Is there any good article/paper that describes how it actually works or is implemented not just in high-level and hand-waving terms?
They also have scathing critique (eg [1]) about the Adobe-led C2PA digital provenance signing, having themselves been part of various groups that seek solutions to the provenance problem.
[1] https://www.hackerfactor.com/blog/index.php?/archives/1013-C...