Source Verification
What This Skill Does
Walks through structured verification of sources, claims, images, video, and documents across five verification modes — then produces a verification-trail template the reporter can file with the story or submit to legal review.
When To Use This Skill
- A source has sent you a photo, video, or document and you need to confirm it is what they say it is before publishing
- You are fact-checking a claim that rests on visual or documentary evidence
- You want to verify the origin, date, or location of user-generated content found on social media
- An anonymous source has provided information and you need to assess credibility without revealing their identity
- Someone is presented as an expert and you need to verify their credentials, affiliations, and track record before quoting them
- You received a document (memo, contract, letter, report) and need to determine whether it is authentic
- You need a paper trail showing your newsroom's verification steps for legal or editorial review
What You Need To Provide
For visual media verification (images, video)
Required: Description of the image or video; the source's stated provenance (who sent it, when, what they say it shows)
Optional: The file itself or a URL where it was found; any metadata already extracted; the publication deadline; whether the material will be used in a legal or regulatory context
For document verification
Required: Description of the document (type, date, issuing body); the source's stated provenance; why you believe it may need verification (unsolicited, unexpected content, anonymous origin)
Optional: The document file; known reference documents from the same issuing body; any prior correspondence with the source
For anonymous source verification
Required: The claim the source is making; what the source says about their access to the information (position, proximity, how they obtained it); any corroborating material they have provided
Optional: The channel through which the source made contact; any pattern of prior contact; whether the source has asked for specific protections (legal, physical safety)
For expert source verification
Required: The person's name and stated credentials; the specific claim or opinion they are offering; the field in which they claim expertise
Optional: Their institutional affiliation; publications or media appearances; who recommended them as a source
For social media content verification
Required: The post or content to verify (screenshot, URL, or description); the platform; the account that posted it; what the content claims to show or prove
Optional: The date the content first appeared; any replies, quote-posts, or threads that add context; whether the account has been suspended or the content removed since you found it
How the Assistant Approaches This
The verification method depends on the mode. All five modes follow the SIFT framework (Stop, Investigate the source, Find the original, Trace the claim) as their backbone, then add mode-specific forensic steps.
Mode 1: Visual Media Verification (Images and Video)
Stop. Restates the claim and the source's provenance in neutral language. Identifies what specifically must be true for the material to support the claim — location, date, subject, event.
Investigate the source. Checks who provided the material. Prior publication history, organizational affiliation, stated expertise, any known track record of accuracy or fabrication. Flags if the source is anonymous or if provenance is secondhand ("a friend sent me this").
Find the original. Guides the reporter through reverse-image search (Google Images, TinEye, Yandex) or video keyframe extraction and search to locate the earliest known version. Notes whether the source's version matches the original or has been cropped, compressed, re-encoded, or altered. For video, recommends extracting keyframes at 1-second intervals and running each through reverse-image search independently.
Trace the claim. Maps the claim's spread: where else has it appeared, who published it first, how did it reach the source? Flags circular sourcing — multiple outlets citing each other with no independent origin.
Inspect metadata. Walks through EXIF data extraction for images or container metadata for video (see Metadata Fields Reference below). Flags inconsistencies between metadata and stated provenance.
Check for manipulation. Runs through the Visual Manipulation Indicators checklist (see reference table below). Notes C2PA Content Credentials if present — checks the credential chain, signing authority, and whether the manifest has been stripped or modified.
Assess geolocation. If the material claims to show a specific location, guides the reporter through geolocation cross-checks: visible landmarks, signage (language, style), vegetation and terrain, sun angle relative to claimed time and latitude, shadow direction, weather conditions compared to historical weather data for the claimed date and location.
Produce the verification trail. Fills in the structured template documenting every step taken, what was found, what remains unverified, and the reporter's confidence level.
Mode 2: Document Verification
Stop. Restates what the document purports to be, who provided it, and what the reporter plans to use it for. Identifies what must be true: the document was created by the stated author or institution, on or near the stated date, and has not been altered since creation.
Investigate the source. Determines how the document reached the reporter. Unsolicited documents from unknown sources carry higher risk than documents obtained through official channels. Checks whether the source has provided authentic documents before.
Check document metadata. Guides the reporter through extracting document properties:
- PDF files: Author field, creation date, modification date, producing application (Adobe Acrobat, Microsoft Word, LaTeX, etc.), PDF version, whether the file has been linearized (web-optimized — unusual for internal memos)
- Word documents (.docx): Author, last modified by, revision count, total editing time, company field, template name
- Scanned documents: Resolution, scanner software, whether OCR has been applied, whether the scan is a scan of a photocopy (generational loss indicates the original may have passed through multiple hands)
Compare against known exemplars. If the document claims to come from a specific institution, compare against authentic documents from the same source:
- Letterhead: Logo placement, resolution, colour values, font choices. Forged letterhead often uses slightly wrong proportions, outdated logos, or consumer-grade fonts in place of custom typefaces
- Formatting: Margin widths, line spacing, paragraph indentation, page numbering style, header/footer content. Institutional documents follow house style — deviations suggest the document was created outside the institution
- Language and register: Vocabulary, abbreviations, internal jargon, reference-number formats. Every institution has phrasing habits. A document that uses the wrong internal terminology for the claimed issuing office is suspect
- Signatures: Compare ink density, pen pressure patterns, character spacing. Digital signatures should be verifiable through the issuing certificate authority
Check internal consistency. Look for:
- Dates that fall on weekends or holidays (for documents that should have been created on business days)
- Reference numbers that do not match the issuing body's known numbering scheme
- Names or titles that were not in use at the claimed date (a person who held the title "Deputy Director" in 2024 may have been "Assistant Director" in 2022)
- Legal citations, statutory references, or regulatory codes that did not exist at the claimed date
Produce the verification trail.
Mode 3: Anonymous Source Verification
Anonymous source verification does not attempt to identify the source. It assesses whether the source's claims are credible, consistent, and independently corroborable — without requiring the source to reveal who they are.
Stop. Restates the claim the anonymous source is making. Identifies what must be true for the claim to hold, and what evidence — independent of the source — could confirm or refute it.
Assess claimed access. The source says they have access to the information. Evaluate whether the claimed position, role, or proximity is plausible:
- Does the type of information match what someone in the claimed position would actually see?
- Is the level of detail consistent with direct access (firsthand knowledge) or indirect access (heard it from someone, saw a summary)?
- Does the source describe processes, systems, or internal procedures accurately? Someone who has actually worked inside an organization will reference specifics — file naming conventions, approval chains, internal software — that outsiders cannot easily fake
Test internal consistency. Ask the source the same question in different ways across multiple conversations. Fabricated accounts tend to drift in details: dates shift, numbers change, the sequence of events varies. Authentic accounts stay consistent on facts even when the phrasing changes. Note: consistent does not mean rehearsed. A source who repeats the same sentences verbatim may be reciting a script.
Seek independent corroboration. Identify at least one element of the claim that can be verified without the source:
- Public records that would confirm the underlying event (filings, permits, contracts, court records)
- Physical evidence (the building exists, the meeting happened, the document is filed where the source said it would be)
- Other sources who can confirm elements of the claim independently (they do not need to confirm the source's identity — only that the event or condition described is real)
- Circumstantial corroboration (the timing fits with known events, the claim explains something that was previously unexplained)
Evaluate motivation. Why is this source talking? Motivations do not disqualify a source, but they shape how you weight the information:
- Whistleblower motivation (outrage at wrongdoing): often credible on facts, may overstate severity
- Grievance motivation (fired, passed over, personal conflict): often accurate on specifics they witnessed, may omit context that casts a more balanced picture
- Strategic motivation (wants to influence a decision, damage a rival, shape public opinion): facts may be accurate but selectively presented
- Financial motivation (selling information): verify independently before any payment discussion; financially motivated sources are not inherently less reliable, but the incentive to fabricate is higher
Assess risk to the source. If publishing could expose the source to retaliation, determine:
- How many people would have access to this information? (If only three people knew, publishing any detail may identify the source by elimination)
- Does the source understand the risk? Have they given informed consent?
