FREE / LOCAL / C2PA 2.4
Inspect one. Compare two. Audit a batch. Reproduce a report.
Read Content Credentials, compare provenance changes, review up to 2,000 files and reproduce an exported report without uploading any source asset. Integrity, signer trust and AI declarations remain separate observations.
A valid credential proves integrity of signed data, not factual truth. No credential does not mean fake.EVIDENCE POLICY / LOCAL / 2,000 ROWS
Turn provenance observations into repeatable review routing.
Choose one of four explicit presets, adjust ten visible rules and export a checksum-bound profile. The same decision can be replayed in the browser or by the free focused MCP without sending source media.
- PRESETS
- 4 explicit starting profiles
- RULES
- 10 visible routing rules
- SCALE
- Up to 2,000 observations
- REPLAY
- Browser + 2 focused MCP tools
INSPECT / COMPARE / BATCH / REPRODUCE
A local workspace for evidence, not verdicts.
Inspect one file, compare two evidence states, review up to 2,000 files or reproduce an exported report. The 8.7 MB verifier loads only after a source file is selected.
START WITH THE QUESTION
Choose the evidence task in front of you.
Each route opens the same browser-local workspace. Select only the files needed for this task; nothing is uploaded.
- Choose the original file whenever possible.
- We separate C2PA presence, integrity, signer trust and AI disclosure.
- Missing signals do not establish human origin, AI origin, truth or fakery.
Drop a file to inspect its Content Credentials.
Your file stays in this browser. The official C2PA Trust List snapshot is embedded; no runtime trust-list request is made.
JPEG, PNG, WebP, GIF, AVIF, MP4, MOV, M4A or PDF / MAX 50 MBLOCAL INSPECTION RESULT
FILE
PLAIN-LANGUAGE READING / DETERMINISTIC
What this result means
EVIDENCE CROSSWALK
What the file supports and what remains unknown
ACTIVE MANIFEST
Signer and claim facts
DECLARED PROVENANCE / ORDER PRESERVED
Provenance timeline
Action order is preserved from the manifest. Action times are declarations, not trusted timestamps; only TSA status codes can mark a validated timestamp.
EVIDENCE INVENTORY
Actions, source types and ingredients
CREDENTIAL PATH / LOCAL VALIDATION
Certificate path and trust decisions
This is a sanitized evidence path, not the complete x5chain. The SDK exposes leaf-certificate summaries and validation codes but not intermediate certificate objects or the root trust-anchor object.
EXPERT MODESANITIZED TECHNICAL EVIDENCE / LOCAL ONLY
AI DISCLOSURE + SOURCE TYPES
VERIFIER + PRIVACY CONTRACT
CERTIFICATE + TRUST DIAGNOSTICS
BAGIT 1.0 / SHA-256 MANIFESTS / LOCAL
Export an interoperable Evidence Package
Creates a BagIt ZIP with the report, verifiable envelope, PROV-JSONLD and payload/tag manifests. This Hogar Mas profile is not an official C2PA package standard.
ENTERPRISE AUDIT / LOCAL / HASH-CHAINED
Create a review-ready audit record
Add optional case context, then export canonical JSON, print-ready HTML, Markdown, verification results and a SHA-256 manifest in one ZIP.
BEFORE / AFTER / LOCAL DIFF
Compare two evidence states without guessing why they changed.
The workspace compares hashes and sanitized C2PA observations. It reports what changed, not who changed it or whether the visible content is true.
BEFORE
No local file selected
AFTER
No local file selected
DETERMINISTIC EVIDENCE DIFF
Observed changes between two local reports
| OBSERVATION | BEFORE | AFTER | STATUS |
|---|
STRUCTURED MANIFEST DIFF
Changed manifest paths
| PATH | BEFORE | AFTER | CHANGE |
|---|
UP TO 2,000 FILES / MEMORY-BOUNDED / LOCAL
Audit a large local collection without creating an upload queue.
Files are processed one at a time, compacted immediately and shown 100 rows per page. Stop safely after the current file and export every processed row.
Drop files or choose a folder for a local batch review.
