AUDIT GRADE DOCUMENTATION™

PROVENX WATERMARK — CHAIN OF GOVERNANCE INTEGRITY

1%

LOW

Watermark Provenance Score

C2PA MANIFEST STATUS

DETECTED

1 JUMBF boxes found

WATERMARK PROVENANCE FIELDS

NSI — NEGATIVE SPACE INTELLIGENCE (9 gaps)

DRI — DEPTH RESONANCE INTELLIGENCE

COMPLIANCE MAPPING

RULE 707 / DAUBERT READINESS

4/5

READY

GOVERNED FORENSIC REPORT — WATERMARK AUDIT

# OSHI-5 PROVENX WATERMARK — AUDIT REPORT **USPTO 19/571,156 | Auditor of the Authenticators** --- ## FILE UNDER AUDIT | Field | Value | |---|---| | **Filename** | test-displacement.jpg | | **C2PA Status** | DETECTED (Shell Only) | | **SynthID Signal** | Not Present | | **AudioSeal Signal** | N/A (image file) | | **Watermark CGI Score** | 1% — LOW | | **Overall Trust Verdict** | ❌ FAIL — PROVENANCE CHAIN BROKEN | --- ## MANIFEST INTEGRITY SUMMARY > C2PA container was detected. Manifest fields are **entirely empty**. No assertions, no signature, no hash binding. The manifest is a structural ghost — present as a wrapper, absent as evidence. --- ## NSI FINDINGS — Non-Conformance Index | # | Item | Severity | Finding | |---|---|---|---| | 1 | Creator Assertion | 🟡 YELLOW | Field absent — origin unverifiable | | 2 | Creation Assertion | 🟡 YELLOW | Field absent — timestamp chain broken | | 3 | AI Generation Flag | 🔴 RED | Field absent — AI origin cannot be ruled out or confirmed | | 4 | Hash Binding | 🔴 RED | Field absent — file-to-manifest integrity link does not exist | | 5 | Signature | 🔴 RED | Field absent — no cryptographic authority established | | 6 | Schema Reference | 🟡 YELLOW | Field absent — manifest structure non-conformant | | 7 | EXIF Preservation | 🟡 YELLOW | Field absent — camera/device origin chain broken | | 8 | XMP Metadata | 🟡 YELLOW | Field absent — descriptive provenance void | | 9 | Edit History | 🟡 YELLOW | Field absent — transformation record missing | **NSI Score: 9/9 fields non-conformant | 3 RED | 6 YELLOW** --- ## DRI FINDINGS — Displacement & Removal Indicators ### 🔴 DRI-001 — UNSIGNED MANIFEST ``` C2PA manifest container detected. No cryptographic signature found within container. Status: MANIFEST IS LEGALLY AND TECHNICALLY VOID. An unsigned C2PA manifest provides zero provenance assurance. It cannot be attributed, verified, or trusted. ``` --- ### 🔴 DRI-002 — NULL BYTE PADDING DETECTED ``` Location: Byte position 2 Pattern: 64 consecutive null bytes (0x00 × 64) Interpretation: DISPLACEMENT ARTIFACT Null-byte fills at this position are a known forensic signature of metadata stripping tools that excise C2PA, XMP, or EXIF blocks and backfill the vacated byte range with zeros to preserve file offsets. The original data that occupied this space is gone. What remains is the shape of what was removed. ``` --- ### 🔴 DRI-003 — ORPHANED XMP HEADER ``` XMP packet-begin marker: FOUND at byte 90 XMP packet-end marker: NOT FOUND Status: INCOMPLETE REMOVAL — DISPLACEMENT ARTIFACT The XMP block was not cleanly stripped. The opening declaration survives; the payload and closing marker do not. This is consistent with a partial or interrupted metadata removal operation. The XMP record is unreadable and unrecoverable from this file. ``` --- ## WATERMARK LAYER SCORECARD | Layer | Expected | Detected | Score | |---|---|---|---| | C2PA Manifest Structure | ✅ | ✅ (empty) | Structural only | | C2PA Assertions | ✅ | ❌ | 0% | | C2PA Signature | ✅ | ❌ | 0% | | C2PA Hash Binding | ✅ | ❌ | 0% | | XMP Metadata | ✅ | ❌ (orphaned) | 0% | | EXIF Chain | ✅ | ❌ | 0% | | SynthID | — | ❌ | N/A | | Watermark CGI Signal | ≥70% recommended | 1% | 1% | **Aggregate Provenance Integrity: < 1%** --- ## FORENSIC INTERPRETATION ``` DISPLACEMENT PATTERN CONFIRMED. Three independent indicators converge on a single conclusion: 1. Null-byte fill at byte 2 → prior metadata block removed 2. Orphaned XMP header at byte 90 → partial strip operation 3. Empty C2PA manifest → assertions deleted post-container creation This file shows the forensic profile of an image that carried provenance metadata that was subsequently removed. The removal was imperfect — artifacts remain that prove prior occupancy of metadata structures. The file cannot be treated as provenance-clean. The file cannot be treated as provenance-intact. It occupies the most dangerous category: a file that APPEARS to have a C2PA layer but carries NO verifiable claims within it. ``` --- ## RISK CLASSIFICATION | Risk Category | Status | |---|---| | AI Origin Concealment Risk | 🔴 HIGH — flag absent, removal detected | | Attribution Fraud Risk | 🔴 HIGH — creator chain void | | Tamper Evidence | 🔴 HIGH — displacement artifacts present | | Publication Trust Risk | 🔴 HIGH — no verifiable provenance | | Chain-of-Custody Admissibility | ❌ FAIL | --- ## VERDICT ``` ┌─────────────────────────────────────────────────────┐ │ │ │ PROVENANCE STATUS: ❌ BROKEN │ │ TRUST SCORE: 1 / 100 │ │ MANIFEST VERDICT: VOID — UNSIGNED, EMPTY │ │ DISPLACEMENT: CONFIRMED │ │ RECOMMENDED ACTION: DO NOT PUBLISH / DO NOT CITE │ │ ESCALATE FOR FORENSIC REVIEW │ │ │ └─────────────────────────────────────────────────────┘ ``` --- *Oshi-5 PROVENX WATERMARK | Audit of the Authenticators* *USPTO 19/571,156 | Report generated on audit submission* *This report reflects machine-scored provenance layer analysis only.* *Legal determinations require qualified forensic review.*

OSHI-5 PROVENX WATERMARK — GOVERNED RECEIPT

File: test-displacement.jpg
C2PA: DETECTED | Custody: 1% (LOW)
NSI: 9 | DRI: 3 | Daubert: READY
OSHI-5-WATERMARK-1786720950372|SIG:4A98D0D7|CUSTODY:LOW|DAUBERT:READY|IDT:DISPLACEMENT
USPTO 19/571,156 | DeBacco Nexus LLC