Release record · Not a rule change
Disclara product and technical updates
These entries describe changes to the site, checker and browser tools. A new interface, parser or evidence field does not by itself change a legal duty or platform policy. Each entry explains the practical effect and current boundary. See legal and platform-policy updates separately →
Dated releases
Private workspace retains document provenance transitions and correction history
Invited editors can record supplied DOCX/PPTX/XLSX observations around save, edit, export or handoff. Version-bound immutable receipts distinguish provenance loss, initial absence, retained invalid credentials and unknown inspections; complete history is included in JSON and printable Evidence Packs.
This is a manual report workflow, not document upload, Office automation or independent C2PA validation. Final-file reports must match the saved asset hash when recorded; otherwise byte binding stays explicitly unestablished. Receipt hashes are unsigned, and no report grants publication clearance. Existing checker decisions and paid-launch gates remain unchanged.
Updated pages
- Reviewed by
- Disclara technical release
- Role
- Technical regression and deployment checks; not legal or Office roundtrip validation
- Review date
Public Rule Graph exposes versioned scope candidates and source dependencies
The public catalog and JSON API project existing rules, predicate input pointers, source locators and separate platform capabilities. Filter by market, platform, media and publication date; start a fresh checker for the actual asset decision.
No rule or source was reinterpreted or reverified by this catalog release. Scope matches are not legal decisions; provider marking, client policy, provenance and observed enforcement remain explicit gaps or full-checker dependencies. No invented workflow experiment or customer benchmark is included. Existing evaluator archives and saved decisions are unchanged.
Updated pages
- Reviewed by
- Disclara technical release
- Role
- Technical projection and regression checks; not new legal review
- Review date
Text processing is not authorship; the private pilot retains manual post-publication observations
Reported Claude text signals now use a separate possible-processing claim with explicit verification access and declared workflow operation. The invite-only workspace adds immutable manual post observations bound to a saved decision, with label comparisons and JSON/print receipts.
Disclara has no Claude detector or automatic platform monitoring. Non-detection is not human-origin proof. Manual observations are limited to a surface, region, time and variant; metadata from a downloaded copy is not exact served-byte evidence. Observations never override the original publication/review gate. Paid checkout remains disabled.
Updated pages
Technical and first-party references (1)
- How Claude marks AI-generated content (Anthropic)
- Reviewed by
- Disclara technical release
- Role
- Technical checks and primary-source interpretation, not legal sign-off
- Review date
Private workspace operations: MFA, retained policy and evidence workflow
The invite-only pilot adds owner authenticator protection, member access revocation, searchable paginated history, frozen client-policy revisions, ordered independent reviews, scoped recheck notifications, JSON/printable campaign evidence and archived deterministic replay.
This is not an activated paid offer. OVH email and Stripe adapters require configuration/approval. Legacy decisions without a bound evaluator remain replay-unsupported; registry metadata is not a primary-source body. Human approvals do not override checker findings, and hashes are not signatures or trusted timestamps.
Updated pages
- Reviewed by
- Disclara technical release
- Role
- Technical implementation checks; no legal review
- Review date
Component provenance and product permission are separate preflight decisions
The checker records a bounded ingredient tree and separate whole-asset generation/materiality declarations. The image preflight displays SDK-observed C2PA ingredients after local validation, without treating missing AI signals as non-AI. A manual TikTok Shop US listing-image checklist blocks reported product mismatches regardless of disclosure.
Facts and attribute comparisons are caller-supplied. MP4/audio inspection, automated image/PDP comparisons, feed connectors and platform-label certainty are not available. Missing scope or evidence requires review; no TikTok Shop rule is inferred for other markets or ordinary posts.
Updated pages
Technical and first-party references (4)
- Content Credentials in Adobe Premiere and Adobe Media Encoder (Adobe Help)
- AI-Generated Content Restrictions and Requirements for Product Listings Images (TikTok Shop US)
- AI-Generated Content Restrictions and Requirements (TikTok Shop US)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Campaign responsibility can now be reviewed across asset versions
The optional campaign matrix accepts an ordered, version-bound event timeline. Each event records the actor, action, authority and optional evidence reference. The checker flags possible responsibility shifts, unversioned AI actions and an AI change after the latest output approval. An unsigned Markdown task schedule can be downloaded for client–agency discussion.
