Insights on digital integrity, content authenticity, and web technologyhttps://noosphere.tech/https://noosphere.tech/blog/why-c2pa-needs-policy-based-governance/https://noosphere.tech/blog/why-c2pa-needs-policy-based-governance/The SDK signs a file. It does not decide who was allowed to sign, under which policy, with which credential, or whose signatures your systems should accept — and those are the questions that decide whether provenance means anything.Wed, 02 Sep 2026 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/you-cannot-sign-a-file-by-changing-it/https://noosphere.tech/blog/you-cannot-sign-a-file-by-changing-it/Embedded provenance has a circular dependency at its core, and the exclusion range is the workaround. A formal analysis of C2PA shows what the workaround costs — and why provenance that modifies the canonical artifact is the wrong default.Mon, 31 Aug 2026 00:00:00 GMTJeff Hantinhttps://noosphere.tech/blog/who-says-whos-trusted/https://noosphere.tech/blog/who-says-whos-trusted/The cryptography is finished. What nobody has settled is who decides a signer deserves belief — and the standards say so outright, leaving every verifier to keep its own list.Mon, 24 Aug 2026 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/a-mark-is-not-a-signature/https://noosphere.tech/blog/a-mark-is-not-a-signature/Invisible watermarks are becoming the default answer for text provenance. A mark can be robust or it can be binding, never both — and the trust question underneath is the one SSL left unanswered for twenty years.Mon, 17 Aug 2026 00:00:00 GMTJeff Hantinhttps://noosphere.tech/blog/provenance-is-rediscovering-xml-signature/https://noosphere.tech/blog/provenance-is-rediscovering-xml-signature/Every hard problem in content provenance — signing text, signing an excerpt, multi-party workflows, selective disclosure — was solved once, then deliberately thrown away. The industry is rebuilding those primitives without the scar tissue that came with them.Mon, 10 Aug 2026 00:00:00 GMTJeff Hantinhttps://noosphere.tech/blog/what-a-signed-article-actually-proves/https://noosphere.tech/blog/what-a-signed-article-actually-proves/A plain guide to content provenance: hashes, signatures, certificates, C2PA manifests, CAWG identity, DIDs and credentials — what each one is, why it exists, and what each one honestly does not tell you.Mon, 03 Aug 2026 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/slma-security-levels-for-media-artifacts/https://noosphere.tech/blog/slma-security-levels-for-media-artifacts/Applying the lessons of software supply chain security to the digital content supply chainMon, 18 May 2026 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/when-newsrooms-go-dark/https://noosphere.tech/blog/when-newsrooms-go-dark/Skynet is here; it's just not evenly distributed.Wed, 13 May 2026 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/did-adoption-software-supply-chain/https://noosphere.tech/blog/did-adoption-software-supply-chain/We surveyed major software foundations and standards bodies to see who's publishing DID documents. The results reveal both a gap and an opportunity.Sat, 21 Mar 2026 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/internet-of-authenticity/https://noosphere.tech/blog/internet-of-authenticity/The dead internet feels inevitable. But we have the technology to build something better. The infrastructure exists. Adoption is the challenge.Thu, 12 Mar 2026 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/why-we-are-building-noosphere/https://noosphere.tech/blog/why-we-are-building-noosphere/We built the first trust layer for browsers. We built the first trust layer for web services. We built API security infrastructure. Now we're building the trust layer for agents.Sun, 08 Mar 2026 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/agent-context-attack-surface/https://noosphere.tech/blog/agent-context-attack-surface/A2A defines how agents exchange messages. It doesn't define how to verify them. Context poisoning exploits this gap.Mon, 02 Mar 2026 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/context-integrity/https://noosphere.tech/blog/context-integrity/Context is becoming infrastructure. But nobody's talking about integrity for the knowledge layer agents reason over.Mon, 02 Mar 2026 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/trust-agility-the-design-principle-agent-platforms-are-missing/https://noosphere.tech/blog/trust-agility-the-design-principle-agent-platforms-are-missing/The Web PKI failed not because cryptography is hard, but because it eliminated trust agility. Agent platforms are repeating the mistake.Fri, 20 Feb 2026 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/why-content-authenticity-helps-agents-even-more-than-humans/https://noosphere.tech/blog/why-content-authenticity-helps-agents-even-more-than-humans/The internet is awash in misinformation. For humans, this creates confusion. For AI agents, it creates broken workflows. Content authenticity is the key to reliable agent execution.Mon, 01 Dec 2025 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/from-content-authenticity-to-context-authenticity-/https://noosphere.tech/blog/from-content-authenticity-to-context-authenticity-/If humans can't tell what's real anymore, how can we expect autonomous agents to?...Tue, 25 Nov 2025 