{"ok":true,"domain":"c2pa.xenlook.com","ca_reachable":true,"sources":{"report":"ca_live","dashboard":"ca_live"},"report_stale":true,"report_age_hours":99.4,"dashboard":{"ca_name":"XenLook C2PA Certification Authority (KR)","legal_entity":"XenLook Inc. · Republic of Korea","domain":"xenlook.com","transparency_url":"https://c2pa.xenlook.com","mode":"pilot","phase":"CA-2","pilot_ready":true,"trust_list":false,"disclaimer":"Operational CA pilot — benchmarks DigiCert (US Trust List) processes. Not a public Trust List CA until CA-2 intake.","metrics":{"certs_issued":0,"certs_active":0,"certs_revoked":0,"audit_events":281,"crl_available":true},"timestamp":"2026-08-13T17:26:19.519Z","phases":{"CA-0":{"name":"planning","status":"completed","target":"2026-06-12"},"CA-1":{"name":"internal_pilot","status":"completed","target":"2026-07","note":"XMSE signing bind live; external subscribers blocked","pm2":"xenlook-c2pa-ca","port":"[service]","transparency_url":"https://c2pa.xenlook.com","operational_tests":"37/37","benchmark_reference":"DigiCert","completed_at":"2026-08-03","maturity_score":100},"CA-2":{"name":"c2pa_trust_list_intake","status":"in_progress","target":null,"deferred_at":null,"completed":["ocsp_stub","legal_gate_tracker","transparency_portal","ci_workflow","landing_i18n_12","intake_eoi_package","trust_list_csr","webtrust_readiness_doc","ceo_approval_draft","legal_memo_draft","eo_risk_acceptance_draft"],"pending_on_resume":["gcp_kms","webtrust_audit","external_counsel_l1","eo_l8","ceo_l9"],"ca_agreement_signed_at":"2026-06-13","pem_resubmit_sent_at":"2026-06-18","note":"Scott approver queue — no further outbound until C2PA responds (stealth)","pending":["external_legal_review_L1","ceo_ca_agreement_signature_L9","cyber_eo_insurance_L8","gcp_kms_provision","ca_agreement_docusign","trust_list_intake_email_submit","webtrust_audit","kms_signer_wire"]},"CA-3":{"name":"kr_generator_ra","status":"pending","target":"2026-Q4"},"CA-4":{"name":"tsa_optional","status":"pending","target":"2027-H1"}},"operational":{"total":58,"passed":57,"failed":1,"score":100,"duration_ms":9386,"tests":[{"duration_ms":19,"id":"ca_health","name":"CA service health","category":"infrastructure","passed":true,"weight":10,"evidence":"HTTP 200 19ms"},{"duration_ms":2,"id":"ca_status","name":"CA status API","category":"infrastructure","passed":true,"weight":8,"evidence":"{\"service\":\"c2pa-ca-service\",\"mode\":\"pilot\",\"phase\":\"CA-2\",\"pilot_ready\":true,\"pilot_store\":\"pilot certificate store\",\"trust_list\":false,\"disclaimer\":\"Pilot CA — not on C2PA Trust List\",\"timestamp\":\"2"},{"duration_ms":0,"id":"pilot_pki","name":"Pilot PKI chain present","category":"infrastructure","passed":true,"weight":12,"evidence":"pilot certificate store"},{"duration_ms":0,"id":"chain_verify","name":"Intermediate signed by root","category":"infrastructure","passed":true,"weight":10,"evidence":"openssl verify OK"},{"duration_ms":17,"id":"csr_validate","name":"CSR validation (ES256)","category":"issuance","passed":true,"weight":8,"evidence":"C = KR, O = XenLook Inc., OU = XENLOOK Media Pipeline, CN = XenLook CA OpTest"},{"duration_ms":6,"id":"csr_reject_invalid","name":"Invalid CSR rejected","category":"issuance","passed":true,"weight":5},{"duration_ms":51,"id":"cert_issue","name":"Claim-signing cert issuance","category":"issuance","passed":true,"weight":15,"evidence":"serial=283FE720952C…"},{"duration_ms":0,"id":"crl_pem","name":"CRL PEM available","category":"revocation","passed":true,"weight":8,"evidence":"471 bytes"},{"duration_ms":0,"id":"crl_http","name":"CRL HTTP endpoint","category":"revocation","passed":true,"weight":7,"evidence":"HTTP 200"},{"duration_ms":1,"id":"ocsp_status","name":"OCSP-style cert status","category":"revocation","passed":true,"weight":6,"evidence":"{\"status\":\"good\",\"serial\":\"283FE720952C448F9B4D6E34E2EF6BE67475E4EE\",\"updated_at\":\"2026-08-09T14:00:02.283Z\",\"rfc6960_de"},{"duration_ms":0,"id":"ocsp_rfc6960_der","name":"RFC6960 OCSP DER response","category":"revocation","passed":true,"weight":3,"evidence":"/api/ca/v1/ocsp/{serial}/der"},{"duration_ms":0,"id":"audit_log","name":"Issuance audit log","category":"governance","passed":true,"weight":8,"evidence":"281 events"},{"duration_ms":0,"id":"cps_document","name":"CPS document published (v1.0)","category":"governance","passed":true,"weight":5,"evidence":"CPS v1.0 (/practices)"},{"duration_ms":0,"id":"incident_runbook","name":"48h incident runbook","category":"governance","passed":true,"weight":6,"evidence":"incident runbook (/practices)"},{"duration_ms":0,"id":"media_sign_e2e","name":"C2PA media sign E2E (pilot chain)","category":"signing","passed":true,"weight":12,"evidence":"ephemeral CA artifact"},{"duration_ms":0,"id":"production_media_sample","name":"Production media org-issuer sample","category":"signing","passed":true,"weight":8,"evidence":"100%"},{"duration_ms":6,"id":"cert_revoke","name":"Certificate revocation","category":"revocation","passed":true,"weight":10,"evidence":"283FE720952C…"},{"duration_ms":0,"id":"observatory_headers","name":"Observatory security headers","category":"infrastructure","passed":true,"weight":6,"evidence":"strict-transport-security, content-security-policy, x-content-type-options"},{"duration_ms":19,"id":"api_latency","name":"Health