Every one of this week’s stories is about a receipt. Apple wants to hand photographers one at the moment of capture. The broadcast engineers arriving at IBC this morning want one attached to every frame that moves between facilities. Jeffrey Katzenberg wants a video model that comes with one built in. Warner and BMG want to be the ones paid for issuing it. For two years the industry’s answer to synthetic media has been enforcement after the fact, a lawsuit or a takedown or a fact-check once the damage was visible. What is shifting now is where the proof gets made. It is moving upstream, into the sensor, the pipeline, and the training set, before anything ships.
What connects these four is the layer. All of them install proof beneath the content rather than policing it above. What does not connect them is who gets to sign. Apple and the C2PA coalition have picked the same problem and opposite answers about whether the verifier is an open standard or a single company. Katzenberg and the labels have picked the same problem from opposite ends of the table, one building the licensed model and the other supplying it. The pattern is agreement on the architecture and a fight over the key. That fight is the story, and it started this week.
Disclosure: I have done consulting work on C2PA implementation, including with Secret Level. That work informs the view here and readers should weigh it accordingly.
Apple builds proof of origin and skips the standard
Source: Nieman Lab, September 9, 2026
At its iPhone event, Apple introduced Apple Reference Image for the iPhone 18 Pro and Pro Max. With the feature enabled, a photo is effectively saved twice, once as a normal editable file and once as a reference image carrying a unique ID in its metadata that attests it was captured by a physical iPhone camera rather than generated. Capture telemetry, including hardware IDs and sensor signatures, goes to Apple’s Private Cloud Compute, which produces a signature tying the reference image to that specific phone. Apple says it never sees the photo itself and that the process only runs on images the user chooses to sign. Apple calls the result a digital negative.
Nieman Lab’s Joshua Benton draws the line that matters. Nikon and Canon have adopted C2PA Content Credentials for the same job. Google supports C2PA on Pixel. Apple has not signed on to Content Credentials, and this launch is the clearest statement yet that it believes it has a better approach.
Why it matters
The provenance layer just got its first major defection, and it came from the company that ships more cameras than anyone. C2PA’s premise is that a credential should be checkable by any conformant party, a broadcaster, a platform, a court. Apple’s premise is that the verifier is Apple. The reference image is a receipt the photographer can produce later, but the entity that validates the receipt is the same one that issued it. That is a closed loop with a privacy rationale, and the privacy rationale is not nothing. It is also a bet that trust in Apple substitutes for trust in a standard.
For newsrooms and broadcasters this splits the workflow in two. A photo from a Nikon carries a credential the ingest pipeline can read. A photo from an iPhone 18 Pro carries a token only Apple can resolve. Both are proof of origin. Only one of them is portable. The industry spent five years converging on a shared verification layer, and the device most journalists actually carry now sits outside it.
The broadcast floor files provenance under security
Source: NewscastStudio, August 28, 2026
IBC opens today at the RAI, and the preview coverage tells you what the buyers are asking about. NewscastStudio’s survey of production network executives puts cybersecurity, system reliability, and content authenticity in the same sentence, as workflows move to IP transport, cloud platforms, and distributed infrastructure. Net Insight’s Andreas Eriksson names the handoffs between facilities, networks, and partner organizations as the highest operational risk, the points where responsibility and visibility are divided. In the same conversation, executives point to Content Credentials based on C2PA as the tool for verifying provenance and tracking modifications across a piece of content’s lifecycle.
The concrete work sits in the IBC Accelerator programme. The Stamping Your Content project, championed by BBC and ITN, built an open-source tool that inserts C2PA metadata at the moment of publishing and a companion tool to verify it, with fingerprinting and watermarking used to recover credentials that get stripped in transit. The stated next steps are packaging it as a plugin for the tools newsrooms already use and extending stamping to live broadcast.
Why it matters
Provenance has changed departments. A year ago it lived with standards and policy people, a compliance item with a conference panel attached. This week it is being discussed by the people who run transport networks, in the vocabulary of zero-trust access and handoff risk. When a broadcaster describes content authenticity as an operational risk at the handoff, it has stopped treating provenance as a label and started treating it as part of the plumbing, alongside encryption and access control.
The Accelerator work makes that shift executable. Stamping at publish, verifying on ingest, and recovering stripped credentials via fingerprint are the three functions a pipeline needs before provenance can be assumed rather than asserted. Read against Apple’s launch, this is the open-standard side of the same layer being built by the institutions that have to exchange media with each other every day. They cannot use a verifier that only one vendor can run. That is the practical reason C2PA exists, and it is the reason Apple’s choice will be felt on this show floor first.
Katzenberg’s answer to Seedance is a model he can license
Source: The Information, September 9, 2026
The Information reports that Jeffrey Katzenberg is planning a startup with Bill Peebles, the former head of OpenAI’s Sora app, and Sujay Jaswa, the former Dropbox CFO, to train AI video models for filmmakers. The company is unnamed and is in talks with investors including Andreessen Horowitz on a large funding round. Katzenberg’s WndrCo already sits on the board of Reactor, a real-time AI video company that raised $59 million in May.
The context is February. ByteDance’s Seedance 2.0 produced a viral clip of AI versions of Tom Cruise and Brad Pitt within days of launch. The MPA said the model had engaged in unauthorized use of US copyrighted works on a massive scale and demanded ByteDance cease. Disney sent a cease-and-desist. ByteDance pledged stronger safeguards. Seven months later, the industry’s most experienced studio operator is building the thing the studios were threatening to sue.