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/agentic-trust-designing-for-integrity-in-autonomou/https://noosphere.tech/blog/agentic-trust-designing-for-integrity-in-autonomou/As artificial intelligence agents become more capable and more autonomous, a foundational question is emerging in both technical and ethical terms:...Sun, 02 Nov 2025 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/nuts-and-bolts-of-mechanical-trust/https://noosphere.tech/blog/nuts-and-bolts-of-mechanical-trust/How machines make trust decisions: the critical distinction between human trust (oxytocin) and mechanical trust (cryptography)Wed, 15 Oct 2025 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/hierarchy-democracy-anarchy-choose-your-trust-model/https://noosphere.tech/blog/hierarchy-democracy-anarchy-choose-your-trust-model/Exploring three fundamental approaches to digital trust: PKI hierarchies, PGP anarchy, and democratic trust anchors in the Noosphere ecosystemFri, 29 Aug 2025 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/technology-solution-trust-crisis-digital-trust-revisited/https://noosphere.tech/blog/technology-solution-trust-crisis-digital-trust-revisited/Revisiting the intersection of AI-generated content, digital authenticity, and trust infrastructure in light of recent developments in AI and cultureThu, 28 Aug 2025 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/making-trust-deterministic-how-cedar-policies-in-toto-slsa-spiffe-and-c2pa-come-together/https://noosphere.tech/blog/making-trust-deterministic-how-cedar-policies-in-toto-slsa-spiffe-and-c2pa-come-together/Building a foundation for deterministic trust decisions with verifiable metadata standards and policy enginesMon, 18 Aug 2025 00:00:00 GMTDaniel Zellmerhttps://noosphere.tech/blog/content-authenticity-vitamin-aspirin-or-something-else/https://noosphere.tech/blog/content-authenticity-vitamin-aspirin-or-something-else/Everyone agrees content authenticity matters, but unlike software supply chain security, it hasn't had its SolarWinds moment. Is it a vitamin, an aspirin, or perhaps a gold standard?Sat, 16 Aug 2025 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/anthropic-s-latest-releases-innovation-meets-quota/https://noosphere.tech/blog/anthropic-s-latest-releases-innovation-meets-quota/Anthropic just dropped Opus 4.1, and alongside it, the new Claude Code agents feature — and honestly, the whole thing feels like a case study in mixed signals....Tue, 12 Aug 2025 00:00:00 GMTJeff Hantinhttps://noosphere.tech/blog/why-digital-integrity-is-critical-infrastructure-for-trustworthy-publishing/https://noosphere.tech/blog/why-digital-integrity-is-critical-infrastructure-for-trustworthy-publishing/How cryptographic proofs and verifiable trust are becoming essential infrastructure for publishers in the digital ageThu, 10 Jul 2025 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/digital-integrity-what-is-it/https://noosphere.tech/blog/digital-integrity-what-is-it/Understanding digital integrity as the foundation of trust in the digital world through cryptographic proofs and verifiable processesSun, 01 Jun 2025 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/beyond-seo-how-json-ld-can-prove-authenticity/https://noosphere.tech/blog/beyond-seo-how-json-ld-can-prove-authenticity/From search visibility to verifiable trust, signed JSON‑LD turns your blog posts into portable, archival, and agent-ready content.Sun, 18 May 2025 00:00:00 GMTDaniel Zellmerhttps://noosphere.tech/blog/rethinking-agent-trust-why-delegation-is-the-wrong/https://noosphere.tech/blog/rethinking-agent-trust-why-delegation-is-the-wrong/In today's conversations about AI agents, the prevailing paradigm is delegation. But this framing is misleading. Agents are autonomous, and we need to design trust accordingly.Sat, 05 Apr 2025 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/what-i-learned-about-protocol-design-while-waiting-for-luggage/https://noosphere.tech/blog/what-i-learned-about-protocol-design-while-waiting-for-luggage/How the Model Context Protocol is falling into the same complexity trap as SOAP, and why SSH is the simple solution we already haveSat, 22 Feb 2025 00:00:00 GMTJeff Hantinhttps://noosphere.tech/blog/building-trust-infrastructure-for-the-decentralize/https://noosphere.tech/blog/building-trust-infrastructure-for-the-decentralize/As we continue to develop Noosphere's trust infrastructure, we've been thinking deeply about what it means to build truly decentralized systems. The web was originally designed to be decentralized, bu...Fri, 10 Jan 2025 00:00:00 GMTDaniel Zellmerhttps://noosphere.tech/blog/thoughts-on-digital-trust-in-the-age-of-ai/https://noosphere.tech/blog/thoughts-on-digital-trust-in-the-age-of-ai/While much of the focus on media today is about mainstream versus social platforms, digital journalism is quietly undergoing a transformation. Local journalism, in particular, is showing remarkable re...Tue, 15 Oct 2024 00:00:00 GMTAndrew Brownhttps://noosphere.tech/blog/rhizomatic-trust-why-deleuze-guattari-were-right-about-decentralized-systems/https://noosphere.tech/blog/rhizomatic-trust-why-deleuze-guattari-were-right-about-decentralized-systems/Trust infrastructure has always been arborescent—hierarchical, brittle, and prone to capture. What if we built it like a rhizome instead? Deleuze and Guattari's 'A Thousand Plateaus' offers a blueprint for truly decentralized trust.Mon, 01 Jan 2024 00:00:00 GMTAndrew Brown