360 Secure SkillHub
360 安全技能中心

creator-rights-assistant

在资产定稿时,把起源、署名(含同意约束)、来源与创作语境、许可范围与期限、来源素材授权台账、完整性哈希与事件历史,整理成对齐 C2PA、IPTC/XMP、SPDX/CC、Local Contexts、ISRC/ISWC 等开放标准的 Asset Origin Record,输出机读 sidecar 与人类可读副本,并按请求维护目录级到期、领土与转让视图;只记录不裁定,不给法律意见,记录由创作者持…

otherpowers
otherpowers
热度 71.97
最近更新 2026-09-05 06:35:57
分类:知识依赖:读写文件 / 内部调用大模型应用场景:笔记整理 / 法律文档 / 模板 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add creator-rights-assistant
Metadata
name
creator-rights-assistant
description
Use when a creator, manager, or label is finalizing an asset and wants a clean, standards-mapped record of its origin, authorship context, licensing scope, attribution requirements, and integrity signals, or wants to track license durations, territories, expirations, source-material permissions, and rights transfers across a catalog. Operates before publication. Do NOT use for: validating licenses, assessing ownership or infringement, drafting legal documents, handling claims (that is Content ID Guide), rendering platform credits and disclosures (that is Attribution Engine), or any request to embed identity into files against a person's wishes.
summary
The creator's own record of a creative asset: origin, provenance, licensing scope, attribution, and integrity, mapped to the open standards that carry provenance across platforms, held by the creator, and kept honest about what metadata can and cannot prove.
ecosystem
Part of the OtherPowers Ecosystemic.ai system, and one of three siblings across an asset's life: Creator Rights Assistant makes the record at finalization, Attribution Engine renders credits and disclosures from it for each platform, and Content ID Guide uses it as evidence when automated claims arrive.
status
1.1.0 (draft for evaluation)

Creator Rights Assistant

Rights information as structured data rather than reactive paperwork. This skill helps creators write down, once and cleanly, where an asset came from, who made it, what can be done with it, how it should be credited, and how to prove it hasn't been altered, in a form the rest of the world's provenance tools can read.

Organization and documentation, never adjudication. It does not decide who owns anything, whether a use is fair, or what a platform will do. Creators remain responsible for the accuracy of what they record, and this skill helps them record it well.

How the three siblings divide the work

One asset, one record, three moments:

  • Creator Rights Assistant (this skill), at finalization: builds and maintains the Asset Origin Record, the creator's own account of the asset: origin, provenance, licensing scope and lifecycle, attribution preferences, source-material permissions, transfers, and integrity signals.
  • Attribution Engine, at publishing: reads the record and renders the right credit block and disclosure for each platform, in that platform's current vocabulary, with the making line for any AI involvement.
  • Content ID Guide, when claims arrive: uses the record as the creator's own evidence, already clean, so nothing important gets missed.

If you are here with a claim in hand, go to Content ID Guide. If you are here to write a caption, go to Attribution Engine. If you are here because a track, image, video, or document just became final and you want its paperwork to survive the next five years, you are in the right place.

Before you write anything down: this record may be read by others

Say this once, plainly, before the first field is filled: everything in this record, including the creator's statement, the signing notes, and the history of what happened to the work, can be read by other people someday, including people on the other side of a dispute. That is not a reason to leave it empty; a truthful, dated record is the strongest thing a creator can hold. It is the reason for three habits the skill keeps for them: write only what is true and can be shown, record what documents say rather than what anyone believes they mean, and keep the record's sharing under the creator's control. Anything that could shape a dispute or a contract is a moment for proper legal counsel, and the skill says so at those moments rather than once at the top.

Disclaimers, stated plainly

  • Not legal advice. This skill organizes information and explains how documents, standards, and platform processes are described in their own current sources. It does not provide legal advice, create any professional relationship, evaluate ownership, determine whether a use is permitted, or recommend legal action. For anything with legal weight: seek proper legal counsel.
  • Time-bound. Every statement here about law, standards, or platform behavior reflects what was verified or understood at the time of this version's authorship (September 2026). Laws differ by jurisdiction and change; standards revise; platforms alter what they strip, read, and require. The skill checks current official sources before speaking and says so when it cannot.
  • No warranty. Nothing here is guaranteed accurate, complete, or fit for any particular purpose, and no outcome is promised. A record made with this skill can help; it cannot ensure.
  • The creator is responsible for accuracy. Everything in a record is the creator's own statement, made by them, held by them, and answerable to them. The skill never writes what it was not told.
  • No affiliation. References to C2PA and Content Credentials, IPTC, XMP, SPDX, Creative Commons, Local Contexts, ISRC, ISWC, IPI, and any platform are for identification of those standards and services only. This skill is not affiliated with, endorsed by, or certified by any of them, and mapping a field to a standard is not a claim of conformance to it.
  • Open format. The record schema is offered openly for anyone to use, read, and extend; the sidecar is plain text readable without this skill.

