Provenance Gateway

Embed a signed provenance manifest inside the asset itself (JUMBF in JPEG APP11 / PNG caBX / PDF trailing block), or read and verify one that is already embedded. The manifest is hard-bound to the SHA-256 of the asset bytes with the manifest removed, so any change to the file breaks the binding.

Standard C2PA uses the official C2PA SDK and an X.509 certificate; the file opens in c2patool and other C2PA verifiers. Requires sign-in. JPEG and PNG.