Content Provenance Infrastructure: Cryptographic and Behavioural Approaches to Authenticity

Abstract

when nothing arriving at its front door carries a verifiable history and no upstream party attests to anything. Cryptographic provenance answers that question where it exists [1], but that is a target state. No cryptographic provenance layer existed in the music supply chain this account draws on, so the cryptographic side here is analytical, from the literature and from [1], and the behavioural side is operating practice. The composition that was operated is internal to the behavioural layer and is the first contribution: artefact-level detection is gamed by adversarial post-processing and covered by behavioural context; behavioural context is gamed by patience and covered by identity anchoring; identity is gamed by theft and covered by decision history and adversarial appeal, under the rule that no two signals share a failure mode and no signal's confidence overrides another's alarm. Second, behavioural reconstruction is treated as a provenance layer in its own right, verifying by convergence rather than signature. Third, it sets out an operating policy for content carrying no provenance at all, which is the whole environment, not an edge case: absence triggers measurement rather than trust or suspicion, provenance accretes retroactively from observed behaviour, and claims the platform did not generate are priced as testimony rather than believed. Composition with a cryptographic layer is offered as a proposal, not a deployment. The account is a single-site retrospective practitioner report from a large-scale music streaming platform with, by the author's account, more than 250 million tracks. No controlled evaluation and no operational metrics are reported.