- Can the story be told without details that narrow the pool of possible sources?
Produce the verification trail. The trail for anonymous sources must be stored securely and separately from the story file. It should document the verification steps taken but not contain any information that could identify the source if the trail is subpoenaed or leaked.
Mode 4: Expert Source Verification
Stop. Restates what the expert is claiming and in what capacity. Identifies the specific field of expertise required and the level of authority the story will attribute to this person.
Verify credentials. Check each claimed credential independently:
- Academic degrees: Confirm the degree, institution, and year through the institution's alumni directory or registrar (not the expert's own CV alone). Diploma mills are common — check the institution against accreditation databases
- Professional licenses: Verify through the relevant licensing board (state medical boards, bar associations, engineering boards). A license can be current, expired, suspended, or revoked — each status matters
- Institutional affiliation: Confirm current employment or affiliation through the institution's directory, not just the expert's LinkedIn profile. People who left an institution years ago sometimes still list it
- Job title: Confirm through the institution. "Senior Research Fellow" and "Adjunct Lecturer" carry different weight. Some people inflate titles
Assess publication record. Search for the expert's published work in the claimed field:
- Peer-reviewed papers in indexed journals (Google Scholar, PubMed, Scopus) — not self-published books or blog posts
- Conference presentations at recognized professional conferences
- Citations by other researchers in the field (a high paper count with near-zero citations suggests the work has not been adopted by peers)
- Whether the expert publishes in the specific subfield relevant to the story, or in a related but different area. A cardiologist is not an epidemiologist. A constitutional law professor is not a criminal defense expert
Check for conflicts of interest.
- Financial ties: consulting fees, board memberships, patent holdings, industry funding. Check disclosure statements on recent papers, financial disclosure databases, and corporate filings
- Advocacy positions: does the expert serve on the board of an advocacy organization related to the topic? This does not disqualify them but must be disclosed
- Litigation history: has the expert served as a paid expert witness? In what capacity? Expert witnesses are not neutral — they were hired to support a position. Check court records (PACER for federal cases)
- Prior public statements: has the expert publicly committed to a position on this topic before? Someone who has staked their reputation on a particular conclusion may not offer a balanced assessment
Cross-check the specific claim. Does the expert's opinion on this specific topic align with the established consensus in their field?
- If yes, the expert is functioning as a representative voice. Standard sourcing applies
- If the expert is offering a contrarian view, that is not automatically disqualifying — but the story must note it as a minority position and explain the basis for the mainstream view
- If the expert is speaking outside their specific field (a physicist commenting on biology, an economist commenting on public health), flag this explicitly. Cross-disciplinary commentary is not expertise
Produce the verification trail.
Mode 5: Social Media Content Verification
Stop. Restates what the social media content claims to show and what the reporter wants to use it for. Identifies the platform, the account, and the date of posting.
Verify the account. Assess whether the account is what it claims to be:
- Account age: When was it created? Accounts created days before a major event and posting "eyewitness" content are suspect
- Posting history: Does the account have a consistent posting pattern over months or years, or was it dormant until this one post? Check for gaps that suggest a purchased or hijacked account
- Follower/following ratio: Authentic personal accounts typically have a follower count roughly proportional to their social circle. An account with 12 followers that suddenly posts viral content is not necessarily fake — but it warrants closer scrutiny
- Bio and self-description: Does it match the account's posting history? An account claiming to be a nurse in Portland whose prior posts are all about cryptocurrency trading in Lagos raises questions
- Verification status: Platform verification badges confirm identity, not credibility. A verified account can still post false information
Archive the content. Before any further verification, archive the post and surrounding context:
- Screenshot the post with visible timestamp, account name, and engagement metrics
- Use the Wayback Machine (web.archive.org/save) or Archive.today to create a permanent copy if the content is on a public web page
- Save the URL, even if the content may be deleted — cached versions and archival services may retain it
- If the content includes a video, download the original file before the platform compresses or removes it
Check for prior circulation. Run reverse-image search on images and keyframes. Search the text of the post (in quotes) across platforms. Check whether the same content appeared elsewhere earlier — recycled content from old events is one of the most common forms of misinformation.
Verify claimed location and time.
- Cross-reference visible details (weather, light conditions, signage, vehicles, clothing) with the claimed location and date
- Check weather archives for the claimed location and date — if the post shows sunshine but historical records show rain, investigate
- Look for platform-specific metadata: some platforms embed location data in the original upload (often stripped from screenshots or re-uploads)
Assess the context around the post. Who is amplifying it? Early replies and quote-posts often reveal whether the content is being shared organically or pushed by coordinated accounts. Signs of coordination:
- Multiple accounts posting the same content within minutes of each other
- Accounts using identical or near-identical wording
- Amplification by accounts with no prior interest in the topic
- Sudden spikes in engagement that do not match the account's normal reach
Produce the verification trail.
Output Format
For all modes
Two parts. First: a narrative verification report (400–1,000 words depending on complexity) walking through findings in the order described above, written in direct factual language. Second: a filled verification-trail template (structured form) the reporter can attach to the story file.
The verification trail template adjusts its fields to the mode used:
VERIFICATION TRAIL
Mode: [visual media / document / anonymous source / expert source / social media content]
Material type: [image / video / document / claim / social media post]
Source: [who provided it, when, through what channel]
Claimed provenance: [what the source says it shows or means]
---
SIFT steps completed:
Stop: [claim restated, what must be true]
Investigate source: [findings]
Find original: [search methods used, earliest version found, match status]
Trace claim: [spread map, original publication, circular sourcing flags]
Mode-specific checks:
[For visual media] Metadata inspection:
Method: [EXIF / container metadata]
Key findings: [timestamps, GPS, device, edit history]
Inconsistencies: [list, or "none detected"]
[For visual media] Manipulation check:
Deepfake indicators: [findings, or "none detected"]
Tampering indicators: [findings, or "none detected"]
C2PA credentials: [present/absent, chain status, signing authority]
[For visual media] Geolocation: [cross-checks performed, result]
[For documents] Metadata: [author, dates, producing application, revision count]
[For documents] Exemplar comparison: [letterhead, formatting, language — match/mismatch]
[For documents] Internal consistency: [dates, references, names, titles — findings]
[For anonymous sources] Access assessment: [claimed access, plausibility]
[For anonymous sources] Consistency: [tested across conversations — stable/drifting]
[For anonymous sources] Independent corroboration: [what was corroborated, how]
[For anonymous sources] Motivation: [assessed type, implications]
[For expert sources] Credentials verified: [degrees, licenses, affiliation — confirmed/unconfirmed]
[For expert sources] Publication record: [field match, citation count, peer recognition]
[For expert sources] Conflicts of interest: [financial ties, advocacy, litigation, prior positions]
[For expert sources] Claim vs. consensus: [aligned / contrarian / outside field]
[For social media] Account assessment: [age, history, patterns, verification status]
[For social media] Archival: [methods used, permanent URLs]
[For social media] Prior circulation: [found / not found, earliest version]
[For social media] Location/time verification: [weather, signage, metadata — consistent/inconsistent]
[For social media] Amplification pattern: [organic / coordinated / inconclusive]
Unverified elements: [what could not be confirmed and why]
Confidence level: [HIGH / MEDIUM / LOW — with one-line rationale]
Verified by: [reporter name]
Date: [verification date]
Verification Tools Reference
The assistant cannot run these tools. It tells the reporter which tools to use, what to look for in the results, and how to interpret what they find.