API latency < 500ms","category":"infrastructure","passed":true,"weight":4,"evidence":"19ms"},{"duration_ms":0,"id":"prometheus_metrics","name":"Prometheus /metrics","category":"infrastructure","passed":true,"weight":4,"evidence":"HTTP 200"},{"duration_ms":0,"id":"readiness_audit","name":"Internal readiness audit SSOT","category":"governance","passed":true,"weight":6,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"kms_registry","name":"GCP KMS registry (Seoul)","category":"governance","passed":true,"weight":5,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"legal_gate","name":"LEGAL-GATE items passed","category":"governance","passed":true,"weight":6,"evidence":"7/10 pass"},{"duration_ms":3,"id":"load_concurrent_10","name":"Concurrent health x10 p50 < 500ms","category":"infrastructure","passed":true,"weight":5,"evidence":"p50=3ms"},{"duration_ms":0,"id":"practices_page","name":"Public practices / SLA page","category":"governance","passed":true,"weight":4,"evidence":"c2pa.xenlook.com/practices"},{"duration_ms":0,"id":"ca2_intake_package","name":"CA-2 intake EOI package","category":"governance","passed":true,"weight":4,"evidence":"CA compliance package"},{"duration_ms":0,"id":"trust_list_csr","name":"Trust List claim-signing CSR","category":"governance","passed":true,"weight":4,"evidence":"Trust List CSR package"},{"duration_ms":0,"id":"ca2_progress_registry","name":"CA-2 progress registry","category":"governance","passed":true,"weight":3,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"sslcom_benchmark","name":"SSL.com institutional benchmark SSOT","category":"benchmark","passed":true,"weight":3,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"fleet_benchmark","name":"5-CA fleet benchmark SSOT","category":"benchmark","passed":true,"weight":3,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"admin_console","name":"CA admin console page","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/admin"},{"duration_ms":0,"id":"subscriber_apply","name":"Subscriber certificate application","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/subscribers/apply"},{"duration_ms":0,"id":"subscriber_hub","name":"Subscriber journey transparency hub","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/subscribers"},{"duration_ms":0,"id":"ca_repository","name":"CA public repository page","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/repository · data-c2pa-route=repository"},{"duration_ms":0,"id":"repository_api","name":"Repository manifest API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/repository"},{"duration_ms":0,"id":"public_openapi","name":"Public OpenAPI spec","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/openapi.json"},{"duration_ms":0,"id":"public_sla_api","name":"Public SLA metrics API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/sla"},{"duration_ms":0,"id":"public_journey_api","name":"Public subscriber journey API + review metrics","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/journey"},{"duration_ms":0,"id":"public_audit_summary_api","name":"Public RA audit summary API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/audit-summary"},{"duration_ms":0,"id":"score_100_progress","name":"SSL.com gap tracker (public scoreboard retired)","category":"benchmark","passed":true,"weight":2,"evidence":"/api/ca/public/progress → 410 · gap-tracker SSOT"},{"duration_ms":0,"id":"fleet_benchmark_api","name":"5-CA fleet benchmark API","category":"benchmark","passed":true,"weight":2,"evidence":"/api/ca/public/benchmark-fleet"},{"duration_ms":0,"id":"developers_page","name":"Developers / OpenAPI page","category":"governance","passed":true,"weight":2,"evidence":"c2pa.xenlook.com/developers"},{"duration_ms":0,"id":"progress_page","name":"Progress readiness page (live marker)","category":"benchmark","passed":true,"weight":2,"evidence":"c2pa.xenlook.com/progress · data-c2pa-route=progress · not landing hero"},{"duration_ms":0,"id":"transparency_page","name":"Transparency page (live marker)","category":"governance","passed":true,"weight":2,"evidence":"c2pa.xenlook.com/transparency · data-c2pa-route=transparency"},{"duration_ms":0,"id":"tsa_stub_api","name":"TSA pilot stub API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/v1/tsa"},{"duration_ms":0,"id":"intake_manifest","name":"Trust List intake manifest API","category":"governance","passed":true,"weight":3,"evidence":"/api/ca/public/intake · /intake"},{"duration_ms":0,"id":"ra_status_api","name":"RA operations status API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/ra-status"},{"duration_ms":0,"id":"kms_dry_run_registry","name":"KMS dry-run registry","category":"governance","passed":true,"weight":2,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"webtrust_status_honest","name":"WebTrust status not mislabeled as audit pass","category":"benchmark","passed":true,"weight":2,"evidence":"webtrust=planned"},{"duration_ms":0,"id":"benchmark_engineering_100","name":"Non-WebTrust benchmark practices at 100% parity (informational)","category":"benchmark","passed":false,"weight":0,"evidence":"informational: hsm_keys=0%, key_ceremony=50%, crl_distribution=0%, ocsp=0%, incident_48h=50%"},{"duration_ms":0,"id":"ra_automation_registry","name":"RA