How do you handle a legal requirement to treat all C2PA...

The solution is to avoid a binary reject/accept gate by categorizing the failure. Benign re-encoding is often recoverable via cloud manifests or corroboration, whereas a signature that is cryptographically invalid against a claimed signer is a genuine forgery signal. By assigning different weights based on the specific failure cause, you satisfy security concerns without gutting recall.