No local files selected
MAX 2,000 FILES / 50 MB EACH / NO UPLOADBAGIT 1.0 / SHA-256 / PROV-O
Turn a batch into one locally verifiable handoff.
After a batch finishes, package every compact observation, summary and provenance map into one ZIP. Source media and full per-file reports stay outside the package.
Build Collection Evidence Package
Replaces local file names with stable aliases. SHA-256 values remain for detached source matching; this does not guarantee anonymity.
Verify a received package
Checks bounded ZIP structure, complete BagIt manifests, every package SHA-256 and the compact collection index without uploading the ZIP.
On an installed phone, share a received ZIP to H/M Checks to open this local verifier. The temporary copy is removed after this tab reads it.
TWO VERIFIED PACKAGES / SOURCE HASH MULTISET / LOCAL
See what changed between two collection snapshots.
Choose an earlier package and a current package. Both BagIt manifests must verify before compact observations are paired by source SHA-256. File order and local names are not used as identity.
Loads two small public sample packages into this tab, verifies both BagIt manifests and produces a known 6-to-6 drift result. It never represents user or real-world evidence.
INSPECT DEMO METADATAUses report-local aliases. Source SHA-256 values remain for deterministic matching; this does not guarantee anonymity.
SYNTHETIC DEMO / NOT USER EVIDENCE
CHECKSUM-BOUND OBSERVATION DELTA
Matched by source SHA-256, never by file name
| CATEGORY | SOURCE ALIAS | OBSERVED DELTA |
|---|
SHARED COLLECTION OBSERVATION / NO SOURCE PACKAGES
Privacy-minimized Collection Baseline Diff receipt
This aggregate receipt is not signed, does not authenticate its sender and cannot reproduce the report without the original verified packages.
LOCAL BATCH OBSERVATIONS
One row per file, no aggregate verdict
| LOCAL FILE | MANIFEST | INTEGRITY | SIGNER | AI ORIGIN | READ |
|---|
EXPORTED REPORT + ORIGINAL FILE / LOCAL REPLAY
Reproduce a prior evidence report instead of trusting a screenshot.
Load a verifiable evidence envelope and the original source file. The workspace checks the envelope checksum, re-hashes the source and runs the pinned verifier again.
EVIDENCE ENVELOPE JSON
No local file selected
ORIGINAL SOURCE FILE
No local file selected
REPRODUCIBILITY CHECK / NO IDENTITY CLAIM
Current evidence compared with the exported report
| OBSERVATION | EXPORTED REPORT | CURRENT REANALYSIS | STATUS |
|---|
BROWSER SDK / DEVELOPER PREVIEW / 0.3.0
Put the evidence engine inside your own workflow.
Import one versioned ESM module for local inspection, provenance timelines, sanitized credential paths, Manifest Diff, 2,000-file batch review, evidence envelopes, BagIt packages and report reproduction. No API key and no source upload.
import { createContentCredentialsClient }
from "https://hogarmas.net/content-credentials/sdk/v0.3.0/index.js";
const client = createContentCredentialsClient();
const result = await client.inspect(file);
console.log({
integrity: result.report.integrity.state,
signerTrust: result.report.signer.state,
aiOrigin: result.report.aiOrigin.state,
timelineEvents: result.timeline.eventCount,
timestampTrust: result.trustDiagnostics.timestamp.state
});- Browser-local by contract
- The SDK sends no source bytes, metrics or browser-storage writes.
- Bounded at scale
- One file at a time, up to 2,000 files, with compact batch rows.
- Pinned and inspectable
- Versioned ESM, TypeScript declarations, runtime snapshots and SHA-256 manifests.
- Evidence, not verdicts
- No truth score. The workspace identifies its pinned official trust snapshot and exposes a sanitized credential path, not a complete certificate chain or compliance claim.
Embed a single-file local check in documentation or a guide. The selected file remains in the visitor's browser and this widget does not send it or store it.
This Hogar Mas developer preview wraps @contentauth/c2pa-web 0.13.1. It is not an official C2PA SDK, conformance certificate or legal compliance service.