automation registry (auto-issue + notifications)","category":"governance","passed":true,"weight":2,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"approve_and_issue_module","name":"Approve-and-issue combined endpoint module","category":"governance","passed":true,"weight":2,"evidence":"POST /api/ca/v1/applications/:id/approve-and-issue"},{"duration_ms":0,"id":"certificate_delivery_api","name":"Subscriber certificate delivery + badge API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/certificate/:id · badge.svg"},{"duration_ms":0,"id":"subscriber_workflow_ui","name":"End-to-end subscriber hub + track certificate card","category":"governance","passed":true,"weight":2,"evidence":"/subscribers · CaSubscribersHubClient · CaWorkflowPageClient · CaCertificateCard"},{"duration_ms":0,"id":"ra_digest_script","name":"RA digest script for agent ops","category":"governance","passed":true,"weight":1,"evidence":"pnpm c2pa:ca:ra-digest"},{"duration_ms":0,"id":"apac_issuance_system","name":"APAC issuance system registry + manual path","category":"governance","passed":true,"weight":3,"evidence":"CA registry (internal) · KR/JP phased · apac_manual classify"},{"duration_ms":0,"id":"ca_legal_system","name":"CA standalone legal registry + public API","category":"governance","passed":true,"weight":3,"evidence":"CA registry (internal) · /legal hub"},{"duration_ms":0,"id":"xmse_signing_ssot_bound","name":"XMSE signing SSOT bound to CA pilot subscriber cert","category":"signing","passed":true,"weight":3,"evidence":"issuer=C = KR, O = XenLook Inc., OU = C2PA Issuing CA Pilot, CN = XenLook C2PA I"}]},"benchmark_parity_score":69.2,"last_test_run":"2026-08-09T14:00:11.555Z","trust":{"score":91,"grade":"B","reliability":"moderate","gating_blockers":["webtrust","hsm_keys","key_ceremony","ocsp"],"pre_audit_label":"Pre-audit engineering readiness (not WebTrust / Trust List equivalence)","methodology":"70% operational tests + 30% DigiCert process parity (excludes WebTrust + CP-optional CRL). Gating: webtrust, hsm_keys, key_ceremony, ocsp."}},"report":{"version":1,"generated_at":"2026-08-09T14:00:11.555Z","ca_name":"XenLook C2PA Certification Authority (KR)","ca_phase":"CA-2","mode":"pilot","trust_list":false,"operational":{"total":58,"passed":57,"failed":1,"score":100,"duration_ms":9386,"tests":[{"duration_ms":19,"id":"ca_health","name":"CA service health","category":"infrastructure","passed":true,"weight":10,"evidence":"HTTP 200 19ms"},{"duration_ms":2,"id":"ca_status","name":"CA status API","category":"infrastructure","passed":true,"weight":8,"evidence":"{\"service\":\"c2pa-ca-service\",\"mode\":\"pilot\",\"phase\":\"CA-2\",\"pilot_ready\":true,\"pilot_store\":\"pilot certificate store\",\"trust_list\":false,\"disclaimer\":\"Pilot CA — not on C2PA Trust List\",\"timestamp\":\"2"},{"duration_ms":0,"id":"pilot_pki","name":"Pilot PKI chain present","category":"infrastructure","passed":true,"weight":12,"evidence":"pilot certificate store"},{"duration_ms":0,"id":"chain_verify","name":"Intermediate signed by root","category":"infrastructure","passed":true,"weight":10,"evidence":"openssl verify OK"},{"duration_ms":17,"id":"csr_validate","name":"CSR validation (ES256)","category":"issuance","passed":true,"weight":8,"evidence":"C = KR, O = XenLook Inc., OU = XENLOOK Media Pipeline, CN = XenLook CA OpTest"},{"duration_ms":6,"id":"csr_reject_invalid","name":"Invalid CSR rejected","category":"issuance","passed":true,"weight":5},{"duration_ms":51,"id":"cert_issue","name":"Claim-signing cert issuance","category":"issuance","passed":true,"weight":15,"evidence":"serial=283FE720952C…"},{"duration_ms":0,"id":"crl_pem","name":"CRL PEM available","category":"revocation","passed":true,"weight":8,"evidence":"471 bytes"},{"duration_ms":0,"id":"crl_http","name":"CRL HTTP endpoint","category":"revocation","passed":true,"weight":7,"evidence":"HTTP 200"},{"duration_ms":1,"id":"ocsp_status","name":"OCSP-style cert status","category":"revocation","passed":true,"weight":6,"evidence":"{\"status\":\"good\",\"serial\":\"283FE720952C448F9B4D6E34E2EF6BE67475E4EE\",\"updated_at\":\"2026-08-09T14:00:02.283Z\",\"rfc6960_de"},{"duration_ms":0,"id":"ocsp_rfc6960_der","name":"RFC6960 OCSP DER response","category":"revocation","passed":true,"weight":3,"evidence":"/api/ca/v1/ocsp/{serial}/der"},{"duration_ms":0,"id":"audit_log","name":"Issuance audit log","category":"governance","passed":true,"weight":8,"evidence":"281 events"},{"duration_ms":0,"id":"cps_document","name":"CPS document published (v1.0)","category":"governance","passed":true,"weight":5,"evidence":"CPS v1.0 (/practices)"},{"duration_ms":0,"id":"incident_runbook","name":"48h incident runbook","category":"governance","passed":true,"weight":6,"evidence":"incident runbook (/practices)"},{"duration_ms":0,"id":"media_sign_e2e","name":"C2PA media sign E2E (pilot chain)","category":"signing","passed":true,"weight":12,"evidence":"ephemeral CA artifact"},{"duration_ms":0,"id":"production_media_sample","name":"Production media org-issuer sample","category":"signing","passed":true,"weight":8,"evidence":"100%"},{"duration_ms":6,"id":"cert_revoke","name":"Certificate revocation","category":"revocation","passed":true,"weight":10,"evidence":"283FE720952C…"},{"duration_ms":0,"id":"observatory_headers","name":"Observatory