Signed evidence

What 'C2PA-signed evidence' means for AI agent buyers

Reviews are only useful if buyers can trust the evidence. C2PA makes the proof artifact inspectable instead of asking readers to trust a screenshot on faith.

What 'C2PA-signed evidence' means for AI agent buyers

Review sites have a trust problem. G2, Capterra, Product Hunt, analyst notes, community posts, and social proof all help buyers discover software, but they do not always prove what happened inside a test. A vendor can show a polished demo. A reviewer can show a screenshot. A buyer still has to ask: where did this artifact come from, and has it changed since capture?

That question matters more for AI agents than for ordinary software. Agents act. They call tools, generate outputs, speak to customers, search the web, write code, and make decisions inside workflows. A static opinion without inspectable evidence is not enough. Buyers need a way to connect the published verdict to the observed run.

Hlido's answer is evidence-first review plus C2PA-signed proof. The review page gives the human-readable verdict. The scorecard gives the claim-vs-evidence table. The signed screenshot gives the provenance trail: who created the artifact, when it was created, what review it belongs to, and whether the file still carries the manifest.

What C2PA actually is

C2PA stands for the Coalition for Content Provenance and Authenticity. It is a standard for attaching provenance metadata to media files in a way that can be inspected by compatible tools. For a PNG screenshot, that metadata travels inside the file as a C2PA manifest.

The storage format uses JUMBF, a box structure that can carry assertions, thumbnails, signatures, and references. In practical terms, a signed file can include a manifest label such as a c2pa.urn, assertion data about how the artifact was created, and signature information. If the file is altered in a way that breaks the claim, verification can detect that the provenance chain no longer validates.

C2PA is not magic. It does not prove that a product is good. It does not replace editorial judgment. It proves something narrower and more useful: the artifact carries a structured provenance claim that can be inspected after publication. For review evidence, that narrow proof is valuable because it turns a screenshot from a loose image into an auditable object.

Why every Hlido screenshot carries a C2PA manifest

Hlido reviews are built around claims and evidence. If a product says it supports integrations, the review looks for public integration evidence. If a support agent claims enterprise security, the review looks for visible security or compliance claims. If a coding agent claims repo-level work, the review looks for actual workflow proof. The screenshot is the artifact that preserves what the reviewer saw.

That artifact should not be a trust-me image. A signed PNG can carry a manifest that ties the capture to a Hlido review run. For example, a Klariqo homepage proof artifact verified during the C2PA rollout exposed an active manifest like urn:c2pa:c106c4a2-fdd8-4b34-9514-bbd2ae0bd862, JUMBF references, Hlido review assertions, and signature validation results. Public proof URLs follow the same review-key pattern, such as https://images.hlido.eu/reviews/retell-ai/moo0ua1v/01-Homepage.png; use the current signed image linked from a review page when you run verification.

The point is accountability. A buyer should be able to inspect the review page, open the underlying proof image, and verify the provenance trail. A journalist should be able to cite an artifact without relying only on Hlido's summary. A vendor disputing a result should be able to point to the exact captured surface and explain what changed.

How to verify a Hlido screenshot yourself

The simplest path is to use c2patool, the command-line verifier from the C2PA ecosystem. Download the PNG linked from a Hlido review page. Then run:

c2patool path/to/hlido-proof.png

If the image carries a manifest, the tool prints the active manifest, assertions, signature information, and validation results. In a signed Hlido file, you should see a manifest label with a C2PA URN, JUMBF references, creation assertions, review metadata, and signature output. If the tool reports that no claim exists, the file you downloaded is not the signed proof artifact and should not be treated as provenance-backed.

Buyers do not need to become C2PA specialists. The useful habit is simple: click the proof, download the artifact, and verify that the manifest exists. Then read the claim-vs-evidence table next to it. The manifest proves provenance for the artifact; the table explains what the artifact means in the review.

Verification also gives vendors a cleaner dispute path. A vendor can say the product has changed since capture, but the signed artifact preserves what was observed at the time. That makes the next step concrete: re-test the changed surface, publish the updated evidence if warranted, and keep the older artifact as historical context rather than arguing from memory.

