AI Content Disclosure for HTML

This specification defines an ai-disclosure global HTML attribute and a companion <meta name="ai-disclosure"> tag that enable authors to declare the degree of AI involvement in web content at both page level and element level. It also defines optional metadata attributes (ai-model, ai-provider, ai-prompt-url) for supplementary information about the AI systems used.

This is a proposed final report from the AI Content Disclosure Community Group, prepared for the group's publication vote. It remains a Draft Community Group Report until the group approves publication as a Final Community Group Report. It is based on the original proposal, restructured as a W3C Community Group Report.

Comments and feedback are welcome via GitHub issues or the public mailing list.

The proposal defines author-declared metadata for textual content in HTML. Its inclusion here does not add these attributes to the HTML Living Standard or establish implementation support. The group offers the report for consideration by relevant standards communities and implementers.

The public record includes the contribution history, issue resolutions, and mailing-list archive.

Introduction

Motivation

Web pages increasingly contain text produced with varying degrees of AI involvement — from light AI-assisted editing to fully autonomous generation. A modern news article page might contain a human-written investigation alongside an AI-generated summary sidebar and AI-moderated user comments. There is currently no standard HTML mechanism for authors to disclose AI involvement at element-level granularity within a page.

Related approaches address different parts of this problem:

Regulatory context

The EU AI Act Article 50 distinguishes providers' obligations to mark AI-generated outputs in a machine-readable format and enable their detection (paragraph 2) from deployers' obligations to disclose AI-generated or manipulated text published to inform the public on matters of public interest (paragraph 4). These obligations have different exceptions.

Article 50(4) provides an exception to the text-disclosure obligation where content undergoes human review or editorial control and a natural or legal person holds editorial responsibility for its publication. The article itself does not specify reviewer competence. The Commission's interpretation, explained in its Article 50 guidance FAQ, describes substantive examination by people with relevant subject-matter knowledge and professional judgment. It excludes superficial checks such as spelling or grammatical correction. These are conditions for an exception to disclosure, not a general requirement that all AI-generated text receive expert review.

The ai-assisted value asserts that human review occurred before publication. It does not establish the reviewer's competence, the substance of the review, or editorial responsibility, and does not by itself establish eligibility for the Article 50(4) exception. This specification describes AI involvement and human review; its use alone does not establish regulatory compliance.

Where reader-facing disclosure is required, Article 50(5) calls for clear, distinguishable and accessible information by the first interaction or exposure. HTML disclosure metadata can support that presentation, but does not itself provide a reader-facing notice. This specification does not prescribe a rendering or labeling design.

Article 50 applies from 2 August 2026. As explained in the Commission guidance linked above, the transition to 2 December 2026 applies only to the paragraph 2 marking and detection obligation for AI systems placed on the market before 2 August 2026; it does not postpone deployers' paragraph 4 disclosure obligation.

Further context is provided by the Commission's Guidelines on transparency obligations for providers and deployers of certain AI systems and the Code of Practice on Transparency of AI-generated Content. The voluntary Code addresses provider marking and detection as well as deployer labelling. This report proposes an HTML mechanism for author-declared text metadata that can contribute to disclosure workflows; it does not claim that this format is prescribed by the Code or that unverified HTML declarations alone satisfy its measures.

Design goals

  1. Enable authors to declare AI involvement at element-level granularity in HTML.
  2. Provide a machine-readable signal usable by browsers, search engines, accessibility tools, and research crawlers.
  3. Make classification depend on AI involvement and human review, using the two questions in the classification procedure.
  4. Relate to existing vocabularies, including the IPTC Digital Source Type taxonomy, while identifying differences in scope and meaning.
  5. Complement (not replace) HTTP-level and cryptographic provenance mechanisms.

Scope and non-goals

This report defines author-declared metadata for textual content in HTML, including text alternatives, and rules for interpreting and inheriting that metadata. Its purpose is to communicate AI involvement and whether human review occurred. The following limits apply to this work:

Terminology

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [[RFC2119]] [[RFC8174]] when, and only when, they appear in ALL CAPITALS, as shown here.

