內容簡介
TIP Protocol 外掛可為您在 WordPress 上發佈的每篇文章添加簽名和日期，並提供可驗證的公開記錄，確保您的創作得到應有的認可。這對於任何希望證明自己作品來源的創作者來說，都是一個重要工具。
【主要功能】
• 為每篇文章創建可驗證的公開記錄
• 支援音頻、視頻及圖片的指紋識別
• 標示文章是否由 AI 協助或生成
• 提供作者和機構的唯一識別碼
• 無需安裝任何瀏覽器擴充功能即可驗證
外掛標籤
開發者團隊
原文外掛簡介
TIP Protocol puts your name and the date on everything you publish with WordPress, in a way anyone can check.
When you press Publish, the plugin creates a signed public record of the post. The record says who made it, when it was published, and whether AI was involved. It also holds a fingerprint of the words, images, audio and video in the post. Anyone holding a copy can compare it with the record and see whether it was changed. Readers get a small badge under the post and can check the record in any browser, with nothing to install.
Every signed post becomes a Verifiable Asset. A Verifiable Asset is any piece of digital content that carries a CTID (Content TIP ID): a permanent, signed public record of who made it, when, how it was made, and a fingerprint that shows whether it has changed since.
Who is it for
Anyone who publishes on WordPress and wants credit for their own work.
Songwriters and singers. Post lyrics, a demo or a release page with the audio attached. The record names you, shows the date you published, and fingerprints up to two audio files per post.
Filmmakers and video creators. Post a trailer, a short or behind-the-scenes stills. Up to two videos and six images per post are fingerprinted along with the text.
Journalists and newsrooms. Sign every article under the reporter’s byline and the outlet’s name, and tell readers whether AI helped write it.
Researchers and scientists. Get a signed, dated record of when your findings, preprints or lab notes went public on your site.
Schools, colleges and universities. Sign course pages, announcements and faculty work under the institution’s name, and label AI-assisted material openly.
Law firms and legal publishers. Sign client alerts, articles and public notices, so anyone can later check that a copy matches what you published and when.
Bloggers, writers and digital creators. Show readers that the post on your site is the original, signed by you.
Brands and marketing teams. Show customers how each piece was made, including where AI helped.
Government, nonprofit and public-interest sites. Let readers confirm a notice really came from you.
How it works
Install the plugin and connect your TIP-ID. A person gets a personal Author ID at vp.theailab.org. An organization gets its ID from The AI Lab after a review.
Write and publish as usual. Label the post Original Human, AI-Assisted, AI-Generated or Mixed.
Confirm with Face ID, Touch ID, Windows Hello, a fingerprint or a security key. The plugin signs the post and records it on the TIP network.
A badge appears under the post. Anyone can click it to see who made it, when, and how.
What it proves, and what it does not
A signed post proves who published it, when, how it was made, and whether it has changed since. It does not prove that what the post says is true, it does not stop anyone from copying your work, and it does not stop AI companies from training on it.
Under the hood
Verifiable AI content labels. Tag every post as Original Human (OH), AI-Assisted (AA), AI-Generated (AG), or Mixed (MX). The label is cryptographically signed, so it is not a self-claim that anyone can copy. Readers, search engines, and automated verifiers can all confirm it.
Cryptographic publisher identity. A site-level TIP-ID and optional per-author TIP-IDs sign your content with post-quantum ML-DSA-65 signatures (FIPS 204). Readers see a verified trust badge; verifiers see a tamper-proof signature trail back to your domain.
No browser extension required. Reader-facing verification works in any modern browser through HTTP response headers, HTML meta tags, JSON-LD provenance, and an accessible bundled
Plays nicely with your SEO stack. When Yoast SEO or Rank Math is active, TIP Protocol merges provenance into the existing JSON-LD graph instead of competing with it. No duplicate schema, no conflicting article markup.
Versioned and correction-aware. Each registration is versioned. An article that gets corrected, updated, or expanded later still resolves to a clean provenance trail with a clear change history.
Encrypted-at-rest identities. Private signing keys never leave WordPress. They are AES-256-GCM encrypted with PBKDF2-derived keys using WordPress salts as input, and the admin UI never echoes them back to the browser.
Open, free, and global. The TIP Protocol specification is open. The plugin is GPL-2.0-or-later. The workflow is the same whether you publish from Tokyo, Berlin, Sao Paulo, Lagos, Mumbai, or New York.
Key capabilities
Register posts, pages, news items, events, products, and other public editor-supported content types on the TIP network with one click.
