Skip to content
EU AI Act Article 50 is in force. Grace period for existing AI systems ends 2 Dec 2026.EU AI Act Article 50 is in force. The grace period ended on 2 Dec 2026. Check your exposure →

com.originalpictures.audioseal.1

Meta AudioSeal (streaming, quality-first) audio watermark: Original Pictures' invisible audio watermark, built on Meta FAIR AudioSeal 0.2.0 (streaming), with its own payload layout, calibration and detection threshold. Not interchangeable with other deployments of the same model.

  • 16-bit identifier in 16 model bits
  • Encoded media types: audio/mpeg, audio/wav
  • Registration requested with the C2PA soft binding algorithm list
All soft-binding algorithms

Identity

FieldValue
Algorithm identifier (alg)com.originalpictures.audioseal.1
TypeWatermark
Decoded media typeAudio
Encoded media typesaudio/mpeg, audio/wav
Underlying modelMeta FAIR AudioSeal 0.2.0 (streaming)
Provider identity and versioncom.meta.audioseal 0.2.0-streaming-16bits-a0.5-1.0-polyphase
API value (watermark_algorithm)audioseal-mm02-4 (the default for audio when a request names none)
Registry entryaudioseal-mm02-4
Payload16 logical bits in 16 physical bits
Error correctionnone
Strength ladder0.5, 1
Calibrationop.audioseal-mm02.calibration.v2
Detection thresholdop.audioseal.detected-frames-0.80.v1
Runtime revisionop.audio-bindings.mm02.4
LicencesCode: MIT. Weights: MIT (HF facebook/audioseal @3c19eba).

Model checkpoints

Every file the runtime loads is pinned by SHA-256; a file with any other hash is refused.

FileSHA-256SizeSource
generator_streaming.pthf5eb3076c1748940578993edd18ecd4fbdbc387fe7613a77f420af921d83eb7458.8 MBdownload
detector_streaming.pthb78b017411b661d77b1e37402b00af6ce5319bfba9a69590489c8bcd0e657e4c34.7 MBdownload

Payload and error correction

The 16-bit identifier fills the model's whole message capacity; there is no separate error-correction code. The identifier is an opaque record number issued by Original Pictures for one signed file. It carries no personal data and no content of the file, and on its own it means nothing outside Original Pictures' records.

Strength

Starts at 0.5 and steps up only when the lighter mark does not read back and the stronger one stays under the spectral-distortion floor of 14 dB; otherwise the job is refused. Per request, watermark_strength picks a slice of the same ladder: subtle 0.5; balanced 0.5, 1; robust 0.5, 1. No request can go above the qualified ladder.

Marks written by an earlier lane of the same model are read the same way and resolve to the same records: audioseal (retained; model version 0.2.0-streaming-16bits, calibration op.audioseal-mm02.calibration.v1, runtime op.audio-bindings.mm02.3).

How detection works

The detector scores every frame of the audio, resampled to 16 kHz, and reports a detection only when at least 80% of frames score above 0.5; the message bits are read at 0.5. A detection is then looked up by exact equality among the recorded identifiers of the same algorithm, calibration and threshold, within the account that signed the file.

What a positive result means

A match means the file carries a watermark that leads to a record the signer's account made when it signed a file. It points to that file's C2PA manifest, which declares its origin. It is a probabilistic lead, not cryptographic proof: a watermark can be damaged by heavy edits or targeted attacks, and it says nothing about whether the content is true. The signed manifest, where it survives, is the proof.

False matches

On Original Pictures' 2026 benchmark (configuration AudioSeal-streaming@0.5), the production rule (key_match: a detection counts only when the decoded identifier exactly matches a recorded one) produced 0 false matches in 21,114 trials on unmarked media, a 95% upper bound of 1.42 × 10^-4 per check. Under the gating attack (mp3_128) the identifier was read back at 99.6% bit accuracy. These are measurements on a fixed test set, not a guarantee for every file.

How to check a file

  • Content Credentials. Any C2PA-aware validator can read and check the manifest of a file that still carries one, without calling Original Pictures.
  • The watermark. Watermark recovery runs inside a verification: POST /v1/verifications on the Original Pictures API. When no manifest can be read, the verification searches the watermark and reports a single match as recovery-only (VALIDATION_RECOVERY_ONLY), never as cryptographic validity. Recovery searches only the bindings of the account that runs the verification. See lookup and recovery and watermarks.
  • There is no public soft-binding resolution API. A third party can check a file on the signer's hosted verify page, if the signer publishes one; that page searches the signer's own watermarks only when the signer has switched recovery on (recover_own_assets). Otherwise, contact the signer or us.

Relation to C2PA

When a soft-binding algorithm has an identifier on the C2PA soft-binding algorithm list, the manifest can carry a c2pa.soft-binding assertion that names it in its alg field, and the watermark action is c2pa.watermarked.bound. Registration for com.originalpictures.audioseal.1 has been requested with the C2PA soft binding algorithm list; no identifier has been assigned yet. Until one is, files watermarked with this algorithm record the action c2pa.watermarked.unbound and carry no watermark soft-binding assertion for it. This page is the entry's informational URL.

Status and contact