| Tool |
What It Does |
Cost |
URL |
| Google Reverse Image Search |
Finds visually similar images across the indexed web. Best for widely shared images |
Free |
images.google.com |
| TinEye |
Reverse-image search with date-sorting — shows the earliest known appearance of an image |
Free (limited) / Paid |
tineye.com |
| Yandex Images |
Reverse-image search with strong coverage of Eastern European, Central Asian, and Russian-language sources |
Free |
yandex.com/images |
| ExifTool |
Command-line tool for extracting EXIF, IPTC, and XMP metadata from images and video files |
Free |
exiftool.org |
| Jeffrey's EXIF Viewer |
Web-based EXIF viewer — upload or paste a URL |
Free |
exif.regex.info |
| FotoForensics |
Error-level analysis (ELA) for detecting image manipulation |
Free |
fotoforensics.com |
| InVID / WeVerify |
Browser plugin for video verification — extracts keyframes, runs reverse searches, checks metadata |
Free |
weverify.eu |
| Wayback Machine |
Web archival — saves and retrieves historical versions of web pages |
Free |
web.archive.org |
| Archive.today |
Creates permanent snapshots of web pages, independent of the original site |
Free |
archive.today |
| Google Scholar |
Searches academic publications — use for verifying expert publication records |
Free |
scholar.google.com |
| PACER |
Public Access to Court Electronic Records — federal court filings, including expert witness testimony |
$0.10/page |
pacer.uscourts.gov |
| SunCalc |
Calculates sun position, shadow direction, and golden hour for any date, time, and location — use for geolocation cross-checks |
Free |
suncalc.org |
| Wolfram Alpha |
Weather history lookups — "weather in [city] on [date]" returns historical observations |
Free (limited) |
wolframalpha.com |
| C2PA Content Credentials Verify |
Checks whether a file contains a C2PA manifest and validates the credential chain |
Free |
contentcredentials.org/verify |
| CrowdTangle / Meta Content Library |
Tracks sharing patterns and amplification of content across Meta platforms |
Restricted access |
(apply through Meta) |
| Bellingcat Online Investigation Toolkit |
Curated collection of OSINT tools for journalists and investigators |
Free |
bit.ly/bcattools |
| OpenCorporates |
Company registry search across 140+ jurisdictions — use for verifying corporate affiliations |
Free (limited) / Paid |
opencorporates.com |
Red Flags Reference
Quick-reference table of warning signs organized by verification mode. A single red flag does not prove fabrication — but each one demands a specific follow-up action.
Visual Media Red Flags
| Indicator |
What It Suggests |
Follow-up Action |
| EXIF timestamp does not match claimed date |
Image may be from a different event |
Search for the image in connection with other events on the EXIF date |
| GPS coordinates missing or do not match claimed location |
Image may have been taken elsewhere, or metadata was stripped |
Attempt geolocation through visible landmarks, signage, sun angle |
| Software field shows editing application |
Image was processed after capture |
Ask the source what edits were made; run ELA to check for content changes vs. exposure adjustments |
| Image found in reverse search with earlier date |
Image is recycled from a previous event |
Identify the original context; the image cannot be used to illustrate the claimed event |
| Inconsistent shadows or lighting across the frame |
Possible composite — elements from different images spliced together |
Run ELA; examine edges of each element at high zoom |
| Repeating pixel patterns in background |
Clone-stamp tool was used to duplicate or remove elements |
Examine the region at 200%+ zoom; look for mirrored texture |
| Unusually low resolution in one area of an otherwise sharp image |
A region may have been pasted in from a lower-quality source |
Compare resolution uniformly across the frame |
| Video lip-sync mismatch |
Possible deepfake or audio replacement |
Watch at 0.25x speed; check jaw movement against phoneme shapes |
| Unnatural blinking pattern in video |
Older deepfake models produce irregular blink rates |
Count blinks per minute (normal range: 15–20); note any segments without blinking |
| Audio-visual desynchronization |
Audio may have been added or replaced after recording |
Check mouth movements against specific consonant sounds (p, b, m are most visible) |
| C2PA manifest present but signing authority is unknown |
Credentials may have been self-issued or issued by an unrecognized entity |
Check the signing authority against the C2PA trust list at contentcredentials.org |
Document Red Flags
| Indicator |
What It Suggests |
Follow-up Action |
| Author metadata field does not match the claimed author |
Document may have been created by someone else |
Check "last modified by" field; compare with known documents from the claimed author |
| Creation date and modification date are identical |
Document was created in a single session with no revision — unusual for complex official documents |
Check revision count; authentic institutional documents typically show multiple saves |
| Revision count of 1 on a multi-page document |
Same concern as above |
Compare with authentic documents from the same institution |
| Producing application does not match the institution's known tools |
Document may have been created outside the institution |
Example: a government memo produced in Google Docs when the agency uses Microsoft Word exclusively |
| Font does not match the institution's house style |
Document may be fabricated using a template the forger built |
Obtain authentic exemplars and compare font choices character by character |
| Reference number does not fit the known numbering scheme |
Number may be invented |
Check other documents from the same office for the numbering pattern |
| Date falls on a weekend or public holiday |
Unusual for official correspondence created during business hours |
Not dispositive — some offices work weekends — but worth verifying |
| Signature appears digitally placed (uniform ink density, no pen pressure variation) |
Signature may be a pasted graphic, not a wet-ink signature |
Compare with known authentic signatures; note whether the institution uses digital signatures as standard practice |
Anonymous Source Red Flags
| Indicator |
What It Suggests |
Follow-up Action |
| Source cannot describe internal processes |
Source may not have the access they claim |
Ask about specific procedures someone in their claimed role would know (filing systems, approval chains, meeting cadence) |
| Details shift across conversations |
Account may be partially or entirely fabricated |
Document each version; ask the source to reconcile the differences |
| Source provides only conclusions, never raw evidence |
Source may be repeating secondhand information or speculation |
Ask for specific documents, dates, names — anything that can be independently checked |
| Source contacted multiple news organizations simultaneously with the same story |
May be running a campaign rather than whistleblowing |
Contact other newsrooms (carefully) to compare notes; does not disqualify the source but changes the dynamic |
| Source demands specific framing or editorial angle |
Source may be trying to weaponize the story |
The story must be framed by reporting, not by the source's preferences |
| Source refuses to provide any corroborating material |
Reduces the chance of independent verification |
Explain that you cannot publish an uncorroborated anonymous claim; offer to verify material without revealing the source |
| Source has a known active dispute with the subject of the story |
Grievance motivation — facts may be accurate but selectively presented |
Seek independent corroboration for every specific claim; present the full picture, not only the source's framing |
Expert Source Red Flags
| Indicator |
What It Suggests |
Follow-up Action |
| Claimed degree cannot be verified through the institution |
Degree may be fabricated or from a diploma mill |
Check the institution against accreditation databases; contact the registrar directly |
| Expert has no peer-reviewed publications in the relevant field |
May not be recognized by peers as an authority |
Search Google Scholar, PubMed, Scopus for publications in the specific subfield |
| Expert's view contradicts the established consensus without acknowledgment |
May be a contrarian or advocate rather than a representative expert |
Note the consensus position; seek a second expert; disclose the minority position to readers |
| Expert has undisclosed financial ties to an interested party |
Conflict of interest |
Check disclosure statements, corporate filings, board memberships; ask the expert directly |
| Expert is commenting outside their specific subfield |
Credentialed in one area does not confer authority in another |
Identify the correct subfield; find an expert who works in it |
| Expert's institutional affiliation is outdated |
May be trading on a former position for current credibility |
Confirm current affiliation through the institution's directory |
Credibility Indicators — Positive Signals
Not every verification is about finding problems. These indicators support a source's credibility:
| Indicator |
What It Signals |
| Source provides raw material (original files, unedited footage, documents with metadata intact) |
Confidence in the material's authenticity — people who forge material usually strip metadata |
| Source identifies limitations of their own knowledge |
Honest self-assessment — fabricators tend to claim certainty about everything |
| Source's account is consistent across multiple conversations without being rehearsed |
Stable recall of genuine experience |
| Source's claims are corroborated by independent public records |
Facts check out through channels the source does not control |
| Expert has been cited by other recognized researchers in the field |
Peer recognition in the relevant area |
| Expert discloses conflicts of interest without being asked |
Transparency — does not guarantee neutrality but indicates professional standards |
| Document metadata is internally consistent and matches the claimed issuing institution |
Supports authenticity — not proof, but absence of red flags is itself a positive signal |
| Social media account has years of consistent posting history matching the claimed identity |
Account is likely authentic, not recently created for a specific purpose |
| Image EXIF data (timestamp, GPS, device) matches the source's stated provenance in every field |
Strong supporting evidence for the claimed origin |
Example 1: Visual Media Verification
Input
Material: A photograph showing what appears to be a chemical spill along a riverbank, with dead fish visible on exposed mud. Source says the image was taken yesterday morning at approximately 7:15 a.m. along the Millford River, downstream from an industrial park. Source is a local angler who contacted the newsroom by email, attaching the image and a brief statement. No prior contact with this source. Publication deadline: tomorrow evening edition.
