Dated releases

Private workspace retains document provenance transitions and correction history

product-update

Invited editors can record supplied DOCX/PPTX/XLSX observations around save, edit, export or handoff. Version-bound immutable receipts distinguish provenance loss, initial absence, retained invalid credentials and unknown inspections; complete history is included in JSON and printable Evidence Packs.

Practical effect and boundary

This is a manual report workflow, not document upload, Office automation or independent C2PA validation. Final-file reports must match the saved asset hash when recorded; otherwise byte binding stays explicitly unestablished. Receipt hashes are unsigned, and no report grants publication clearance. Existing checker decisions and paid-launch gates remain unchanged.

Updated pages

Reviewed by
Disclara technical release
Role
Technical regression and deployment checks; not legal or Office roundtrip validation
Review date

Public Rule Graph exposes versioned scope candidates and source dependencies

product-update

The public catalog and JSON API project existing rules, predicate input pointers, source locators and separate platform capabilities. Filter by market, platform, media and publication date; start a fresh checker for the actual asset decision.

Practical effect and boundary

No rule or source was reinterpreted or reverified by this catalog release. Scope matches are not legal decisions; provider marking, client policy, provenance and observed enforcement remain explicit gaps or full-checker dependencies. No invented workflow experiment or customer benchmark is included. Existing evaluator archives and saved decisions are unchanged.

Updated pages

Reviewed by
Disclara technical release
Role
Technical projection and regression checks; not new legal review
Review date

Text processing is not authorship; the private pilot retains manual post-publication observations

product-update

Reported Claude text signals now use a separate possible-processing claim with explicit verification access and declared workflow operation. The invite-only workspace adds immutable manual post observations bound to a saved decision, with label comparisons and JSON/print receipts.

Practical effect and boundary

Disclara has no Claude detector or automatic platform monitoring. Non-detection is not human-origin proof. Manual observations are limited to a surface, region, time and variant; metadata from a downloaded copy is not exact served-byte evidence. Observations never override the original publication/review gate. Paid checkout remains disabled.

Updated pages

Technical and first-party references (1)
Reviewed by
Disclara technical release
Role
Technical checks and primary-source interpretation, not legal sign-off
Review date

Private workspace operations: MFA, retained policy and evidence workflow

product-update

The invite-only pilot adds owner authenticator protection, member access revocation, searchable paginated history, frozen client-policy revisions, ordered independent reviews, scoped recheck notifications, JSON/printable campaign evidence and archived deterministic replay.

Practical effect and boundary

This is not an activated paid offer. OVH email and Stripe adapters require configuration/approval. Legacy decisions without a bound evaluator remain replay-unsupported; registry metadata is not a primary-source body. Human approvals do not override checker findings, and hashes are not signatures or trusted timestamps.

Updated pages

Reviewed by
Disclara technical release
Role
Technical implementation checks; no legal review
Review date

Component provenance and product permission are separate preflight decisions

product-update

The checker records a bounded ingredient tree and separate whole-asset generation/materiality declarations. The image preflight displays SDK-observed C2PA ingredients after local validation, without treating missing AI signals as non-AI. A manual TikTok Shop US listing-image checklist blocks reported product mismatches regardless of disclosure.

Practical effect and boundary

Facts and attribute comparisons are caller-supplied. MP4/audio inspection, automated image/PDP comparisons, feed connectors and platform-label certainty are not available. Missing scope or evidence requires review; no TikTok Shop rule is inferred for other markets or ordinary posts.

Updated pages

Technical and first-party references (4)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Campaign responsibility can now be reviewed across asset versions

product-update

The optional campaign matrix accepts an ordered, version-bound event timeline. Each event records the actor, action, authority and optional evidence reference. The checker flags possible responsibility shifts, unversioned AI actions and an AI change after the latest output approval. An unsigned Markdown task schedule can be downloaded for client–agency discussion.

Practical effect and boundary

These are review signals from caller-supplied facts. They do not prove a legal transfer, authenticate event order, approve the final asset or create a signed SOW/MSA. The schedule requires acceptance and legal review outside Disclara.

Updated pages

Technical and first-party references (2)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Checker records multi-party campaign responsibility without auto-assigning legal liability

product-update

The optional campaign matrix records brand, agency, publisher and other actors' AI activities, authority context, advertiser of record and task owners. It separates possible Article 50 deployer status from platform account and contractual workflow assignments, and puts mapped campaigns into human review.

