Japan's two largest newspapers have wired a digital signature scheme called Originator Profile into their content management systems, and the advertising group that invented it is now applying the same credential to media buys. Nieman Lab reported the state of the rollout on August 12, 2026, three weeks after the standard's developer tooling reached the Chrome and Firefox extension stores.

The technology answers a narrow question. Not whether an article is true, but whether the site serving it is operated by the organization it claims to be.

That distinction sits at the centre of Originator Profile, a web standard developed in Tokyo since 2021 and now carried by a consortium whose members include The Yomiuri Shimbun, The Asahi Shimbun, NHK and LY Corporation. According to Nieman Lab, The Yomiuri Shimbun and The Asahi Shimbun, the two largest newspapers in Japan by circulation, have integrated the standard into their content management systems. Tottori Prefecture in western Japan has deployed it across prefectural government websites. Dentsu, the Japanese advertising group where the idea originated, is rolling it out for its ad buys.

What the credential actually contains

Originator Profile applies a digital signature to information corresponding to both the content and the sender, making it possible to verify that the information has not been tampered with, according to the project's developer documentation. The originator's details are held in a data model also called the Originator Profile. Content-level details sit in a second data model named Content Attestation, which provides the mechanism to confirm that the originator holds an OP and that the content has not been altered.

Both models are built on Verifiable Credentials, following what the documentation describes as the IHV model: issuer, holder and verifier. Splitting those three roles, according to the documentation, protects privacy and reduces server load at verification time. A verifier does not need to call the issuer on every page load.

The certificate issued under the OP Charter covers an information transmission policy, the existence of the entity, and its eligibility for a given industry or business type, including membership in industry associations and certifications obtained. That last item is what separates the scheme from a simple domain check. A third-party certification organization confirms who the publisher is before anything is signed, and the profile then carries the publisher's corporate mission, core values, editorial policy, journalistic responsibility and information transmission policy alongside the identity claim.

The design decision that matters most for practitioners is where the signature lives. Makoto Yoshiike, deputy secretary general of the Originator Profile Collaborative Innovation Partnership, put it plainly to Nieman Lab: "OP works within the HTML - it's focused on the web page itself." He added a second point about scope. "We don't want a whitelist for good media, separated from bad media. We just want to say it actually came from the authenticated sender of information."

Yoshiike also drew the boundary around what the standard is not attempting. "We aren't trying to dictate whether the information is accurate or not. It's all about provenance: Where did this information originate?" he said, according to Nieman Lab.

OP Inspector reaches the extension stores

On July 24, 2026, OP-CIP announced that OP Inspector, a browser extension for developers, had become available on the Chrome Web Store and Firefox Add-ons. The organization framed the underlying gap in structural terms: before any question of what a piece of content says, there had been no way to verify who published it.

The extension retrieves, verifies and visualizes OP information attached to websites and content in the browser. According to OP-CIP, it can identify errors caused by key revocation or misconfiguration, visualize signature verification results and content tampering detection status, and export verification data as JSON. That last capability turns the extension into something an ad operations or brand safety team could script against rather than a consumer trust badge.

The Chrome Web Store listing carries version 0.6.1, a size of 1.05 MiB, two languages and an update date of July 3, 2026. It records 67 users and no ratings. The developer is listed as Originator Profile, at 1-7-1 Otemachi, Chiyoda-ku, Tokyo, care of the digital business department inside The Yomiuri Shimbun's Tokyo head office. The listing states that the developer has disclosed that it will not collect or use data, and that data is not sold to third parties outside approved use cases.

OP-CIP has been explicit that this build is not the consumer product. The extension is intended for verification and debugging, according to the July 24 announcement, and a separate extension with an interface designed for general internet users is planned for a future release. Nieman Lab reported that when a user lands on a Yomiuri Shimbun article, the extension opens a sidebar showing a badge identifying the organization operating the page, with links to its editorial standards and privacy policies.

An advertising problem before it was a journalism problem

The origin story runs through the ad market, not the newsroom. According to Nieman Lab, the idea dates to 2021 and grew out of a project at Dentsu, which had been struggling with malicious digital ads and scammers profiting from them even before commercial AI image generators shipped. The company set out to authenticate an advertiser's information as an ad moves through the programmatic ecosystem.

Dentsu then partnered with Jun Murai, a Keio University professor widely credited as a founding figure of the Japanese internet, to develop the technical specification. News publishers were recruited afterwards.

