01 / SUMMARY
The operational view.
49 outputs remain under this policy. Registration is evidence; each distribution context is still evaluated separately.
02 / RIGHTS SCOPE
What the token says.
✓distribute
✓generate
✓translate
×betting-context
×paid-media
×political-use
×voice-dataset-extraction
!ai-disclosure
!register-outputs
!remove-at-expiry
Evaluation rule: a valid signature does not itself authorise use. The requester, action, territory, channel, language, asset and current status must all match. Unknown or contradictory conditions fail closed.
03 / TECHNICAL ENVELOPE
How it can be verified.
sha256:85fc1bbc6acb7f438fdac7f63cd6391dea62928baf91be78f2bef1f1b05359a4SHA-25604 / MEDIA BINDINGS
Rights meet provenance.

AAP-AST-2026-11D3
urn:avatarz:provider:heygen · 11 AUG 2026 · 14:51:55 UTC
- EXACT BINDING
- sha256:f831ba094ee77ff3a9d5f22f82a5a0067e2cf37a4184190d406438b5609db47c
- MIME TYPE
- video/mp4
- C2PA MANIFEST
- unavailable — reference binding only
05 / AUDIT LOG
An explainable history.
Events are appended, correlated and integrity-protected. A transition changes current authority without deleting the original credential or previous decisions.
urn:avatarz:org:northstar-sports
8052dec9✓urn:avatarz:identity:marcus-vale
13962767✓did:web:proof.avatarz.dev
ef3783cb✓did:web:proof.avatarz.dev
beb4f437✓urn:avatarz:org:northstar-sports
5cc5b97f✓06 / RAW CREDENTIAL
Portable by design.
The decoded payload below is the actual signed VC — independently verifiable against /.well-known/jwks.json. The signing key belongs to the demo tenant, not a production issuer.
{
"@context": [
"https://www.w3.org/ns/credentials/v2"
],
"id": "AAP-LIC-2026-C91F",
"type": [
"VerifiableCredential",
"LikenessLicenceCredential"
],
"issuer": "did:web:proof.avatarz.dev",
"validFrom": "2026-08-04T14:51:54.260Z",
"validUntil": "2026-10-07T14:51:54.260Z",
"credentialSubject": {
"id": "urn:avatarz:identity:marcus-vale",
"licensee": "urn:avatarz:org:northstar-sports",
"policy": {
"profile": "https://proof.avatarz.com/ns/odrl/likeness/v1",
"version": "0.1",
"permissions": [
"distribute",
"generate",
"translate"
],
"prohibitions": [
"betting-context",
"paid-media",
"political-use",
"voice-dataset-extraction"
],
"duties": [
"ai-disclosure",
"register-outputs",
"remove-at-expiry"
],
"constraints": {
"territories": [
"FR",
"GB"
],
"channels": [
"crm",
"owned-social",
"stadium"
],
"languages": [
"en",
"fr"
],
"validFrom": "2026-08-04T14:51:54.260Z",
"validUntil": "2026-10-07T14:51:54.260Z",
"maxAssets": 50
}
}
}
}