← The Index
013

Field Note · 013

The pixels that confess.

On invisible watermarks and the burden of proof. Summer 2026.

The image standard now has two layers doing different jobs. C2PA, the provenance specification backed by Adobe, Microsoft, Google, and OpenAI, attaches a signed manifest describing who made a file and how. SynthID, from Google DeepMind, hides a second mark inside the pixels themselves, engineered to survive a screenshot, a crop, and compression, invisible to the eye and readable only by a paired detector. The manifest is rich and easy to strip. The watermark is durable and says almost nothing. Under the EU AI Act, whose transparency rules arrive in August 2026, some machine readable version of this marking stops being optional.

01 /
Two layers, two ways to fail. The manifest carries the whole story and can be erased by a single re-save. The watermark survives the trip but reports only that a machine had a hand in this, nothing about whose or why. Neither is sufficient alone, which is why they now travel together, each covering the other's weakness.
02 /
For the entire history of the photograph, the default was trust: real unless proven otherwise. Generative images inverted it. The answer taking shape is not to restore the old trust. It is to make the picture carry papers, so it can testify about its own origins whether or not anyone thinks to ask.
03 /
The honest label their output. The forgers who matter, the ones behind the fabricated war footage and the election eve deepfake, were never going to opt in. So the mark ends up certifying the compliant and staying silent about the dangerous. Google is careful to say the aim is to raise the cost of misuse, not to defeat a determined adversary. It is a fence the honest walk through and the rest walk around.

We spent a century learning to believe our eyes. Now the image arrives with documents, and we are learning, slowly, to check them at the door. The strange part is not that pictures can lie. Pictures always could, with enough darkroom patience. The strange part is that we now need them to swear they are telling the truth, and that we have taught them to do it in a language only another machine can read. Authenticity used to be something you saw. It is becoming something you look up.

AIProvenance2026
← Note 012
The night, rescored.