# WDY Certified Rules v1.1 Published: 2026-09-07 · **v1.1 issued: 2026-09-15** · Status: **Published & versioned** (this document is the rules text; all versions retained permanently; changes only bump the version number) Previous version: v1.0 Chinese version of these rules: https://wdy.org.cn/certified/rules/WDY-Certified-Rules-v1.1.md ## 1. What WDY Certified is A **public provenance record & disclosure service**. WDY receives the *fingerprint and metadata* of a work — **the file itself is never uploaded to or held by WDY** — performs a human review under these rules, and publishes a permanently public record containing the content fingerprint (SHA-256), provenance metadata, and an Ed25519 signature. Any third party can re-verify the record **without trusting WDY**. ## 2. What WDY Certified is NOT - **Not a copyright registration.** WDY is not a copyright registry. Records do not establish or prove ownership; ownership is determined by registration certificates, contracts, and courts. - **Not a seal of approval.** No warranty of legality, authenticity, or quality of the content. - **Not a legal opinion.** Disputes go through legal channels. A record may be submitted as supporting evidence of disclosure at a point in time. ## 3. Record lifecycle 1. **Submit** — The rights holder fingerprints the file **locally** and sends only the manifest JSON (fingerprint + metadata, a few KB) to WDY. Two equivalent channels, same manifest schema (`wdy-manifest` v0.1), same review path, same result: - **(a) Web tool** — `wdy.org/submit` (English) / `wdy.org.cn/submit` (Chinese): the browser computes the SHA-256 locally and the page can be saved and used offline. - **(b) Programmatic endpoint** — `POST https://wdy.org/api/submit` (China site: `https://wdy.org.cn/api/submit`), intended for command-line tools and AI agents. The endpoint validates the same fields, returns a receipt id (`WDY-R-YYYYMMDD-XXXXXX`, a queue reference only), and the submission joins the same review queue. **Originals are never uploaded**; requests above 64 KB are refused. *Unreleased scripts and cuts stay on the submitter's device.* 2. **Review** (within 5 business days) — Human check of the manifest: field completeness, hash format, AI-disclosure compliance (AI/hybrid works must carry a visible on-screen AI label — NRTA Order No. 16, Art. 34; China's AI-generated content labelling measures). WDY reviews the **manifest**, not the media file. 3. **Issue** — Record number `WDY-YYYY-NNNN-XXXXXX` (sequence + 6-char random suffix; verify links are non-enumerable); WDY co-signs the manifest with its published key; the verify page goes live at `wdy.org/certified/verify//`. 4. **Disclosure** — The verify page is permanently public: SHA-256, production mode and AI ratio, rights claims (self-declared bases only — no ownership conclusions), and re-verification instructions. > **Honesty note.** The fingerprint is submitter-declared. Anyone who later obtains the file from the rights holder can recompute its SHA-256 and confirm it byte-for-byte — that re-check, not WDY's custody, is what makes the record strong. ## 4. Refusal to issue - AI/hybrid work without a visible AI label; - Manifest hash format invalid or internally inconsistent; - Ratio fields not conserved (`ai_generated_ratio + live_action_ratio ≠ 1.0`); - Declared facts plainly contradicted by the submitted evidence of rights. The programmatic endpoint enforces the same rules at the point of submission and refuses non-compliant submissions outright. ## 5. Keys & correction - Signing private keys are kept offline, managed in rotation (`2026-rot1` onwards); public keys at `/certified/rules/wdy-key.pub`; - Records are **never deleted**; errors are corrected by an appended annotation on the verify page, preserving the audit trail. ## 6. Fees Free during the pilot (first 10 partner titles); thereafter priced per record — first record $1, standard $4.9/record, timestamped $9.9/record, judicial from $49/record (price card on the submit page). USD pricing is set independently for the target market's purchasing power and local service price levels. Pricing is transparent and per record; **what is sold is the record and verification service, not any form of endorsement**. WDY holds no copyright in any recorded work. ## 7. Versioning promise From v0.1 of the rules and the `wdy-manifest` spec: **fields are only added, never renamed**; historical records remain verifiable forever. Breaking changes get a new version number and public notice. --- Tools & specs: `wdy-manifest/v0.1/wdy-manifest.spec.md` (EN) · [Chinese spec](https://wdy.org.cn/certified/rules/wdy-manifest/v0.1/wdy-manifest.spec.zh.md) · `wdy-manifest.schema.json` · `tools/wdy_certify.py` · `tools/wdy_verify.py` · `submit.html` (in-browser local fingerprinting) ## 8. Revision log - 2026-09-07: v1.0 published. - 2026-09-07: §6 — per-record USD pricing for wdy.org ($1 / $4.9 / $9.9 / from $49; subscriptions $490/$9,900/$49,000); pilot commitment for the first 10 partner titles unchanged. - **2026-09-15: v1.1 published.** §3.1 — added the programmatic submission channel (`POST /api/submit`) available to command-line tools and AI agents, with the same manifest schema, review path and fee schedule; §4 — noted that the endpoint enforces the same refusal rules at submission time. No change to fees, to the `wdy-manifest` v0.1 schema, or to any record already issued under v1.0.