Why it matters
The move is not defensive in the way the headlines suggest. A Hollywood insider building an AI video model is not a hedge against Seedance. It is a decision about where the legal exposure gets resolved. Suing ByteDance polices the output. Owning a model trained on material you are entitled to use settles the input, which is where the courts have been slowest and the studios have been most exposed. The lawsuit route requires proving harm after generation. The ownership route makes the training set the proof.
Peebles is the tell. Sora’s head leaving OpenAI to build video models with a studio veteran says the frontier labs are not the natural owners of the licensed layer. The labs own the general capability. The people who own the rights and the relationships can build the version filmmakers are permitted to use, and that permitted version is now the product. The a16z conversation is capital arriving to fund a rights-native model rather than a general one, which is a different investment thesis than the one that funded the labs.
Suno retires its old models and ships the licensed ones
Source: Variety, September 9, 2026
Suno launched its v6 family, three models built with Warner Music Group, BMG, and the distributor Believe, and said it will retire every earlier model as v6 rolls out. The flagship v6 and the more experimental v6-wild go to Pro and Premier subscribers; v6-mini is free. Chief product officer Jack Brody describes the models as trained from the ground up on licensed data from partners plus user data, with revenue sharing for artists and labels, though Suno has declined to give specifics on the training set or the payment structures.
The sequencing is the story. Warner settled its copyright suit against Suno in November 2025 on terms that required Suno to launch more advanced licensed models and retire the existing ones. BMG, which never sued, signed a licensing deal in August. Believe’s partnership, announced the day before launch, opens TuneCore distribution to tracks generated on the licensed models. Universal and Sony remain in litigation.
Why it matters
This is the cleanest version of the pattern because the settlement wrote the product roadmap. The models trained on Warner’s catalog without permission are being switched off. The models replacing them were built with Warner. The lawsuit did not end in damages; it ended in a supply agreement, and the supplier is the plaintiff. Warner and BMG are now on the issuing side of the proof. Their license is the credential that makes a v6 output usable, and they get paid each time it is issued.
Katzenberg is building this from the studio side. The labels arrived at it from the catalog side. Both end at the same place, a model whose legitimacy is established at training rather than litigated at output. The gaps are real: Suno will not say what is in the data, the artist payment terms are undefined, and the two largest labels are still in court. But the direction of the settlement flow is set. The remaining suits are negotiating for a seat on the issuing side, not for the model to go away.
The layer is settled. The key is not.
Take the four together and the shared move is easy to see. The proof of what something is and where it came from is being installed before distribution, in the camera, in the publish pipeline, in the training set. Enforcement after the fact is not going away, but it is being demoted from primary control to backstop. That is the shift that will still be true in a year.
The disagreement is over who issues the proof, and it splits along a line the industry should recognize. On one side, an open credential that any party can verify: C2PA in the broadcast pipeline, and, in the rights layer, licenses that travel with the model and can be audited by whoever needs to. On the other, a verifier that is also the issuer: Apple resolving its own reference tokens, a single studio-backed model whose permission structure lives inside the company that trained it. Both produce proof. They produce different kinds of dependency.
Why now is straightforward. Seedance made output policing look hopeless in February. Warner’s settlement made the licensed-model route look profitable in November. IBC puts the people who have to exchange media across organizations in one building this week, and they have concluded that provenance belongs with security. Apple, reading the same landscape, chose to own its slice of the layer rather than join it. Everyone decided the receipt goes upstream. They did not decide it should be readable by anyone else.
Closing note
The next twelve months will be spent finding out whether the proof layer is a shared utility or a set of walled gardens with overlapping vocabulary. The early evidence points both ways at once, which is normal for a layer this young. Broadcasters will push for interoperability because their business is handoffs. Device makers and model owners will push for control because their business is the platform.
Watch three things. Whether Apple’s reference image can be read by any conformant C2PA validator without going through Apple. Whether the Accelerator’s stamping tools show up as defaults inside the newsroom software vendors on this show floor, rather than as plugins someone has to remember to install. And whether Universal and Sony settle with Suno on terms that look like Warner’s, which would confirm that the issuing side of the proof is where the labels intend to live.
If the answer to the first is no, the provenance layer has forked at the sensor. If the answer to the second is yes, the open side has a distribution advantage the closed side will have to buy. Either way, the question the industry is now arguing over is not whether the proof exists. It is who you have to trust to read it.
Let me be clear... my click on the <3 is not an endorsement of the direction of the world this post describes. More it is an appreciation that Andy is surfacing this.
"Capture telemetry, including hardware IDs and sensor signatures, goes to Apple’s Private Cloud Compute, which produces a signature tying the reference image to that specific phone. Apple says it never sees the photo itself and that the process only runs on images the user chooses to sign. Apple calls the result a digital negative."
Perhaps this was bound to happen, but now your choice of device, subject, usage, and everything from that point down the line becomes potential evidence against you. As this this an iPhone they're talking about you've also got a SIM on there that increasingly exposes you to ID requirements. This will undoubtably be a juicy target for government action. So far Apple has resisted. As for whether Apple is more trustworthy than government... in many cases they are. But they're also an opaque profit-seeking entity. Perhaps the real tragedy is that honest profit-seeking is more trustworthy than the flimsily veiled tyranny of 'democratic' institutions.