AI disclosure
A declaration by the content author indicating the degree of AI involvement in producing a piece of content.
disclosure value
One of the enumerated values defined in Disclosure values: human-only, ai-assisted, or ai-autonomous.
page-level default
The disclosure value set by a <meta name="ai-disclosure"> element, which applies to all elements in the document unless overridden.
generative AI
Systems trained on data that produce novel outputs through inference. Deterministic means that the same inputs and conditions produce the same output; a generative AI system can also operate deterministically. The tools excluded here are non-generative tools that apply fixed rules, not all tools with repeatable outputs. See Boundary guidance for detailed guidance.
human review
A person examining the resulting AI-generated or AI-edited text before its publication. The developer or publisher declaring the disclosure determines the review process and its depth; this specification does not prescribe a minimum duration, reviewer qualification, or required edits. A human must actually examine the resulting text: supplying a prompt or approving an automated workflow alone is not review of its output.
publication
Making the particular version of the text available to its intended audience. Review of an earlier version does not establish review of subsequent AI-generated or AI-edited changes.

These definitions classify author-declared production history. Where legislation, regulators, or another applicable framework specify substantive review, competence, or editorial responsibility, that framework determines whether its own requirements are met. This specification does not replace those requirements. See Regulatory context.

The ai-disclosure attribute

Attribute definition

The ai-disclosure attribute is a global attribute that MAY appear on any HTML element. Its value MUST be one of the disclosure values defined below.

The absence of the ai-disclosure attribute makes no new assertion about AI involvement. User agents MUST apply the inheritance rules to determine the applicable value; if no declaration applies, the value is "unknown." This is distinct from human-only, which is a positive assertion that no generative AI was involved in producing the text.

The declaration applies to human-readable text associated with the element, including descendant text and authored text alternatives such as alt, title, aria-label, and placeholder. More specific declarations override it as described in Inheritance. Script and stylesheet code, and the image, audio, or video data itself, are outside this scope.

On an img element, the declaration describes its authored text alternative, not the image's provenance. If there is no text, there is no textual content to classify. For media provenance, use a mechanism designed for media, such as C2PA or IPTC metadata. This proposal does not provide separate values for different text attributes on the same element.

Disclosure values

The ai-disclosure attribute accepts the following enumerated values. These definitions govern classification; the IPTC correspondence is informative and does not define equivalent values in another vocabulary:

Value Meaning
human-only A positive assertion that no AI was involved in producing this content.
ai-assisted AI was involved in producing the content, and a human reviewed it before publication. This spans the full range from light AI editing of human-written text to AI-drafted text, in each case reviewed by a human before publication.
ai-autonomous AI was involved in producing the content, and it was published without human review, regardless of whether a human prompted its generation.

To choose a disclosure value for the content being disclosed, answer these two questions in order:

  1. Was generative AI involved in producing the content? If no, use human-only. If yes, continue to the second question. See Boundary guidance for what counts as AI involvement.
  2. Did a human review the resulting content before publication? If yes, use ai-assisted. If no, use ai-autonomous.

The value ai-assisted is a positive assertion that a person performed human review before publication. Authors MUST use ai-autonomous when disclosing AI-involved content published without human review. Human authorship of the original text or of a prompt does not, by itself, constitute review of the resulting AI-generated or AI-edited text.

An assertion of human review does not identify the reviewer, record sign-off or editorial responsibility, or by itself establish eligibility for a legal disclosure exception. Reviewer identity and approval records are outside this vocabulary; see Scope and non-goals and Regulatory context for the relationship to EU AI Act Article 50.

A single ai-assisted value deliberately covers the full spectrum of human-plus-AI collaboration. The group considered a finer split between "assisted" (human-authored, AI-edited) and "generated" (AI-authored, human-reviewed) but found the boundary impractical to apply: with multiple contributors it forces unanswerable questions about who counts as the "first author."

