Manifest
Review what C2PA data is present and how the asset describes its provenance.
Actions
Inspect declared edits or processing actions when the manifest includes them.
Signature
Check whether the signed data still validates against the media file.
Certificate chain
Separate cryptographic signing from public trust-chain recognition.