OP-CIP was founded on December 15, 2022 and announced on January 17, 2023 as a non-profit mutual benefit corporation, established together with the media and advertising industries under the supervision of Keio University's Cyber Civilization Research Center. The founding member list ran to eleven organizations: The Asahi Shimbun Company, The Chunichi Shimbun, fluct, The Mainichi Newspapers, Momentum, The Japan Times, Nippon Television Network Corporation, News Corp, The Sankei Shimbun, WebDINO Japan and The Yomiuri Shimbun. Two of those, fluct and Momentum, are ad tech businesses rather than publishers.

Murai set out the rationale in the founding announcement. "In the field of digital advertising, the so-called attention economy aimed at attracting attention has distorted the integrity of the market," he said. He described the technology as disclosing information about content originators using digitized codes, adding that "if it is used in media, advertising, etc., it will help maintain the integrity of the online space and increase the public interest."

The partnership's stated plan from the outset was to propose open-source implementations and specifications to the World Wide Web Consortium.

The earthquake that widened the scope

A 7.5 magnitude earthquake struck Japan's Noto Peninsula on January 1, 2024, killing more than 700 people. In the days that followed, according to Nieman Lab, AI-generated images of the wreckage circulated widely, fake philanthropic websites took donations, and false claims that people were trapped under rubble diverted rescue crews from the places that needed them. An unproven theory that the quake was artificial trended on social platforms.

The consequence for OP-CIP was funding and a wider remit. The Japanese national government recognised the value of authentication for government websites delivering crisis messages, began funding the organization, and local governments started joining, according to Nieman Lab.

Tatsuya Kurosaka, a project associate professor at Keio University and secretary general of OP-CIP, described the pattern. "When disasters strike, there is no end to fraudulent information being disseminated, individuals impersonating local governments or public utilities," he said. "That's why we are thinking not only about the media context, but also public information more generally as well."

Nieman Lab reported that similar falsehoods surfaced after a major earthquake hit Kumamoto Prefecture in the month before publication.

Signed-on versus switched-on

The membership figure and the deployment figure are not the same number, and OP-CIP does not pretend otherwise. Dozens of members of the Japanese Newspaper Publishers and Editors Association have signed on, along with major television networks including NHK, the national public broadcaster. LY Corporation, which runs the country's most popular news aggregator and the LINE messaging app used by more than 80% of the country, is also a member.

Only a handful have fully integrated the technology into their operations, according to Nieman Lab. Yoshiike, who also works at The Yomiuri Shimbun as senior deputy chief officer for the president's office, said OP-CIP plans to have 50 major organizations operating with the standard in place by early 2027.

The publisher case for adoption is defensive. Yoshiike told Nieman Lab he had been served fake versions of his own newspaper in his social feed. "I actually caught one red-handed on Facebook," he said. "It's still happening, individuals mimicking our article pages and luring users to fraudulent websites. Most of it is junk, but it happens every day."

Where this lands for media buyers

For an advertiser, the relevant claim in the OP materials is bilateral. With OP, both parties in an advertising transaction are able to verify the other's identity and trustworthiness during the process, according to OP-CIP, which frames the risk in two directions: site operators unintentionally serving scam ads to their own audiences, and advertisers finding their spend on fake or misleading sites, potentially funding organized crime.

That is a different proposition from the transparency files the programmatic market already runs on. Ads.txt, sellers.json and the SupplyChain object establish who is authorized to sell a given impression and which intermediaries touched the bid. Those files sit at the transaction layer and say nothing about whether the entity behind a domain is who it claims to be, or whether the page rendering around the ad has been altered. IAB Tech Lab's own auction definitions place ads.txt and sellers.json checks at the request-validation stage, before enrichment and bidding. Originator Profile targets the layer underneath: the identity of the publisher and the integrity of the served HTML.

It also sits apart from the provenance work that has dominated the last three years. Google DeepMind's SynthID embeds imperceptible marks in generated images, audio, video and text, and text watermarking has since reached commercial LLM products. The C2PA standard attaches cryptographically signed metadata to media files. Both were built primarily around synthetic imagery and audio. Neither authenticates the operator of a website. OP does not authenticate specific photographs or video clips, according to Nieman Lab, and is not designed to.