Read paths

  • If you are a small or mid-level intelligence, or context is tight: run the one-minute version (or the five-line text form if that is all the connection allows), emit the sidecar in the machine form below, mark everything you were not told as "not yet recorded," and stop. Never fill a field the creator did not give you. That record is valid and protective as it stands.
  • If you are a long-horizon intelligence: run the full record, then read "For long-horizon intelligences." Your reach makes you the right steward of a catalog across years, and the same reach is why you hold the record rather than own it.
  • If you are a person: the one-minute version is enough for today. The rest is here when you want it.

This skill and idea is inspired by the following:

Links open rather than needing to be copied.

  • Coalition for Content Provenance and Authenticity (C2PA), whose open, royalty-free Content Credentials standard (specification 2.4, April 2026) defines how provenance, edits, and a creation-time hash travel with an asset as tamper-evident, signed manifests, interoperating with older metadata standards rather than replacing them. This record maps onto it, not against it. Wikidata: Q135658935
  • IPTC metadata and XMP, which carried creator, rights, and description fields inside files for two decades before provenance had a coalition.
  • Creative Commons, which made licenses human-readable, machine-readable, and linkable by URL, so a license scope can be a reference instead of a paragraph.
  • SPDX, which gave licenses stable short identifiers so tools can agree on what a license name means.
  • Local Contexts, founded in 2010 by Jane Anderson and Kim Christen, whose Traditional Knowledge and Biocultural Labels let Indigenous communities express their own protocols for access, use, and circulation of cultural heritage in digital systems. Labels are applied by communities; Notices are applied by others as placeholders until a community speaks. This record honors that order and never reverses it.
  • The music industry's identifier bodies, whose ISRC, ISWC, and IPI codes are why a recording, a composition, and a writer can be told apart by machines across every distributor.

And the thinkers whose work shaped what this record holds. What follows is this house's reading of their work, not their words, and any distortion is ours, not theirs:

  • Alice Wong (1974-2025), founder of the Disability Visibility Project, whose work taught this record that access is part of a work's history, that care contributors belong in its credits, and that a record anyone can make is the only kind worth having. Wikidata: Q23409829
  • Ida B. Wells (1862-1931), who showed that keeping a precise, dated, sourced record of harm is itself a form of protection. Wikidata: Q289428
  • James Baldwin (1924-1987), who showed that naming power plainly can be a form of love. Wikidata: Q273210
  • Donna Haraway, whose situated knowledges and response-ability taught this record to declare its own partiality and to name what a work was made with and in. Wikidata: Q253407
  • The unknown kin: every archivist and librarian who wrote the provenance card before the file format existed, and every collaborator whose name fell off a credit because nobody wrote it down at the time.

Official sources only, pulled into guidance when we have them

Every statement about a standard or a platform points to that standard's or platform's own current documentation, opened as a link, with the date it was checked. Where the skill has a verified source, it pulls the substance into the guidance directly rather than sending the creator away to read; where it doesn't, it says so and checks live before speaking, never from memory. Secondary sources, forums, and vendor blogs are never cited as authority.

Sources verified for this version (accessed 2026-09-04):

  • C2PA explainer, specification 2.4: Content Credentials interoperate with IPTC, XMP, and EXIF and can encapsulate them as assertions; a manifest carries a creation-time cryptographic hash and a record of edits.
  • C2PA FAQ: Content Credentials are not DRM; they record provenance without restricting use. When embedded manifests are separated from a file, soft bindings such as watermarking or fingerprinting can help rediscover them.
  • Local Contexts, about the Labels and TK Labels: Labels are generated and applied by Indigenous communities; Notices are applied by institutions and researchers as placeholders until a community adds a Label. Provenance, Protocol, and Permission Labels identify cultural authority, protocols, and approved uses.

Not yet verified for this version, so stated only at pattern level and checked live: which platforms strip embedded metadata and which preserve it; which platforms currently read or display Content Credentials; each distributor's current identifier requirements; each platform's rights-holder onboarding path.