Emit TIP verification response headers and provenance meta tags from WordPress on every public page.
Enrich article JSON-LD schema with provenance fields, with smart handoff to Yoast SEO and Rank Math when they already manage the site schema graph.
Render accessible verification badges with a bundled local web component so no third-party CDN is required by default.
Manage publisher and creator TIP identities with encrypted private keys stored inside WordPress.
Import reviewed organization TIP-IDs from The AI Lab, or personal Author IDs exported from vp.theailab.org, through the built-in .tip.json connection flow. Locked files open in the browser with a date (date of birth for a person, date of incorporation for an organization).
Domain binding via .well-known/tip-protocol.json or DNS TXT records so the network can confirm a publisher legitimately claims a domain.
Team bylines. An organization credits the people on its team on the TIP network, each with a role on the post (author, editor, contributor, reviewer or correspondent), after the organization itself.
Audit log of registrations with CTID, change type, version history, signing officer roster, and registration status visible inside the admin.
GDPR-friendly. Integrates with WordPress personal data export and erasure tooling.
Biometric signing on every publish. Each signature is confirmed with Face ID, Touch ID, Windows Hello, a fingerprint or a security key (WebAuthn passkeys) on a device the writer added with their WordPress password. Publishing itself is never blocked.
How TIP Protocol differs from other provenance systems
TIP Protocol is built for the publishing surface that already exists in WordPress, not for the camera-to-cloud capture flow that systems like C2PA Content Credentials were designed around. Where C2PA focuses on signing images and videos at the moment of capture, TIP Protocol focuses on signing the final published article (text, media manifest, author roster, origin label) at the moment a publisher hits Publish in WordPress. Both approaches can coexist; TIP Protocol fills the editorial gap.
About the AI Trust Council
The AI Trust Council is the governance body that maintains the Trust Identity Protocol specification, sets the criteria for the Global Seal of Trust certification, and curates the AI Trust Registry of verified publishers. Operated under The AI Lab Intelligence Unobscured, the AI Trust Council keeps AI disclosure standards, content provenance methods, and reader-facing trust signals open, auditable, and aligned with how content actually moves across the modern internet. Specification updates, scoring rule changes, and Global Seal of Trust certification announcements are coordinated through the AI Trust Council and published on theailab.org.
About The AI Lab
The AI Lab Intelligence Unobscured is the research and standards organization behind Trust Identity Protocol, the AI Trust Council, the AI Trust Registry, and the Global Seal of Trust certification program. Founded by Dinesh Mendhe, The AI Lab builds open infrastructure for the AI-native internet: cryptographic content provenance, verified human identity, AI disclosure labeling, and the verification systems that make those signals trustworthy to readers, search engines, and platforms worldwide. The #HumanOrAI public campaign extends the same goal into everyday discourse: every published piece should answer “human or AI?” with a verifiable signal, not a self-claim. Learn more at theailab.org.
Integrations and compatibility
Yoast SEO and Rank Math: TIP Protocol detects either plugin and merges provenance into its existing JSON-LD schema graph instead of emitting a competing article schema block. No duplicate markup, no schema conflict.
WooCommerce: works with WooCommerce product pages and any other public editor-supported custom post type. Sign product descriptions, sponsored articles, and editorial product reviews with the same workflow as regular posts.
Page builders: Elementor, Beaver Builder, Bricks, Divi, and similar tools render TIP-signed content correctly because the badge web component and provenance meta tags emit at the WordPress template layer, beneath the page builder’s rendering pipeline.
Multisite: tested with both subdomain and subdirectory multisite installations. Each subsite manages its own publisher TIP-ID and contributor registry independently.
Caching plugins: WP Rocket, W3 Total Cache, LiteSpeed Cache, WP Super Cache, and similar work without configuration. The bundled trust badge is a small web component that caches cleanly along with the rest of the page.
Block editor and classic editor: both editors are fully supported with sidebar and metabox controls for AI origin labels and multi-author bylines.
WebAuthn-capable browsers: biometric confirmation before every signature, for personal and organization TIP-IDs alike (Touch ID, Face ID, Windows Hello, fingerprint readers, hardware security keys). Current Chrome, Edge, Safari and Firefox all support it. wp-admin must load over HTTPS.
TIP Protocol glossary
TIP-ID: a unique cryptographic identifier for a verified publisher, platform, or individual author. Format: tip://id/REGION-xxxxxxxxxxxxxxxx. Used as the signing identity for every piece of registered content.