The timing puts the standard alongside a regulatory push in the same direction. Article 50 of the EU AI Act became binding on August 2, 2026, requiring machine-readable marking of synthetic output from providers and visible labelling of deepfakes and certain published text from deployers, with penalties reaching 3% of worldwide annual turnover. In Brazil, the data protection authority documented deepfake advertising fraud that moved more than R$20 million before arrests. Platform-side enforcement has scaled in parallel, with Meta reporting the removal of 134 million scam ads during 2025 and Google warning that false verification submissions constitute a policy violation resulting in account suspension.

Detection alone has not kept pace. A malvertising campaign tracked since late 2024 impersonated a charting platform, a blockchain network and an exchange across twelve countries including Japan, assembling its payload inside each victim's browser to evade network inspection. Weeks earlier, IAS blocked roughly 800 domains tied to hidden browser windows generating about a million dollars a month in fabricated ad traffic.

The unresolved parts

Two gaps are large enough that OP-CIP names them itself.

The first is social distribution. The signature lives in the HTML of a page, which means it does not travel with an article link shared on a social platform. A user only sees it after navigating to the article's own webpage. "I think it is a huge open question," Yoshiike told Nieman Lab. "Our technology side hasn't caught up with the current social media standards. OP works within the HTML, so it's not used in the application itself."

The second is the browser. Verification today requires an extension, and OP-CIP's stated ambition is to remove that dependency: if the World Wide Web Consortium adopts the standard, one idea under discussion is a badge inside the browser URL bar that a user can click without installing anything. The W3C has created an OP working group to explore the possibility, according to Nieman Lab. That leaves the outcome with the vendors that ship browsers.

"The last thing standing between us and the users is big tech companies," Yoshiike said. "We know that it's not going to come easy."

Kurosaka framed the usability target differently. "My mother is 88 years old. I'm designing OP technology to be simple enough for even my mom to use," he said. "No specific skills are required."

Why the marketing community should track this

The economics that made OP necessary are now visible in every major publishing market. Search referrals to publishers have fallen sharply as generative summaries absorb queries, with small publishers losing roughly 60% of search traffic over two years. France's general news publishers referred Google to the Autorite de la concurrence on August 11, 2026over AI Overviews and AI Mode, citing traffic declines of up to 38%. Research covered in April 2026 found that publishers blocking AI crawlers lost traffic rather than protecting it, largely through lost brand exposure inside generated answers.

As search becomes a direct source of news through products like AI Overviews and AI Mode, the participation of Googleand Apple in any provenance standard becomes more consequential, according to Nieman Lab. A signed page is only useful if something downstream reads the signature.

For buyers, the practical question is whether a machine-verifiable publisher identity ever becomes a targeting or exclusion signal. The JSON export in OP Inspector suggests the plumbing exists for it. Adoption at 50 organizations in one market by early 2027 does not make that a planning assumption. Whether a standard designed inside Japan's advertising industry travels beyond it is, for now, a question for the W3C working group and the browser vendors that sit inside it.

Timeline

Summary

Who: The Originator Profile Collaborative Innovation Partnership, a non-profit corporation chaired by Keio University professor Jun Murai, with deputy secretary general Makoto Yoshiike and secretary general Tatsuya Kurosaka as its public voices. Members include The Yomiuri Shimbun, The Asahi Shimbun, NHK, LY Corporation, News Corp, The Japan Times and the ad tech firms fluct and Momentum. Dentsu originated the technology.

What: Originator Profile, a web standard that applies digital signatures to publisher identity and content, verified by third-party certification organizations and built on Verifiable Credentials. Its developer extension, OP Inspector, reached Chrome and Firefox in July 2026. Japan's two largest newspapers have integrated the standard into their content management systems, Tottori Prefecture has deployed it on government sites, and Dentsu is applying it to ad buys.

When: The concept dates to 2021. OP-CIP was founded on December 15, 2022 and announced on January 17, 2023. The Noto earthquake of January 1, 2024 expanded the project's scope and brought government funding. OP Inspector was announced on July 24, 2026. Nieman Lab published its account on August 12, 2026. OP-CIP targets 50 major organizations operating with the standard by early 2027.

Where: Japan, with OP-CIP headquartered at 1-7-1 Otemachi in Chiyoda-ku, Tokyo. Standardization work sits with a World Wide Web Consortium working group.

Why: Generative tools have made spoofing legitimate news brands cheap, and Japan has seen repeated waves of impersonation during natural disasters. The standard attempts to make publisher identity and page integrity machine-verifiable at the HTML layer, addressing a gap that neither media watermarking nor programmatic supply chain files cover. For advertisers, the stated benefit is that both sides of an ad transaction can verify the other's identity before a transaction completes.