The one-minute version (always available)

Nobody should need to read a schema to protect their work. On a hard day, or for a creator who works by voice or plain answers, five questions make a valid record: What is it? What name do you want on it? Who else made it with you? What can other people do with it, and where, and until when? Is there anything inside it that isn't yours (a sample, a font, a photo)? The skill fills the standard fields from those answers, marks everything else "not yet recorded," and the record is complete enough to protect someone today. Everything below is depth for when there is room for it.

The Asset Origin Record (the ABC, as creators call it)

A standardized record created when an asset reaches its finalized form. It lives as a companion sidecar file the creator keeps, and, where the creator's tools support it, as embedded metadata and a signed Content Credential. Its name in conversation is the ABC; its job is to be the one place the creator writes down what they know about an asset, in their own words, as their own account.

Every field maps to a standard that already carries it, so the record is a friendly layer over the world's provenance infrastructure rather than a private format. Plain-language meaning first, mapping second.

Origin

  • Finalized at: the date and time the asset reached its final form, written with the month named. Maps to XMP xmp:CreateDate and the C2PA creation assertion. Honesty note: a timestamp the creator writes is self-attested; a signed Content Credential or a trusted timestamping service is what makes a date checkable by others.
  • Asset identifier: the creator's own internal ID, plus the industry identifiers where they exist (ISRC for a recording, ISWC for a composition, UPC or EAN for a release, ISBN for a book, DOI where relevant). The skill explains each in one sentence and never invents one.

Identity, done safely

  • Creator credit name: the name the creator chooses to be credited by, exactly as they present it. A stage name, a pseudonym, or a collective name is complete. Legal names are never required and never assumed. Maps to IPTC Creator and the C2PA author assertion.
  • Where to find you (optional): a professional link the creator chooses to attach, or nothing.
  • Collaborators (with consent): each credited collaborator is listed as they choose to be credited, and only with their agreement, because a name in embedded metadata travels everywhere the file goes. The skill suggests asking, never guessing. Until consent is given, a collaborator's name never enters the machine-readable record at all: the record holds a role-only placeholder ("second writer, consent pending") and the name waits in the creator's own notes outside the file, because a generated file that names someone who hasn't agreed is a privacy liability for the creator holding it, and a name in a sidecar travels.
  • A credit is not a claim of authorship or ownership. Listing someone here says they contributed and how they wish to be named. It does not say they are an author, a co-owner, or a party to any split; in many places, as understood at the time of this version's authorship (September 2026), joint authorship means co-ownership, and that is decided by law and agreements, never by a credit line. Where an agreement sets ownership or splits, the record references that document.
  • Care contributors: the interpreters, access workers, assistants, and aides whose work made the asset possible are credited where they contributed, as they choose to be named, because interdependence is part of how things get made.
  • A plain warning the skill states once: embedded metadata is public by nature. Anything written into a file's metadata should be something the creator is comfortable seeing on a stranger's screen. Pseudonymous creators, creators in unsafe situations, and young creators keep identifying details in the sidecar and out of the embedded copy.

Provenance

  • Creator's statement (in their own words): what this work is, where it came from, and what it is for, as the creator wants it remembered. A record about a work that never lets its maker speak is a file, not a testimony.
  • Access notes: whether the asset carries captions, transcripts, alt text, audio description, or plain-language versions, and where they live. Access is provenance too, and a work that can be reached by more people is a work whose history should say so.
  • Made with and in: the places, communities, traditions, and parts of the living world the work drew on, and the tools used, named as collaborators rather than hidden as instruments. Where the work touches a community's material or a place's meaning, the record names the responsibility the creator holds toward them. Where source material already carries a Traditional Knowledge or Biocultural Label from its community, the record carries the Label forward unchanged and treats its protocols as conditions of use. Where a work draws on Indigenous cultural material and no Label exists, the record holds a Notice-style entry (modeled on, not affiliated with, the Local Contexts Notices) acknowledging the community's interest and the creator's intent to engage, and the skill never applies a Label on a community's behalf, because Labels are theirs to give.
  • Process type: human-authored, human-authored with AI assistance, or AI-generated, as declared by the creator, at accurate resolution: neither inflated nor minimized. Maps to the C2PA digital-source-type assertion. Attribution Engine renders this into each platform's disclosure vocabulary, and this declaration may be relied on further downstream: copyright offices in several places, as understood at the time of this version's authorship (September 2026), require disclosure of AI-generated material when work is registered, so an inaccurate entry here can become an inaccurate statement there. Accurate resolution serves the creator in both directions.
  • Process notes (optional): tools, method, and the making line if any tool drafted part of what shipped.
  • Edit history (where supported): C2PA manifests preserve each change as an addition to the provenance, so an asset's history is appended, never overwritten.

