# OPS-292 — Evidence screenshots must say when and where they were taken

> Every submitted evidence image must carry its capture timestamp, the source URL, and enough provenance to tie it to the live surface.

- **Rule ID:** OPS-292
- **Layer:** Operational (`OPERATIONAL`)
- **Checks:** `campaign.consent_artifact[]`
- **Severity:** MEDIUM — Usually survives review, but lowers your trust score or invites manual review.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** AI judgement over the submitted form
- **Fix type:** Supply evidence only you hold
- **Required by:** CTIA, researcher recommendation
- **Applies:** Applies to every 10DLC registration.
- **Canonical URL:** https://ekas.io/rules/10dlc/operational/ops-292/

## Why this rule exists

A screenshot with no provenance is a picture of a form, and a reviewer cannot tell whether it is the live page, a staging build, or a mock-up made for the submission — so the cautious ones reject it and the rest approve something they did not verify. Adding the URL and the date costs one line in the upload and turns the image into evidence, which is the difference the brand is actually being asked for.

## How to fix it

Capture the browser address bar in the screenshot, or caption each image with the full URL and the capture date where the surface is not a web page. Done when the image alone tells a reviewer which page it is and when it was taken.

## Example of a compliant value

```text
Screenshot filename optin-signup-2026-03-04.png, captioned "https://acmecoffee.com/signup — captured 4 March 2026, 1440×900", with the address bar visible in the image.
```

## Common mistakes

- Cropping to the consent block removes the address bar, which is usually the only provenance the image had.