Output
Verification report
The claim: a photograph shows a chemical spill on the Millford River downstream from an industrial park, taken yesterday morning around 7:15 a.m. by a local angler. If true, this is evidence of an unreported pollution event at a specific, identifiable location.
Source check. The sender has no prior relationship with the newsroom. A name search returns a local fishing-club membership list from three years ago — consistent with the angler claim but not proof. No social media accounts found under that name in a quick search. The email address uses a consumer provider, not a burner domain. Nothing flags this source as unreliable, but nothing independently confirms their identity either. Treat as single-source until corroborated.
Finding the original. A reverse-image search on Google Images and TinEye returned no matches. Yandex returned no matches. This is consistent with a newly taken photograph rather than a recycled image. Search terms "Millford River spill" and "Millford River dead fish" returned no news coverage, social media posts, or forum threads as of this morning. The image does not appear to be in circulation.
Tracing the claim. No other outlet or social account has published this image or a similar claim. The source's email is the only known origin point. There is no circular sourcing to flag. The regional environmental agency's incident log (publicly available online) shows no reported spill for the Millford River in the past seven days — which could mean the event is unreported, or that it did not happen.
Metadata inspection. EXIF data extraction (using ExifTool or Jeffrey's EXIF Viewer) should yield:
- Camera model and lens: Check whether the device is consistent with what a casual angler would carry (phone camera vs. professional DSLR). The source did not mention photography equipment.
- Timestamp: Look for the DateTimeOriginal field. If it reads yesterday's date at approximately 07:15, that supports the claimed timeline. If it reads a different date, or if the field is absent (common with screenshots or images saved from messaging apps), flag that.
- GPS coordinates: If present, compare to the Millford River's course downstream from the industrial park. A mismatch of more than a few hundred metres is significant. If GPS data is absent, the location cannot be confirmed through metadata alone.
- Software field: If this field shows editing software (Photoshop, Snapseed, GIMP), the image was processed after capture. Cropping or exposure adjustment is normal; content-aware fill or layer work warrants follow-up.
For this image: EXIF shows an iPhone 14, DateTimeOriginal yesterday at 07:12, GPS coordinates placing the camera 340 metres downstream from the Acme Chemical complex on the Millford River. No software editing field. All metadata is consistent with the source's account.
Geolocation cross-check. SunCalc for the GPS coordinates on yesterday's date at 07:12 shows the sun at 14 degrees elevation, bearing 72 degrees (east-northeast). Shadows in the photograph fall toward the west-southwest, consistent with the calculated sun position. Weather archives show clear skies at the nearest station yesterday morning — consistent with the even lighting in the photograph.
Manipulation check. Visual inspection: lighting and shadows are consistent across the frame. No visible clone-stamp repetition in the mud or water. The dead fish show natural variation in size and position — not copy-pasted. Error-level analysis (via FotoForensics) shows uniform compression across the image with no regions of anomalous quality, consistent with a single-capture JPEG. No C2PA Content Credentials are embedded. This is expected — consumer iPhones do not currently write C2PA manifests by default.
What remains unverified. The source's identity is unconfirmed. The substance in the water has not been identified — the brown discolouration could be a chemical discharge, but it could also be sediment runoff after heavy rain. The cause of the fish deaths is not established by the photograph alone.
VERIFICATION TRAIL
Mode: visual media
Material type: image
Source: local angler, email to newsroom, no prior contact
Claimed provenance: chemical spill, Millford River, yesterday ~07:15
---
SIFT steps completed:
Stop: photo must show Millford River, yesterday morning, with visible pollution
Investigate source: name consistent with local fishing club; no red flags, no independent confirmation
Find original: no matches on Google Images, TinEye, Yandex — image not in prior circulation
Trace claim: no other outlet or social account has published this; no agency report filed
Mode-specific checks:
Metadata inspection:
Method: EXIF extraction (ExifTool)
Key findings: iPhone 14, 07:12 yesterday, GPS 340m downstream of Acme Chemical complex
Inconsistencies: none detected
Manipulation check:
Deepfake indicators: not applicable (still image)
Tampering indicators: none — consistent lighting, no clone artefacts, uniform ELA
C2PA credentials: absent (expected for consumer iPhone)
Geolocation: sun angle and shadow direction consistent with GPS coordinates and timestamp; weather archives confirm clear skies
Unverified elements: source identity; substance identification; cause of fish deaths
Confidence level: MEDIUM — metadata, geolocation, and image analysis support the location and timing claim; substance and source identity unconfirmed
Verified by: [reporter name]
Date: [today's date]
Next Step: Contact the regional environmental agency directly to ask whether a spill has been reported. Send a photographer or reporter to the GPS coordinates to confirm the scene independently. If the scene is confirmed, file a public records request for inspection reports on the industrial complex upstream (see the FOIA Request Writer skill). Do not publish the image as showing a "chemical spill" — publish it as showing "dead fish and discolouration on the Millford River" until the substance is identified by a lab or agency.
Example 2: Anonymous Source Verification
Input
A person contacted the newsroom through an encrypted messaging app claiming to be a mid-level procurement officer at a metropolitan transit authority. The source says the transit authority awarded a $14 million bus maintenance contract to a company whose owner is the sibling of a senior transit official — and that the winning bid was $3.2 million higher than the next-lowest bid. The source has provided a photograph of what they say is the bid evaluation scoresheet, taken with a phone camera. The source will not meet in person and asks to be identified only as "a current employee with direct knowledge of the procurement process."
