C2PA check of OpenAI Sora and ChatGPT files found two wrong results

Developers built a free C2PA Content Credentials checker and tested public files from OpenAI, Adobe, Capture One and Truepic. The Sora video and ChatGPT image had signatures matching their bytes, but the AI-generation label sits in the ingredient manifest, not the top level; expired certificates were initially misread as tampering.

• Checker reports four states: VERIFIED, DECLARED_ONLY, CONTRADICTED, INSUFFICIENT
• Sora and ChatGPT signatures matched bytes, but signers are not on the official C2PA list
• ChatGPT image's trainedAlgorithmicMedia label lives in the ingredient manifest
• An expired certificate is no longer treated as evidence of tampering