AI Media
Credentialing Spec.

A signed credential attached to media that travels with the bytes. Subject, issuer, terms, attribution root, enforcement class. Verifiable at fetch time, cascade-revocable on misuse.

One credential, one signature.

{
  "@context": "https://aeoess.com/amcs/v1",
  "subject":  "did:web:nytimes.com/article/2026-04-12-fed",
  "issuer":   "did:aps:pub:nytimes.com",
  "terms_block": {
    "behavioral_derivation": "summarize+attribute",
    "retention":             "session-only",
    "training":              "denied"
  },
  "attribution_root":  "sha256:9f2a…b71c",
  "enforcement_class": "enforcement",
  "expires":           "2026-10-12T00:00:00Z",
  "signature":         "ed25519:Aw3kH7…"
}

Seven required, all signed over.