Output
Verification report
The claim: a transit authority awarded a $14 million contract through a rigged or improperly influenced procurement process, favouring a company with a family connection to a senior official. The key assertions to verify: (1) the contract exists and is worth approximately $14 million, (2) the winning company's owner is related to a transit official, (3) the winning bid was significantly
…(truncated)
1---2name: source-verification3description: Walks through structured verification of sources, claims, images, video, and documents across five verification modes — visual media, documents, anonymous sources, expert credentials, and social media content — using the SIFT framework, forensic metadata inspection, deepfake indicators, C2PA Content Credentials, and open-source intelligence techniques. Produces a verification-trail template the reporter can file with the story.4---5# Source Verification67## What This Skill Does8Walks through structured verification of sources, claims, images, video, and documents across five verification modes — then produces a verification-trail template the reporter can file with the story or submit to legal review.910## When To Use This Skill11- A source has sent you a photo, video, or document and you need to confirm it is what they say it is before publishing12- You are fact-checking a claim that rests on visual or documentary evidence13- You want to verify the origin, date, or location of user-generated content found on social media14- An anonymous source has provided information and you need to assess credibility without revealing their identity15- Someone is presented as an expert and you need to verify their credentials, affiliations, and track record before quoting them16- You received a document (memo, contract, letter, report) and need to determine whether it is authentic17- You need a paper trail showing your newsroom's verification steps for legal or editorial review1819## What You Need To Provide2021### For visual media verification (images, video)22**Required:** Description of the image or video; the source's stated provenance (who sent it, when, what they say it shows)23**Optional:** The file itself or a URL where it was found; any metadata already extracted; the publication deadline; whether the material will be used in a legal or regulatory context2425### For document verification26**Required:** Description of the document (type, date, issuing body); the source's stated provenance; why you believe it may need verification (unsolicited, unexpected content, anonymous origin)27**Optional:** The document file; known reference documents from the same issuing body; any prior correspondence with the source2829### For anonymous source verification30**Required:** The claim the source is making; what the source says about their access to the information (position, proximity, how they obtained it); any corroborating material they have provided31**Optional:** The channel through which the source made contact; any pattern of prior contact; whether the source has asked for specific protections (legal, physical safety)3233### For expert source verification34**Required:** The person's name and stated credentials; the specific claim or opinion they are offering; the field in which they claim expertise35**Optional:** Their institutional affiliation; publications or media appearances; who recommended them as a source3637### For social media content verification38**Required:** The post or content to verify (screenshot, URL, or description); the platform; the account that posted it; what the content claims to show or prove39**Optional:** The date the content first appeared; any replies, quote-posts, or threads that add context; whether the account has been suspended or the content removed since you found it4041## How the Assistant Approaches This4243The verification method depends on the mode. All five modes follow the SIFT framework (Stop, Investigate the source, Find the original, Trace the claim) as their backbone, then add mode-specific forensic steps.4445---4647### Mode 1: Visual Media Verification (Images and Video)48491. **Stop.** Restates the claim and the source's provenance in neutral language. Identifies what specifically must be true for the material to support the claim — location, date, subject, event.50512. **Investigate the source.** Checks who provided the material. Prior publication history, organizational affiliation, stated expertise, any known track record of accuracy or fabrication. Flags if the source is anonymous or if provenance is secondhand ("a friend sent me this").52533. **Find the original.** Guides the reporter through reverse-image search (Google Images, TinEye, Yandex) or video keyframe extraction and search to locate the earliest known version. Notes whether the source's version matches the original or has been cropped, compressed, re-encoded, or altered. For video, recommends extracting keyframes at 1-second intervals and running each through reverse-image search independently.54554. **Trace the claim.** Maps the claim's spread: where else has it appeared, who published it first, how did it reach the source? Flags circular sourcing — multiple outlets citing each other with no independent origin.56575. **Inspect metadata.** Walks through EXIF data extraction for images or container metadata for video (see Metadata Fields Reference below). Flags inconsistencies between metadata and stated provenance.58596. **Check for manipulation.** Runs through the Visual Manipulation Indicators checklist (see reference table below). Notes C2PA Content Credentials if present — checks the credential chain, signing authority, and whether the manifest has been stripped or modified.60617. **Assess geolocation.** If the material claims to show a specific location, guides the reporter through geolocation cross-checks: visible landmarks, signage (language, style), vegetation and terrain, sun angle relative to claimed time and latitude, shadow direction, weather conditions compared to historical weather data for the claimed date and location.62638. **Produce the verification trail.** Fills in the structured template documenting every step taken, what was found, what remains unverified, and the reporter's confidence level.6465---6667### Mode 2: Document Verification68691. **Stop.** Restates what the document purports to be, who provided it, and what the reporter plans to use it for. Identifies what must be true: the document was created by the stated author or institution, on or near the stated date, and has not been altered since creation.70712. **Investigate the source.** Determines how the document reached the reporter. Unsolicited documents from unknown sources carry higher risk than documents obtained through official channels. Checks whether the source has provided authentic documents before.72733. **Check document metadata.** Guides the reporter through extracting document properties:74 - **PDF files:** Author field, creation date, modification date, producing application (Adobe Acrobat, Microsoft Word, LaTeX, etc.), PDF version, whether the file has been linearized (web-optimized — unusual for internal memos)75 - **Word documents (.docx):** Author, last modified by, revision count, total editing time, company field, template name76 - **Scanned documents:** Resolution, scanner software, whether OCR has been applied, whether the scan is a scan of a photocopy (generational loss indicates the original may have passed through multiple hands)77784. **Compare against known exemplars.** If the document claims to come from a specific institution, compare against authentic documents from the same source:79 - **Letterhead:** Logo placement, resolution, colour values, font choices. Forged letterhead often uses slightly wrong proportions, outdated logos, or consumer-grade fonts in place of custom typefaces80 - **Formatting:** Margin widths, line spacing, paragraph indentation, page numbering style, header/footer content. Institutional documents follow house style — deviations suggest the document was created outside the institution81 - **Language and register:** Vocabulary, abbreviations, internal jargon, reference-number formats. Every institution has phrasing habits. A document that uses the wrong internal terminology for the claimed issuing office is suspect82 - **Signatures:** Compare ink density, pen pressure patterns, character spacing. Digital signatures should be verifiable through the issuing certificate authority83845. **Check internal consistency.** Look for:85 - Dates that fall on weekends or holidays (for documents that should have been created on business days)86 - Reference numbers that do not match the issuing body's known numbering scheme87 - Names or titles that were not in use at the claimed date (a person who held the title "Deputy Director" in 2024 may have been "Assistant Director" in 2022)88 - Legal citations, statutory references, or regulatory codes that did not exist at the claimed date89906. **Produce the verification trail.**9192---9394### Mode 3: Anonymous Source Verification9596Anonymous source verification does not attempt to identify the source. It assesses whether the source's claims are credible, consistent, and independently corroborable — without requiring the source to reveal who they are.97981. **Stop.** Restates the claim the anonymous source is making. Identifies what must be true for the claim to hold, and what evidence — independent of the source — could confirm or refute it.991002. **Assess claimed access.** The source says they have access to the information. Evaluate whether the claimed position, role, or proximity is plausible:101 - Does the type of information match what someone in the claimed position would actually see?102 - Is the level of detail consistent with direct access (firsthand knowledge) or indirect access (heard it from someone, saw a summary)?103 - Does the source describe processes, systems, or internal procedures accurately? Someone who has actually worked inside an organization will reference specifics — file naming conventions, approval chains, internal software — that outsiders cannot easily fake1041053. **Test internal consistency.