The group also considered a percentage of AI authorship but decided against defining one. A consistent quantitative measure would require agreed definitions of both the numerator (what counts as AI-authored) and the denominator (the units and extent of content being measured). Resolving those questions across collaborative writing and editing workflows is outside the current scope. This specification therefore does not define a percentage attribute. See issue #25 for the proposal.

Consumers MUST compare the complete attribute value with the three keywords using ASCII case-insensitive matching. Leading or trailing whitespace is not stripped. This follows HTML's enumerated attribute convention. Authors SHOULD use the lowercase spellings shown above. Empty and unrecognized values supply no local declaration; consumers MUST continue the inheritance lookup rather than discard a valid ancestor or page default. These parsing rules also apply to the content of the page-level disclosure meta.

Boundary guidance ("What counts as AI?")

The boundary is generative AI — systems trained on data that produce novel outputs through inference. Non-generative, deterministic tools that apply fixed rules are not covered. Repeatable output alone does not exclude a generative AI system.

AI disclosure concerns AI involvement in producing the textual content of an HTML document. Using AI to generate HTML tags, document structure, CSS, or JavaScript without generating or modifying that text does not affect its disclosure value.

For example, human-written text placed in an AI-generated page scaffold should be marked human-only, provided AI was not involved in drafting or editing the text. AI involvement in drafting or editing the text itself is covered by the guidance below.

The following categories provide guidance for authors:

No generative AI involvement (disclose as human-only if no generative AI was otherwise involved in producing the text):

Deterministic programmatic content — output produced by fixed rules from structured data without trained inference — does not count as generative AI involvement for disclosure. The key distinction is whether a system was trained on data to produce novel outputs through inference (generative AI, in scope) or whether it applies fixed deterministic rules to produce predictable output (programmatic, out of scope).

ai-assisted (AI-involved content reviewed by a human before publication, from light editing to AI drafting; all examples below require that review):

ai-autonomous (AI-involved content published without human review):

The <meta name="ai-disclosure"> element

Syntax

A <meta> element with name="ai-disclosure" sets the page-level default for the document. The content attribute MUST contain a valid disclosure value, parsed using the same rules as the attribute.

<meta name="ai-disclosure" content="ai-assisted">
        

There MUST NOT be more than one <meta name="ai-disclosure"> element per document. The page default is taken from the first meta element in the document's head, in tree order, whose name is an ASCII case-insensitive match for ai-disclosure. Consumers MUST ignore later matching elements, even if the first has an invalid or missing content value. An invalid first value supplies no default.

Inheritance

Cascading rules

Consumers MUST determine the effective ai-disclosure value for a given element or text node using this procedure:

  1. For a text node, start with its parent element. For an element (including when classifying one of its text attributes), start with that element. If there is no starting element, return "unknown."
  2. If the current element has an ai-disclosure attribute that parses to a valid value, return its canonical lowercase value. Otherwise, move to its parent element and repeat. Stop when there is no parent element.
  3. If the starting element is connected to a document, use that document's page-level default, if valid, and return its canonical lowercase value.
  4. Otherwise, return "unknown."

Child elements MAY override their parent's value by specifying their own ai-disclosure attribute. This allows authors to mark fine-grained regions within a larger container.

Parent and ancestor relationships in this procedure follow the DOM tree, not the flattened tree. Slot assignment does not change a node's disclosure ancestry. Lookup within a shadow root does not cross to its host, although a connected node can still use its document's page default. A detached subtree or inert template content can inherit from ancestors within that subtree, but has no page default until connected to a document.

The result describes the current DOM. Consumers MUST recompute it when relevant declarations, ancestry, or the page default change. Dynamically inserted content uses the same procedure. Authors remain responsible for updating declarations when the production history changes, including AI edits made after human review.

