assertion.hashedURI.mismatch
A referenced assertionAssertion: One statement inside a C2PA label, such as what was done to the content, whether AI was used, or the content's hash. changed or is not the referenced bytes.
This check failed.
What to do
Reject the manifestC2PA manifest: The signed label itself: a small package inside a file that records who signed it, what they declared and how to check it.. A referenced assertion was changed or replaced after the claim was signed.
What the hash checks cover
Whether the content and each assertion still match the hashHash: A short fingerprint of exact bytes. Any change, even one character, gives a completely different hash. the claim signed. A mismatch means bytes changed after signing, or the hash data is invalid.
Check a file yourself
Install the open-source Encypher C2PAC2PA: The Coalition for Content Provenance and Authenticity: the group that publishes the open standard for content labels. command-line tool. It runs on your machine and reports these codes for any supported file format.
cargo install encypher-c2pa-cliCreate. Mark. Endure.
The Encypher APIAPI: Application programming interface: a way for one program to ask another to do a job, such as sign a file. returns these codes over HTTP, so your product can act on them.