JAZ-X Media Provenance Inspector local C2PA verifier runtime
========================================

Runtime package: @contentauth/c2pa-web 0.15.1
Upstream source: https://github.com/contentauth/c2pa-js
License: MIT

Files in this directory are derived from the official npm package supplied for
the JAZ-X Media Provenance Inspector build. c2pa-web.runtime.js differs from the npm dist file only
in one browser-resolution change: the bare import "highgain" is rewritten to
the local relative module "./highgain.js". c2pa-web.index.js likewise points at
the locally renamed runtime chunk. This avoids remote module resolution while
preserving the package's ESM runtime.

The matching c2pa_bg.wasm and c2pa_worker.js are copied from the same
@contentauth/c2pa-web 0.15.1 distribution. On HTTPS admin pages the local
module worker may be used. On HTTP development sites the SDK's bundled Blob
worker is used because the upstream worker API requires an https: worker URL.

JAZ-X Media Provenance Inspector 0.3.4 disables remote manifest fetching, OCSP network lookups,
and external trust-list requests in this release. Verification
uses the locally packaged SDK/WASM and same-origin WordPress media only.

See the plugin readme.txt for source/reproduction instructions and privacy
information.
