content_credentials 1.0.x-dev

A development snapshot, not a release. This branch is where the module is being built. There is no tagged release yet and there deliberately will not be one until it has been used by somebody other than its author.

What it does

Reads the C2PA content credential travelling with a file attached to a participating entity, and suggests an AI Disclosure grade from the IPTC digitalSourceType the manifest carries. Only a manifest the reader reports as trusted produces a suggestion at all. The read runs in a queue, never in the save request, and an unmatched term is logged rather than guessed at.

What has actually been shown to work

It has run end to end on a Drupal 11.4.6 site against a real signing service, over HTTP and through the ext-c2pa extension, with trust verification on and the same result either way. Stopping the service mid-run produced an error and no suggestion, which is the dependency being falsified rather than assumed.

The two most useful defects found so far were invisible to the test suite and turned up only when somebody used the software: a suggestion stored where no field could display it, and a queue that retried work it could never finish. Both are fixed. Expect more of that kind.

Before you install it

• Composer is required. This module depends on provemark/content-credentials, which is not a Drupal project and cannot arrive through a tarball.
• PHP 8.3 or later, because that library requires it.
• A reading route: a C2PA signing service over HTTP, or the ext-c2pa PHP extension.
• AI Disclosure has no stable release either, so ask for it by name first:
  
  composer require drupal/ai_disclosure:^1.0@alpha

composer require drupal/content_credentials:1.0.x-dev