🤖 AI Summary
This study addresses the systemic risks posed to enterprises by the proliferation of high-fidelity synthetic content generated by generative AI, which undermines trust in authenticity, provenance, integrity, and accountability—challenges that conventional controls struggle to mitigate. Introducing the novel concept of “authenticity debt,” the work develops a multidimensional taxonomy to map threat vectors associated with generative AI and proposes a layered assurance framework grounded in zero-trust architecture. This framework integrates cryptographic provenance (e.g., C2PA/Adobe CAI), AI-generated content detection, digital watermarking, and human-in-the-loop verification. Aligning with regulatory mandates such as the EU AI Act and NIST AI Risk Management Framework, the paper articulates actionable governance principles that embed content authenticity into enterprise infrastructure, transcending the limitations of isolated technical solutions to enable defensible, scalable assurance of digital content authenticity.
📝 Abstract
Generative artificial intelligence has fundamentally changed how content is now produced. It has enabled how high-fidelity text, images, audio, and videos are created, modified, and redistributed at near-zero marginal cost. This shift exposes enterprises and ecosystems to a number of risks across four reinforcing authenticity layers -- authenticity, provenance, integrity, and accountability -- that traditional controls are inadequate to address in isolation. We introduce the concept of authenticity debt: the cumulative institutional liability that accumulates when organizations deploy AI-generated content without preserving verifiable origin, integrity, and accountability, deferring exposure that surfaces under regulatory, legal, or market scrutiny. This paper presents a comprehensive, multi-dimensional taxonomy of generative AI harms and attack vectors, surveys the capabilities and failure modes of technical controls including digital watermarking, provenance frameworks (C2PA, Adobe CAI), and detection technologies, and argues that no single mechanism is sufficient in open, adversarial, and evolving environments. Drawing on Zero Trust Architecture principles and enterprise governance frameworks, we propose a layered reference architecture that integrates cryptographic provenance, human-in-the-loop verification, and continuous governance to sustain defensible authenticity at scale. We further examine the regulatory landscape (EU AI Act, U.S.\ FTC, NIST AI RMF) and identify practical guiding principles for organizations seeking to build authenticity as institutional infrastructure rather than an afterthought.