These are review signals from caller-supplied facts. They do not prove a legal transfer, authenticate event order, approve the final asset or create a signed SOW/MSA. The schedule requires acceptance and legal review outside Disclara.
Updated pages
Technical and first-party references (2)
- Transparency obligations under Article 50 of the AI Act (European Commission)
- KI-Kennzeichnung im Digitalmarketing: Was Unternehmen jetzt wissen müssen (IAB Austria and act legal Austria)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Checker records multi-party campaign responsibility without auto-assigning legal liability
The optional campaign matrix records brand, agency, publisher and other actors' AI activities, authority context, advertiser of record and task owners. It separates possible Article 50 deployer status from platform account and contractual workflow assignments, and puts mapped campaigns into human review.
A prompt, approval or platform account is not treated as conclusive proof of legal deployer status. The matrix is an unsigned, caller-supplied evidence record and does not generate a binding contract or independently verify a party's control.
Updated pages
Technical and first-party references (2)
- Transparency obligations under Article 50 of the AI Act (European Commission)
- KI-Kennzeichnung im Digitalmarketing: Was Unternehmen jetzt wissen müssen (IAB Austria and act legal Austria)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Prelaunch pricing now separates Free, Team and Agency
The public offer now shows the available free checker and two planned self-service workspace plans. Prices and limits come from one versioned prelaunch catalog. Creator, Agency Pro, Enterprise and service-pilot CTAs were removed from the primary offer; Scale and annual billing stay hidden.
This is a marketing and product-availability update, not a subscription launch. Waitlist, trial and checkout remain disabled; no customer data or paid entitlements are created by this page.
Updated pages
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Checker and sample report now lead with the publishing action
The homepage now links to an explicitly illustrative sample. The Evidence Report has its own product-documentation layout, and the checker groups questions by material, publication and responsibility before showing the next action. Market confirmation and editorial review must be explicit.
This changes presentation and input safety, not the underlying legal obligation or the availability of paid workspaces. The example is not an asset inspection, a completed check or legal approval.
Updated pages
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Exact-file replay of local Exif export records
AI Label Preflight now accepts local Exif export records v1 and v2 in the browser-only replay. It checks the nested provenance comparison, reruns the bounded selective Exif editor on the selected source and requires the selected candidate to be byte-identical to that fresh output. Recorded removed standard tags and receipt fields are checked separately.
REPRODUCED means the newly selected bytes match this deterministic export method and record; it does not authenticate who made the record, whether a browser download succeeded, prior local recheck, policy approval, disclosure, privacy completeness or publication. Invalid or unsupported edits remain inconsistent rather than silently accepted.
Updated pages
Technical and first-party references (2)
- Exif Version 3.1 — CIPA DC-008-Translation-2026 (Camera & Imaging Products Association)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Provenance comparison captures now record destination platform
New candidate-bound comparison captures use version 2 and record the selected Instagram, TikTok or X destination alongside the caller-reported native disclosure. The exact-file replay still accepts legacy version 1 captures, but flags that they lack destination scope. Changing the source or candidate clears stale approval and disclosure declarations; a declared client prohibition remains in force across candidate changes.
A native-disclosure declaration is no longer left without platform context in new downloads. The selected destination, client policy, approval and disclosure are still unsigned caller claims, not authenticated platform events. Local Exif export records now use version 2 because their nested comparison capture changed.
Updated pages
Technical and first-party references (3)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Labeling AI Content — Meta Transparency Center (Meta)
- About AI-generated content — TikTok Support (TikTok)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Provenance capture replay moved off the page thread
The comparison JSON is parsed and both selected images are rescanned in a disposable browser worker, with a 20-second deadline and file-size checks inside the worker. A failed, unreadable or timed-out replay returns no verified result.
This limits page-thread blocking from malformed captures or expensive local scans. Files are not uploaded; a browser worker is not an operating-system sandbox and does not authenticate the unsigned capture or publication evidence.
