01What is live today
Select a file, hash its bytes using native crypto.subtle.digest("SHA-256", bytes), compare to a reference, and export a JSON passport. All of that runs in your browser. No wallet, account, token holdings, or rewards are involved.
Web Crypto requires a secure context such as HTTPS or localhost. This v1 reads the complete file into memory, not a streaming hash, and limits each file to 64 MiB.
02A byte-level match, not a rights check
A match means the calculated SHA-256 equals the supplied reference. It does not establish a creator, identity, ownership, license, originality, or who published a file first.
Cropping, editing, metadata changes inside a file, and video re-encoding can produce different bytes and a different digest—even when the content looks identical. Renaming a file alone does not change its digest. This is not perceptual matching; a mismatch is not evidence of fraud.
03A reference is only as trusted as its source
Anyone can write or edit an unsigned passport. Obtain the expected digest through a source you trust. Importing a valid passport verifies its structure, not its author or truth. The studio compares its digest only; filename, size, and MIME type are descriptive metadata.
The createdAt value comes from a user-controlled local clock. It is editable and untrusted, not a timestamp authority, proof of creation time, or independent attestation.
04What this is not
Origin v1 is not C2PA, a signed provenance credential, a watermark, an ownership registry, or an on-chain record. It does not recover an original from a transformed file. It cannot stop copying or prove attribution.
RESEARCH ONLY / NOT DELIVEREDOptional on-chain anchoring may be explored in the future. There is no anchoring integration in v1, no delivery commitment, and no invented token utility or token-gated access.