signingCredential.untrusted
The signer does not chain to caller-supplied trust material.
Failure code
What to do
Add the signer's certificate to your trust list, or confirm the signer out of band, before trusting the manifest.
Verify it yourself
Install the open-source Encypher C2PA CLI and check any file. It runs locally and reports these status codes.
cargo install encypher-c2pa-cli
Build verification into your product
The Encypher API returns these status codes over HTTP. Read the reference to wire provenance checks into your own workflow.