Addaly is in open beta. Things will change, and AI answers can be wrong — check anything that matters.

Making Things With AI

Images, video, voice and music — how they work, where they break, who owns them.

Making Things With AI

Images, video, voice and music — how they work, where they break, who owns them.

Level
Nothing assumed
Lessons
84
Reading time
685 min
Price
Free, no sign-up to read

A plain, honest tour of generative media. How image models actually work, why hands and text used to break and what that predicts, how people really edit, what video still cannot do, the consent line on voice cloning, where generated music stands legally, and the genuinely unsettled question of who owns any of it — plus the labelling duties that are already law in several countries.

Start the first lesson

Download the textbook (PDF) · free to print and teach from, with the exam paper and every answer at the back.

Module 1

9 lessons · 76 min

How the picture gets made

Before any advice about prompts, the machinery. This block follows a single image from a request to a file: the noise it starts as, the small compressed space it is actually built in, how your words become a steering signal, what the guidance number does to the result, why the same prompt gives a different picture tomorrow, what the training run actually consisted of, and how much of the training images the finished model can be shown to hold.

By the end you can

Trace one generated image from random noise to a saved file — naming the latent space, the text encoder, the denoising loop, the guidance term, the sampler and the seed — and say, with the published evidence, what a diffusion model does and does not retain from its training set

  1. 1What the model is actually doing7 minAn image model does not draw. It removes noise from static, over and over, steered by your words.
  2. 2Noise, steps and the schedule9 minGeneration is a fixed number of small denoising steps down a noise schedule, which is why step count buys detail only up to a point and then stops.
  3. 3The small space the picture is built in9 minDiffusion happens in a compressed latent grid roughly sixty-four times smaller than the image, and the autoencoder that compresses and restores it is the source of a specific family of defects.
  4. 4How your words become a steering signal9 minA text encoder turns your prompt into a sequence of vectors that the network attends to at every step and every position, which is why prompts steer continuously rather than being read once.
  5. 5Guidance: the dial that makes it obey8 minClassifier-free guidance runs the model twice per step and extrapolates away from the unprompted prediction, so raising it increases obedience and saturation together, and past a point it destroys the image.
  6. 6Seeds, samplers and reproducibility8 minThe seed fixes the starting noise and the sampler decides the path away from it, so a result is only reproducible when both are recorded along with every other number.
  7. 7What the training run actually consisted of9 minThese models were trained on billions of image-and-alt-text pairs scraped from the open web, so the caption vocabulary of that scrape sets the language your prompts have to speak.
  8. 8Diffusion is not the only way8 minGenerative images have been built with GANs, autoregressive token models and flow matching as well as diffusion, and the architecture explains what a given tool is fast at and bad at.
  9. 9What the model does and does not retain9 minA diffusion model stores a compressed statistical summary rather than a library of images, but images duplicated many times in the training data can be reproduced almost exactly, and the measured rate is small but not zero.
Case studyForty thousand posters and a photograph nobody recognisedA district health office in Nashik, the evening before a dengue-awareness print run, with a grant that expires on the thirty-firstRead it

The Nashik district health office had a dengue season starting and a grant that lapsed at the end of the month. The communication officer, Sunita Rane, needed forty thousand posters in Marathi for panchayat noticeboards, primary health centres and school gates. The illustration budget was eleven thousand rupees, which in previous years had bought clip art.

This year an intern generated the artwork. A courtyard at mid-morning: an overturned bucket of standing water, a woman in a green sari tipping out a flowerpot, a child watching from a step. It was good. It was better than anything the office had printed in a decade, and everyone who saw the proof said so.

The press in Malegaon wanted the file by nine the next morning. At six in the evening a colleague looked at the proof for a long moment and said the woman looked familiar.

That is a thin thing to act on. Sunita acted on it anyway, because the check is free. She dropped the proof into three reverse image search services in turn. Two returned nothing useful. The third returned a stock photograph that had been on a library since 2015: the same courtyard geometry, the same pose, the same pot at the same angle, the same light falling in the same direction. It was not identical. The sari was a different colour, there was no child, and the wall behind was plain rather than tiled. But once she had the two side by side she could not unsee the relationship, and neither could anyone else in the room.