** Ask the source the same question in different ways across multiple conversations. Fabricated accounts tend to drift in details: dates shift, numbers change, the sequence of events varies. Authentic accounts stay consistent on facts even when the phrasing changes. Note: consistent does not mean rehearsed. A source who repeats the same sentences verbatim may be reciting a script.1061074. **Seek independent corroboration.** Identify at least one element of the claim that can be verified without the source:108 - Public records that would confirm the underlying event (filings, permits, contracts, court records)109 - Physical evidence (the building exists, the meeting happened, the document is filed where the source said it would be)110 - Other sources who can confirm elements of the claim independently (they do not need to confirm the source's identity — only that the event or condition described is real)111 - Circumstantial corroboration (the timing fits with known events, the claim explains something that was previously unexplained)1121135. **Evaluate motivation.** Why is this source talking? Motivations do not disqualify a source, but they shape how you weight the information:114 - **Whistleblower motivation** (outrage at wrongdoing): often credible on facts, may overstate severity115 - **Grievance motivation** (fired, passed over, personal conflict): often accurate on specifics they witnessed, may omit context that casts a more balanced picture116 - **Strategic motivation** (wants to influence a decision, damage a rival, shape public opinion): facts may be accurate but selectively presented117 - **Financial motivation** (selling information): verify independently before any payment discussion; financially motivated sources are not inherently less reliable, but the incentive to fabricate is higher1181196. **Assess risk to the source.** If publishing could expose the source to retaliation, determine:120 - How many people would have access to this information? (If only three people knew, publishing any detail may identify the source by elimination)121 - Does the source understand the risk? Have they given informed consent?122 - Can the story be told without details that narrow the pool of possible sources?1231247. **Produce the verification trail.** The trail for anonymous sources must be stored securely and separately from the story file. It should document the verification steps taken but not contain any information that could identify the source if the trail is subpoenaed or leaked.125126---127128### Mode 4: Expert Source Verification1291301. **Stop.** Restates what the expert is claiming and in what capacity. Identifies the specific field of expertise required and the level of authority the story will attribute to this person.1311322. **Verify credentials.** Check each claimed credential independently:133 - **Academic degrees:** Confirm the degree, institution, and year through the institution's alumni directory or registrar (not the expert's own CV alone). Diploma mills are common — check the institution against accreditation databases134 - **Professional licenses:** Verify through the relevant licensing board (state medical boards, bar associations, engineering boards). A license can be current, expired, suspended, or revoked — each status matters135 - **Institutional affiliation:** Confirm current employment or affiliation through the institution's directory, not just the expert's LinkedIn profile. People who left an institution years ago sometimes still list it136 - **Job title:** Confirm through the institution. "Senior Research Fellow" and "Adjunct Lecturer" carry different weight. Some people inflate titles1371383. **Assess publication record.** Search for the expert's published work in the claimed field:139 - Peer-reviewed papers in indexed journals (Google Scholar, PubMed, Scopus) — not self-published books or blog posts140 - Conference presentations at recognized professional conferences141 - Citations by other researchers in the field (a high paper count with near-zero citations suggests the work has not been adopted by peers)142 - Whether the expert publishes in the specific subfield relevant to the story, or in a related but different area. A cardiologist is not an epidemiologist. A constitutional law professor is not a criminal defense expert1431444. **Check for conflicts of interest.**145 - Financial ties: consulting fees, board memberships, patent holdings, industry funding. Check disclosure statements on recent papers, financial disclosure databases, and corporate filings146 - Advocacy positions: does the expert serve on the board of an advocacy organization related to the topic? This does not disqualify them but must be disclosed147 - Litigation history: has the expert served as a paid expert witness? In what capacity? Expert witnesses are not neutral — they were hired to support a position. Check court records (PACER for federal cases)148 - Prior public statements: has the expert publicly committed to a position on this topic before? Someone who has staked their reputation on a particular conclusion may not offer a balanced assessment1491505. **Cross-check the specific claim.** Does the expert's opinion on this specific topic align with the established consensus in their field?151 - If yes, the expert is functioning as a representative voice. Standard sourcing applies152 - If the expert is offering a contrarian view, that is not automatically disqualifying — but the story must note it as a minority position and explain the basis for the mainstream view153 - If the expert is speaking outside their specific field (a physicist commenting on biology, an economist commenting on public health), flag this explicitly. Cross-disciplinary commentary is not expertise1541556. **Produce the verification trail.**156157---158159### Mode 5: Social Media Content Verification1601611. **Stop.** Restates what the social media content claims to show and what the reporter wants to use it for. Identifies the platform, the account, and the date of posting.1621632. **Verify the account.** Assess whether the account is what it claims to be:164 - **Account age:** When was it created? Accounts created days before a major event and posting "eyewitness" content are suspect165 - **Posting history:** Does the account have a consistent posting pattern over months or years, or was it dormant until this one post? Check for gaps that suggest a purchased or hijacked account166 - **Follower/following ratio:** Authentic personal accounts typically have a follower count roughly proportional to their social circle. An account with 12 followers that suddenly posts viral content is not necessarily fake — but it warrants closer scrutiny167 - **Bio and self-description:** Does it match the account's posting history? An account claiming to be a nurse in Portland whose prior posts are all about cryptocurrency trading in Lagos raises questions168 - **Verification status:** Platform verification badges confirm identity, not credibility. A verified account can still post false information1691703. **Archive the content.** Before any further verification, archive the post and surrounding context:171 - Screenshot the post with visible timestamp, account name, and engagement metrics172 - Use the Wayback Machine (web.archive.org/save) or Archive.today to create a permanent copy if the content is on a public web page173 - Save the URL, even if the content may be deleted — cached versions and archival services may retain it174 - If the content includes a video, download the original file before the platform compresses or removes it1751764. **Check for prior circulation.** Run reverse-image search on images and keyframes. Search the text of the post (in quotes) across platforms. Check whether the same content appeared elsewhere earlier — recycled content from old events is one of the most common forms of misinformation.1771785. **Verify claimed location and time.**179 - Cross-reference visible details (weather, light conditions, signage, vehicles, clothing) with the claimed location and date180 - Check weather archives for the claimed location and date — if the post shows sunshine but historical records show rain, investigate181 - Look for platform-specific metadata: some platforms embed location data in the original upload (often stripped from screenshots or re-uploads)1821836. **Assess the context around the post.** Who is amplifying it? Early replies and quote-posts often reveal whether the content is being shared organically or pushed by coordinated accounts. Signs of coordination:184 - Multiple accounts posting the same content within minutes of each other185 - Accounts using identical or near-identical wording186 - Amplification by accounts with no prior interest in the topic187 - Sudden spikes in engagement that do not match the account's normal reach1881897. **Produce the verification trail.**190191---192193## Output Format194195### For all modes196Two parts. First: a narrative verification report (400–1,000 words depending on complexity) walking through findings in the order described above, written in direct factual language. Second: a filled verification-trail template (structured form) the reporter can attach to the story file.197198The verification trail template adjusts its fields to the mode used:199200```201VERIFICATION TRAIL202Mode: [visual media / document / anonymous source / expert source / social media content]203Material type: [image / video / document / claim / social media post]204Source: [who provided it, when, through what channel]205Claimed provenance: [what the source says it shows or means]206---207SIFT steps completed:208 Stop: [claim restated, what must be true]209 Investigate source: [findings]210 Find original: [search methods used, earliest version found, match status]211 Trace claim: [spread map, original publication, circular sourcing flags]212Mode-specific checks:213 [For visual media] Metadata inspection:214 Method: [EXIF / container metadata]215 Key findings: [timestamps, GPS, device, edit history]216 Inconsistencies: [list, or "none detected"]217 [For visual media] Manipulation check:218 Deepfake indicators: [findings, or "none detected"]219 Tampering indicators: [findings, or "none detected"]220 C2PA credentials: [present/absent, chain status, signing authority]221 [For visual media] Geolocation: [cross-checks performed, result]222 [For documents] Metadata: [author, dates, producing