security headers","category":"infrastructure","passed":true,"weight":6,"evidence":"strict-transport-security, content-security-policy, x-content-type-options"},{"duration_ms":19,"id":"api_latency","name":"Health API latency < 500ms","category":"infrastructure","passed":true,"weight":4,"evidence":"19ms"},{"duration_ms":0,"id":"prometheus_metrics","name":"Prometheus /metrics","category":"infrastructure","passed":true,"weight":4,"evidence":"HTTP 200"},{"duration_ms":0,"id":"readiness_audit","name":"Internal readiness audit SSOT","category":"governance","passed":true,"weight":6,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"kms_registry","name":"GCP KMS registry (Seoul)","category":"governance","passed":true,"weight":5,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"legal_gate","name":"LEGAL-GATE items passed","category":"governance","passed":true,"weight":6,"evidence":"7/10 pass"},{"duration_ms":3,"id":"load_concurrent_10","name":"Concurrent health x10 p50 < 500ms","category":"infrastructure","passed":true,"weight":5,"evidence":"p50=3ms"},{"duration_ms":0,"id":"practices_page","name":"Public practices / SLA page","category":"governance","passed":true,"weight":4,"evidence":"c2pa.xenlook.com/practices"},{"duration_ms":0,"id":"ca2_intake_package","name":"CA-2 intake EOI package","category":"governance","passed":true,"weight":4,"evidence":"CA compliance package"},{"duration_ms":0,"id":"trust_list_csr","name":"Trust List claim-signing CSR","category":"governance","passed":true,"weight":4,"evidence":"Trust List CSR package"},{"duration_ms":0,"id":"ca2_progress_registry","name":"CA-2 progress registry","category":"governance","passed":true,"weight":3,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"sslcom_benchmark","name":"SSL.com institutional benchmark SSOT","category":"benchmark","passed":true,"weight":3,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"fleet_benchmark","name":"5-CA fleet benchmark SSOT","category":"benchmark","passed":true,"weight":3,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"admin_console","name":"CA admin console page","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/admin"},{"duration_ms":0,"id":"subscriber_apply","name":"Subscriber certificate application","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/subscribers/apply"},{"duration_ms":0,"id":"subscriber_hub","name":"Subscriber journey transparency hub","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/subscribers"},{"duration_ms":0,"id":"ca_repository","name":"CA public repository page","category":"governance","passed":true,"weight":3,"evidence":"c2pa.xenlook.com/repository · data-c2pa-route=repository"},{"duration_ms":0,"id":"repository_api","name":"Repository manifest API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/repository"},{"duration_ms":0,"id":"public_openapi","name":"Public OpenAPI spec","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/openapi.json"},{"duration_ms":0,"id":"public_sla_api","name":"Public SLA metrics API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/sla"},{"duration_ms":0,"id":"public_journey_api","name":"Public subscriber journey API + review metrics","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/journey"},{"duration_ms":0,"id":"public_audit_summary_api","name":"Public RA audit summary API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/audit-summary"},{"duration_ms":0,"id":"score_100_progress","name":"SSL.com gap tracker (public scoreboard retired)","category":"benchmark","passed":true,"weight":2,"evidence":"/api/ca/public/progress → 410 · gap-tracker SSOT"},{"duration_ms":0,"id":"fleet_benchmark_api","name":"5-CA fleet benchmark API","category":"benchmark","passed":true,"weight":2,"evidence":"/api/ca/public/benchmark-fleet"},{"duration_ms":0,"id":"developers_page","name":"Developers / OpenAPI page","category":"governance","passed":true,"weight":2,"evidence":"c2pa.xenlook.com/developers"},{"duration_ms":0,"id":"progress_page","name":"Progress readiness page (live marker)","category":"benchmark","passed":true,"weight":2,"evidence":"c2pa.xenlook.com/progress · data-c2pa-route=progress · not landing hero"},{"duration_ms":0,"id":"transparency_page","name":"Transparency page (live marker)","category":"governance","passed":true,"weight":2,"evidence":"c2pa.xenlook.com/transparency · data-c2pa-route=transparency"},{"duration_ms":0,"id":"tsa_stub_api","name":"TSA pilot stub API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/v1/tsa"},{"duration_ms":0,"id":"intake_manifest","name":"Trust List intake manifest API","category":"governance","passed":true,"weight":3,"evidence":"/api/ca/public/intake · /intake"},{"duration_ms":0,"id":"ra_status_api","name":"RA operations status API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/ra-status"},{"duration_ms":0,"id":"kms_dry_run_registry","name":"KMS dry-run registry","category":"governance","passed":true,"weight":2,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"webtrust_status_honest","name":"WebTrust status not mislabeled as audit pass","category":"benchmark","passed":true,"weight":2,"evidence":"webtrust=planned"},{"duration_ms":0,"id":"benchmark_engineering_100","name":"Non-WebTrust benchmark