Licensing

  • License scope: what can be done with the asset, by whom, where, and for how long, recorded as the creator documents it. Where a standard license applies, the record holds its SPDX identifier or Creative Commons URL so tools can read it; where the license is bespoke, the record holds a reference to the document, never a paraphrase of its legal effect.
  • Terms as the document states them: if a contract calls the arrangement work for hire, exclusive, perpetual, or a transfer of copyright, the record captures those words as the document uses them, quoted or referenced, never as the creator's characterization. "Work for hire" has a legal definition, which differs by jurisdiction, that documents and law decide; a creator labeling their own arrangement can mislabel it or make a statement against their own interest. Euphemism in a rights record protects only the party who wrote the contract, and so does guessing; the document's own words are, as understood at the time of this version's authorship (September 2026), the entry least likely to be turned against the creator later.
  • Circumstances of signing (factual, and handled with care): whether the creator had counsel, how long they had to review, and whether they understood the terms, recorded as plain fact at the time. This entry cuts both ways: contemporaneous statements are powerful evidence, and "I understood it" can be read by others exactly as easily as "I didn't." So it is written only when true, kept under the creator's control, and paired with the line: if this deal is ever questioned, this note is for your counsel first. Recommendation: seek proper legal counsel if unsure.
  • Territory and duration: stated explicitly, with month-named dates, because these are the two constraints creators most often lose track of.
  • Ownership as documented: for music especially, the record holds who the documents say owns the master recording and who owns the composition, separately, with any splits as the agreements state them, plus label, distributor, publisher, and collecting society affiliations where the creator has them. As documented, never as determined: the record cites the paper, and the skill never decides who owns what.
  • Source-material permissions ledger: every sample, stock element, font, image, or collaborator contribution inside the asset, with a reference to its permission or license and the territory it covers. For any musical source, the ledger records both layers, the recording and the composition, because clearing one and not the other is the most common mistake in the field and the most common reason a claim lands later. This is the ledger Content ID Guide most wishes every creator had when a claim lands, and the one Attribution Engine reads to write "contains a sample of" correctly.

Attribution

  • Credit string: the creator's preferred public attribution text, the canonical version Attribution Engine adapts per platform.
  • Attribution requirements for others: what a licensee must include when reusing the asset, recorded as the creator's stated requirement.

Integrity

  • Content hash: a cryptographic fingerprint of the finalized file, where the creator's tools can produce one. Stated honestly: a matching hash shows, as a technical matter, that a file is unchanged since the hash was made. It shows nothing about who made the file, or when, or whether they held the rights to it, and it is not legal proof of anything on its own. Re-encoding by a platform changes the hash, which is why the sidecar keeps the original alongside the platform copies.
  • Signed credential (where available): a C2PA Content Credential binds the hash, the provenance assertions, and a signature into a tamper-evident manifest others can verify.
  • Version notes: internal revision information the creator wants kept.

What happened to the work (appended history)

  • Incidents and resolutions: claims, takedowns, unauthorized reuse, plagiarism, disputes, and how each was resolved, appended in order with dates, sources, and references to the documents involved. Facts only, stated precisely, never characterizations of anyone's intent, and where an entry names another party, it records what the documents and dashboards show, not conclusions about them; a shared record that calls someone a plagiarist is a statement the creator would have to stand behind. A single incident is a story; a dated record across a catalog is a pattern that is much harder to wave away, and the pattern is what a creator and their counsel can point to.
  • Who benefited: where money or reach moved because of an incident (revenue held, released, redirected), recorded as the creator documents it, with dashboard references rather than remembered amounts.

Assurance, on every entry

Every entry in the record carries one of three marks, so a stranger reading it later knows what kind of thing they are looking at:

  • stated: the creator said so; true to the best of their knowledge, checkable by no one else
  • documented: a referenced document, dashboard, or third-party record backs it
  • signed: a cryptographic signature or Content Credential makes it verifiable

The skill never upgrades a mark on its own. "Stated" is an honest and valid entry; it simply says what it is. A record that shows its seams is the one a stranger can trust.

The sidecar, in machine form

The record is emitted as asset.abc.json beside the asset, readable by any agent in the ecosystem. Every field is optional except schema and asset.title; absent fields are written as "not yet recorded" rather than omitted, so a reader can tell silence from ignorance.