<meta name="ai-disclosure" content="human-only">
<main>
  <p>Human-written reporting inherits the page default.</p>
  <section ai-disclosure="ai-autonomous">
    <p>This unreviewed AI summary overrides the page default.</p>
    <p ai-disclosure="human-only">A human-written correction overrides the section.</p>
  </section>
</main>
        

Absence vs. human-only

When no element, ancestor, or page-level declaration applies, the disclosure status is "unknown" — no assertion has been made. The value human-only is a positive assertion that no generative AI was involved in producing the content.

Authors are encouraged to disclose content with no generative AI involvement as human-only, at the element level or through a page-level default. Authors SHOULD use ai-disclosure="human-only" explicitly when they wish to assert human-only provenance. Without an applicable declaration, readers and tools cannot distinguish content produced without AI from content whose AI involvement has not been disclosed.

Optional metadata attributes

The following attributes MAY appear on an element with an explicit or inherited AI-involved disclosure value, or on the page-level disclosure meta element. They provide supplementary information about the AI system used. All are OPTIONAL — authors may have legitimate reasons not to disclose specific tools or providers.

Consumers MUST resolve each metadata attribute independently: use the attribute on the element itself if present, otherwise the nearest DOM ancestor carrying that attribute, otherwise the attribute on the document's first matching disclosure meta element if the target is connected to that document. If none is present, no value is supplied. An explicitly empty attribute clears that metadata field and stops lookup. Text nodes start at their parent element. The same DOM, shadow-root, and connection rules apply as for disclosure inheritance.

Overriding ai-disclosure does not by itself override the inherited model, provider, or prompt URL. Authors should override or clear metadata that no longer describes the content. Consumers MUST ignore AI metadata for a target whose effective disclosure is human-only or "unknown." Optional metadata alone does not establish AI involvement or human review.

<meta name="ai-disclosure" content="ai-assisted"
      ai-model="example-model-v1" ai-provider="Example Provider">
<article>
  <p>Inherits ai-assisted, the model, and the provider.</p>
  <p ai-model="example-model-v2">Overrides only the model.</p>
  <p ai-model="">Clears the model; still inherits the provider.</p>
</article>
      

ai-model

A free-form string identifying the AI model used (e.g., "example-model-v1", "example-model-v2").

This attribute SHOULD NOT be present when the effective disclosure value is human-only.

ai-provider

A free-form string identifying the AI provider or vendor (e.g., "Example Provider").

This attribute SHOULD NOT be present when the effective disclosure value is human-only.

ai-prompt-url

A nonempty value is a [=URL=] pointing to documentation of the prompt or methodology used to generate the content (e.g., "/ai-methodology#summary").

This attribute is optional. When provided, the URL is expected to resolve to a resource containing prompt or methodology information. This specification does not prescribe that resource's format, schema, or required fields. It does not require publication of the exact prompt, model parameters, source materials, or evidence of review.

The attribute carries a link, not inline prompt text. A separate resource lets authors choose what to disclose without requiring the prompt to be embedded in the page.

This attribute SHOULD NOT be present when the effective disclosure value is human-only.

Relationship to HTTP metadata

This specification defines HTML disclosure independently of any HTTP disclosure header. Consumers MUST determine the effective HTML disclosure value using Inheritance. HTTP metadata MUST NOT replace that value or supply a missing HTML declaration under this specification.

An application may also display or evaluate declarations from HTTP headers or other provenance systems. If these disagree with HTML metadata, the application can expose both assertions and their scopes; this specification does not establish which assertion is factually correct. A header describing a whole response and an attribute describing one passage may legitimately describe different content.

