
The reverse inference also fails: not seeing an AI-use statement does not by itself prove that no AI was involved. First ask where the available history begins and which steps it covers. A gap in evidence remains a gap; it does not turn into a guarantee simply because a reassuring interpretation would be convenient.
A caption can change the claim without changing the file
In another invented case, a photograph taken ten years ago is reposted, unchanged, with the caption “the bridge that opened today”. A verifiable history for the image would not automatically make the new caption accurate.
The reader now needs to compare the image’s context with the place and date asserted by the post. An old, genuine photograph can be used as misleading evidence for a new event. The image file and the claim made around it are separate objects of inquiry.
This is not a reason to discard provenance. It is a reason to give the tool a specific job. A record of origin can help answer questions about origin. Corroboration of an event addresses a different question. Keeping those jobs distinct makes the next check clearer.
Missing credentials do not mean a fake image
If no record can be found, several explanations remain possible. The creator may not have used a compatible tool; information may not have survived sharing; the available history may be incomplete. The absence alone cannot choose between these explanations.
C2PA’s harms document explicitly cautions against treating media without Content Credentials as automatically untrustworthy. Creators can have legitimate reasons not to use compatible tools.
Distinguish no available record, an available record that cannot be validated, and a record that validates. Even a validation problem is not, by itself, a finding that the depicted event was fabricated. Read what the verification result actually says and return to the original publisher or other evidence for the unresolved question.
Our view: build a checking sequence, not a single pass mark
Our editorial view is that provenance can add useful evidence to the way people read images. We would not teach readers that a badge means the surrounding story is true.
A practical sequence has three questions. Who is making which claim? What verifiable history is available for the image? Does the image actually support the claimed place, time and event? Completing one check should not silently stand in for the other two.
The “AI-generated illustration” captions on this library’s opening artwork explain the images’ purpose and production. They do not mean that this website issues or validates C2PA signatures. Our aim is for readers to enjoy imaginative artwork while recognising which materials are being offered as evidence.
An editorial perspective This section offers comparisons and questions based on facts in the sources. It does not claim a shared underlying principle or present new research results.
Sources and verification notes
This article is an original synthesis of primary sources and explanations from specialist institutions.
Generative AI assists with research, structure and English translation. Claims are compared with sources and editorial checks are performed; independent specialist and native-English reviews have not yet been completed.
- Coalition for Content Provenance and AuthenticityC2PA and Content Credentials Explainer, version 2.4 ↗ (opens in a new tab)
- Coalition for Content Provenance and AuthenticityContent Credentials: C2PA Technical Specification, version 2.4 ↗ (opens in a new tab)
- Coalition for Content Provenance and AuthenticityC2PA Harms Modelling, version 2.4 — Section 6.2 ↗ (opens in a new tab)
Sources checked:
Checked the C2PA 2.4 explainer, technical sections on content binding, validation and AI creation, and Harms Modelling section 6.2. The four scenarios are original fictional examples, not validation results for real files. This article makes no claim about a particular product’s support, legal compliance or completeness of provenance.
Rights, status, and revision history
- Status
- Free public edition. Preparation and revision history is retained below.
- 0.1.0
- Rights to the text and diagrams
- The original Japanese text is an independently written summary. The SVG illustrations and conceptual diagrams were newly created. No external images, original source text, or audio recordings are reproduced.
- How sources are used
- Sources are referenced by links only. All rights to each source remain with its respective rights holders.
- · v0.1.0 — Created a new private-preview article with checked primary sources, original comparison models and explained reading detours. Public release is not authorised.
For another read, another day.
THE NEXT BOOK
A new question, on the next shelf.
These paths are editorial comparisons and associations. They do not claim that different subjects work by the same principle.
From one image to a sequence in time
After asking how an image was made, ask how motion was sampled. Film and games put moving images to different uses.
Why do films use 24 fps while games chase 60?Separate trustworthy claims from recoverable data
QR error correction repairs data. It does not decide whether the recovered statement is true. Another digital tool, another carefully bounded job.
How much of a QR Code can be damaged before it stops working?A printing tool does not decide whether its text is true
Letterpress reproduces text. Reproduction and verification are different activities—a useful distinction that reaches back to the age of print.
Why mirrored characters alone do not make readable letterpress text