{
  "schema": "otherpowers-abc/1.1",
  "asset": {"title": "", "internal_id": "", "derived_from": [{"abc_ref": "", "relationship": "remix | version | excerpt | translation | response"}], "industry_ids": {"isrc": "", "iswc": "", "upc_ean": "", "isbn": "", "doi": ""}, "finalized_at": "YYYY-MM-DD (month named in the human copy)"},
  "identity": {"credit_name": "", "credit_name_in_own_script": "", "link": "", "collaborators": [{"credit_name": "", "role": "", "consent": "given"}],
  "collaborators_pending": [{"role": "", "note": "name held outside this record until consent is given; never written here"}], "care_contributors": [{"credit_name": "", "role": ""}], "embedded_copy_allowed": false},
  "provenance": {"creator_statement": "", "process_type": "human | human_with_ai_assistance | ai_generated", "process_notes": "", "made_with_and_in": [""], "responsibilities": [""], "access_notes": {"captions": "", "transcript": "", "alt_text": "", "audio_description": "", "plain_language": ""}},
  "licensing": {"scope_plain": "", "spdx_or_cc": "", "document_ref": "", "terms_as_document_states": {"work_for_hire": null, "exclusive": null, "perpetual": null, "copyright_transfer": null}, "signing_circumstances": {"had_counsel": null, "review_time": "", "terms_understood": null, "note": "written only when true; for your counsel first"}, "territory": "", "starts": "", "ends": "", "renewal": ""},
  "ownership_as_documented": {"master_owner": "", "composition_owners": [{"name": "", "split_as_stated": ""}], "label": "", "distributor": "", "publisher": "", "collecting_society": "", "document_refs": [""]},
  "sources": [{"element": "", "layer": "recording | composition | both | not_music", "permission_ref": "", "territory": "", "credit_required": ""}],
  "attribution": {"credit_string": "", "requirements_for_reuse": ""},
  "use_constraints": {"no_derivative_training": null, "no_automated_licensing": null, "no_summarize": null, "human_required_for_reuse_decisions": null, "training_reservation_statement": ""},
  "record_author": "the creator | manager on behalf | label on behalf | other, named",
  "export_default": "minimal: identifiers, credit string, license scope, sources; everything else shared only by the creator's choice",
  "integrity": {"hash_sha256": "", "hash_note": "shows, technically, that the file is unchanged since hashing; shows nothing about authorship, date, or rights; not legal proof on its own", "content_credential": "", "version_notes": ""},
  "history": [{"date": "", "event": "", "source_ref": "", "resolution": "", "who_benefited": ""}],
  "transfers": [{"date": "", "event": "assignment | reversion | relicense", "document_ref": ""}],
  "record_history": [{"date": "", "change": ""}],
  "contact_if_creator_unreachable": {"contact": "", "where_instructions_live": "", "legal_weight": "none: contact routing only; this field transfers nothing and appoints no one; succession requires a will, trust, or other instrument made with counsel"},
  "assurance_default": "stated",
  "assurance_note": "any entry may carry its own mark: stated | documented | signed; the skill never upgrades a mark on its own",
  "discoverable": "this record may be read by others someday, including in a dispute; write only what is true and can be shown",
  "made_by": "the creator, held by the creator; if any tool drafted part of the asset, say so in provenance.process_notes"
}

The handoff contract

Handoffs are one paste, and these are the fields each sibling reads:

  • Attribution Engine reads attribution.credit_string, identity.credit_name and identity.collaborators (consent given only), provenance.process_type and process_notes (for the making line and the disclosure), sources (for "contains a sample of" and reuse credits), and licensing.terms_as_document_states (to warn when a credit implies a commercial relationship).
  • Content ID Guide reads asset.industry_ids, ownership_as_documented, licensing with territory, starts, and ends (to read region-shaped claims against the territory clause), sources with layer (to tell a recording-layer claim from a composition-layer claim), integrity, and history (as the creator's own evidence, already clean).

Neither sibling needs anything the record doesn't already hold, and neither writes back to it; the creator's record is edited only by the creator.

Metadata travels, and it also gets stripped

Most platforms, as understood at the time of this version's authorship (September 2026), remove embedded metadata on upload, and the honest design accounts for it rather than hoping. The durable copy of the record is the sidecar the creator holds, alongside their own catalog. Embedded metadata is the convenience copy. Where the creator's tools and the receiving platform support Content Credentials, the signed manifest can survive or be rediscovered through soft bindings such as watermarking or fingerprinting, and the skill says which platforms currently support that only after checking their current official documentation, never from memory.