Updated pages
Technical and first-party references (2)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Exif Version 3.1 — CIPA DC-008-Translation-2026 (Camera & Imaging Products Association)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Replayed capture no longer masks an inconclusive metadata scan
Exact-file provenance replay now distinguishes a complete, reproducible comparison from one whose recorded decision is INCONCLUSIVE because the image metadata scan was incomplete. Matching hashes and capture fields alone no longer produce the green REPRODUCED state in that case. The replayed candidate decision is displayed separately from consistency status.
REPRODUCED INCONCLUSIVE confirms deterministic replay of selected bytes only. It does not establish absence, preservation or safe removal of provenance; the user must obtain readable files and recheck. Approval, policy, disclosure and publication remain unauthenticated.
Updated pages
Technical and first-party references (2)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Exif Version 3.1 — CIPA DC-008-Translation-2026 (Camera & Imaging Products Association)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Exact-file replay for provenance comparison captures
AI Label Preflight now accepts its downloaded candidate-bound comparison capture together with the exact source and compared candidate images. It recalculates both SHA-256 hashes, rescans embedded metadata and reproduces the comparison decision and candidate-binding record in the browser.
REPRODUCED means the newly selected bytes match the capture's deterministic comparison. The JSON remains unsigned: the replay cannot authenticate the author, past local-copy recheck, approvals, client policy, disclosure, download, upload, served asset or timestamp. Other evidence-envelope formats remain in their separate verifier.
Updated pages
Technical and first-party references (3)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Exif Version 3.1 — CIPA DC-008-Translation-2026 (Camera & Imaging Products Association)
- IPTC metadata guidance for AI-generated synthetic media (International Press Telecommunications Council)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Candidate origin bound to provenance comparisons
AI Label Preflight now distinguishes a browser-prepared Exif copy from a separately selected local publication candidate. Its downloadable comparison capture includes the candidate origin and local-byte recheck state; a mismatching reselected file is explicitly not treated as the file described by the prepared-copy comparison.
An earlier asynchronous file read can no longer overwrite a newer source or candidate selection. The capture remains unsigned and does not prove that a download, upload or publication occurred. Existing standalone mutation decision v2 is nested inside capture v1; consumers of downloaded JSON should account for that format change.
Updated pages
Technical and first-party references (2)
- Exif Version 3.1 — CIPA DC-008-Translation-2026 (Camera & Imaging Products Association)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Local-byte recheck for selective Exif copies
After preparing a bounded Exif-redacted JPEG, AI Label Preflight lets the user select a local file again and compare its SHA-256 and byte length with the prepared output. A browser-generated local-export record separates NOT_RECHECKED, BYTES_MATCH, BYTES_DIFFER and INCONCLUSIVE and includes the before/after provenance comparison.
Matching selected bytes do not prove that a download occurred or identify a filesystem path. The unsigned record does not establish permission, disclosure, upload or the served platform variant; files remain in the browser.
Updated pages
Technical and first-party references (2)
- Exif Version 3.1 — CIPA DC-008-Translation-2026 (Camera & Imaging Products Association)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Bounded selective Exif copy for eligible JPEGs
AI Label Preflight can now create a browser-only JPEG copy that removes standard Exif GPS and body/lens serial directory entries and clears their addressed value bytes. The original file is unchanged. The generated copy is decoded, rescanned, hashed and placed into the existing before/after comparison.
The export blocks files with detected C2PA, XMP or IPTC, unclassified JPEG APP/comment segments or trailing data, multiple Exif segments, MakerNotes, nested/thumbnail IFDs and malformed or overlapping value storage. It does not remove artist/owner identity or prove that all private data is gone. No signed credential is updated; publication, client-policy and disclosure review remain separate.
Updated pages
Technical and first-party references (3)
- Exif Version 3.1 — CIPA DC-008-Translation-2026 (Camera & Imaging Products Association)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- IPTC metadata guidance for AI-generated synthetic media (International Press Telecommunications Council)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Standard Exif privacy tags separated from provenance loss
AI Label Preflight now reads a bounded set of standard Exif/TIFF tag identifiers for GPS coordinates, body/lens serials, owner and artist without extracting their values. The before/after comparison records removed privacy tags separately from lost C2PA/XMP/IPTC signals in provenance mutation format v2.
