EU Transparency Code of Practice — what is live

Detection and verify. Not a model lab.

CSOAI Ltd places a measurement provenance and verification tool on the EU market free of charge: /gspc-verify. Three states: VALID, INVALID, UNCHECKABLE. We do not sign the GPAI Code. We do not sign Section 2 (news / deepfakes). Board 23 axis · 23 measured. Empty cells stay empty.

Live

  • Ed25519 measurement cards (did:web:csoai.org#card-attestation-1)
  • Browser verify at /gspc-verify
  • HTTP MCP https://councilof.ai/mcp — tools/list serves 12 tools (8 free readers + 4 x402-metered); witness_hash is quarantined there. Published npm 0.2.1 also lists 12, split differently (7 free + 5 x402): it carries witness_hash and not x402_trust. Re-check: /.well-known/mcp.json → measured
  • C2PA / CAI conformance: not live (claims register CR-012 planned)

Planned — do not tick as shipped

  • C2PA manifests (CR-012). HMAC text is not C2PA.
  • Split-key 2-of-3 (`#board-attestation-2`): STAMP=UNCHECKABLE until ceremony. Do not print SIGNED for that path.
  • Machine-readable marks on generative media we do not emit — we are not that provider.

Doctrine · CR-012. Owner signs the Commission form only if this page is true.