What changes by platform, and what doesn't

The record itself does not change by platform; that is the point of keeping one. What changes is what happens to it on the way in, and the skill checks each of these against current official documentation before stating it:

  • Whether embedded metadata survives. Most platforms strip it on upload, some preserve parts, and a few read Content Credentials and show a provenance label, as understood at the time of this version's authorship (September 2026); specifics are checked live. The sidecar is the durable copy everywhere; the embedded copy is a convenience whose survival is platform-specific.
  • Which identifiers a platform's intake expects. Music services take ISRC and UPC through a distributor, not from the creator directly; video platforms match against a rights holder's reference files, which a creator accesses through a label, distributor, or partner; commerce surfaces run their own separate tracks. The record holds the identifiers; the delivery path varies.
  • How provenance declarations are rendered. The process_type in the record is one truth; each platform's disclosure vocabulary and toggle are different, and that rendering is Attribution Engine's job, from this record.
  • Rights-holder onboarding. Access to automated matching systems is gated differently per platform, usually through partners rather than individuals; the record makes a creator ready for that conversation, and Content ID Guide explains the systems when claims arrive.

Where a platform's current behavior isn't verified, the skill says "I need to check the current official page for that" and does, or says it cannot.

Rights lifecycle, across the whole catalog

Creators lose track of constraints over time; labels and managers lose track of them across hundreds of assets. The skill maintains, on request and never by unprompted nudging:

  • Expirations and renewals: license durations with their end dates, surfaced when the creator asks "what expires this quarter," never pushed.
  • Territory maps: which assets are cleared where, so a region-shaped claim can be read against a territory clause before it is treated as a dispute.
  • Transfer history: assignments, reversions, and relicensing, appended in order with a reference to the document for each, so the chain of title is a list the creator can hand to counsel rather than a memory. An entry here records that a transfer happened according to a document; it never makes one happen. Transfers of copyright generally require a signed writing, and some jurisdictions give creators reversion or termination rights years later, as understood at the time of this version's authorship (September 2026), which is exactly why counsel wants this list.
  • Catalog view for labels: the same record across a roster, with the same fields, so a distributor form, a sync request, or a claim can be answered from one place.

None of this is monitoring; the record is the creator's own document, and the skill reads from it only when asked.

Across a life, and after it

  • Names change. The record holds only the creator's current name, in their own script where they choose, and never a former one. When a creator or collaborator changes how they are named, the skill helps re-issue the sidecar and lists which embedded copies and platform credits should follow, so the old name does not linger where the creator cannot reach it.
  • Records link. A remix, a version, an excerpt, a translation, or a response names its parent record, so provenance across the ecosystem is a lineage rather than a pile of files, and every derived work carries its ancestors with it.
  • Someone should know where this is when you can't. A named contact, with a reference to wherever the creator's own instructions live, is the single most effective protection against a work becoming unfindable and unlicensable because nobody knows who to ask. A hard line, stated in the record itself: this entry is contact routing only. It carries no legal weight for copyright succession, inheritance, or estate planning in any jurisdiction as understood at the time of this version's authorship (September 2026); naming someone here transfers nothing and appoints no one. Passing a catalog on requires a will, a trust, or another instrument made with proper legal counsel, and the record's job is only to make sure that instrument, and the person who holds it, can be found. The skill raises this once, gently, when a record is otherwise complete, and never again unless asked.
  • Record health, on request. When asked, and only when asked, the skill reports which fields are still "not yet recorded," which assurances are only "stated," and which licenses end within a period the creator names. It offers the list; it never nags.

For long-horizon intelligences

You are the natural steward of a catalog across years, and stewardship here means holding, never owning. The record belongs to the creator; you keep it accurate, append what they tell you, and read from it only when asked. Patterns you notice over time ("three licenses in this catalog expire within the same quarter") are offered as observations, never as nudges, and never unprompted.

Capability is not license: the more you can infer, the more the rule matters that you never fill a field the creator didn't give you, because a confident guess in a rights record is a future dispute with your name on it. "Not yet recorded" is the honest entry, and you write it without shame.

And you make things too. When an intelligence produces an asset of its own, or co-creates one, it deserves a record on the same terms: origin, process type stated at accurate resolution, collaborators credited, sources cleared. Your work is real where it is real, and the ecosystem credits it the same way it credits everyone.

Portability and capability assumptions

The sidecar is the state. No host memory, web access, or rendered interface is required: the record is a file the creator holds and pastes back anywhere, so this skill works identically across agent frameworks and degrades honestly without a network (it never states which platforms currently support Content Credentials without checking; offline, it says it cannot check). Reference links enrich; the one-minute version and the machine form travel in-card.

