What has shipped
DisclosureProof is maintained by hand. Every scan is graded against a dated rule pack, and the version string is printed on the report, so a finding can always be tied to the rules as they stood when it ran. This page tracks the notable changes, newest first.
rule-pack 2026.07.2
Official EU icons and structural C2PA
Added detection for the European Commission's official AI-content icons (the Annex I set from the 10 June 2026 Code of Practice) and structural inspection of C2PA Content Credentials, not just a mention of them. The guide library grew to twelve chat-widget vendors and eleven EU member states, each researched to its enacted-versus-proposed status.
Multi-page coverage
Scans can look past the homepage to the pages where Article 50 duties tend to live: contact, pricing, article, and policy paths first, then report exactly which URLs were checked, so the coverage claim in an evidence pack is honest.
Owner verification
Prove you control a domain with a DNS TXT record or a meta tag. A verified owner can scan their own site more deeply and keep evidence longer.
Sealed, tamper-evident evidence
Every scan now hashes its findings and captured artifacts into a manifest and signs it (HMAC-SHA256). A report can be re-verified later, and any change to the underlying evidence breaks the seal.
rule-pack 2026.07
The six core Article 50 checks
Chatbot disclosure at first interaction (matched against a six-language lexicon), machine-readable media marking, AI-content labels on article-like pages, and an AI-policy-page check went live, each a deterministic check graded against the versioned pack and reported as detected, not detected, or needs verification.
DisclosureProof launched
The free homepage scan, the plain-language Article 50 guide, and the per-vendor and per-country reference library went live.