What 'C2PA-signed evidence' means for AI agent buyers
Review sites have a trust problem. G2, Capterra, Product Hunt, analyst notes, community posts, and social proof all help buyers discover software, but they do not always prove what happened inside a test. A vendor can show a polished demo. A reviewer can show a screenshot. A buyer still has to ask: where did this artifact come from, and has it changed since capture?
That question matters more for AI agents than for ordinary software. Agents act. They call tools, generate outputs, speak to customers, search the web, write code, and make decisions inside workflows. A static opinion without inspectable evidence is not enough. Buyers need a way to connect the published verdict to the observed run.
Hlido's answer is evidence-first review plus C2PA-signed proof. The review page gives the human-readable verdict. The scorecard gives the claim-vs-evidence table. The signed screenshot gives the provenance trail: who created the artifact, when it was created, what review it belongs to, and whether the file still carries the manifest.
What C2PA actually is
C2PA stands for the Coalition for Content Provenance and Authenticity. It is a standard for attaching provenance metadata to media files in a way that can be inspected by compatible tools. For a PNG screenshot, that metadata travels inside the file as a C2PA manifest.
The storage format uses JUMBF, a box structure that can carry assertions, thumbnails, signatures, and references. In practical terms, a signed file can include a manifest label such as a c2pa.urn, assertion data about how the artifact was created, and signature information. If the file is altered in a way that breaks the claim, verification can detect that the provenance chain no longer validates.
C2PA is not magic. It does not prove that a product is good. It does not replace editorial judgment. It proves something narrower and more useful: the artifact carries a structured provenance claim that can be inspected after publication. For review evidence, that narrow proof is valuable because it turns a screenshot from a loose image into an auditable object.
Why every Hlido screenshot carries a C2PA manifest
Hlido reviews are built around claims and evidence. If a product says it supports integrations, the review looks for public integration evidence. If a support agent claims enterprise security, the review looks for visible security or compliance claims. If a coding agent claims repo-level work, the review looks for actual workflow proof. The screenshot is the artifact that preserves what the reviewer saw.
That artifact should not be a trust-me image. A signed PNG can carry a manifest that ties the capture to a Hlido review run. For example, a Klariqo homepage proof artifact verified during the C2PA rollout exposed an active manifest like urn:c2pa:c106c4a2-fdd8-4b34-9514-bbd2ae0bd862, JUMBF references, Hlido review assertions, and signature validation results. Public proof URLs follow the same review-key pattern, such as https://images.hlido.eu/reviews/retell-ai/moo0ua1v/01-Homepage.png; use the current signed image linked from a review page when you run verification.
The point is accountability. A buyer should be able to inspect the review page, open the underlying proof image, and verify the provenance trail. A journalist should be able to cite an artifact without relying only on Hlido's summary. A vendor disputing a result should be able to point to the exact captured surface and explain what changed.
How to verify a Hlido screenshot yourself
The simplest path is to use c2patool, the command-line verifier from the C2PA ecosystem. Download the PNG linked from a Hlido review page. Then run:
c2patool path/to/hlido-proof.png
If the image carries a manifest, the tool prints the active manifest, assertions, signature information, and validation results. In a signed Hlido file, you should see a manifest label with a C2PA URN, JUMBF references, creation assertions, review metadata, and signature output. If the tool reports that no claim exists, the file you downloaded is not the signed proof artifact and should not be treated as provenance-backed.
Buyers do not need to become C2PA specialists. The useful habit is simple: click the proof, download the artifact, and verify that the manifest exists. Then read the claim-vs-evidence table next to it. The manifest proves provenance for the artifact; the table explains what the artifact means in the review.
Verification also gives vendors a cleaner dispute path. A vendor can say the product has changed since capture, but the signed artifact preserves what was observed at the time. That makes the next step concrete: re-test the changed surface, publish the updated evidence if warranted, and keep the older artifact as historical context rather than arguing from memory.
What this means in practice
C2PA changes the review conversation from "trust our screenshot" to "inspect the artifact." That is a better posture for AI agent buying because the market is full of similar claims and uneven proof. Aider can be evaluated against a real repo edit and commit trail. Augment Code can be read against public codebase-understanding and security evidence. Retell AI can be evaluated against voice-platform docs, pricing, integrations, and data-retention evidence. Botpress and Kapa AI can be read against support-agent proof surfaces.
It also makes disputes healthier. If a vendor says the product has changed, the review can be re-tested. If a buyer asks why a claim was marked partial, the proof artifact and the scorecard can be inspected. If a journalist wants to know how Hlido differs from review aggregators, the answer is not that Hlido has opinions. The answer is that Hlido ties opinions to evidence artifacts that can be checked after publication.
Signed evidence does not remove judgment from reviews. It disciplines judgment. The reviewer still decides what a claim means, whether evidence is strong enough, and how the public scorecard should read. C2PA makes the underlying artifact less slippery. For AI agent buyers, that is the difference between marketing memory and review-grade proof.
That distinction is the brand promise buyers should hold Hlido to. A review should not ask for trust because the prose sounds confident. It should earn trust by showing the captured surface, the claim it supports, the scorecard decision it informed, and a provenance trail that survives after the page changes.