Concerns: pushword/admin
Both admin upload paths scale images down through a canvas, which keeps no metadata. They used to skip that step for a file whose bytes carried rights, and the check deciding it saw far less than the server does: WebP was not looked at at all, PNG only in its uncompressed text chunks, EXIF Artist/Copyright not at all, and C2PA nowhere. Such a file was re-encoded on its way up, so the server received bytes with nothing left to read — a photographer's credit became the site's own licence, and an AI image lost the provenance rc785 had just learnt to find.
The segments are now lifted out before the canvas touches the image and posted beside it, so every upload is scaled and keeps what it said about itself. See Image license.
Nothing to run: the stripping happened before upload, so neither the credit nor the provenance is recoverable from a file already stored. Sort the media list by License state and look for photos you did not shoot sitting in Site license — those are the ones to correct by hand.