wai: live provenance, C2PA 2.4 §19 for room tracks and takes, tied to the JWP receipts #381

Merged

dcharlot merged 11 commits from wai/c2pa-live into main 2026-10-21 07:14:09 -04:00

Conversation 0 Commits 11 Files changed 110 +11979 -45

2026-10-21

Transaction Science

Merge remote-tracking branch 'origin/main' into wai/c2pa-live ...

# Conflicts:
#	wai/CHANGELOG.md

de742cb9bf

• View at this point in history

2026-10-21 07:13:15 -04:00

Transaction Science

wai: live provenance §10.3 names the deriving edge's ingredient rule for a packager that derives ...

Re-segmenting a stream, or writing its objects into another layout or codec, makes a
new stream that names the source segments' manifests as parentOf ingredients, as
deriving-edge §6.1 has an edge name its inputs' stores; packaging the same objects
into this profile's segment derives nothing.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

e77a94dec2

• View at this point in history

2026-10-21 05:08:30 -04:00

Transaction Science

Merge remote-tracking branch 'origin/main' into wai/c2pa-live

1d35e354c2

• View at this point in history

2026-10-21 05:05:58 -04:00

Transaction Science

wai: live provenance text, CHANGELOG, SPEC §5 and the corpus README brought to the dynamic packaging and repository receipt work ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

9d285a0c06

• View at this point in history

2026-10-21 05:02:07 -04:00

Transaction Science

wai: live provenance, the update manifest's ingredient states the parent's validation results ...

C2PA 2.4 §18.16.12.4.3 requires validationResults in a v3 ingredient with an
activeManifest, and an independent validator refuses one without it; the writer
records the success codes a valid parent gives and the verifier recomputes them.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

399ba16b25

• View at this point in history

2026-10-21 04:54:01 -04:00

Transaction Science

wai: live provenance, clippy-clean ...

Co-Authored-By: Claude Opus 5.5 <[email protected]>

a2fecd6259

• View at this point in history

2026-10-21 04:51:20 -04:00

Transaction Science

wai: live provenance, derived manifest identifiers, dynamic packaging and repository receipts ...

C2PA 2.4 extends live video to dynamically packaged content and recommends
deterministic signatures for streaming (§19.2.1, §13.2.1, naming ISO/IEC 23009-9);
it adds the repository receipt assertion (§18.27). Every manifest identifier is now
derived from the stream, a role and the segment's sequence number, so packagers that
share a key write identical segments and packagers that do not chain across a
failover. The initialization manifest may carry an update manifest with the parent
as ingredient and a c2pa.repository-receipt whose proof is an RFC 9942 receipt of
inclusion in an RFC 9162 log, verified against the repository's key.

Three reasons: manifest_id_mismatch, update_manifest_invalid and
repository_receipt_invalid; a failover vector, a registered vector and their
negatives; c2pa_live_verify.py reads all of it from the text. The CI step, the
registry entry and its export, SPEC §5, the CHANGELOG, the live-conformance README
and capture-binding §11 come with it.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

0c19c60ad9

• View at this point in history

2026-10-21 04:49:42 -04:00

Transaction Science

wai: a live provenance vector whose receipt alone names other objects ...

The group receipt of camera-vsi's second group is signed over its first chunk with
one byte changed, so only the receipt's root disagrees with the segment: without
§11.4 step 6's root check a verifier refuses it for another reason.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

531f5997f1

• View at this point in history

2026-10-21 04:35:35 -04:00

Transaction Science

wai: c2pa_live_verify.py, the live provenance corpus's second implementation ...

Written from live-provenance.md and the texts it reads, with the standard library
alone: deterministic CBOR, ISO BMFF and the BMFF hash, the JUMBF store, COSE_Sign1,
X.509 DER with the profile and chain, session keys and segment-info maps, and the
JWP group and object receipts, with Ed25519 and BLAKE3 from claim-conformance. It
gives every vector the corpus's outcome, place and codes, reads §12's table, and
requires every mutated copy of a good vector to be refused.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

424354f1ea

• View at this point in history

2026-10-21 04:34:13 -04:00

Transaction Science

wai: live provenance certificates name an organization ...

A C2PA validator in use reports the signer by the subject's organization and fails
the claim signature of a certificate without one, so every name of the corpus's
certificates is an organization and a common name; the extension's profile says so.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

7258ddb230

• View at this point in history

2026-10-21 04:30:26 -04:00

Transaction Science

wai: live provenance, C2PA 2.4 §19 for room tracks and takes, tied to the JWP receipts ...

The extension live-provenance.md registers wai.live.provenance: the per-segment
C2PA Manifest Box method and the Verifiable Segment Info method, written as C2PA
2.4 §19 defines them for a CMAF track carried under draft-ietf-moq-cmsf-01, where a
segment less its C2PA boxes is its MoQ group's objects, so the segment's hard
binding and the group receipt's Merkle root commit to the same chunks. Session keys
rotate in a segment's manifest and also sign the group receipts.

wai-rs feature live_provenance writes and verifies it with no C2PA library: BMFF,
JUMBF, COSE_Sign1 with EdDSA, the claim signer's X.509 chain, and the receipts
through jwp_delivery. The corpus live-conformance/c2pa-live/ has five good streams
and a negative for each of the thirty reasons.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

d14be54e17

• View at this point in history

2026-10-21 04:25:52 -04:00