Practical effect and boundary

A prompt, approval or platform account is not treated as conclusive proof of legal deployer status. The matrix is an unsigned, caller-supplied evidence record and does not generate a binding contract or independently verify a party's control.

Updated pages

Technical and first-party references (2)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Prelaunch pricing now separates Free, Team and Agency

product-update

The public offer now shows the available free checker and two planned self-service workspace plans. Prices and limits come from one versioned prelaunch catalog. Creator, Agency Pro, Enterprise and service-pilot CTAs were removed from the primary offer; Scale and annual billing stay hidden.

Practical effect and boundary

This is a marketing and product-availability update, not a subscription launch. Waitlist, trial and checkout remain disabled; no customer data or paid entitlements are created by this page.

Updated pages

Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Checker and sample report now lead with the publishing action

product-update

The homepage now links to an explicitly illustrative sample. The Evidence Report has its own product-documentation layout, and the checker groups questions by material, publication and responsibility before showing the next action. Market confirmation and editorial review must be explicit.

Practical effect and boundary

This changes presentation and input safety, not the underlying legal obligation or the availability of paid workspaces. The example is not an asset inspection, a completed check or legal approval.

Updated pages

Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Exact-file replay of local Exif export records

technical-standard

AI Label Preflight now accepts local Exif export records v1 and v2 in the browser-only replay. It checks the nested provenance comparison, reruns the bounded selective Exif editor on the selected source and requires the selected candidate to be byte-identical to that fresh output. Recorded removed standard tags and receipt fields are checked separately.

Practical effect and boundary

REPRODUCED means the newly selected bytes match this deterministic export method and record; it does not authenticate who made the record, whether a browser download succeeded, prior local recheck, policy approval, disclosure, privacy completeness or publication. Invalid or unsupported edits remain inconsistent rather than silently accepted.

Updated pages

Technical and first-party references (2)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Provenance comparison captures now record destination platform

technical-standard

New candidate-bound comparison captures use version 2 and record the selected Instagram, TikTok or X destination alongside the caller-reported native disclosure. The exact-file replay still accepts legacy version 1 captures, but flags that they lack destination scope. Changing the source or candidate clears stale approval and disclosure declarations; a declared client prohibition remains in force across candidate changes.

Practical effect and boundary

A native-disclosure declaration is no longer left without platform context in new downloads. The selected destination, client policy, approval and disclosure are still unsigned caller claims, not authenticated platform events. Local Exif export records now use version 2 because their nested comparison capture changed.

Updated pages

Technical and first-party references (3)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Provenance capture replay moved off the page thread

technical-standard

The comparison JSON is parsed and both selected images are rescanned in a disposable browser worker, with a 20-second deadline and file-size checks inside the worker. A failed, unreadable or timed-out replay returns no verified result.

Practical effect and boundary

This limits page-thread blocking from malformed captures or expensive local scans. Files are not uploaded; a browser worker is not an operating-system sandbox and does not authenticate the unsigned capture or publication evidence.

Updated pages

Technical and first-party references (2)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Replayed capture no longer masks an inconclusive metadata scan

technical-standard

Exact-file provenance replay now distinguishes a complete, reproducible comparison from one whose recorded decision is INCONCLUSIVE because the image metadata scan was incomplete. Matching hashes and capture fields alone no longer produce the green REPRODUCED state in that case. The replayed candidate decision is displayed separately from consistency status.

Practical effect and boundary

REPRODUCED INCONCLUSIVE confirms deterministic replay of selected bytes only. It does not establish absence, preservation or safe removal of provenance; the user must obtain readable files and recheck. Approval, policy, disclosure and publication remain unauthenticated.

Updated pages

Technical and first-party references (2)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Exact-file replay for provenance comparison captures

technical-standard

AI Label Preflight now accepts its downloaded candidate-bound comparison capture together with the exact source and compared candidate images. It recalculates both SHA-256 hashes, rescans embedded metadata and reproduces the comparison decision and candidate-binding record in the browser.

Practical effect and boundary

REPRODUCED means the newly selected bytes match the capture's deterministic comparison. The JSON remains unsigned: the replay cannot authenticate the author, past local-copy recheck, approvals, client policy, disclosure, download, upload, served asset or timestamp. Other evidence-envelope formats remain in their separate verifier.