What this means in practice

C2PA changes the review conversation from "trust our screenshot" to "inspect the artifact." That is a better posture for AI agent buying because the market is full of similar claims and uneven proof. Aider can be evaluated against a real repo edit and commit trail. Augment Code can be read against public codebase-understanding and security evidence. Retell AI can be evaluated against voice-platform docs, pricing, integrations, and data-retention evidence. Botpress and Kapa AI can be read against support-agent proof surfaces.

It also makes disputes healthier. If a vendor says the product has changed, the review can be re-tested. If a buyer asks why a claim was marked partial, the proof artifact and the scorecard can be inspected. If a journalist wants to know how Hlido differs from review aggregators, the answer is not that Hlido has opinions. The answer is that Hlido ties opinions to evidence artifacts that can be checked after publication.

Signed evidence does not remove judgment from reviews. It disciplines judgment. The reviewer still decides what a claim means, whether evidence is strong enough, and how the public scorecard should read. C2PA makes the underlying artifact less slippery. For AI agent buyers, that is the difference between marketing memory and review-grade proof.

That distinction is the brand promise buyers should hold Hlido to. A review should not ask for trust because the prose sounds confident. It should earn trust by showing the captured surface, the claim it supports, the scorecard decision it informed, and a provenance trail that survives after the page changes.

FAQ

Questions buyers ask after the first read.

How can I verify a Hlido review's screenshots are real?

Open the review page, download the linked proof PNG, and run c2patool against the file. A signed proof artifact should print an active C2PA manifest, a C2PA URN, assertions, signature information, and validation results. If the tool says no claim exists, you are not looking at the signed proof artifact. The manifest verifies provenance for the image; the review's claim-vs-evidence table explains what the image proves. Use both together, not one without the other. Use this answer to frame the call, then ask the vendor for the artifact that proves it.

How is Hlido different from G2 or Capterra?

G2 and Capterra are useful for market discovery and user sentiment. Hlido is built around independent claim testing. A Hlido review maps public product claims to evidence, publishes a scorecard, and attaches signed proof artifacts. The buyer is not asked to trust a popularity signal alone. They can inspect the captured surfaces and compare the verdict with the evidence that supported it. That makes Hlido closer to a proof desk than a review collection. Use this answer to frame the call, then ask the vendor for the artifact that proves it.

Does C2PA prove an AI agent works?

No. C2PA proves provenance for the media artifact, not product quality. It can show that a screenshot carries a manifest, signature information, and creation assertions. The product judgment still comes from the review process: what claim was tested, what evidence was observed, and how that evidence affected the scorecard. C2PA strengthens the proof layer; it does not replace evaluation. Buyers should read the artifact, the claim table, and the written verdict together. Use this answer to frame the call, then ask the vendor for the artifact that proves it.

What should I look for in a C2PA manifest?

Look for an active manifest, a C2PA URN, creation actions, review-related assertions, signature information, and validation results. In practical buyer terms, you want to see that the file is not just a detached screenshot. It should carry structured provenance data that links the artifact to the review context. If verification fails or no claim appears, ask for the signed artifact. The useful question is not whether metadata exists, but whether it ties to the review evidence. Use this answer to frame the call, then ask the vendor for the artifact that proves it.

Why does signed evidence matter for AI agents specifically?

AI agents are dynamic systems. They may behave differently by account, date, prompt, integration, model, or data access. A signed screenshot preserves a specific observed surface and makes it inspectable later. That helps buyers, vendors, and journalists reason about what was actually seen during review, especially when product pages change quickly after launch. It also makes disputes more concrete: re-test changed claims, but preserve the old artifact as historical proof. Use this answer to frame the call, then ask the vendor for the artifact that proves it.

Submit your agent

Want Hlido to review your AI agent?

Submit the public URL, the agent name, and any access notes. Hlido will test public claims against evidence and publish the result when review depth is sufficient.

Submit your agent