Use cases and examples

Mixed-content news page

A newsroom publishes an investigative piece with a human-written article and an AI-written summary reviewed by a human before publication. Each region declares its own disclosure value, so no page-level default is needed. Elements outside these regions have an "unknown" disclosure status:

<article ai-disclosure="human-only">
  <h1>Exclusive: City Budget Shortfall</h1>
  <p>After six months of records review...</p>
</article>

<aside ai-disclosure="ai-assisted"
       ai-model="example-model-v2" ai-provider="Example Provider">
  <h3>Key Takeaways (AI-Generated)</h3>
  <ul><li>$4.2M discrepancy found...</li></ul>
</aside>
        

AI-edited blog post

A blogger writes a post and uses an LLM for grammar, style, and clarity improvements, then reviews the edited text before publication:

<meta name="ai-disclosure" content="ai-assisted">

<article ai-disclosure="ai-assisted"
         ai-model="example-model-v1" ai-provider="Example Provider">
  <h1>My Trip to Kyoto</h1>
  <p>The bamboo grove felt otherworldly at dawn...</p>
</article>
        

Automated weather feed

An automated system generates and publishes weather reports without human review:

<meta name="ai-disclosure" content="ai-autonomous">

<div ai-disclosure="ai-autonomous"
     ai-model="weather-llm-v2" ai-provider="WeatherCorp">
  <h2>San Francisco Bay Area Forecast</h2>
  <p>Expect fog clearing by noon with highs near 62°F...</p>
</div>
        

Human-only assertion

A literary journal positively asserts that no AI was used:

<meta name="ai-disclosure" content="human-only">

<article ai-disclosure="human-only">
  <h1>The Weight of Feathers</h1>
  <p>She found the letter tucked inside a volume of Neruda...</p>
</article>
        

Note: ai-disclosure="human-only" is a positive assertion. Without an applicable element, ancestor, or page-level declaration, the value is "unknown," not "human-only."

Author decision guide

This guide applies the disclosure values to common publishing workflows. Use the normative two-question classification procedure to choose a value. The amount of AI-authored text and the extent of human editing do not determine the value.

Applying the classification procedure

Human authorship of notes, a prompt, or an earlier draft does not establish review of the resulting AI-generated or AI-edited text. Review does not require making edits. Translation follows the same review rule as other AI-involved text. See Boundary guidance for exclusions, including deterministic tools and AI-generated page structure that does not generate or modify the text.

If the production history is unknown, do not guess a disclosure value. Omitting a declaration makes no new assertion; the applicable value is then determined by Inheritance, and is "unknown" if no ancestor or page-level default supplies one.

This guide covers a single piece of content. When one page combines content with different disclosure values (for example, a human-written article with an AI-generated summary), disclose each part individually. A page-level default is optional; if one is supplied, use a valid disclosure value and override it on elements where a different value applies.

Scenarios

Scenario Human reviewed the resulting text before publication? Recommended value
Author writes a blog post, uses AI for grammar and style fixes, then reviews the edited text Yes ai-assisted
Author writes bullet notes; AI expands them into a memo that the author reviews before publishing Yes ai-assisted
AI substantially rewrites a human draft; the author reviews the rewritten text Yes ai-assisted
AI produces a first draft; a human reviews it, with light edits, heavy edits, or no edits Yes ai-assisted
A human dictates ideas; AI structures and expands them into prose that the human reviews Yes ai-assisted
A human supplies a prompt; the AI response is published unread No ai-autonomous
AI translates text; a human reviews the translation, with or without edits Yes ai-assisted
AI translates a page automatically; the translation is published without human review No ai-autonomous
Automated agent publishes daily summaries without human review No ai-autonomous
Human writes all the text; AI is used only for HTML, CSS, or JavaScript scaffolding without changing the text Not applicable — no AI involvement in the text human-only

These scenarios illustrate the disclosure definitions; they do not establish legal compliance or eligibility for an exception to a disclosure obligation. See Regulatory context for how the human-review assertion relates to EU AI Act Article 50.

Cross-standard alignment

This specification is designed to complement existing standards for content provenance and AI transparency. The layers work together without duplicating each other's responsibilities.

