0.26.3
What changed
- Hardened Adobe TrustMark Variant P detection by requiring the same binary payload and schema after JPEG re-encoding.
- Limited high-confidence TrustMark detection to schemas 0-2, rejecting persistent schema-3 false positives.
- Added an official Adobe Variant P fixture and regression coverage.
- Kept TrustMark as a provenance signal that does not assert AI origin or trigger diffusion scrubbing by itself.
Known issue
The optional trustmark extra currently resolves lightning 2.6.5, which is affected by PYSEC-2026-3624. No fixed Lightning release is available at publication time. The default installation does not include this extra.