This seems like such a tricky problem. There was a no-ai camera posted here recently which verified the photos were genuinely taken on the device. It was pointed out someone could photograph an ai image via the camera to produce a verified image.
Maybe it needs to be similar to SSL certificates where trusted authorities can verify and revoke verification for digital assets.