IPTC Digital Source Type

The IPTC Digital Source Type vocabulary describes how media was produced. The following examples show related terms for text; they are not a lossless mapping or an IPTC endorsement. Source type alone does not establish whether human review occurred, so consumers cannot derive this specification's disclosure values from an IPTC term alone.

ai-disclosure value Related IPTC terms and limits
human-only digitalCreation for human-written text created with non-generative tools. This is not a universal mapping for every deterministic data feed covered by human-only.
ai-assisted compositeWithTrainedAlgorithmicMedia / trainedAlgorithmicMedia, depending on production history; human review is an additional assertion here.
ai-autonomous trainedAlgorithmicMedia can describe generated text; absence of human review is an additional assertion here.

IPTC's digitalCapture describes capture from real life by a digital camera or recording device, rather than human authorship of text.

Schema.org / JSON-LD

JSON-LD is a useful complementary approach to AI disclosure, particularly for publishers already using structured data. HTML attributes associate disclosure directly with elements in the document; JSON-LD can describe the corresponding work and richer metadata such as contributors, methodology, and evidence links. Authors can use both together, keeping declarations about the same content consistent.

The group's charter covers coordination with related standards, but defining a JSON-LD disclosure vocabulary or extending Schema.org is outside the current scope of this specification. Those designs belong with the respective communities. Related discussion is tracked in schemaorg/schemaorg#3391 and issue #17.

The following examples share possible designs for discussion. The aiDisclosure property and its expanded fields are illustrative; these examples do not define standardized Schema.org terms or imply support by search engines or other consumers. JSON-LD is not required for conformance to this specification.

A simple form could associate a disclosure value with a work:

{
  "@context": "https://schema.org",
  "@type": "NewsArticle",
  "headline": "Investigation: City Budget Shortfall",
  "author": { "@type": "Person", "name": "Jane Doe" },
  "aiDisclosure": "ai-assisted"
}
        

An expanded form could carry additional metadata:

{
  "@context": "https://schema.org",
  "@type": "NewsArticle",
  "headline": "Investigation: City Budget Shortfall",
  "author": { "@type": "Person", "name": "Jane Doe" },
  "aiDisclosure": {
    "level": "ai-assisted",
    "tool": "Example Model",
    "provider": "Example Provider",
    "description": "AI used for copy editing and fact-checking assistance",
    "methodologyUrl": "https://example.com/ai-methodology"
  }
}
        

PROV-O and Dublin Core

W3C PROV-O describes provenance through entities, activities, agents, and their relationships. The Dublin Core DCMI Metadata Terms include properties for creators, contributors, and provenance. These vocabularies offer richer attribution and provenance expression that can complement the disclosure values defined here.

Integrating these vocabularies is outside the current scope of this specification. No mappings to PROV-O or Dublin Core, or additional HTML attributes derived from them, are defined at this time. They are linked as related work for authors who need more expressive metadata alongside AI disclosure.

C2PA

C2PA binds signed provenance claims to digital assets. Its technical specification includes unstructured text and regions of interest within assets; it is not limited to whole image, audio, or video files. Cryptographic validation establishes the integrity and signer of a claim, not by itself the truth of a claim about human authorship or review.

This report defines advisory HTML declarations and DOM inheritance, without cryptographic binding. The approaches can complement each other, but no C2PA integration or automatic mapping to this report's disclosure values is defined.

Text watermarking

Text watermarking embeds a detectable statistical signal in generated text. Research such as TextSeal explores detecting and locating watermarked passages, including within documents containing both human-written and AI-generated text.

As of September 2026, Anthropic is rolling out text watermarking in supported Claude models. Its published explanation describes a method based on SynthID-Text, with an Anthropic-specific key and a detection API in private preview. The signal is embedded through word selection, rather than HTML attributes or hidden characters.

Watermarking can provide evidence of AI involvement that complements voluntary, author-declared disclosure. A detected watermark does not establish whether a human reviewed the content, so it cannot by itself distinguish ai-assisted from ai-autonomous. Failure to detect a watermark does not establish human-only provenance. This specification does not define watermark generation, detection, or automatic conversion of detection results into disclosure values.

