Let’s talk about the week the provenance stamp finally did its job.
Because for the last two years, I have watched the provenance story run as a catalogue of failure. The detection tools that only half worked. The metadata that fell off in a screenshot. The labels the builders never shipped. The stamp nobody could check. I have said some of that into this microphone myself.
And then something quiet happened that I think most people missed.
C2PA — the Content Credentials standard — stopped being a pilot and started being infrastructure. It is the thing that attaches a cryptographic birth certificate to a piece of media the moment it is created: the camera signs the photo, the editing tool records the change, the browser reads the chain and tells you what you are actually looking at. Adobe built it into Photoshop and Lightroom. Google built it into Chrome and its own model outputs. Microsoft signed on. The phone makers are putting it in the hardware.
Not because the companies got ethical. Because the liability got real, and because provenance turned out to be the one defense that actually scales.
Here is the part that should reframe the whole debate for you.
For years we were told the fight against deepfakes would be won by detection — a model that looks at a video and sniffs out the fake. That approach has a ceiling. Detection is a race between two models, and the forger’s model keeps getting cheaper. You are always one update behind.
Provenance inverts the whole thing. It does not try to spot the lie. It makes the truth carry proof of itself from birth — so that the honest video arrives with a chain of custody you can check, and the fake has to actively work, and break something, to pretend it is honest. The burden moved. The fake is now the one doing the labour.
And this week, that mechanism produced its first widely-reported real-world result: a forged video that was flagged, traced, and pulled — not by a smarter detector arguing with the pixels, but because the genuine source footage carried credentials the fake couldn’t replicate, and the whole chain collapsed in hours.
Now, let me be careful, because I don’t want to oversell it.
Credentials can still be stripped. A screenshot of a screen can still break the chain. Bad actors are already working on it — that is not a conspiracy, it is a budget line. And half the world’s content still has no stamp at all. This is not the finish line.
But it is the first time the honest side had an asymmetric advantage instead of a losing race.
Picture the human scene under all of this.
Think about the person — a journalist, a lawyer, a small business owner, a normal person defending their name — who until now had exactly two options when a fake appeared. Option one: hire an expert and hope the detector is good enough today. Option two: let the accusation stand, because fighting it costs more than surviving it.
Provenance gives that person a third option that costs them nothing at the moment it matters most. Their real work already carries its own proof. They don’t have to win an arms race on a deadline. They just have to point at the chain.
That is the difference between a technology and a right. A detection tool is a service you buy when you are already in trouble. Provenance is infrastructure that was already protecting you before anyone attacked — the way a signature already protects a contract, the way a witness already protects a testimony.
So here is the principle I want to hold onto, and it is the reason this matters beyond the tech.
The answer to a world where the machine can fake your face, your voice, and your words was never going to be teaching everyone to be a forensic expert. It was going to be making the honest artifact carry proof of itself — so that trust stops depending on suspicion and starts depending on something you can actually verify.
Suspicion does not scale. Proof has to. And for the first time, proof is starting to.
The machine can now fake almost anything.
But it is discovering that faking the absence of proof is a different game — and that is the one place the human, making the real thing, finally has the advantage.
Keep the chain. Make the real thing. And when the fake shows up, you won’t have to argue. You’ll just have to show your work.