C2PA treats provenance like a sticker. This essay argues AI agents need locally held, tamper-evident logs that anyone can verify.