IBM AI Attribution Toolkit

The IBM AI Attribution Toolkit is a research prototype for structured AI attribution statements via human self-reporting. It uses a multi-axis model (proportion, contribution type, initiative, human review) compared to this specification's single-axis model. The approaches are complementary: the toolkit addresses the "author guidance" layer, while this specification addresses the "machine-readable metadata" layer.

Implementation status and adoption

This report proposes new HTML attributes; it does not make them part of the HTML Living Standard. Native browser support, a reflected element.aiDisclosure property, and acceptance by HTML validators are not established by this report. The adoption path is implementation experiments and review by the HTML standards community, including the existing WHATWG discussion. A future HTML integration would need to specify any IDL reflection.

Experimental consumers can use getAttribute() and the processing algorithm. A publisher needing conforming custom HTML attributes during experimentation can use a private data-ai-disclosure convention, with equivalent data- names for metadata, and explicitly configure its consumer for those names. Those experimental names are not aliases defined by this specification and are not automatically interoperable with consumers of the proposed unprefixed attributes.

The repository includes an illustrative JavaScript consumer and executable processing checks for inheritance, parsing, text alternatives, metadata overrides, dynamic content, templates, and shadow roots. These demonstrate the proposed algorithm, not independent implementations or browser interoperability. No cross-browser implementation report is claimed. The IBM toolkit described above is related work, not evidence of conformance to this processing model.

Security considerations

The ai-disclosure attribute is voluntary, author-declared metadata. It carries no integrity protection. Systems such as C2PA can provide signed, tamper-evident provenance claims through a separate integration; cryptographic validation alone does not establish that a human actually authored or reviewed the text.

The voluntary nature means the attribute cannot be relied upon for security decisions, the same as any self-declared metadata (robots.txt, rel=nofollow, Schema.org markup).

Sanitizers, rich-text editors, and CMS transformations may remove unfamiliar attributes. For example, DOMPurify provides attribute allow-list configuration. Publishers should test that their actual sanitization and publishing pipeline preserves the disclosure and metadata attributes they intend to support, using narrowly scoped configuration rather than disabling sanitization. Losing a local override can silently expose an unrelated inherited value, including a human-only page default. Declarations from untrusted authors remain unverified even when kept.

No new information about the user (reader) is exposed. The attribute describes the content, not the person viewing it. No new fingerprinting surface is introduced — the attribute is author-declared metadata, not a browser API.

Privacy considerations

The ai-model and ai-provider attributes are optional to avoid requiring disclosure of trade secrets or proprietary tooling.

The ai-prompt-url attribute links to a resource rather than carrying prompt text inline. Authors should avoid disclosing confidential prompts or personal information through that resource. Consumers should not fetch a prompt URL automatically merely to compute disclosure; fetching can reveal reader activity to the resource's operator.

Computing disclosure and inherited metadata requires no network request or collection of reader data. Following a methodology link is a separate action with the privacy implications of accessing that resource.

Accessibility considerations

Browsers and screen readers could optionally announce AI disclosure to users (e.g., "AI-generated content follows"). The disclosure could be exposed through accessibility APIs and appropriate user-facing controls. This report does not define an accessibility-tree mapping or require a particular browser API. AI-generated text alternatives, including alt text, are within the textual scope; the declaration does not describe the associated image itself.

No change to existing content rendering is required — the attribute is purely informational. The attribute may be useful for accessibility research into how AI-generated content affects comprehension for users with cognitive disabilities.

Internationalization considerations

The attribute values (human-only, ai-assisted, ai-autonomous) are English-language tokens intended for machine consumption, not display. Human-readable presentation of disclosure status is a user agent responsibility and can be localized.

The ai-prompt-url attribute can link to localized methodology pages.

Changes for the proposed final report

Acknowledgements

The editors thank the participants of the AI Content Disclosure Community Group for their contributions and feedback.

This specification builds on the original proposal and incorporates ideas from the WHATWG HTML #9479 discussion and the IPTC Digital Source Type vocabulary.