The six notice severities

What each one means — and what follows from it.

A notice is anything verstag tells you about a finding. Every notice carries a severity, and each severity has a consequence of its own.

The signed-in product is in German, so its wording is quoted in German here, with the English rendering in italics.

The six severities

SeverityMeaningConsequence
Nicht möglich
Not possible
The output cannot be produced this wayIt is not produced; without a change the file is skipped
Warnung
Warning
It is produced, but does not meet every requirementCheck it before it goes out
Optimierung empfohlen
Better option available
There is a measurably better settingAdopting it is one click; without that your choice stands
Manuelle Prüfung
Manual check
This cannot be decided automaticallyLook at it — verstag gives no recommendation here
Information
Information
Context for judging the findingNothing to do
Erfüllt
Passed
Checked and in order

Each severity also has a shape of its own, not merely a colour: ✕ in a circle, a triangle, sparkles, a question mark in a circle, an exclamation mark in a circle, a tick.

„Manuelle Prüfung“ does not sit between „Warnung“ and „Information“. It means the question could not be decided automatically — look at the place yourself.

What the „Vertrauensprüfung“ (Trust check) box can say

The second pass against the list of recognised issuers reports its findings above the result, in a box under that heading.

„Warnung“ — the file itself is affected:

Die Datei ist signiert, aber das Zertifikat des Unterzeichners steht nicht auf der offiziellen C2PA-Trust-Liste. Wer sie signiert hat, ist damit nicht belegt.

The file is signed, but the signer’s certificate is not on the official C2PA trust list. Who signed it is therefore not established.

Das Zertifikat des Unterzeichners war zum Prüfzeitpunkt abgelaufen.

The signer’s certificate had expired at the time of the check.

Der Signierzeitpunkt stammt aus keiner vertrauenswürdigen Quelle. Wann signiert wurde, ist damit nicht unabhängig bezeugt.

The signing time comes from no trustworthy source. When the file was signed is therefore not independently attested.

„Manuelle Prüfung“ — the check itself is affected:

Die Vertrauensprüfung war bei diesem Durchlauf abgeschaltet. Über den Unterzeichner sagt das Ergebnis deshalb nichts.

The trust check was switched off for this run. The result therefore says nothing about the signer.

Die C2PA-Trust-Liste war nicht lesbar, die Vertrauensprüfung hat also nicht stattgefunden. Das ist ein Befund über uns, nicht über die Datei.

The C2PA trust list could not be read, so the trust check did not happen. That is a finding about us, not about the file.

Die Prüfung hat einen Status gemeldet, den diese Version nicht kennt. Der Rohwert steht unter „Technische Details“.

The check reported a status this version does not know. The raw value is under “Technical details”.

If several findings stand in the box, it takes the heavier of the two severities. Under „Technische Details“ (Technical details) sit the raw values of the check, the unremarkable ones included.

The box appears only when there is something to report. No box means: nothing to report.

Two sentences are about the check, not about the file

The first two sentences under „Manuelle Prüfung“ are not about the file that was checked: one says the trust check was switched off, the other that the list could not be read. In both cases the pass did not happen, and the result then says nothing about the signer.

The third sentence appears when the check reports a status this version does not know. The raw value is under „Technische Details“.