Provenance.

Five layers of provenance

1. 01

   C2PA Content Credentials manifest

   Every generated image, audio, video, and (where applicable) text output carries a C2PA JSON-LD manifest. The manifest binds: device identity, model lineage, edit history, generation timestamp, chain reference. Spec: ISO/IEC 22144 (ratified from C2PA v2.1).

2. 02

   SynthID-equivalent invisible watermark

   Pixel-level (image), spectrogram-level (audio), token-level (text) watermark embedded at generation. Imperceptible to humans; detectable by the substrate's verifier-daemon and by third-party tools implementing the open watermark spec.

3. 03

   Silicon-DNA chain head

   Every manifest carries the SHA-256 of the generating silicon's DNA (RTX 5090 sm_120 on Windows + GB10 Grace Blackwell on ATOM, byte-identical per cross-silicon parity). Forging a manifest requires controlling both heterogeneous silicon fingerprinters.

4. 04

   Bitcoin block anchor

   The output's StageRecord chain head is anchored to public-blockchain attestation. Third-party-verifiable on mempool.space. Block 946,772 is the canonical anchor; subsequent outputs extend the chain.

5. 05

   Site-screenshot watermark

   Beyond generation, brmste.ai itself carries a browser-layer watermark on every screenshot — diagonal BRMSTE wordmark + live silicon-DNA pair + visit timestamp. Any flat capture of the site is provenance-traced through reproduction.

How to verify a substrate output

1. 01 · C2PA ValidatorOpen-source C2PA validators read the JSON-LD manifest. Run `c2patool verify <file>` against any substrate-generated asset.
2. 02 · Watermark DetectorSynthID-style invisible watermark detectors flag substrate-generated content. The substrate publishes its detection method on request to verified third parties.
3. 03 · Chain LookupEvery manifest carries a chain reference. Look up the txid on mempool.space; the StageRecord hash should match the manifest's chain-head field.
4. 04 · Cross-Silicon ParityThe substrate's parity proofs at /silicon-pass show byte-identical generation across Windows + ATOM. Both fingerprints must check; if only one validates, the manifest is forged.

→ Silicon pass · cross-silicon parity proofs