CTID (Content TIP ID): the per-piece-of-content identifier produced when a publisher registers a post on the TIP network. Persistent across content updates so a corrected article still resolves to its original provenance trail.
Verifiable Asset: any piece of digital content that carries a CTID. Every post signed with this plugin is one. See https://theailab.org/verifiable-assets
CNA-2.2: the current canonical normalization algorithm that defines exactly which bytes get signed. Cross-implementation compatibility hinges on every signer (WordPress plugin, browser extension, mobile clients) producing the same canonical bytes from the same inputs.
ML-DSA-65: the post-quantum digital signature algorithm (FIPS 204, formerly known as CRYSTALS-Dilithium) that TIP Protocol uses for content signatures. Resistant to attacks from both classical and quantum computers.
SHAKE-256: the extendable-output hash function (FIPS 202) used to derive the canonical hash that ML-DSA-65 signs.
Origin code / AI disclosure label: one of four labels publishers attach to every signed piece of content. Original Human (OH), AI-Assisted (AA), AI-Generated (AG), Mixed (MX). The label is part of the signed payload, so it cannot be modified after publication without invalidating the signature.
Trust badge: the reader-facing verification element rendered as the bundled tip-badge web component. Shows the verified publisher, origin label, trust score, and verification state.
AI Trust Registry: the public registry of verified publishers and platforms maintained by the AI Trust Council. Used by reader-side verifiers to confirm a TIP-ID maps to a known organization.
Global Seal of Trust: the certification program publishers earn by adopting the AI Trust Council’s open verification criteria.
Publisher Mode and Personal Mode: the two attribution patterns the plugin supports. Publisher Mode signs with an organization TIP-ID, credits the organization first and then any members of its team. Personal Mode signs with an individual creator’s TIP-ID, which is always the only author.
Domain binding: the proof a publisher controls the domain on which signed content appears. Done via either a .well-known/tip-protocol.json endpoint or a DNS TXT record at _tip-protocol.your-domain.com.
Resources
WordPress.org plugin page: https://wordpress.org/plugins/tip-protocol/
The AI Lab homepage: https://theailab.org
Personal Author TIP-IDs: https://vp.theailab.org
Source code: https://plugins.svn.wordpress.org/tip-protocol/
Support forum: https://wordpress.org/support/plugin/tip-protocol/
Verifiable Assets explained: https://theailab.org/verifiable-assets
The AI Lab on LinkedIn: https://www.linkedin.com/company/the-ai-lab-org/
The AI Lab on YouTube: https://www.youtube.com/@TheAILabOrg
The AI Lab on X: https://x.com/theailaborg
The AI Lab on Instagram: https://www.instagram.com/theailaborg/
The AI Lab on Facebook: https://www.facebook.com/profile.php?id=61589147876006
The AI Lab on GitHub: https://github.com/theailaborg
Legal
This plugin is distributed under GPL-2.0-or-later.
Bundled legal and notice files:
* LICENSE.txt for the GPL software license notice
* NOTICE.txt for the bundle notice summary shown in the admin UI
* PATENTS.txt for informational patent disclosure
* TRADEMARKS.txt for informational trademark notice
Plugin attribution is optional and can be enabled in settings.
Accessibility
TIP Protocol includes keyboard-accessible verification badges, focus-visible controls, descriptive editor help text, semantic public trust UI, and screen-reader-friendly verification details. The public badge details panel supports keyboard open/close behavior and Escape to dismiss.
External services
This plugin connects to external TIP services to deliver its core provenance features.
TIP node API
The plugin sends registration, verification, and trust-score requests to the configured TIP node endpoint.
Data sent:
* publisher or creator TIP-ID
* content registration payloads
* canonical, exact, and perceptual hashes
* content signatures
* verification lookups for trust scores
Service provider: The AI Lab Intelligence Unobscured, Inc.
Service URLs: https://node.theailab.org by default, or your configured TIP node URL
Service purpose: content registration, provenance verification, trust score retrieval
Optional badge CDN
If you switch the badge delivery mode from Bundled local copy to CDN, reader browsers will load the public badge script from the TIP badge CDN.
Data sent:
* standard browser request metadata needed to fetch the script
Service provider: The AI Lab Intelligence Unobscured, Inc.
Service URL: https://badge.theailab.org
Service purpose: optional remote delivery of the TIP badge web component
Privacy
TIP Protocol adds suggested privacy-policy text in WordPress and integrates with WordPress personal data export and erasure tools for stored user TIP identity data.