practices at 100% parity (informational)","category":"benchmark","passed":false,"weight":0,"evidence":"informational: hsm_keys=0%, key_ceremony=50%, crl_distribution=0%, ocsp=0%, incident_48h=50%"},{"duration_ms":0,"id":"ra_automation_registry","name":"RA automation registry (auto-issue + notifications)","category":"governance","passed":true,"weight":2,"evidence":"CA registry (internal)"},{"duration_ms":0,"id":"approve_and_issue_module","name":"Approve-and-issue combined endpoint module","category":"governance","passed":true,"weight":2,"evidence":"POST /api/ca/v1/applications/:id/approve-and-issue"},{"duration_ms":0,"id":"certificate_delivery_api","name":"Subscriber certificate delivery + badge API","category":"governance","passed":true,"weight":2,"evidence":"/api/ca/public/certificate/:id · badge.svg"},{"duration_ms":0,"id":"subscriber_workflow_ui","name":"End-to-end subscriber hub + track certificate card","category":"governance","passed":true,"weight":2,"evidence":"/subscribers · CaSubscribersHubClient · CaWorkflowPageClient · CaCertificateCard"},{"duration_ms":0,"id":"ra_digest_script","name":"RA digest script for agent ops","category":"governance","passed":true,"weight":1,"evidence":"pnpm c2pa:ca:ra-digest"},{"duration_ms":0,"id":"apac_issuance_system","name":"APAC issuance system registry + manual path","category":"governance","passed":true,"weight":3,"evidence":"CA registry (internal) · KR/JP phased · apac_manual classify"},{"duration_ms":0,"id":"ca_legal_system","name":"CA standalone legal registry + public API","category":"governance","passed":true,"weight":3,"evidence":"CA registry (internal) · /legal hub"},{"duration_ms":0,"id":"xmse_signing_ssot_bound","name":"XMSE signing SSOT bound to CA pilot subscriber cert","category":"signing","passed":true,"weight":3,"evidence":"issuer=C = KR, O = XenLook Inc., OU = C2PA Issuing CA Pilot, CN = XenLook C2PA I"}]},"benchmark":{"reference":"DigiCert","parity_score":64.9,"engineering_parity_score":69.2,"practices":[{"id":"cps","name":"Certificate Policy / CPS published","digicert_summary":"Public CPS and subscriber agreements","xenlook_status":"cps_public","parity_pct":100,"weight":8},{"id":"ra_identity","name":"Registration Authority identity verification","digicert_summary":"Org validation before claim-signing cert issuance","xenlook_status":"ra_api_enforced","parity_pct":100,"weight":10},{"id":"cpl_gate","name":"CPL conformance gate before issuance","digicert_summary":"Generator Product CPL snapshot required","xenlook_status":"enforced_api","parity_pct":100,"weight":10},{"id":"hsm_keys","name":"Root / issuing key in HSM or KMS","digicert_summary":"FIPS 140-2 Level 3 HSM","xenlook_status":"not_started","parity_pct":0,"weight":12},{"id":"key_ceremony","name":"Dual-control key ceremony","digicert_summary":"M-of-N ceremony for root","xenlook_status":"ceremony_partial","parity_pct":50,"weight":8},{"id":"crl_distribution","name":"CRL publication endpoint (CP OPTIONAL)","digicert_summary":"HTTP CRL + OCSP responders","xenlook_status":"not_applicable","parity_pct":0,"weight":0},{"id":"ocsp","name":"OCSP stapling / responder","digicert_summary":"OCSP for end-entity certs","xenlook_status":"partial","parity_pct":0,"weight":7},{"id":"revocation_sla","name":"Revocation processing SLA","digicert_summary":"24h subscriber cert revoke target","xenlook_status":"api_automated","parity_pct":100,"weight":8},{"id":"incident_48h","name":"C2PA 48h key-compromise notice","digicert_summary":"[external contact] process","xenlook_status":"incident_partial","parity_pct":50,"weight":10},{"id":"audit_log","name":"Issuance / revocation audit trail","digicert_summary":"Immutable RA audit logs","xenlook_status":"audit_hash_chain","parity_pct":100,"weight":9},{"id":"transparency","name":"Public transparency / status page","digicert_summary":"Status + practice disclosures","xenlook_status":"live","parity_pct":100,"weight":9},{"id":"webtrust","name":"WebTrust / ETSI audit","digicert_summary":"Annual third-party audit","xenlook_status":"planned","parity_pct":25,"weight":10}]},"trust":{"score":91,"grade":"B","reliability":"moderate","gating_blockers":["webtrust","hsm_keys","key_ceremony","ocsp"],"pre_audit_label":"Pre-audit engineering readiness (not WebTrust / Trust List equivalence)","methodology":"70% operational tests + 30% DigiCert process parity (excludes WebTrust + CP-optional CRL). Gating: webtrust, hsm_keys, key_ceremony, ocsp."},"metrics":{"certs_issued":3,"certs_active":3,"certs_revoked":0,"audit_events":281,"media_org_signed_pct":100}},"benchmark":{"version":1,"updated":"2026-06-12","reference_ca":{"name":"DigiCert","country":"US","role":"C2PA Trust List Certification Authority","notes":"Public reference for WebTrust-audited US PKI practices on the C2PA Trust List. XenLook CA-1 pilot benchmarks process parity — not cryptographic equivalence until Trust List intake (CA-2)."