Encypher RTD Provider: verified OpenRTB provenance carrier by erik-sv · Pull Request #15354 · prebid/Prebid.js

erik-sv · 2026-07-13T21:07:57Z

Type of change

Feature
Does this change affect user-facing APIs or examples documented on http://prebid.org?

Description of change

Replaces the existing Encypher RTD provider implementation rather than adding a second module.

The provider is now a lookup-only, fail-open OpenRTB carrier:

Keeps the existing encypher provider name and one-setting realTimeData.dataProviders integration.
Computes the generated v1 canonical URL hash and performs a credentialless edge lookup.
Uses a query-bound simple GET with no custom domain header, avoiding a browser CORS preflight inside the 300 ms deadline.
Restricts params.signalBase to https://signals.encypher.com or Encypher-controlled subdomains below signals.encypher.com; arbitrary hosts, lookalikes, credentials, query strings, fragments, and custom ports fail open before network or telemetry.
Validates the exact response envelope, compact carrier, pinned Encypher issuer, deterministic attestation reference, ES256 JWS, public JWKS, publisher domain, URL hash, expiration, revision, validation status, and declaration.
Injects only { v, id, ref, att } at each ortb2Imp.ext.c2pa while preserving GPID, supply chain, and caller fields.
Keeps attestation and JWKS caches in page memory only. Ready status is reused for at most 30 seconds; the next auction refreshes the edge status so stale or revoked records stop injecting.
Fails open and calls back exactly once for misses, stale or revoked records, malformed responses, invalid signatures or claims, unsafe configuration, network failures, and timeouts.
Leaves optional diagnostic telemetry disabled by default and diagnostic-only when enabled.
Version 1.1.0 adds privacy-minimized publisher adoption reporting to the same attestation GET, with no second request. params.adoptionReporting defaults to true; exactly false adds adoption_reporting=0 and stops future adoption observations without changing auction behavior.

The edge records an adoption observation only when the browser Origin hostname exactly matches the publisher FQDN. It retains only that FQDN, first/last seen, module version, aggregate lookup/hit/miss counts, and provenance dataset version for up to 24 months. It does not retain the page URL or digest, IP, page content, user/cookie ID, bid, price, or creative. These counts are operational observations, not installation, entitlement, billing, scoring, or lift evidence.

This removes the legacy browser auto-signing, article extraction, manifest fetch, cross-page localStorage, signer-tier inference, and global site.ext.data.c2pa payload. No page content, user data, cookies, credentials, scores, prices, or billing fields leave the page.

Publisher configuration

pbjs.setConfig({
  realTimeData: {
    auctionDelay: 300,
    dataProviders: [{
      name: 'encypher',
      waitForIt: true
    }]
  }
});

The provider's default total deadline is 300 ms. realTimeData.auctionDelay must be at least as large as params.timeout so Prebid waits for the asynchronous lookup before releasing the auction. Publishers who do not want domain-level adoption reporting can set params.adoptionReporting: false.

The module documentation is updated in modules/encypherRtdProvider.md. There is no separate provider page on prebid.org today.

Verification

Targeted ESLint: passed.
TypeScript strict compilation: passed through the Prebid test and build pipelines.
Chrome Headless Karma: 61 tests passed in both feature modes, including canonical vectors, credentialless simple transport, endpoint-host allowlisting, default reporting and explicit opt-out on the existing request, exact carrier injection, pinned trust, mirror isolation, 30-second status freshness, expired-record refresh, unsafe URL fail-open, strict envelope handling, malformed JWS/JWKS, WebCrypto failures, synchronous request construction failure, deadline exhaustion, rejected verification, unknown-key refresh, and telemetry privacy.
Hit path permits exactly two reads: the attestation lookup and pinned JWKS. Default and opt-out miss paths perform exactly one lookup; adoption reporting adds no request.
Focused module coverage before the additional reporting cases: 100% lines, 100% functions, 82.49% branches.
Production bundle: npx gulp build --modules=rtdModule,encypherRtdProvider passed with webpack 5.108.4.

Related work

Replaces the implementation introduced in Encypher RTD Provider: C2PA content provenance signals #14807.
Companion edge query cutover, storage, terms, and privacy: https://github.com/encypherai/encypherai-commercial/pull/295
Private provider v1.1 parity package: https://github.com/encypherai/prebid-rtd-provider/pull/3
Companion backend and edge decision network: https://github.com/encypherai/encypherai-commercial/pull/284

Landing dependency

The edge PR above must deploy before a v1.1 module release. The current edge supports the deployed v1.0 one-key query; PR #295 adds backward-compatible module_version and explicit opt-out handling.

github-actions · 2026-07-13T21:10:38Z

This PR introduces changes that may not work on all browsers. According to Babel, the following polyfills may be needed, and they are not automatically included:

Changes to modules/encypherRtdProvider.ts may need:
- es.array-buffer.detached
- es.array-buffer.transfer
- es.array-buffer.transfer-to-fixed-length
- es.array.push
- es.iterator.constructor
- es.iterator.every
- es.iterator.for-each
- es.typed-array.to-reversed
- es.typed-array.to-sorted
- es.typed-array.with
- esnext.array-buffer.detached
- esnext.array-buffer.transfer
- esnext.array-buffer.transfer-to-fixed-length
- esnext.iterator.constructor
- esnext.iterator.every
- esnext.iterator.for-each
- esnext.typed-array.to-reversed
- esnext.typed-array.to-sorted
- esnext.typed-array.with
- esnext.uint8-array.set-from-base64
- esnext.uint8-array.set-from-hex
- esnext.uint8-array.to-base64
- esnext.uint8-array.to-hex
- web.dom-exception.stack
Changes to test/spec/modules/encypherRtdProvider_spec.js may need:
- es.iterator.filter
- es.iterator.find
- es.iterator.some
- esnext.iterator.filter
- esnext.iterator.find
- esnext.iterator.some
- web.dom-exception.stack
- web.structured-clone
- web.url-search-params.delete
- web.url-search-params.has
- web.url-search-params.size

The best way to address this is to provide good test coverage, as normal PR checks run unit tests on older browsers.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5e1d07c808

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

barecheck · 2026-07-13T21:20:59Z

Barecheck - Code coverage report

Total: 96.58%

Your code coverage diff: 0.00% ▴

Uncovered files and lines

File	Lines
test/spec/modules/encypherRtdProvider_spec.js	316-317, 335, 946-947, 955, 990-991, 999, 1035-1036, 1044, 1072-1073, 1081, 1119-1120, 1128, 1151-1152, 1160, 1180-1181, 1187, 1235-1236, 1258, 1275

erik-sv · 2026-07-13T22:08:13Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 415cd58214

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

erik-sv · 2026-07-13T22:34:49Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: e2aaac8472

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

patmmccann · 2026-07-28T16:18:04Z

@codex review

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d75faeb6e2

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-07-28T16:22:17Z

+  };
+  if (datasetVersion !== undefined) payload.dataset_version = datasetVersion;
+  try {
+    sendBeacon(signalBase + '/v1/telemetry/rtd', JSON.stringify(payload));


Send telemetry without ambient credentials

When telemetry: true and the browser has cross-site-eligible cookies for the Encypher signal domain, sendBeacon sends the request with ambient credentials and provides no option equivalent to credentials: 'omit'. Consequently, the telemetry transport is not actually credentialless despite the module's privacy contract; use the repository fetch/ajax wrapper with keepalive: true and explicitly omitted credentials instead.

AGENTS.md reference: AGENTS.md:L71-L71

Useful? React with 👍 / 👎.

patmmccann · 2026-07-28T19:57:56Z

-    } else if (Array.isArray(author) && author[0]) {
-      meta.author = author[0].name || (typeof author[0] === 'string' ? author[0] : undefined);
+/** Synchronous SHA-256 for the canonical URL lookup key. */
+export function sha256(value: string): Uint8Array {


i do not follow the desire for a sync implementation; i opened #15404

Encypher RTD Provider: replace browser signing with verified carrier

5e1d07c

review-assignment-bot Bot requested a review from ncolletti July 13, 2026 21:11

chatgpt-codex-connector Bot reviewed Jul 13, 2026

View reviewed changes

Comment thread modules/encypherRtdProvider.ts Outdated

Comment thread modules/encypherRtdProvider.ts Outdated

erik-sv added 2 commits July 13, 2026 14:46

fix(rtd): refresh provenance status without preflight

8daf9d7

test(rtd): cover fail-open edge cases

415cd58

chatgpt-codex-connector Bot reviewed Jul 13, 2026

View reviewed changes

Comment thread modules/encypherRtdProvider.ts

fix(rtd): restrict signal endpoint hosts

e2aaac8

chatgpt-codex-connector Bot reviewed Jul 13, 2026

View reviewed changes

Comment thread modules/encypherRtdProvider.ts

Comment thread modules/encypherRtdProvider.ts

erik-sv added 5 commits July 13, 2026 16:18

fix(rtd): reject lookup redirects

a156030

fix(rtd): lock lookup request headers

ff760ca

test(rtd): prove JWKS redirect rejection

b3a04ba

fix(rtd): reject signal URL delimiters

4f8c219

feat(rtd): add opt-out adoption reporting

d75faeb

chatgpt-codex-connector Bot reviewed Jul 28, 2026

View reviewed changes

patmmccann mentioned this pull request Jul 28, 2026

multiple sha256 callers #15404

Open

patmmccann reviewed Jul 28, 2026

View reviewed changes

Uh oh!

Conversation

erik-sv commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Type of change

Description of change

Publisher configuration

Verification

Related work

Landing dependency

Uh oh!

github-actions Bot commented Jul 13, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

barecheck Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Barecheck - Code coverage report

Uh oh!

erik-sv commented Jul 13, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

erik-sv commented Jul 13, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

patmmccann commented Jul 28, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Jul 28, 2026

Choose a reason for hiding this comment

Uh oh!

patmmccann Jul 28, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

erik-sv commented Jul 13, 2026 •

edited

Loading

barecheck Bot commented Jul 13, 2026 •

edited

Loading