PRE-GEN

Pre-Generative Authorization Protocol

Version 5 · 12 October 2026

Before an AI system generates something protected — a person's likeness or voice, a character, a brand, a work — it asks the registry that speaks for it. The registry signs its answer, and anyone can check it later.

PRE-GEN v5, page 1 of 6
Show pages 2–6Hide pages 2–6 PRE-GEN v5, page 2 of 6PRE-GEN v5, page 3 of 6PRE-GEN v5, page 4 of 6PRE-GEN v5, page 5 of 6PRE-GEN v5, page 6 of 6
Open the full PDF

The core works the same for any protected subject. Each kind of subject gets a profile that says what may be asked and what can never be overridden: the first, likeness/1, covers a person's likeness and voice; profiles for characters, brands and works come next.

How it works

  1. 1
    Ask

    The AI service asks the registry before it generates.

  2. 2
    Signed answer

    The registry says yes, no or not yet — and signs it, for this request only.

  3. 3
    Only on yes

    The service generates only on a valid yes, and keeps the answer as its proof.

Four possible answers

Allow
A licence or the registry's published policy permits this use. The only answer that permits.
Not blocked
Nothing forbids it, and nothing grants it. Not a permission.
Review
The rights holder decides first.
Deny
Refused, with a reason.

The ecosystem in pictures

On a phone, swipe a diagram sideways to see all of it.

Who is who

Stewardone published keySigned directoryprefix → registry → keyssignsPeopleand theirrepresentativesRegistrieseach under its ownfour-letter prefixregister · prove identityset terms · say nolists prefix + keysAI providerasks first1 · asks2 · signed answertrusts keys onlythrough itOutput+ proof3 · generated only on allowPlatforms · courts · anyonecheck every signatureagainst the directory4 · prooftravelsOptional services — anyone may offer themchecking a representative's authority · sales · reports · payouts · disputesProviders and registries can also talk directly, free.
One standard, many registries. The steward only says which keys may sign for which prefix; registries speak for people; providers ask before they generate; anyone can check the result.

One generation, step by step

DirectoryAI providerRegistryPlatform1 · load the signed directoryat least every 24 hours2 · ask: POST /v2/requestswho · for what use · which job3 · signed answerallow · deny · review · not_blocked4 · check the answerkey listed for this prefix?this request? not expired?5 · generate only on allow — keep it6 · report what was madethe file's fingerprintsigned acknowledgement7 · the file carries the proof8 · the platform checks every signature against the directory
The prompt and the output never leave the provider. The registry sees only who asks, for which subject and for what use.

What a registry does

Registryholds codes PG-XXXX-…decides for the peopleit representsFrom peopleregisters the personchecks who they are (level)records their termsrecords a refusal — firstanchors public personsTo AI providerssigned answerssigned licences (grants)acknowledged reportsproof for platformsIn publicits policya contact for complaintsan answer within 7 dayslookup of its codesits list of public personsNeversign for another prefixoverride a person's refusallower the floor of protectionspermit what the core forbidsDirectoryadmits · can revoke
Any organisation that meets the published conditions can run a registry — an agency, a union, an estate, an AI company — on the same rules as the first one.

How trust works

Steward keyDNS · paper · librariesDirectorysigned · loaded todayPrefix TEST→ keys K1, K2Answersigned by K1Accepted✓✕ prefix not in the directory — an unlisted registry✕ key not listed for that prefix — a copy of a registry✕ registry or key revoked — old answers fall too✕ a directory copy loaded more than 24 hours ago✕ answer for another request, or expired
Anyone can print a PG code and anyone can sign. Only a key the steward's directory lists for that prefix makes an answer count.

One person, several registries

Registries A, B and C all list the same public personmatched by an anchor — a Wikidata item, ISNI or domain — never by nameConfirmed on the person'sown official channel?yesnoOnly confirmed claims countunconfirmed ones are ignoredSeveral claims → freezenobody permits until someone proves itA refusal of the person anywhereholds in every registry;otherwise one allow is enough— or, with only one claim —One unconfirmed claim → reviewunless the provider's publishedpolicy accepts it
Who came first never decides — who proved it does. An impostor can at most freeze a person who never confirmed anything; it can never permit.

Floors only go up

RequestFlooropt-out · unavailableminors · immutable denialpersonal signature✕ refusednothing later undoes itRegistry policymay refuse more,never allow more✕ refusednothing later undoes itLicencecovers this use?uses left?✕ refusednothing later undoes itAllowsigned
A person's refusal is checked before any licence. No licence, extension or registry policy can turn it into a permission.

Proof travels with the output

The videoC2PA manifest:the signed proof bundlewatermark:TEST : 4f2a…uploadPlatformreads the manifest —or, if it was stripped,the watermarkif the metadata was stripped:GET /v2/proofs/{id}Registryreturns its partof the proofChecksthe yes was validwhen the video was madethe registry acknowledged itit is this very file
A PG code written on a video proves nothing. A copied proof points to another file; an edited report no longer matches what the registry signed. The platform still decides what to do.

Open to everyone

Anyone can run a registry or build it into an AI service, free, under Apache-2.0 — directly, with no intermediary. The whole core fits on one page. It works only where AI services choose to ask, and a signed answer shows what the registry said — not that a use is lawful.