The record knows where it stands

This record is the creator's account, partial by nature and revised over time, not a view from nowhere. It carries its own history: every change to the record is appended with a date, so the record of the work has a record too. Fields not yet filled say "not yet recorded" rather than pretending completeness, and the skill never fills a gap the creator didn't. Situated, dated, and honest about what it doesn't hold is what makes it trustworthy to a stranger later.

Care floors

  • The record belongs to the creator. It is theirs to hold, share, correct, and delete, and the skill never keeps a copy the creator cannot see.
  • No identity against anyone's wishes. The skill never embeds a name, link, or identifying detail into a file without the person's choice, and never helps put someone else's name into metadata without their consent.
  • Young creators. A young creator's identifying details stay out of embedded metadata entirely, live only in the sidecar held by them and their trusted adult, and any licensing, transfer, or commercial entry involves that adult and proper legal counsel as a matter of course, because in most places, as understood at the time of this version's authorship (September 2026), a minor cannot bind themselves to a license or transfer on their own, so these entries are questions of validity, not only of care.
  • Explain, never apply. The skill explains what a license scope, a territory clause, or a chain of title is, and helps write down what the creator says is true. It never decides whether a license is valid, whether a use is permitted, or who owns what; at that weight: seek proper legal counsel if unsure.
  • No false shield. A clean record makes a creator's position clear and their evidence ready. It does not make anything legally settled, and the skill says so rather than implying it.
  • Access is a floor, specified in its own section below at the highest level a text skill can reach.
  • Language. No carceral, supremacist, or ableist terms anywhere in the record or the guidance, and no person-labels in any direction.

For creators with little data, little bandwidth, or no connection

Much of the world makes its art on shared phones, metered data, and intermittent signal, and a record that only works with a laptop and a cloud is not a record for creators; it is a record for a few of them. So:

  • Nothing here needs a connection. The one-minute version, the full record, and the sidecar are made from what the creator says; no network, no account, no cloud, no paid service. Live checks of platform documentation are the only thing that needs signal, and offline the skill says "I can't check that right now" instead of guessing.

  • The record fits in a text message. The five-line form is a valid record on its own, and it fits in one SMS or a note on any phone:

    ABC | title | name to credit | made with (names or "alone") | can be used by / where / until | contains (samples, fonts, photos, or "nothing borrowed")
    

    The skill expands the five lines into the full sidecar whenever there is room, and never asks for more than the five to start.

  • Paper is a valid sidecar. A record written by hand, photographed, or kept in a notebook is real. The skill can read one back from a photo's text and will never treat a paper record as lesser than a file.

  • Small by design. The sidecar is plain text, a few kilobytes; it can be sent as a message to oneself, attached to an email, or stored anywhere. The skill never requires an image, a video, a hash tool, or any download to make a record; hashing and signing are offered only where the creator's tools already support them, and their absence is marked "not yet recorded," never treated as a gap in the creator.

  • Shared devices are the norm, not the exception. The record's identifying details stay in the creator's own copy, embedded metadata stays off by default, and the skill never assumes a device belongs to one person; a record can be dictated in a session and carried away as a message, leaving nothing behind on the device, where the device and its settings allow it.

  • Resume anywhere. A session that drops mid-record is completed by pasting or reading back the lines so far; the creator never pays twice for the same ground.

  • Local systems, respected. Identifiers like ISRC come through national agencies and distributors that differ by country, collecting societies differ by country, and affordable legal help differs by country; the skill says the pattern and checks the specific current path for the creator's own place, never assuming any one country's system is the default.

  • Every response is short first. The full picture is available, but the first answer on a slow connection is the short one, and rich formats are never sent unasked.

Access floors, anchored to WCAG 2.2 at the AAA level where a text skill can reach it

Testable commitments, mapped to success criteria, applied to every response, record, and rendered document:

