Skip to content

CodeInspectus 3.2.0 — AI Provenance Audit

Latest
Latest

Choose a tag to compare

View all tags
@Synvoya Synvoya released this 07 Sep 06:59
v3.2.0
This tag was signed with the committer’s verified signature.
Synvoya Synvoya
SSH Key Fingerprint: k+H95W+vdF3kckXYqNA2BuQN2CTW0V1iKiihoKcbKGA
Verified
Learn about vigilant mode.
589cee4

AI Provenance Audit

CodeInspectus 3.2 adds bounded, read-only repository provenance inspection:

  • Detects explicit AI attribution in supported source/config headers, local Git Co-Authored-By trailers, and image EXIF/XMP/IPTC/PNG metadata.
  • Validates supported local C2PA Content Credentials using the optional official @contentauth/c2pa-node validator.
  • Reports valid, invalid, inconclusive, and remote-reference evidence through the stable repository-trust schema.
  • Keeps source-integrity, explicit-attribution, content-provenance, and unavailable statistical-watermark capabilities separate.

Safety boundary

  • Scans remain local, offline, bounded, and read-only.
  • Remote manifests, OCSP responses, trust lists, and revocation endpoints are not fetched.
  • C2PA and protected legal, licensing, or attribution records are never cleanup-eligible.
  • This release does not rewrite text, strip metadata, process media pixels/audio/video frames, or claim statistical watermark detection.
  • If the optional C2PA validator is unavailable, CodeInspectus reports partial content-provenance coverage instead of failing installation or claiming a complete audit.

See CHANGELOG.md for the complete release notes.

Assets 2
Loading