CapabilitiesSignature practice

Digital Trust and Responsible AI

Make every claim verifiable: who made it, what it is, and where AI was involved.

How do we show where AI was used, and prove who and what can be trusted?

Why it matters now

$40B
Projected US fraud losses enabled by generative AI by 2027, up from $12.3B in 2023Deloitte Center for Financial Services, 2024
$3–5T
Global agentic commerce opportunity by 2030, a shift McKinsey expects to test identity, fraud and privacy frameworksMcKinsey & Company, 2025
3–13%
Of GDP: the economic value full digital ID coverage could unlock by 2030 in seven focus countriesMcKinsey Global Institute

Our perspective

Synthetic content, autonomous agents and new transparency laws are changing what customers and regulators will accept. We design provenance, identity and disclosure into products and processes, on the open standards the market is adopting.

Exhibit: three layers of a verifiable AI record
Digital source typeWas the asset captured, created by a model, or edited?Actions with AI indicatorsWhich step in the asset’s history involved AI?AI disclosure assertionWhich model, in which domain, under what human oversight?
  1. Digital source type Was the asset captured, created by a model, or edited?
  2. Actions with AI indicators Which step in the asset’s history involved AI?
  3. AI disclosure assertion Which model, in which domain, under what human oversight?

How AI involvement is recorded in an open content credential. Source: C2PA Technical Specification 2.4; Hkdolts analysis.

01

Disclosure is becoming a record, not a label

The open provenance standard now carries a dedicated, machine-readable assertion for AI involvement: model type, scientific domain and the degree of human oversight. Products that treat disclosure as a badge will have to rebuild it as data.

Source: C2PA Technical Specification 2.4, April 2026

Proof points

  • Core architect of the AI disclosure assertion, now part of the C2PA technical specification. It records model provenance, scientific domain and the degree of human oversight, well beyond a binary “AI-generated” label. C2PA
  • The standard behind it is supported by more than 500 member organizations and over 6,000 affiliates. C2PA
  • Chair of the CAWG Delegated Creator Taskforce, defining how creators who act on behalf of others are identified.
  • Contributor to the Trust Registry Query Protocol v2.0, an approved Trust Over IP specification for verifying who is authorized to issue what. Trust Over IP
  • Significant contributor to HATPro, the Decentralized Identity Foundation’s standard for traveler-controlled preference profiles. Decentralized Identity Foundation

How we help clients

Five capabilities, each defined by what the client receives.

01

Content provenance and AI disclosure

How AI involvement is disclosed and content origin is proven, designed in line with the open provenance standard.

What clients receive

  • A disclosure design that meets emerging law
  • Implementation guidance for product teams
  • Proposal text standards groups can adopt
02

AI transparency and regulatory readiness

Obligations from AI and transparency regulation mapped to the controls and metadata a product must carry.

What clients receive

  • A crosswalk from regulation to technical controls
  • Briefings on timelines as they shift
  • A gap analysis and remediation plan
03

Decentralized identity and verifiable credentials

Credentials and vocabularies any party can verify, proven by automated conformance tests, with secure messaging built for a post-quantum future.

What clients receive

  • Validated credential data models
  • A conformance test suite
  • An adoption and interoperability roadmap
04

Software and supply chain trust

Software bills of materials joined to verifiable credentials and trust registries, so suppliers can prove what they ship.

What clients receive

  • A phased trust architecture
  • Authorization and registry design
  • A conformance and rollout plan
05

Agent authorization and machine payments

How autonomous AI agents are identified, authorized and paid, on emerging open protocols.

What clients receive

  • An authorization model for agents acting on people’s behalf
  • An assessment of machine-payment protocols
  • Governance for agent-led commerce

Who we serve, the outcome and why Hkdolts

Who we serve

  • Media, platform and creative-technology companies
  • Product leaders building with AI
  • Identity, credential and supply chain platforms
  • Policy, legal and compliance teams

The outcome

Products whose origin, authorship and AI involvement can be verified by anyone, and a compliance position ahead of the law.

Why Hkdolts

  • Core architect of the AI disclosure assertion in the open content-provenance standard
  • Chair of the taskforce defining how delegated creators are identified
  • Contributor to decentralized identity, secure messaging and travel credential standards

How we engage

A fixed-fee positioning engagement or a defined diagnostic, then a retainer as standards and regulation move.

Our impact

Selected work behind this practice.

Content provenance and AI disclosureTechnology, media and telecommunications

What we didCore design work on how AI use is disclosed within the open provenance standard, aligned with emerging regulation

The impactAI involvement and content origin become verifiable

AI transparency briefingsPublic sector and institutions

What we didBriefings on AI and content-transparency regulation for an industry forum’s working groups, with verified timelines

The impactWorking groups plan against the law as it stands, not as rumored

Identity and messaging strategyTechnology, media and telecommunications

What we didA multi-year strategy for secure agent messaging, covering post-quantum security and interoperability

The impactGaps are named in the strategy before they reach implementers

An open standard for traveler preferencesTravel and hospitality

What we didCo-researched within an industry working group: portable preference credentials with an executable conformance test suite

The impactHotels, airlines and platforms read one verified preference at a time, with the traveler in control

Software supply chain trustTechnology, media and telecommunications

What we didA phased programme joining software bills of materials to verifiable credentials and trust registries

The impactSuppliers can prove what they ship, and buyers can verify it

Agent authorization and paymentsTechnology, media and telecommunications

What we didResearch and executive briefings on how AI agents are authorized and pay on open protocols

The impactLeaders see how agent-led commerce will be governed

Related research

Published perspectives on the questions behind this practice.

All insights

Bring us the decision

Tell us where you stand. We will reply with how we would approach it.

From the United States to leadership teams worldwide, virtually or on site.

  1. 1
    FrameAgree the decision to be made and the evidence it requires.
  2. 2
    BaselineEstablish where the organization stands today.
  3. 3
    CommitAgree the scope, the model and the price.