neeeophytee Audit Provenance
The front door. Composes the low-level analyzers and reports one summary. It performs no new analysis of its own and issues no authorship classification.
All paths below are relative to this skill's directory. If you are running from
elsewhere, use an absolute path to scripts/audit_provenance.py.
Workflow
Run:
python3 scripts/audit_provenance.py /absolute/path/to/asset \ --c2patool /path/to/c2patool \ --trust-anchors /path/to/policy.pemReport the four answers, then the unknowns. Never collapse them into a single "verified" claim.
| Answer | Means |
|---|---|
located |
Whether C2PA structure was found where the specification puts it |
verified |
Whether a conforming verifier cryptographically validated the claim |
trusted |
Whether the signer chained to the trust policy you named |
scan_complete |
Whether the whole asset was inspected |
- Read
unknowns. Each entry states the question, why it is unanswered, and the next step. Quote these; they are the point of the tool. - Cite
componentswhen a reviewer needs to re-run one analyzer directly.
Boundaries
- Without
--c2patool, the cryptographic questions stayUNKNOWN. That is not a pass. - Without
--trust-anchors,trustedstaysUNKNOWN. Trust is only meaningful against a named policy. located: NOis a bounded observation about supported carriers, never proof that content is human-made.- This skill does not hide the six analyzers; use them directly for detail.
Read references/five-questions.md before changing how an answer is derived.