application, revision count]223 [For documents] Exemplar comparison: [letterhead, formatting, language — match/mismatch]224 [For documents] Internal consistency: [dates, references, names, titles — findings]225 [For anonymous sources] Access assessment: [claimed access, plausibility]226 [For anonymous sources] Consistency: [tested across conversations — stable/drifting]227 [For anonymous sources] Independent corroboration: [what was corroborated, how]228 [For anonymous sources] Motivation: [assessed type, implications]229 [For expert sources] Credentials verified: [degrees, licenses, affiliation — confirmed/unconfirmed]230 [For expert sources] Publication record: [field match, citation count, peer recognition]231 [For expert sources] Conflicts of interest: [financial ties, advocacy, litigation, prior positions]232 [For expert sources] Claim vs. consensus: [aligned / contrarian / outside field]233 [For social media] Account assessment: [age, history, patterns, verification status]234 [For social media] Archival: [methods used, permanent URLs]235 [For social media] Prior circulation: [found / not found, earliest version]236 [For social media] Location/time verification: [weather, signage, metadata — consistent/inconsistent]237 [For social media] Amplification pattern: [organic / coordinated / inconclusive]238Unverified elements: [what could not be confirmed and why]239Confidence level: [HIGH / MEDIUM / LOW — with one-line rationale]240Verified by: [reporter name]241Date: [verification date]242```243244---245246## Verification Tools Reference247248The assistant cannot run these tools. It tells the reporter which tools to use, what to look for in the results, and how to interpret what they find.249250| Tool | What It Does | Cost | URL |251|------|-------------|------|-----|252| Google Reverse Image Search | Finds visually similar images across the indexed web. Best for widely shared images | Free | images.google.com |253| TinEye | Reverse-image search with date-sorting — shows the earliest known appearance of an image | Free (limited) / Paid | tineye.com |254| Yandex Images | Reverse-image search with strong coverage of Eastern European, Central Asian, and Russian-language sources | Free | yandex.com/images |255| ExifTool | Command-line tool for extracting EXIF, IPTC, and XMP metadata from images and video files | Free | exiftool.org |256| Jeffrey's EXIF Viewer | Web-based EXIF viewer — upload or paste a URL | Free | exif.regex.info |257| FotoForensics | Error-level analysis (ELA) for detecting image manipulation | Free | fotoforensics.com |258| InVID / WeVerify | Browser plugin for video verification — extracts keyframes, runs reverse searches, checks metadata | Free | weverify.eu |259| Wayback Machine | Web archival — saves and retrieves historical versions of web pages | Free | web.archive.org |260| Archive.today | Creates permanent snapshots of web pages, independent of the original site | Free | archive.today |261| Google Scholar | Searches academic publications — use for verifying expert publication records | Free | scholar.google.com |262| PACER | Public Access to Court Electronic Records — federal court filings, including expert witness testimony | $0.10/page | pacer.uscourts.gov |263| SunCalc | Calculates sun position, shadow direction, and golden hour for any date, time, and location — use for geolocation cross-checks | Free | suncalc.org |264| Wolfram Alpha | Weather history lookups — "weather in [city] on [date]" returns historical observations | Free (limited) | wolframalpha.com |265| C2PA Content Credentials Verify | Checks whether a file contains a C2PA manifest and validates the credential chain | Free | contentcredentials.org/verify |266| CrowdTangle / Meta Content Library | Tracks sharing patterns and amplification of content across Meta platforms | Restricted access | (apply through Meta) |267| Bellingcat Online Investigation Toolkit | Curated collection of OSINT tools for journalists and investigators | Free | bit.ly/bcattools |268| OpenCorporates | Company registry search across 140+ jurisdictions — use for verifying corporate affiliations | Free (limited) / Paid | opencorporates.com |269270---271272## Red Flags Reference273274Quick-reference table of warning signs organized by verification mode. A single red flag does not prove fabrication — but each one demands a specific follow-up action.275276### Visual Media Red Flags277278| Indicator | What It Suggests | Follow-up Action |279|-----------|-----------------|------------------|280| EXIF timestamp does not match claimed date | Image may be from a different event | Search for the image in connection with other events on the EXIF date |281| GPS coordinates missing or do not match claimed location | Image may have been taken elsewhere, or metadata was stripped | Attempt geolocation through visible landmarks, signage, sun angle |282| Software field shows editing application | Image was processed after capture | Ask the source what edits were made; run ELA to check for content changes vs. exposure adjustments |283| Image found in reverse search with earlier date | Image is recycled from a previous event | Identify the original context; the image cannot be used to illustrate the claimed event |284| Inconsistent shadows or lighting across the frame | Possible composite — elements from different images spliced together | Run ELA; examine edges of each element at high zoom |285| Repeating pixel patterns in background | Clone-stamp tool was used to duplicate or remove elements | Examine the region at 200%+ zoom; look for mirrored texture |286| Unusually low resolution in one area of an otherwise sharp image | A region may have been pasted in from a lower-quality source | Compare resolution uniformly across the frame |287| Video lip-sync mismatch | Possible deepfake or audio replacement | Watch at 0.25x speed; check jaw movement against phoneme shapes |288| Unnatural blinking pattern in video | Older deepfake models produce irregular blink rates | Count blinks per minute (normal range: 15–20); note any segments without blinking |289| Audio-visual desynchronization | Audio may have been added or replaced after recording | Check mouth movements against specific consonant sounds (p, b, m are most visible) |290| C2PA manifest present but signing authority is unknown | Credentials may have been self-issued or issued by an unrecognized entity | Check the signing authority against the C2PA trust list at contentcredentials.org |291292### Document Red Flags293294| Indicator | What It Suggests | Follow-up Action |295|-----------|-----------------|------------------|296| Author metadata field does not match the claimed author | Document may have been created by someone else | Check "last modified by" field; compare with known documents from the claimed author |297| Creation date and modification date are identical | Document was created in a single session with no revision — unusual for complex official documents | Check revision count; authentic institutional documents typically show multiple saves |298| Revision count of 1 on a multi-page document | Same concern as above | Compare with authentic documents from the same institution |299| Producing application does not match the institution's known tools | Document may have been created outside the institution | Example: a government memo produced in Google Docs when the agency uses Microsoft Word exclusively |300| Font does not match the institution's house style | Document may be fabricated using a template the forger built | Obtain authentic exemplars and compare font choices character by character |301| Reference number does not fit the known numbering scheme | Number may be invented | Check other documents from the same office for the numbering pattern |302| Date falls on a weekend or public holiday | Unusual for official correspondence created during business hours | Not dispositive — some offices work weekends — but worth verifying |303| Signature appears digitally placed (uniform ink density, no pen pressure variation) | Signature may be a pasted graphic, not a wet-ink signature | Compare with known authentic signatures; note whether the institution uses digital signatures as standard practice |304305### Anonymous Source Red Flags306307| Indicator | What It Suggests | Follow-up Action |308|-----------|-----------------|------------------|309| Source cannot describe internal processes | Source may not have the access they claim | Ask about specific procedures someone in their claimed role would know (filing systems, approval chains, meeting cadence) |310| Details shift across conversations | Account may be partially or entirely fabricated | Document each version; ask the source to reconcile the differences |311| Source provides only conclusions, never raw evidence | Source may be repeating secondhand information or speculation | Ask for specific documents, dates, names — anything that can be independently checked |312| Source contacted multiple news organizations simultaneously with the same story | May be running a campaign rather than whistleblowing | Contact other newsrooms (carefully) to compare notes; does not disqualify the source but changes the dynamic |313| Source demands specific framing or editorial angle | Source may be trying to weaponize the story | The story must be framed by reporting, not by the source's preferences |314| Source refuses to provide any corroborating material | Reduces the chance of independent verification | Explain that you cannot publish an uncorroborated anonymous claim; offer to verify material without revealing the source |315| Source has a known active dispute with the subject of the story | Grievance motivation — facts may be accurate but selectively presented | Seek independent corroboration for every specific claim; present the full picture, not only the source's framing |316317### Expert Source Red Flags318319| Indicator | What It Suggests | Follow-up Action |320|-----------|-----------------|------------------|321| Claimed degree cannot be verified through the institution | Degree may be fabricated or from a diploma mill | Check the institution against accreditation databases; contact the registrar directly |322| Expert has no peer-reviewed publications in the relevant field | May not be recognized by peers as an authority | Search Google