Malformed Exif is inconclusive; any changed file still requires review, and unchanged C2PA presence does not establish integrity after export. MakerNotes, XMP privacy fields and other metadata are outside this scan. No selective redaction, signed receipt or publication observation is provided.
Updated pages
Technical and first-party references (3)
- Exif Version 3.1 — CIPA DC-008-Translation-2026 (Camera & Imaging Products Association)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- IPTC metadata guidance for AI-generated synthetic media (International Press Telecommunications Council)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Pre-publication provenance mutation comparison
AI Label Preflight now compares an approved image with a publication candidate entirely in the browser. It records exact SHA-256 hashes, structural C2PA/XMP/IPTC/EXIF observations, disappeared AI source markers, a caller-declared reason, client-policy state and disclosure/approval assertions in a downloadable comparison record.
Lost provenance or changed bytes with C2PA trigger review; a declared client prohibition blocks the changed candidate. EXIF is located but private fields are not decoded, no metadata is removed, and the unsigned record does not prove actual publication, signer trust or legal sufficiency. Safe selective redaction remains unavailable.
Updated pages
Technical and first-party references (3)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- IPTC metadata guidance for AI-generated synthetic media (International Press Telecommunications Council)
- C2PA User Experience Guidance for Implementers (2.2) (Coalition for Content Provenance and Authenticity)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Provenance reports must match the final asset being assessed
The checker now records a SHA-256 hash of the final asset under assessment. The public wizard can calculate it from a local file up to 25 MB without uploading or retaining the file. External C2PA and other final-asset reports are no longer applied when that anchor is absent or the reported file hash differs.
Unbound and mismatched final-asset reports remain UNVERIFIED and trigger review. Original-capture and component claims keep their own narrower scope; a hash match only compares caller-supplied bytes and does not authenticate a report or establish signer trust. Evidence format v17 records the binding state.
Updated pages
Technical and first-party references (2)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Apple Reference Image: A New Approach for Verified Photography (Apple Security Research)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
External provenance reports now require an exact-file verification record
The checker now uses a source-backed interpretation profile for C2PA, Apple Reference Image, SynthID, IPTC/XMP and untracked schemes. A claimed external valid or invalid result is kept as UNVERIFIED unless the supplied report identifies the verifier, release, UTC check time, exact file hash and evidence reference. C2PA also requires a trust-config hash and an assessable validator version outside the tracked affected range.
IPTC/XMP remains declarative, incompatible scheme/claim pairs remain unsupported, and a vulnerable C2PA validator cannot yield a reported-valid interpretation. Complete reports are still caller-supplied, not Disclara signature checks or proof of scene truth. Evidence format v16 records the report gate and its boundary per claim.
Updated pages
Technical and first-party references (5)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Security updates available for Content Credentials SDK | APSB26-147 (Adobe)
- Apple Reference Image: A New Approach for Verified Photography (Apple Security Research)
- Verify AI-generated images, videos and audio — Gemini Apps Help (Google)
- IPTC metadata guidance for AI-generated synthetic media (International Press Telecommunications Council)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Offline C2PA integrity check added to AI Label Preflight
The browser-only image preflight can now optionally inspect an embedded C2PA credential with pinned c2pa-web 0.15.1 in a disposable worker. It records the exact asset hash, validator identity and version, tracked APSB26-147 status, offline trust-configuration hash, validation time and failure codes. Caller-reported validity no longer upgrades preflight provenance to VALID.
The tool distinguishes intact embedded credential integrity from signer trust and platform-label interpretation. It has a 10 MB file limit and 12-second deadline; it does not fetch external manifests, check revocation or authenticate rights. A browser worker is not an OS-level parser sandbox, and the disclosure checker still accepts caller-supplied verifier evidence rather than directly parsing assets.
