X-API-Key: sk_live_your_api_key_here

curl -X POST "https://i2dygqhmdw.eu-west-3.awsapprunner.com/v1/sign" \
  -H "X-API-Key: sk_live_your_key" \
  -F "file=@image.png" \
  -F "generator=Stable Diffusion XL" \
  -F "organization=Acme Inc" \
  --output signed.png

curl -X POST "https://i2dygqhmdw.eu-west-3.awsapprunner.com/v1/verify" \
  -H "X-API-Key: sk_live_your_key" \
  -F "file=@signed.png"

https://i2dygqhmdw.eu-west-3.awsapprunner.com

{
  "asset_id": "a3f1c9b2e041",
  "status": "signed",
  "layers_applied": [
    "c2pa_metadata",
    "invisible_watermark",
    "content_fingerprint"
  ],
  "compliance": {
    "eu_ai_act_article_50": true
  },
  "download_url": "/v1/download/a3f1c9b2e041",
  "report_url": "/v1/report/a3f1c9b2e041",
  "verify_url": "/v1/verify/a3f1c9b2e041",
  "processing_ms": 843,
  "file_size": 2471038
}

curl -X POST "https://i2dygqhmdw.eu-west-3.awsapprunner.com/v1/sign" \
  -H "X-API-Key: sk_live_your_api_key" \
  -F "file=@portrait.jpg" \
  -F "generator=Midjourney v6" \
  -F "generator_version=6.0" \
  -F "organization=Acme Media" \
  -o response.json

{
  "compliance_status": "compliant",
  "has_watermark": true,
  "watermark_id": "OPENCORPO:a3f1c9b2e041",
  "has_c2pa": true,
  "c2pa_details": {
    "claim_generator": "OpenCorpo ComplianceAPI/0.1.0",
    "title": "portrait.jpg",
    "assertions_count": 2
  },
  "fingerprint_match": true,
  "matched_asset_id": "a3f1c9b2e041"
}

curl -X POST "https://i2dygqhmdw.eu-west-3.awsapprunner.com/v1/verify" \
  -H "X-API-Key: sk_live_your_api_key" \
  -F "file=@signed.png"

curl "https://i2dygqhmdw.eu-west-3.awsapprunner.com/v1/download/a3f1c9b2e041" \
  -H "X-API-Key: sk_live_your_api_key" \
  --output signed.png

{
  "report_id": "rpt_a3f1c9b2e041",
  "asset_id": "a3f1c9b2e041",
  "generated_at": "2025-11-14T09:22:04Z",
  "asset": {
    "asset_id": "a3f1c9b2e041",
    "filename": "portrait.jpg",
    "original_content_type": "image/jpeg",
    "content_type": "image/png",
    "generator": "Midjourney v6",
    "organization": "Acme Media",
    "signed_at": "2025-11-14T09:21:58Z",
    "file_size": 2471038,
    "processing_ms": 843
  },
  "compliance_checklist": {
    "article_50_2_machine_readable_marking": {
      "status": "pass",
      "method": "C2PA v2 manifest with signed provenance chain"
    },
    "article_50_2_watermarking": {
      "status": "pass",
      "method": "Invisible spatial-domain watermark embedded in image"
    },
    "article_50_2_content_fingerprint": {
      "status": "pass",
      "method": "Perceptual hash stored in content registry"
    },
    "code_of_practice_multi_layer": {
      "status": "pass",
      "note": "3 of 3 layers implemented per EU Code of Practice draft"
    },
    "digital_source_type": {
      "status": "pass",
      "value": "trainedAlgorithmicMedia (IPTC vocabulary)"
    }
  }
}

{
  "status": "ok",
  "timestamp": "2025-11-14T09:22:04.123456Z"
}

{
  "detail": "Unsupported type: image/gif. Allowed: {'image/jpeg', 'image/png', 'image/webp'}"
}

"""
OpenCorpo ComplianceAPI — Python example
pip install requests
"""
import requests
import sys

API_KEY = "sk_live_your_api_key"
BASE    = "https://i2dygqhmdw.eu-west-3.awsapprunner.com"
HEADERS = {"X-API-Key": API_KEY}


def sign(image_path: str) -> dict:
    """Sign an image and return the API response."""
    print(f"Signing {image_path}...")
    with open(image_path, "rb") as f:
        mime = "image/png" if image_path.endswith(".png") else "image/jpeg"
        resp = requests.post(
            f"{BASE}/v1/sign",
            headers=HEADERS,
            files={"file": (image_path, f, mime)},
            data={"generator": "My AI App", "organization": "Acme Inc"},
            timeout=60,
        )
    resp.raise_for_status()
    return resp.json()


def download(asset_id: str, output_path: str):
    """Download the signed PNG for an asset."""
    print(f"Downloading signed image → {output_path}")
    resp = requests.get(f"{BASE}/v1/download/{asset_id}", headers=HEADERS, stream=True)
    resp.raise_for_status()
    with open(output_path, "wb") as f:
        for chunk in resp.iter_content(chunk_size=8192):
            f.write(chunk)


def verify(image_path: str) -> dict:
    """Verify an image and return the compliance result."""
    print(f"Verifying {image_path}...")
    with open(image_path, "rb") as f:
        resp = requests.post(
            f"{BASE}/v1/verify",
            headers=HEADERS,
            files={"file": (image_path, f, "image/png")},
            timeout=30,
        )
    resp.raise_for_status()
    return resp.json()


if __name__ == "__main__":
    image = sys.argv[1] if len(sys.argv) > 1 else "image.jpg"

