AI Content Provenance & SynthID: Cuộc đua compliance khi watermark AI vừa chuẩn hóa đã bị bẻ khóa

AI Content Provenance & SynthID: The Compliance Race as AI Watermarks Are Standardized and Broken

1. Chẩn đoán rủi ro cụ thể Việc OpenAI áp dụng Google SynthID cho ảnh AI là một tín hiệu chiến lược quan trọng: thị trường đang chuyển từ câu...

1. Specific risk diagnosis OpenAI’s adoption of Google SynthID for AI-generated images is a strategic signal: the market is moving from the question “was this content created by AI?” to...

import hashlib
import json
from datetime import datetime, timezone
from pathlib import Path

def sha256_file(path):
    h = hashlib.sha256()
    with open(path, "rb") as f:
        for chunk in iter(lambda: f.read(8192), b""):
            h.update(chunk)
    return h.hexdigest()

def create_manifest(file_path, creator, tool, ai_generated, reviewer, approval_id):
    p = Path(file_path)
    manifest = {
        "file_name": p.name,
        "sha256": sha256_file(p),
        "created_at_utc": datetime.now(timezone.utc).isoformat(),
        "creator": creator,
        "tool_or_model": tool,
        "ai_generated": ai_generated,
        "reviewer": reviewer,
        "approval_id": approval_id,
        "policy_version": "content-auth-v1.0"
    }
    out = p.with_suffix(p.suffix + ".manifest.json")
    out.write_text(json.dumps(manifest, indent=2), encoding="utf-8")
    return manifest

if __name__ == "__main__":
    create_manifest(
        file_path="campaign_image.png",
        creator="marketing.team@company.com",
        tool="approved-genai-image-tool",
        ai_generated=True,
        reviewer="legal.reviewer@company.com",
        approval_id="APR-2026-00124"
    )

function validateAssetBeforePublish(asset) {
  const required = ["sha256", "creator", "created_at_utc", "ai_generated", "reviewer", "approval_id", "policy_version"];
  const missing = required.filter((field) => !asset.manifest || asset.manifest[field] === undefined);

  if (missing.length > 0) {
    return {
      allowed: false,
      reason: "Missing provenance fields: " + missing.join(", ")
    };
  }

  if (asset.riskLevel === "high" && !asset.manifest.approval_id) {
    return {
      allowed: false,
      reason: "High-risk asset requires legal or governance approval."
    };
  }

  return { allowed: true, reason: "Asset provenance passed." };
}

import hashlib
import json
from datetime import datetime, timezone
from pathlib import Path

def sha256_file(path):
    h = hashlib.sha256()
    with open(path, "rb") as f:
        for chunk in iter(lambda: f.read(8192), b""):
            h.update(chunk)
    return h.hexdigest()

def create_manifest(file_path, creator, tool, ai_generated, reviewer, approval_id):
    p = Path(file_path)
    manifest = {
        "file_name": p.name,
        "sha256": sha256_file(p),
        "created_at_utc": datetime.now(timezone.utc).isoformat(),
        "creator": creator,
        "tool_or_model": tool,
        "ai_generated": ai_generated,
        "reviewer": reviewer,
        "approval_id": approval_id,
        "policy_version": "content-auth-v1.0"
    }
    out = p.with_suffix(p.suffix + ".manifest.json")
    out.write_text(json.dumps(manifest, indent=2), encoding="utf-8")
    return manifest

if __name__ == "__main__":
    create_manifest(
        file_path="campaign_image.png",
        creator="marketing.team@company.com",
        tool="approved-genai-image-tool",
        ai_generated=True,
        reviewer="legal.reviewer@company.com",
        approval_id="APR-2026-00124"
    )

function validateAssetBeforePublish(asset) {
  const required = ["sha256", "creator", "created_at_utc", "ai_generated", "reviewer", "approval_id", "policy_version"];
  const missing = required.filter((field) => !asset.manifest || asset.manifest[field] === undefined);

  if (missing.length > 0) {
    return {
      allowed: false,
      reason: "Missing provenance fields: " + missing.join(", ")
    };
  }

  if (asset.riskLevel === "high" && !asset.manifest.approval_id) {
    return {
      allowed: false,
      reason: "High-risk asset requires legal or governance approval."
    };
  }

  return { allowed: true, reason: "Asset provenance passed." };
}