Updated pages
Technical and first-party references (3)
- @contentauth/c2pa-web 0.15.1 release (Content Authenticity Initiative)
- Security updates available for Content Credentials SDK | APSB26-147 (Adobe)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
C2PA verifier-security gate added to checker evidence
Adobe APSB26-147 identifies security-feature bypass and denial-of-service vulnerabilities in affected Content Credentials Rust SDK and c2patool releases. The checker now records caller-supplied validator identity, version, validation time, trust-config version/hash and exact asset hash; a reported VALID result with a known affected or unassessable validator routes to review.
A reported C2PA result from an affected validator cannot be used as dependable positive provenance evidence. The gate checks a tracked advisory and the completeness of the supplied record; Disclara does not yet parse assets, verify C2PA signatures or authenticate the caller's attestation. Automated sandboxed verifier execution remains planned.
Updated pages
Technical and first-party references (2)
- Security updates available for Content Credentials SDK | APSB26-147 (Adobe)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Browser-only Decision Provenance Builder released
A free browser tool now binds a caller-supplied external DAM asset and exact version hash to the observed C2PA snapshot, AI Usage Manifest reference and digest, disclosure decision, accountable approval and publication evidence. It classifies complete, partial, unknown and provenance-loss states and creates a deterministic record ID.
Teams can keep the media binary in their existing DAM while downloading a replayable Disclara decision-provenance envelope. The builder does not retrieve or store assets, authenticate external references, validate C2PA signatures or operate a live Bynder, Fotoware, Adobe, API or webhook connector. Those integrations and a retained Evidence Graph remain planned.
Updated pages
- Decision Provenance Builder
- Evidence Envelope Verifier
- Tools
- DAM and content supply chain
- Rule changelog
Technical and first-party references (3)
- Content Authenticity — complete C2PA support in the DAM (Fotoware)
- Content Provenance and Authenticity in Bynder (C2PA & SynthID) (Bynder)
- Content Credentials: Deployment Guidance (C2PA Technical Working Group)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
Structured container parsing added to AI Label Preflight
AI Label Preflight now reads C2PA, XMP and IPTC signals only from defined JPEG, PNG and WebP metadata locations. Marker-like text in visual payloads no longer creates a provenance result, and malformed or unsupported containers fail closed to UNKNOWN.
Teams can see the metadata container, byte location, parser status and Digital Source Type behind a label-risk estimate. Presence still does not mean that a signature is valid, and compressed metadata that cannot be decoded remains explicitly unresolved.
Updated pages
Technical and first-party references (4)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- IPTC metadata guidance for AI-generated synthetic media (International Press Telecommunications Council)
- Labeling AI Content — Meta Transparency Center (Meta)
- About AI-generated content — TikTok Support (TikTok)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
AI assertion scope and California synthetic-performer pack added
The checker now separates component-level AI assertions from whole-asset assertions, records semantic conflicts and can return PROVENANCE_VALID_BUT_MISLEADING. A browser-only AI Label Preflight inspects embedded markers without claiming cryptographic verification. California SB 1050 is represented as a future-effective rule from 1 January 2027.
Teams can identify when technically valid provenance may create an overbroad platform label, while California video and audio ads are evaluated using performer type, voice type, real-person representation and commercial role rather than a generic AI boolean.
Updated pages
Technical and first-party references (5)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- C2PA User Experience Guidance for Implementers (2.2) (Coalition for Content Provenance and Authenticity)
- SB-1050 False advertising: synthetic performers (California Legislative Information)
- California Constitution, Article IV, Section 8 (California Legislative Information)
- AI & Transparency Framework v2 (IAB New Zealand)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
C2PA 2.4 implementation guidance added to Disclara
The provenance cluster now covers c2pa.ai-disclosure, action-level AI usage, source ingredients, Regions of Interest and granular AI-generated versus AI-edited records.
Marketing teams can record and interpret more precise AI-use provenance without treating a valid credential as proof of truth, authorship or legal compliance.
Updated pages
Technical and first-party references (3)
- C2PA Technical Specification (2.4 series) (Coalition for Content Provenance and Authenticity)
- A New Implementation Guide for Content Credentials (C2PA)
- Use of Content Credentials to Identify Synthetic and Non-Synthetic Content (C2PA Technical Working Group)
- Reviewed by
- Disclara Editorial
- Role
- Source and rules review
- Review date
