You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Does an entry name an algorithm or a deployment? #86
The spec defines alg as identifying "the soft binding algorithm and version of that algorithm". The list now holds two kinds of entry:
One algorithm, several entries. Meta's open VideoSeal model is entry 30 (com.aiwatermark.videoseal.1) and entry 50 (me.reconize.videoseal.1), and Add be.immostory.videoseal.1 (entry 54) #84 adds a third. Are those entries interoperable?
One entry, several algorithms. 19 of the 53 entries declare more than one media type. Entry 3 (io.iscc.v0), for example, covers separate image, audio, video and text algorithms under one identifier, with a header in each value saying which one produced it. The list does not say whether, or how, a validator can tell which algorithm produced a value.
Which should an entry denote?
An algorithm, with deployments listed as resolvers in softBindingResolutionApis.
A deployment, with an optional field such as basedOn naming the underlying algorithm.
Either, with each entry saying which it is.
This is not an objection to #84; the question applies to merged entries too.
A deployment, more specifically a deployment of a C2PA Manifest Repository. Indeed there are several examples of repositories using the same open source technologies for watermarking - some more overtly (based on the registry name) than others.
That raises questions on the model and on its governance.
If an entry is a repository deployment:
Is AIWatermark one entry or three? And how does Trufo fit, when an entry has a single type and Trufo serves a watermark and a fingerprint?
The spec, the schema and the README describe entries as algorithms ("the soft binding algorithm and version of that algorithm", "a list of Soft Binding Resolution APIs supporting this algorithm"). Do we change those texts?
Would alg in a soft binding assertion then identify a repository rather than the algorithm that produced the value?
If an entry is an algorithm:
How does a client tell which of the listed repositories issued a decoded watermark value?
Either way:
Who owns an entry? The README admits the owner of a proprietary algorithm or a maintainer of an open-source algorithm "or its fork", and lets developers amend "their entries". VideoSeal has three entries from three deployers and none from its authors.
Who decides which repositories are listed for an algorithm? Can any repository that supports it be added to softBindingResolutionApis, or only with the entry owner's consent?
Who removes a listed repository that stops working or misbehaves? The TWG may remove malicious or non-conformant entries, but nothing covers a single repository within an entry.
Activity
jcollomosse commentedon Oct 14, 2026
A deployment, more specifically a deployment of a C2PA Manifest Repository. Indeed there are several examples of repositories using the same open source technologies for watermarking - some more overtly (based on the registry name) than others.
titusz commentedon Oct 14, 2026
That raises questions on the model and on its governance.
If an entry is a repository deployment:
typeand Trufo serves a watermark and a fingerprint?algin a soft binding assertion then identify a repository rather than the algorithm that produced the value?If an entry is an algorithm:
Either way:
softBindingResolutionApis, or only with the entry owner's consent?