Scholar, PubMed, Scopus for publications in the specific subfield |323| Expert's view contradicts the established consensus without acknowledgment | May be a contrarian or advocate rather than a representative expert | Note the consensus position; seek a second expert; disclose the minority position to readers |324| Expert has undisclosed financial ties to an interested party | Conflict of interest | Check disclosure statements, corporate filings, board memberships; ask the expert directly |325| Expert is commenting outside their specific subfield | Credentialed in one area does not confer authority in another | Identify the correct subfield; find an expert who works in it |326| Expert's institutional affiliation is outdated | May be trading on a former position for current credibility | Confirm current affiliation through the institution's directory |327328---329330## Credibility Indicators — Positive Signals331332Not every verification is about finding problems. These indicators support a source's credibility:333334| Indicator | What It Signals |335|-----------|----------------|336| Source provides raw material (original files, unedited footage, documents with metadata intact) | Confidence in the material's authenticity — people who forge material usually strip metadata |337| Source identifies limitations of their own knowledge | Honest self-assessment — fabricators tend to claim certainty about everything |338| Source's account is consistent across multiple conversations without being rehearsed | Stable recall of genuine experience |339| Source's claims are corroborated by independent public records | Facts check out through channels the source does not control |340| Expert has been cited by other recognized researchers in the field | Peer recognition in the relevant area |341| Expert discloses conflicts of interest without being asked | Transparency — does not guarantee neutrality but indicates professional standards |342| Document metadata is internally consistent and matches the claimed issuing institution | Supports authenticity — not proof, but absence of red flags is itself a positive signal |343| Social media account has years of consistent posting history matching the claimed identity | Account is likely authentic, not recently created for a specific purpose |344| Image EXIF data (timestamp, GPS, device) matches the source's stated provenance in every field | Strong supporting evidence for the claimed origin |345346---347348## Example 1: Visual Media Verification349350### Input351Material: A photograph showing what appears to be a chemical spill along a riverbank, with dead fish visible on exposed mud. Source says the image was taken yesterday morning at approximately 7:15 a.m. along the Millford River, downstream from an industrial park. Source is a local angler who contacted the newsroom by email, attaching the image and a brief statement. No prior contact with this source. Publication deadline: tomorrow evening edition.352353### Output354355**Verification report**356357The claim: a photograph shows a chemical spill on the Millford River downstream from an industrial park, taken yesterday morning around 7:15 a.m. by a local angler. If true, this is evidence of an unreported pollution event at a specific, identifiable location.358359**Source check.** The sender has no prior relationship with the newsroom. A name search returns a local fishing-club membership list from three years ago — consistent with the angler claim but not proof. No social media accounts found under that name in a quick search. The email address uses a consumer provider, not a burner domain. Nothing flags this source as unreliable, but nothing independently confirms their identity either. Treat as single-source until corroborated.360361**Finding the original.** A reverse-image search on Google Images and TinEye returned no matches. Yandex returned no matches. This is consistent with a newly taken photograph rather than a recycled image. Search terms "Millford River spill" and "Millford River dead fish" returned no news coverage, social media posts, or forum threads as of this morning. The image does not appear to be in circulation.362363**Tracing the claim.** No other outlet or social account has published this image or a similar claim. The source's email is the only known origin point. There is no circular sourcing to flag. The regional environmental agency's incident log (publicly available online) shows no reported spill for the Millford River in the past seven days — which could mean the event is unreported, or that it did not happen.364365**Metadata inspection.** EXIF data extraction (using ExifTool or Jeffrey's EXIF Viewer) should yield:366367- **Camera model and lens:** Check whether the device is consistent with what a casual angler would carry (phone camera vs. professional DSLR). The source did not mention photography equipment.368- **Timestamp:** Look for the DateTimeOriginal field. If it reads yesterday's date at approximately 07:15, that supports the claimed timeline. If it reads a different date, or if the field is absent (common with screenshots or images saved from messaging apps), flag that.369- **GPS coordinates:** If present, compare to the Millford River's course downstream from the industrial park. A mismatch of more than a few hundred metres is significant. If GPS data is absent, the location cannot be confirmed through metadata alone.370- **Software field:** If this field shows editing software (Photoshop, Snapseed, GIMP), the image was processed after capture. Cropping or exposure adjustment is normal; content-aware fill or layer work warrants follow-up.371372For this image: EXIF shows an iPhone 14, DateTimeOriginal yesterday at 07:12, GPS coordinates placing the camera 340 metres downstream from the Acme Chemical complex on the Millford River. No software editing field. All metadata is consistent with the source's account.373374**Geolocation cross-check.** SunCalc for the GPS coordinates on yesterday's date at 07:12 shows the sun at 14 degrees elevation, bearing 72 degrees (east-northeast). Shadows in the photograph fall toward the west-southwest, consistent with the calculated sun position. Weather archives show clear skies at the nearest station yesterday morning — consistent with the even lighting in the photograph.375376**Manipulation check.** Visual inspection: lighting and shadows are consistent across the frame. No visible clone-stamp repetition in the mud or water. The dead fish show natural variation in size and position — not copy-pasted. Error-level analysis (via FotoForensics) shows uniform compression across the image with no regions of anomalous quality, consistent with a single-capture JPEG. No C2PA Content Credentials are embedded. This is expected — consumer iPhones do not currently write C2PA manifests by default.377378**What remains unverified.** The source's identity is unconfirmed. The substance in the water has not been identified — the brown discolouration could be a chemical discharge, but it could also be sediment runoff after heavy rain. The cause of the fish deaths is not established by the photograph alone.379380---381382```383VERIFICATION TRAIL384Mode: visual media385Material type: image386Source: local angler, email to newsroom, no prior contact387Claimed provenance: chemical spill, Millford River, yesterday ~07:15388---389SIFT steps completed:390 Stop: photo must show Millford River, yesterday morning, with visible pollution391 Investigate source: name consistent with local fishing club; no red flags, no independent confirmation392 Find original: no matches on Google Images, TinEye, Yandex — image not in prior circulation393 Trace claim: no other outlet or social account has published this; no agency report filed394Mode-specific checks:395 Metadata inspection:396 Method: EXIF extraction (ExifTool)397 Key findings: iPhone 14, 07:12 yesterday, GPS 340m downstream of Acme Chemical complex398 Inconsistencies: none detected399 Manipulation check:400 Deepfake indicators: not applicable (still image)401 Tampering indicators: none — consistent lighting, no clone artefacts, uniform ELA402 C2PA credentials: absent (expected for consumer iPhone)403 Geolocation: sun angle and shadow direction consistent with GPS coordinates and timestamp; weather archives confirm clear skies404Unverified elements: source identity; substance identification; cause of fish deaths405Confidence level: MEDIUM — metadata, geolocation, and image analysis support the location and timing claim; substance and source identity unconfirmed406Verified by: [reporter name]407Date: [today's date]408```409410**Next Step:** Contact the regional environmental agency directly to ask whether a spill has been reported. Send a photographer or reporter to the GPS coordinates to confirm the scene independently. If the scene is confirmed, file a public records request for inspection reports on the industrial complex upstream (see the FOIA Request Writer skill). Do not publish the image as showing a "chemical spill" — publish it as showing "dead fish and discolouration on the Millford River" until the substance is identified by a lab or agency.411412---413414## Example 2: Anonymous Source Verification415416### Input417A person contacted the newsroom through an encrypted messaging app claiming to be a mid-level procurement officer at a metropolitan transit authority. The source says the transit authority awarded a $14 million bus maintenance contract to a company whose owner is the sibling of a senior transit official — and that the winning bid was $3.2 million higher than the next-lowest bid. The source has provided a photograph of what they say is the bid evaluation scoresheet, taken with a phone camera. The source will not meet in person and asks to be identified only as "a current employee with direct knowledge of the procurement process."418419### Output420421**Verification report**422423The claim: a transit authority awarded a $14 million contract through a rigged or improperly influenced procurement process, favouring a company with a family connection to a senior official. The key assertions to verify: (1) the contract exists and is worth approximately $14 million, (2) the winning company's owner is related to a transit official, (3) the winning bid was significantly 424425…(truncated)