    # 1. Sign
    result = sign(image)
    asset_id = result["asset_id"]
    print(f"  Asset ID : {asset_id}")
    print(f"  Layers   : {', '.join(result['layers_applied'])}")

    # 2. Download
    signed_path = f"signed_{asset_id}.png"
    download(asset_id, signed_path)

    # 3. Verify the signed file
    v = verify(signed_path)
    status = v["compliance_status"]
    layers_ok = sum([v["has_watermark"], v["has_c2pa"], v["fingerprint_match"]])
    print(f"\nVerification result: {status.upper()} ({layers_ok}/3 layers)")
    print(f"  Watermark   : {'✓' if v['has_watermark'] else '✗'} {v.get('watermark_id','')}")
    print(f"  C2PA        : {'✓' if v['has_c2pa'] else '✗'}")
    print(f"  Fingerprint : {'✓' if v['fingerprint_match'] else '✗'}")

/**
 * OpenCorpo ComplianceAPI — Node.js example
 * Node 18+ (native fetch) or: npm install node-fetch form-data
 */
import { createReadStream, createWriteStream } from "fs";
import { pipeline } from "stream/promises";

const API_KEY = "sk_live_your_api_key";
const BASE    = "https://i2dygqhmdw.eu-west-3.awsapprunner.com";

async function sign(imagePath) {
  const { default: FormData } = await import("form-data");
  const form = new FormData();
  form.append("file", createReadStream(imagePath));
  form.append("generator", "My AI App");
  form.append("organization", "Acme Inc");

  const res = await fetch(`${BASE}/v1/sign`, {
    method: "POST",
    headers: { "X-API-Key": API_KEY, ...form.getHeaders() },
    body: form,
  });

  if (!res.ok) throw new Error(`Sign failed: ${res.status}`);
  return res.json();
}

async function download(assetId, outputPath) {
  const res = await fetch(`${BASE}/v1/download/${assetId}`, {
    headers: { "X-API-Key": API_KEY },
  });
  if (!res.ok) throw new Error(`Download failed: ${res.status}`);
  await pipeline(res.body, createWriteStream(outputPath));
}

async function verify(imagePath) {
  const { default: FormData } = await import("form-data");
  const form = new FormData();
  form.append("file", createReadStream(imagePath));

  const res = await fetch(`${BASE}/v1/verify`, {
    method: "POST",
    headers: { "X-API-Key": API_KEY, ...form.getHeaders() },
    body: form,
  });

  if (!res.ok) throw new Error(`Verify failed: ${res.status}`);
  return res.json();
}

// --- Run ---
const result = await sign("image.jpg");
console.log("Asset ID:", result.asset_id);
console.log("Layers:  ", result.layers_applied.join(", "));

const signedPath = `signed_${result.asset_id}.png`;
await download(result.asset_id, signedPath);
console.log("Downloaded →", signedPath);

const v = await verify(signedPath);
console.log("\nCompliance:", v.compliance_status.toUpperCase());
console.log("  Watermark  :", v.has_watermark ? "✓" : "✗");
console.log("  C2PA       :", v.has_c2pa      ? "✓" : "✗");
console.log("  Fingerprint:", v.fingerprint_match ? "✓" : "✗");

# ── Sign an image ──────────────────────────────────────────────────────────
curl -X POST "https://i2dygqhmdw.eu-west-3.awsapprunner.com/v1/sign" \
  -H "X-API-Key: sk_live_your_key" \
  -F "file=@image.jpg" \
  -F "generator=Stable Diffusion XL" \
  -F "organization=Acme Inc"

# ── Verify an image ─────────────────────────────────────────────────────────
curl -X POST "https://i2dygqhmdw.eu-west-3.awsapprunner.com/v1/verify" \
  -H "X-API-Key: sk_live_your_key" \
  -F "file=@signed.png"

# ── Download a signed image ─────────────────────────────────────────────────
curl "https://i2dygqhmdw.eu-west-3.awsapprunner.com/v1/download/a3f1c9b2e041" \
  -H "X-API-Key: sk_live_your_key" \
  --output signed.png

# ── Get compliance report ───────────────────────────────────────────────────
curl "https://i2dygqhmdw.eu-west-3.awsapprunner.com/v1/report/a3f1c9b2e041" \
  -H "X-API-Key: sk_live_your_key"

# ── Health check (no auth required) ────────────────────────────────────────
curl "https://i2dygqhmdw.eu-west-3.awsapprunner.com/health"