Updated pages

Technical and first-party references (3)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Candidate origin bound to provenance comparisons

technical-standard

AI Label Preflight now distinguishes a browser-prepared Exif copy from a separately selected local publication candidate. Its downloadable comparison capture includes the candidate origin and local-byte recheck state; a mismatching reselected file is explicitly not treated as the file described by the prepared-copy comparison.

Practical effect and boundary

An earlier asynchronous file read can no longer overwrite a newer source or candidate selection. The capture remains unsigned and does not prove that a download, upload or publication occurred. Existing standalone mutation decision v2 is nested inside capture v1; consumers of downloaded JSON should account for that format change.

Updated pages

Technical and first-party references (2)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Local-byte recheck for selective Exif copies

technical-standard

After preparing a bounded Exif-redacted JPEG, AI Label Preflight lets the user select a local file again and compare its SHA-256 and byte length with the prepared output. A browser-generated local-export record separates NOT_RECHECKED, BYTES_MATCH, BYTES_DIFFER and INCONCLUSIVE and includes the before/after provenance comparison.

Practical effect and boundary

Matching selected bytes do not prove that a download occurred or identify a filesystem path. The unsigned record does not establish permission, disclosure, upload or the served platform variant; files remain in the browser.

Updated pages

Technical and first-party references (2)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Bounded selective Exif copy for eligible JPEGs

technical-standard

AI Label Preflight can now create a browser-only JPEG copy that removes standard Exif GPS and body/lens serial directory entries and clears their addressed value bytes. The original file is unchanged. The generated copy is decoded, rescanned, hashed and placed into the existing before/after comparison.

Practical effect and boundary

The export blocks files with detected C2PA, XMP or IPTC, unclassified JPEG APP/comment segments or trailing data, multiple Exif segments, MakerNotes, nested/thumbnail IFDs and malformed or overlapping value storage. It does not remove artist/owner identity or prove that all private data is gone. No signed credential is updated; publication, client-policy and disclosure review remain separate.

Updated pages

Technical and first-party references (3)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Standard Exif privacy tags separated from provenance loss

technical-standard

AI Label Preflight now reads a bounded set of standard Exif/TIFF tag identifiers for GPS coordinates, body/lens serials, owner and artist without extracting their values. The before/after comparison records removed privacy tags separately from lost C2PA/XMP/IPTC signals in provenance mutation format v2.

Practical effect and boundary

Malformed Exif is inconclusive; any changed file still requires review, and unchanged C2PA presence does not establish integrity after export. MakerNotes, XMP privacy fields and other metadata are outside this scan. No selective redaction, signed receipt or publication observation is provided.

Updated pages

Technical and first-party references (3)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Pre-publication provenance mutation comparison

technical-standard

AI Label Preflight now compares an approved image with a publication candidate entirely in the browser. It records exact SHA-256 hashes, structural C2PA/XMP/IPTC/EXIF observations, disappeared AI source markers, a caller-declared reason, client-policy state and disclosure/approval assertions in a downloadable comparison record.

Practical effect and boundary

Lost provenance or changed bytes with C2PA trigger review; a declared client prohibition blocks the changed candidate. EXIF is located but private fields are not decoded, no metadata is removed, and the unsigned record does not prove actual publication, signer trust or legal sufficiency. Safe selective redaction remains unavailable.

Updated pages

Technical and first-party references (3)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Provenance reports must match the final asset being assessed

technical-standard

The checker now records a SHA-256 hash of the final asset under assessment. The public wizard can calculate it from a local file up to 25 MB without uploading or retaining the file. External C2PA and other final-asset reports are no longer applied when that anchor is absent or the reported file hash differs.

Practical effect and boundary

Unbound and mismatched final-asset reports remain UNVERIFIED and trigger review. Original-capture and component claims keep their own narrower scope; a hash match only compares caller-supplied bytes and does not authenticate a report or establish signer trust. Evidence format v17 records the binding state.

Updated pages

Technical and first-party references (2)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

External provenance reports now require an exact-file verification record

technical-standard

The checker now uses a source-backed interpretation profile for C2PA, Apple Reference Image, SynthID, IPTC/XMP and untracked schemes. A claimed external valid or invalid result is kept as UNVERIFIED unless the supplied report identifies the verifier, release, UTC check time, exact file hash and evidence reference. C2PA also requires a trust-config hash and an assessable validator version outside the tracked affected range.