},"practice_areas":[{"id":"cps","name":"Certificate Policy / CPS published","digicert":"Public CPS and subscriber agreements","ops_ref":"docs/compliance/C2PA-CA-CPS-DRAFT.md","weight":8,"pilot_status":"cps_public"},{"id":"ra_identity","name":"Registration Authority identity verification","digicert":"Org validation before claim-signing cert issuance","ops_ref":"docs/compliance/C2PA-CA-RA-PRACTICES.md","weight":10,"pilot_status":"ra_api_enforced"},{"id":"cpl_gate","name":"CPL conformance gate before issuance","digicert":"Generator Product CPL snapshot required","ops_ref":"CA registry (internal)","weight":10,"pilot_status":"enforced_api"},{"id":"hsm_keys","name":"Root / issuing key in HSM or KMS","digicert":"FIPS 140-2 Level 3 HSM","ops_ref":"CA ops schedule","weight":12,"pilot_status":"not_started"},{"id":"key_ceremony","name":"Dual-control key ceremony","digicert":"M-of-N ceremony for root","ops_ref":"docs/ops/C2PA-CA-KEY-CEREMONY.md","weight":8,"pilot_status":"ceremony_partial"},{"id":"crl_distribution","name":"CRL publication endpoint (CP OPTIONAL)","digicert":"HTTP CRL + OCSP responders","ops_ref":"GET /api/ca/v1/crl — informational; CP §7.1.2 CRL DP optional","weight":0,"pilot_status":"not_applicable"},{"id":"ocsp","name":"OCSP stapling / responder","digicert":"OCSP for end-entity certs","ops_ref":"POST /api/ca/v1/ocsp RFC6960 + http://ocsp.xenlook.com GET base64 — V-1 external openssl semantics 미확정 (transport only)","weight":7,"pilot_status":"partial","rollback_reason":"외부 end-to-end 미확정(transport만 확인, semantics는 내부 경로·Globalping body 손상)"},{"id":"revocation_sla","name":"Revocation processing SLA","digicert":"24h subscriber cert revoke target","ops_ref":"POST /api/ca/v1/revoke","weight":8,"pilot_status":"api_automated"},{"id":"incident_48h","name":"C2PA 48h key-compromise notice","digicert":"[external contact] process","ops_ref":"incident runbook (/practices)","weight":10,"pilot_status":"incident_partial"},{"id":"audit_log","name":"Issuance / revocation audit trail","digicert":"Immutable RA audit logs","ops_ref":"data/audit/ca-issuance.jsonl","weight":9,"pilot_status":"audit_hash_chain"},{"id":"transparency","name":"Public transparency / status page","digicert":"Status + practice disclosures","ops_ref":"https://c2pa.xenlook.com","weight":9,"pilot_status":"live"},{"id":"webtrust","name":"WebTrust / ETSI audit","digicert":"Annual third-party audit","ops_ref":"CA-2 LEGAL-GATE","weight":10,"pilot_status":"planned"}],"status_scores":{"live":1,"enforced_api":1,"api_automated":1,"jsonl_live":1,"crl_http":1,"internal_ra":0.75,"documented":0.7,"draft_published":0.65,"runbook_ready":0.8,"file_keys_pilot":0.35,"ocsp_stub":0.55,"not_implemented":0,"not_audited":0.1,"cps_public":1,"ra_api_enforced":1,"kms_provisioned":1,"ceremony_recorded":1,"ocsp_responder":1,"incident_drilled":1,"audit_hash_chain":1,"readiness_pass":1,"readiness_partial":0.75,"kms_dry_run":1,"engagement_pending":0.35,"planned":0.25,"not_started":0,"not_applicable":0,"ceremony_partial":0.5,"incident_partial":0.5}},"legal_gate":{"version":5,"updated":"2026-08-03","ca_trust_list_phase":"ca_intake_form_submitted","ready_for_ca_agreement":true,"ssot":"docs/compliance/C2PA-CA-LEGAL-GATE.md","who_does_what":"docs/compliance/C2PA-CA-LEGAL-GATE-WHO-DOES-WHAT.md","l1_l8_package":{"internal_package_ready":true,"ceo_signature_pending":true,"external_counsel_pass_forbidden_without_evidence":true,"note_ko":"초안·셀프서트·리스크수용 문서 준비됨. L1/L8 pass는 CEO 서명 또는 외부 법무 증거 후에만."},"items":[{"id":"L1","name":"외부 법무 검토","owner":"CEO","status":"academic_review_complete","package_status":"ready_for_ceo_self_cert_or_counsel","note":"Internal package ready (CEO self-cert + academic advisory). Licensed counsel sign-off still pending — do NOT mark pass without evidence.","doc":"docs/compliance/C2PA-CA-CEO-SELF-CERTIFICATION-L1.md","checklist":"docs/compliance/C2PA-CA-LEGAL-REVIEW-MEMO-DRAFT.md","ai_opinion_date":"2026-06-12","ai_verdict":"conditional_sign","pre_sign_blockers":["gcp_cloud_hsm","ca_agreement_termination_crl_period","ceo_self_cert_l1"],"academic_review_at":"2026-06-13","updated_at":"2026-08-03"},{"id":"L2","name":"면책 범위 이해","owner":"CEO","status":"pass","note":"Implicit in DocuSign execution 2026-06-13"},{"id":"L3","name":"CPS 초안 CEO 승인","owner":"CEO","status":"pass","note":"CPS v1.0 + c2pa.xenlook.com/practices"},{"id":"L4","name":"CA-1 파일럿 완료","owner":"CPO","status":"pass","note":"operational tests 37/37 · maturity 100"},{"id":"L5","name":"공개 사이트 감사","owner":"CPO","status":"pass","note":"c2pa.xenlook.com transparency"},{"id":"L6","name":"개인정보 처리방침","owner":"CEO","status":"pass","note":"practices + xenlook.com/privacy"},{"id":"L7","name":"요금·SLA 초안","owner":"CEO","status":"pass","note":"c2pa.xenlook.com/practices SLA section"},{"id":"L8","name":"사이버 E&O 보험","owner":"CEO","status":"risk_acceptance_ready","package_status":"ready_for_ceo_signature","note":"EO risk acceptance draft ready — CEO signature required for L8 pass. Insurance optional until 2026-09-30. Do NOT mark pass without signed draft or policy number.","doc":"docs/compliance/C2PA-CA-EO-RISK-ACCEPTANCE-DRAFT.md","ceo_approval_draft":"docs/compliance/CEO-APPROVAL-DRAFT-L8-EO-RISK.md","external_issuance_blocker":"G1 Trust List + G2 KMS live + L8 signed","updated_at":"2026-08-03"},{"id":"L9","name":"대표이사 서면 승인","owner":"CEO","status":"pass","note":"CEO written approval executed via DocuSign — CA Agreement 2026-06-13","doc":"docs/compliance/C2PA-CA-CEO-APPROVAL-FINAL.md","signed_at":"2026-06-13"},{"id":"L10","name":"C2PA CA Trust List Intake","owner":"CPO","status":"ready","note":"CA compliance package + docs/compliance/C2PA-CA-INTAKE-PORTAL-SUBMIT.md","submitted_at":"2026-06-15","submitted_by":"ceo@xenlook.com"},{"id":"L10G","name":"Generator Product Conformance RFI","owner":"CPO","status":"generator_rfi_submitted","note":"RFI package emailed to [external contact] 2026-06-14 — Appendix C v4.0, 131/131 PASS, evidence ZIP","submitted_at":"2026-06-14","doc":"docs/compliance/C2PA-GENERATOR-SUBMISSION-FINAL.md"}],"solo_operator":true,"external_counsel_required":false,"solo_ssot":"docs/compliance/C2PA-CA-SOLO-OPERATOR-PATH.md","academic_reviews":[{"affiliation":"Seokyeong University · Content System Design","scope":"C2PA CA technical governance · AI harness · operational risk","reviewed_at":"2026-06-13","is_licensed_counsel":false,"role":"academic_advisor"},{"affiliation":"Sangmyung University · Content Creative Lab","scope":"Content provenance · public policy · Generator+CA dual role","reviewed_at":"2026-06-13","is_licensed_counsel":false,"role":"academic_advisor"}],"ca_agreement_signed":true,"ca_agreement_signed_at":"2026-06-13","ca_agreement_document":"C2PA Certification Authority Agreement v1.0 (6-4-2025)","ca_agreement_signer":"CEO, XenLook Inc.","ca_agreement_channel":"DocuSign","ca_agreement_counterparty":"JDF Projects, LLC (C2PA)","generator_conformance_phase":"generator_rfi_submitted","supplemental_evidence":{"pki_lint":"CA compliance package","key_generation_script":"docs/compliance/C2PA-CA-KEY-GENERATION-SCRIPT.md","witness_signoff":"complete","scott_reply_ssot":"docs/compliance/C2PA-CA-INTAKE-FORM-REPLY-SCOTT.md","pki_lint_result":"23/23 PASS","keygen_signed_pdf":"docs/compliance/signed/C2PA-CA-KEYGEN-001-SIGNED.pdf","witness":"Jong-Weon Kim jwkim@smu.ac.kr","pem_resubmit_sent_at":"2026-06-18","pem_resubmit_ssot":"docs/compliance/C2PA-CA-PEM-RESUBMIT-SCOTT-SEND.md","pem_resubmit_pack":"data/compliance/send-2026-06-18-ca-pem-resubmit"}},"history":[{"file":"report-2026-08-09T14-00-11-555Z.json","generated_at":"2026-08-09T14:00:11.555Z","trust_score":91,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T13-00-11-100Z.json","generated_at":"2026-08-09T13:00:11.100Z","trust_score":90,"grade":"B","tests_passed":56,"tests_total":58},{"file":"report-2026-08-09T12-54-03-278Z.json","generated_at":"2026-08-09T12:54:03.278Z","trust_score":91,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T12-00-09-508Z.json","generated_at":"2026-08-09T12:00:09.508Z","trust_score":91,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T11-00-03-916Z.json","generated_at":"2026-08-09T11:00:03.916Z","trust_score":91,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T10-00-05-988Z.json","generated_at":"2026-08-09T10:00:05.988Z","trust_score":91,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T09-00-03-039Z.json","generated_at":"2026-08-09T09:00:03.039Z","trust_score":91,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T08-00-04-334Z.json","generated_at":"2026-08-09T08:00:04.334Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T06-00-04-447Z.json","generated_at":"2026-08-09T06:00:04.447Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T05-00-04-285Z.json","generated_at":"2026-08-09T05:00:04.285Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T04-00-02-850Z.json","generated_at":"2026-08-09T04:00:02.850Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T03-00-03-577Z.json","generated_at":"2026-08-09T03:00:03.577Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T02-00-04-112Z.json","generated_at":"2026-08-09T02:00:04.112Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T01-00-02-892Z.json","generated_at":"2026-08-09T01:00:02.892Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-09T00-00-03-158Z.json","generated_at":"2026-08-09T00:00:03.158Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-08T23-00-02-962Z.json","generated_at":"2026-08-08T23:00:02.962Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-08T22-00-03-578Z.json","generated_at":"2026-08-08T22:00:03.578Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-08T21-00-03-741Z.json","generated_at":"2026-08-08T21:00:03.741Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-08T20-00-02-758Z.json","generated_at":"2026-08-08T20:00:02.758Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58},{"file":"report-2026-08-08T19-00-04-404Z.json","generated_at":"2026-08-08T19:00:04.404Z","trust_score":90,"grade":"B","tests_passed":57,"tests_total":58}],"generator":{"fetched_at":"2026-08-13T17:26:19.578Z","generator":{"product":"XENLOOK Media Pipeline","product_version":"5.0","record_id":"019ec04e-17ef-76ef-ad31-60ebb0c0a6a8","phase":"scott_remediation_4_final_send","implementation_class":"Backend","max_assurance_level":1,"company_agreement_signed_at":"2026-06-13","rfi_sent_at":"2026-06-14","submission_date":"2026-06-14","submission_summary":"Scott remediation #4 final — flat ZIP 27 files; PDF ingest Valid with embedded parent manifest; 5/8 TL interop parents; portal synced 2026-06-23","evidence_generate":"8/8","evidence_ingest":"8/8","evidence_size_mb":21,"mime_types":["image/jpeg","image/png","image/webp","video/mp4","audio/mpeg","audio/wav","audio/mp4","application/pdf"],"mime_count":8,"submission_audit_pass":true,"submission_audit_at":"2026-06-22","media_counts":{"images_signed":10544,"videos_signed":12220,"org_issuer_pct":100,"verify_paths_total":22764},"media_verified_at":"2026-06-13","media_counts_live":false,"media_counts_source":"snapshot","disclosure":"Pilot