Provenance vault

Issues a signed content credential for any export: file fingerprint, creator, timestamp, an AI-assisted disclosure and a machine-readable “not for model training” assertion. Verification catches a single altered byte. Signing uses your passphrase (HMAC) rather than a certificate authority, so the manifest is C2PA-shaped and self-verifiable — not CA-anchored.