Practical effect and boundary

IPTC/XMP remains declarative, incompatible scheme/claim pairs remain unsupported, and a vulnerable C2PA validator cannot yield a reported-valid interpretation. Complete reports are still caller-supplied, not Disclara signature checks or proof of scene truth. Evidence format v16 records the report gate and its boundary per claim.

Updated pages

Technical and first-party references (5)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Offline C2PA integrity check added to AI Label Preflight

technical-standard

The browser-only image preflight can now optionally inspect an embedded C2PA credential with pinned c2pa-web 0.15.1 in a disposable worker. It records the exact asset hash, validator identity and version, tracked APSB26-147 status, offline trust-configuration hash, validation time and failure codes. Caller-reported validity no longer upgrades preflight provenance to VALID.

Practical effect and boundary

The tool distinguishes intact embedded credential integrity from signer trust and platform-label interpretation. It has a 10 MB file limit and 12-second deadline; it does not fetch external manifests, check revocation or authenticate rights. A browser worker is not an OS-level parser sandbox, and the disclosure checker still accepts caller-supplied verifier evidence rather than directly parsing assets.

Updated pages

Technical and first-party references (3)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

C2PA verifier-security gate added to checker evidence

technical-standard

Adobe APSB26-147 identifies security-feature bypass and denial-of-service vulnerabilities in affected Content Credentials Rust SDK and c2patool releases. The checker now records caller-supplied validator identity, version, validation time, trust-config version/hash and exact asset hash; a reported VALID result with a known affected or unassessable validator routes to review.

Practical effect and boundary

A reported C2PA result from an affected validator cannot be used as dependable positive provenance evidence. The gate checks a tracked advisory and the completeness of the supplied record; Disclara does not yet parse assets, verify C2PA signatures or authenticate the caller's attestation. Automated sandboxed verifier execution remains planned.

Updated pages

Technical and first-party references (2)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Browser-only Decision Provenance Builder released

technical-standard

A free browser tool now binds a caller-supplied external DAM asset and exact version hash to the observed C2PA snapshot, AI Usage Manifest reference and digest, disclosure decision, accountable approval and publication evidence. It classifies complete, partial, unknown and provenance-loss states and creates a deterministic record ID.

Practical effect and boundary

Teams can keep the media binary in their existing DAM while downloading a replayable Disclara decision-provenance envelope. The builder does not retrieve or store assets, authenticate external references, validate C2PA signatures or operate a live Bynder, Fotoware, Adobe, API or webhook connector. Those integrations and a retained Evidence Graph remain planned.

Updated pages

Technical and first-party references (3)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

Structured container parsing added to AI Label Preflight

technical-standard

AI Label Preflight now reads C2PA, XMP and IPTC signals only from defined JPEG, PNG and WebP metadata locations. Marker-like text in visual payloads no longer creates a provenance result, and malformed or unsupported containers fail closed to UNKNOWN.

Practical effect and boundary

Teams can see the metadata container, byte location, parser status and Digital Source Type behind a label-risk estimate. Presence still does not mean that a signature is valid, and compressed metadata that cannot be decoded remains explicitly unresolved.

Updated pages

Technical and first-party references (4)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

AI assertion scope and California synthetic-performer pack added

technical-standard

The checker now separates component-level AI assertions from whole-asset assertions, records semantic conflicts and can return PROVENANCE_VALID_BUT_MISLEADING. A browser-only AI Label Preflight inspects embedded markers without claiming cryptographic verification. California SB 1050 is represented as a future-effective rule from 1 January 2027.

Practical effect and boundary

Teams can identify when technically valid provenance may create an overbroad platform label, while California video and audio ads are evaluated using performer type, voice type, real-person representation and commercial role rather than a generic AI boolean.

Updated pages

Technical and first-party references (5)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date

C2PA 2.4 implementation guidance added to Disclara

technical-standard

The provenance cluster now covers c2pa.ai-disclosure, action-level AI usage, source ingredients, Regions of Interest and granular AI-generated versus AI-edited records.

Practical effect and boundary

Marketing teams can record and interpret more precise AI-use provenance without treating a valid credential as proof of truth, authorship or legal compliance.

Updated pages

Technical and first-party references (3)
Reviewed by
Disclara Editorial
Role
Source and rules review
Review date