C2PA Sora 2 Integration: Marking Video Output

Definition: The Original Pictures Sora 2 integration signs generated video output and preserves OpenAI's existing manifest as a c2pa.ingredient, adding identity, watermark, and anchor for marking obligations.

TL;DR: Sora 2, launched 30 September 2025, ships C2PA plus an invisible watermark. Re-signing through Original Pictures preserves OpenAI's manifest as an ingredient and adds your platform identity, a TrustMark layer, and an anchor, covering Article 50 across frames.

Preserve the upstream manifest

Sora 2 output already carries a C2PA manifest and a watermark. Rather than discard that, the integration preserves it as an ingredient and appends your manifest, so the chain shows both OpenAI's generation and your platform's signing.

Add identity and anchor

Your re-signing attaches a CAWG identity assertion naming your platform, a TrustMark watermark as an additional soft-binding layer, and an OpenTimestamps anchor for the audit trail, which the upstream manifest does not provide.

Marking obligations

For platforms wrapping Sora 2, this satisfies Article 50(2) marking at your API boundary while crediting the upstream generator, the clean way to handle layered provenance on AI video.

The incident behind this

Sora 2's launch on 30 September 2025 with C2PA and an invisible watermark, per OpenAI's system card, set the expectation that AI video ships with provenance, which downstream platforms must preserve and extend.

Implementation

from originalpictures import client
op = client(api_key=ENV['OP_KEY'])

signed = op.sign(asset='sora2-output.mp4',
                 producer='my-video-platform',
                 preserve_ingredients=True,   # keeps OpenAI's manifest
                 disclosure='art50.2',
                 watermark='videoseal', anchor=True)

FAQ

Does re-signing remove OpenAI's manifest?

No. With preserve_ingredients, OpenAI's manifest is kept as a c2pa.ingredient and your manifest is appended.

Where Original Pictures stands today

Original Pictures ships three things today: a Sign API, a Verify API, and the SDKs that wrap them. One POST /v1/sign attaches a C2PA-format manifest, an invisible TrustMark watermark, and an OpenTimestamps anchor. The open-source verifier checks any of it without calling us.

Two things are on the near roadmap, and we name them as roadmap, not as shipped: C2PA Conformance Program recognition (target Q3 2026, until then our manifests use the published C2PA v2.2 format and any C2PA-aware validator can read them, but third-party validators will show our signer as not-yet-listed), and a consumer capture app (Q3 2026). We do not sell a capture SDK, and we do not claim Trust-List membership we do not yet hold.

Bottom line: Re-sign Sora 2 output with preserved ingredients, your identity, a watermark, and an anchor, covering Article 50 while crediting the upstream generator.

Related

• model output marking
• C2PA for film studios
• manifest ingredients

---

Original Pictures is progressing through the C2PA Conformance Program; our signing certificate is not yet on the official C2PA Trust List. Target: Q3 2026. We will not describe ourselves as "C2PA-certified" until it is true.

Original Pictures provides content-provenance infrastructure. It does not by itself constitute legal compliance with the EU AI Act or any other regime; compliance depends on how you deploy it, your disclosures, and your governance. Figures are drawn from public reporting, verify against primary sources before citing in regulated materials. Nothing here is legal advice.

Last verified 2026-05-25. Author: Mahdi Kazempour, Founder, Original Pictures.