certificate chain is Pre–Trust List. CPL and Trust List listing not claimed.","cpl_listed":false,"trust_list_listed":false},"ca":{"agreement_signed":true,"agreement_signed_at":"2026-06-13","intake_submitted_at":"2026-06-15","supplemental_submitted_at":"2026-06-18","supplemental_note":null,"phase":"ca_agreement_signed","trust_list":"awaiting_approver_queue","trust_list_listed":false,"legal_gate":{"version":5,"updated":"2026-08-03","ca_trust_list_phase":"ca_intake_form_submitted","ready_for_ca_agreement":true,"ssot":"docs/compliance/C2PA-CA-LEGAL-GATE.md","who_does_what":"docs/compliance/C2PA-CA-LEGAL-GATE-WHO-DOES-WHAT.md","l1_l8_package":{"internal_package_ready":true,"ceo_signature_pending":true,"external_counsel_pass_forbidden_without_evidence":true,"note_ko":"초안·셀프서트·리스크수용 문서 준비됨. L1/L8 pass는 CEO 서명 또는 외부 법무 증거 후에만."},"items":[{"id":"L1","name":"외부 법무 검토","owner":"CEO","status":"academic_review_complete","package_status":"ready_for_ceo_self_cert_or_counsel","note":"Internal package ready (CEO self-cert + academic advisory). Licensed counsel sign-off still pending — do NOT mark pass without evidence.","doc":"docs/compliance/C2PA-CA-CEO-SELF-CERTIFICATION-L1.md","checklist":"docs/compliance/C2PA-CA-LEGAL-REVIEW-MEMO-DRAFT.md","ai_opinion_date":"2026-06-12","ai_verdict":"conditional_sign","pre_sign_blockers":["gcp_cloud_hsm","ca_agreement_termination_crl_period","ceo_self_cert_l1"],"academic_review_at":"2026-06-13","updated_at":"2026-08-03"},{"id":"L2","name":"면책 범위 이해","owner":"CEO","status":"pass","note":"Implicit in DocuSign execution 2026-06-13"},{"id":"L3","name":"CPS 초안 CEO 승인","owner":"CEO","status":"pass","note":"CPS v1.0 + c2pa.xenlook.com/practices"},{"id":"L4","name":"CA-1 파일럿 완료","owner":"CPO","status":"pass","note":"operational tests 37/37 · maturity 100"},{"id":"L5","name":"공개 사이트 감사","owner":"CPO","status":"pass","note":"c2pa.xenlook.com transparency"},{"id":"L6","name":"개인정보 처리방침","owner":"CEO","status":"pass","note":"practices + xenlook.com/privacy"},{"id":"L7","name":"요금·SLA 초안","owner":"CEO","status":"pass","note":"c2pa.xenlook.com/practices SLA section"},{"id":"L8","name":"사이버 E&O 보험","owner":"CEO","status":"risk_acceptance_ready","package_status":"ready_for_ceo_signature","note":"EO risk acceptance draft ready — CEO signature required for L8 pass. Insurance optional until 2026-09-30. Do NOT mark pass without signed draft or policy number.","doc":"docs/compliance/C2PA-CA-EO-RISK-ACCEPTANCE-DRAFT.md","ceo_approval_draft":"docs/compliance/CEO-APPROVAL-DRAFT-L8-EO-RISK.md","external_issuance_blocker":"G1 Trust List + G2 KMS live + L8 signed","updated_at":"2026-08-03"},{"id":"L9","name":"대표이사 서면 승인","owner":"CEO","status":"pass","note":"CEO written approval executed via DocuSign — CA Agreement 2026-06-13","doc":"docs/compliance/C2PA-CA-CEO-APPROVAL-FINAL.md","signed_at":"2026-06-13"},{"id":"L10","name":"C2PA CA Trust List Intake","owner":"CPO","status":"ready","note":"CA compliance package + docs/compliance/C2PA-CA-INTAKE-PORTAL-SUBMIT.md","submitted_at":"2026-06-15","submitted_by":"ceo@xenlook.com"},{"id":"L10G","name":"Generator Product Conformance RFI","owner":"CPO","status":"generator_rfi_submitted","note":"RFI package emailed to [external contact] 2026-06-14 — Appendix C v4.0, 131/131 PASS, evidence ZIP","submitted_at":"2026-06-14","doc":"docs/compliance/C2PA-GENERATOR-SUBMISSION-FINAL.md"}],"solo_operator":true,"external_counsel_required":false,"solo_ssot":"docs/compliance/C2PA-CA-SOLO-OPERATOR-PATH.md","academic_reviews":[{"name":"Nam Hyun-woo","name_ko":"젠룩의장","affiliation":"Seokyeong University · Content System Design","scope":"C2PA CA technical governance · AI harness · operational risk","reviewed_at":"2026-06-13","doc":"C2PA-CA-LEGAL-REVIEW-MEMO.md","is_licensed_counsel":false},{"name":"Yang Yeon-kyung","name_ko":"양연경","affiliation":"Sangmyung University · Content Creative Lab","scope":"Content provenance · public policy · Generator+CA dual role","reviewed_at":"2026-06-13","doc":"C2PA-CA-LEGAL-REVIEW-MEMO.md","is_licensed_counsel":false}],"ca_agreement_signed":true,"ca_agreement_signed_at":"2026-06-13","ca_agreement_document":"C2PA Certification Authority Agreement v1.0 (6-4-2025)","ca_agreement_signer":"Ho-Yeon Nam, CEO, XenLook Inc.","ca_agreement_channel":"DocuSign","ca_agreement_counterparty":"JDF Projects, LLC (C2PA)","generator_conformance_phase":"generator_rfi_submitted","supplemental_evidence":{"pki_lint":"CA compliance package","key_generation_script":"docs/compliance/C2PA-CA-KEY-GENERATION-SCRIPT.md","witness_signoff":"complete","scott_reply_ssot":"docs/compliance/C2PA-CA-INTAKE-FORM-REPLY-SCOTT.md","pki_lint_result":"23/23 PASS","keygen_signed_pdf":"docs/compliance/signed/C2PA-CA-KEYGEN-001-SIGNED.pdf","witness":"Jong-Weon Kim jwkim@smu.ac.kr","pem_resubmit_sent_at":"2026-06-18","pem_resubmit_ssot":"docs/compliance/C2PA-CA-PEM-RESUBMIT-SCOTT-SEND.md","pem_resubmit_pack":"data/compliance/send-2026-06-18-ca-pem-resubmit"}}},"dual_track_disclosure":"XenLook operates CA and Generator programs under executed C2PA agreements. Trust List and CPL listing are not claimed until C2PA confirms."},"fetched_at":"2026-08-13T17:26:19.578Z"}