Rights that
systems can verify.

02 / ARCHITECTURE

Six layers. One decision.

Proof separates concerns so a compromised media file, production provider or distribution platform cannot silently rewrite the underlying authority.

03 / TOKEN LIFECYCLE

From human approval
to machine enforcement.

1. 1

   Request

   A brand or producer submits a structured use request: purpose, script, model, territories, channels, duration and volume.

2. 2

   Resolve authority

   Proof verifies the identity root and that the approving person or agency is authorised to act.

3. 3

   Collect consent

   The human-readable summary and legal terms are approved. Proof hashes the signed evidence and records the consent ceremony.

4. 4

   Compile policy

   Contract clauses are normalized into an AVATARZ ODRL profile. Ambiguity or unsupported constraints block issuance.

5. 5

   Issue + sign

   A canonical credential is assigned an immutable ID, signed by an isolated issuer key and time-stamped.

6. 6

   Authorize job

   Before generation, the requester, reference asset, provider, model and intended context are evaluated against the current credential.

7. 7

   Bind outputs

   Each final asset references the licence token; its exact and optional soft bindings are recorded with C2PA provenance.

8. 8

   Monitor + close

   Verification events, counters, expiry, suspension and revocation are appended without mutating past evidence.

04 / CREDENTIAL MODEL

Small public envelope.
Precise private evidence.

{
  "@context": ["https://www.w3.org/ns/credentials/v2"],
  "id": "https://proof.avatarz.com/licences/AAP-LIC-2026-C91F",
  "type": ["VerifiableCredential", "AvatarzLikenessLicence"],
  "issuer": "did:web:proof.avatarz.com",
  "validFrom": "2026-07-27T14:08:19Z",
  "validUntil": "2026-09-30T23:59:59Z",
  "credentialSubject": {
    "id": "urn:avatarz:identity:marcus-vale",
    "licensee": "urn:avatarz:org:northstar-sports",
    "policy": {
      "profile": "https://proof.avatarz.com/ns/odrl/likeness/v1",
      "permissions": ["generate", "translate", "distribute"],
      "prohibitions": ["paid-media", "political-use", "model-training"],
      "territories": ["FR", "GB"],
      "channels": ["owned-social", "crm", "stadium"],
      "languages": ["fr", "en"],
      "maxAssets": 50
    },
    "consentReceipt": "sha256:0c38…c7a1"
  },
  "credentialStatus": {
    "type": "BitstringStatusListEntry",
    "statusPurpose": "revocation",
    "statusListIndex": "4192",
    "statusListCredential": "https://proof.avatarz.com/status/2026-07"
  }
}

05 / GENERATION

Deterministic before
cryptographic.

The issuing service never signs raw form input. It validates, resolves, normalizes and canonicalizes the policy first, producing the same digest for semantically identical approved data.

06 / VERIFICATION

Verification returns
a reasoned decision.

POST /v1/verify
{
  "token_id": "AAP-LIC-2026-C91F",
  "action": "distribute",
  "context": {
    "territory": "FR",
    "channel": "owned-social",
    "language": "fr",
    "asset_sha256": "89d2c6…a01f"
  }
}

200 OK
{
  "integrity": "valid",
  "provenance": "verified",
  "authority": "verified",
  "usage": "allow",
  "reason_codes": [],
  "checked_at": "2026-07-27T18:42:11Z",
  "receipt": "pvr_01JZCC2Y…"
}

07 / C2PA BRIDGE

C2PA proves the media chain.
Proof adds the rights chain.

For each final media asset, the intended design places the Proof token URI and credential digest in a namespaced custom C2PA assertion. The C2PA manifest remains the source of media provenance. Proof evaluates the linked commercial and consent scope.

{
  "@context": "https://proof.avatarz.com/ns/c2pa/v1",
  "profile": "https://proof.avatarz.com/profiles/c2pa-bridge/v0.1",
  "licence": {
    "id": "https://proof.avatarz.com/licences/AAP-LIC-2026-C91F",
    "credentialDigest": "sha256:55f1…a80c",
    "status": "https://proof.avatarz.com/status/2026-07"
  },
  "authorization": {
    "grantDigest": "sha256:103e…9f11",
    "providerJob": "heygen:job:demo_1042"
  },
  "binding": {
    "receipt": "https://proof.avatarz.com/receipts/pbr_01JZDB1P"
  }
}

Non-equivalence rule. A trusted C2PA manifest never means that a commercial use is authorised. A valid Proof licence never guarantees that a file has an intact Content Credential. Verification reports both layers separately.

09 / SECURITY ARCHITECTURE

Keys sign facts.
Controls protect meaning.

10 / STATUS & REVOCATION

History is immutable.
Authority is not.

Proof never deletes or rewrites an issued credential. It publishes a signed status transition and preserves the previous state, reason, actor and effective time.

Distribution cannot be magically recalled. Revocation changes future verification results, triggers notices and takedown workflows, and creates evidence of non-compliant reuse.

11 / THREAT MODEL

Designed around
how proof fails.

12 / PRODUCT SURFACES

One protocol.
Several trust surfaces.

Product names describe operational surfaces, not separate trust systems. See how Issue, Authorize, Bind and Verify form one control loop ↗

13 / GOVERNANCE

Cryptography cannot decide
who deserves trust.

Production readiness requires governance around issuer admission, identity assurance levels, representative mandates, schema changes, dispute resolution, retention, law-enforcement requests and transparent incident reporting.

14 / STANDARDS & REFERENCES

Built on standards.
Explicit about extensions.