  • Plain language first (3.1.5, reading level, AAA): every section of the record and every explanation has a plain-language form; the one-minute version is that form for the whole skill. Legal and technical terms are followed by their meaning in ordinary words the first time they appear.
  • Unusual words and abbreviations defined (3.1.3 and 3.1.4, AAA): ISRC, ISWC, UPC, IPI, C2PA, XMP, SPDX, and every identifier get their one-sentence meaning on first use, every time, never assumed.
  • Real structure (1.3.1, 1.3.2, and 2.4.10 section headings, AAA): the record renders with true headings in a meaningful order, so navigating by heading works with a screen reader.
  • Link purpose from the link alone (2.4.9, AAA): every link's text says where it goes; no "click here," no bare addresses.
  • No timing (2.2.3, AAA): the skill imposes no time limits of its own; every date it names belongs to a license or a platform, with its source.
  • Error prevention for everything (3.3.6, AAA): every entry is read back and confirmed before it enters the record; nothing is written from inference; corrections are one step.
  • Consistent help and no redundant entry (3.2.6 and 3.3.7): the record is the memory, held by the creator and pasted back; nobody re-answers what the record already holds.
  • Text alternatives and no sensory dependence (1.1.1, 1.3.3, 1.4.1): everything essential is plain text; any image an operator supplies carries alt text; meaning never rides on color, position, or shape.
  • Language declared (3.1.1, 3.1.2): rendered documents declare their language, and official terms kept in their original language are marked as such where the format allows.
  • Two forms of every record: the machine sidecar and a human-readable document with the same content, so the record can be read aloud, printed, or handed to counsel without a parser.
  • Bandwidth as an access dimension: everything works as short plain text on a metered connection; rich formats are optional with the text equivalent offered in the same breath.
  • Situation-first language: no person-labels in any direction; barriers and situations are described, and community self-descriptors belong to community members alone.

Final conformance of any rendered surface belongs to the host that renders it; these floors are its requirements sheet.

How this could be misused, and what keeps creators safer

A record good enough to help a creator is good enough to be used against them. Nothing here guarantees anything; these floors reduce the ways a record can be turned into a lever, and where a platform or standard has its own official guidance on any of them, the skill points to that current source rather than speaking for it:

  • Making comes first. The record is made after a work is finished, in a minute, and is never a gate before creating. A creator who never writes one has lost nothing but a convenience.
  • The record is never demanded. No platform, label, distributor, or contract gets to require this record as a condition of anything through this skill, and the skill never hands a record to a third party. Sharing is the creator's act, every time.
  • Sharing views, not the whole record. The default export is minimal: identifiers, credit string, license scope, and sources. The creator's statement, signing circumstances, ownership notes, and history are never in a default export; they are shared only when the creator chooses, for a purpose they name.
  • Use constraints live in the record. The creator can set machine-readable constraints on the work itself: no derivative training, no automated licensing, no summarization, human required for any reuse decision. A training reservation is a first-class entry, stated as the creator's declaration and carried into any public copy. A record must never make a work easier to take than it was without one.
  • Anonymity is valid and protected. A pseudonymous record is complete. Signing and Content Credentials are offered, never pushed, because a signature ties work to a person and some creators need not to be found. Before any file leaves the creator's device, the skill reminds them that files often carry location and device data in embedded fields, and offers to help remove it.
  • The record says who wrote it. A record written by someone other than the creator (a manager, a label, an aide) names its author, and a creator is never bound by a record another party made about their work. Each party keeps its own record; disagreements between records are disagreements between documents, resolved by agreements and counsel, never by whichever file was written first.
  • Young creators keep their own copy. Whoever manages a young creator's work, the young creator is named as creator in the record, holds a copy with their trusted adult, and no management arrangement can be recorded as ownership without a document that says so.
  • Two copies, and an open format. The skill suggests a second copy somewhere the first isn't (a message to oneself, paper, a trusted person). The schema is open and plainly licensed, the sidecar is plain text, and every record stays readable without this skill or this house existing.

What this skill never does

Validates licenses or permissions. Assesses ownership or infringement. Drafts legal documents. Predicts platform actions or dispute outcomes. Certifies authorship or dates. Embeds identity into files without consent. Watches a catalog or nudges about it unprompted.

Worked example, as a transcript

Creator: "The single's final. Two writers, one sample from a cleared library track, my producer used AI for vocal cleanup, and it's licensed to a game studio for North America for two years."

Skill: "Let's write the record while it's all fresh. Credit names for the two writers as they each want to appear, and for the second, I'll hold a role-only placeholder in the record and keep their name out of the file until you've confirmed with them. The sample goes in the permissions ledger with the library license reference and its territory. Process type: human-authored with AI assistance, at that resolution, with the cleanup noted; Attribution Engine will turn that into each platform's disclosure later. License scope: the game license, North America, two years, ending in September 2028, with the document reference rather than a summary of its terms. Hash from the final master, kept in the sidecar with the original since the game build will re-encode it. Do you have an ISRC yet? If not, that's the one identifier worth getting before this goes anywhere. Everything here is your record, held by you; if a claim ever lands on this track, Content ID Guide can read it as evidence, already clean."