The intern's first response was arithmetic, and it is the argument everybody reaches for. The model file is two gigabytes. It was trained on billions of images. It cannot be storing them. Therefore it cannot have copied anything.

The arithmetic is right and the conclusion does not follow. Average compression across a whole training set says nothing about any particular item in it. An image that appeared once contributes a nudge that is averaged away. An image that appeared a thousand times, with much the same caption each time, becomes a reliable low-error target that the model can lower its training loss by learning specifically. This stock photograph had been syndicated to health departments, NGOs and municipal websites across two decades. Its caption was, in effect, the intern's prompt.

So the choice in front of Sunita at half past six had a cost on both sides, and neither cost was hypothetical.

Holding the print run meant losing the press slot. The next slot was the following week, the grant lapsed on the thirty-first, and unspent grant money does not roll forward. Dengue cases in the district had already started climbing. A poster campaign that arrives after the peak is a filing exercise.

Running it meant publishing, under a government masthead, at a scale of forty thousand, an image that a stock library's automated matching could plausibly find. The library's remedy would be ordinary and manageable. The reputational problem would not be, because the whole product of a public health poster is that people believe it. A district office caught using somebody else's photograph badly disguised would be a story that outlived the dengue season.

There was a third thing she had to establish before she could decide anything, and it took four minutes. She asked the intern for the generation record. He had exported the final artwork as a JPEG for the press, which destroys the text chunk that local tools write into a PNG. But he had kept the original PNGs in a folder on his own laptop, out of habit rather than policy, and the prompt, the seed, the sampler, the step count and the guidance scale were all sitting in the file.

What actually happened

Sunita changed the seed.

That was the whole intervention, and it worked because of what a seed is. The seed fixes the block of random numbers the denoising loop starts from, and the starting noise is what decides composition. The prompt had steered the model toward a region of its training distribution where one heavily duplicated photograph sat as an attractor. A different seed starts the walk somewhere else entirely and arrives at a different arrangement of the same subject. Adding adjectives would have done the opposite: it would have kept her in the same caption neighbourhood and asked for more of it.

Eleven generations later, with the prompt untouched and only the seed varied, she had a courtyard that reverse-searched clean on all three services. The whole exercise cost ninety minutes. The press slot moved to eleven and the run went out on time. The grant survived.

The office wrote one page of rules the following week. Every image that will be published gets a reverse image search on at least two services before it leaves the building. The PNG is the master and the JPEG is the derived file, so the generation record survives. And the record for any published artwork — model, prompt, seed, date — goes in the job folder, not on an intern's laptop.

Six months later the same check caught a film poster that had come back nearly intact inside a nutrition leaflet. That one took two minutes to find and four to fix, and nobody argued about whether the check was worth the time.

Worth arguing about

  1. A colleague said the woman looked familiar, and nobody could say why. Why did a reverse image search settle in four minutes what looking at the picture could not settle at all?

    One answer

    Inspection asks whether the image looks copied, which is a question about an impression. Reverse image search asks whether this composition already exists somewhere on the indexed web, which is a question about a record outside the file. The second question has an answer that does not depend on how good the generator was or how carefully anyone looked. It is also the check that catches the specific mechanism at work here: near-copies cluster on images that were duplicated many times in training, and images duplicated many times in training are exactly the ones a search index has seen many times too.

  2. The intern argued that a two-gigabyte model trained on billions of images cannot be storing any of them. Where does that argument break down?

    One answer

    It confuses average compression with per-item compression. A model can be an extreme lossy summary of almost everything and still hold a handful of specific images close to exactly. Training minimises prediction error, and an image that appears hundreds or thousands of times with a consistent caption is a target the optimiser can profitably learn as a specific mapping. The measured picture supports this: a well-known study generated on the order of 175 million samples from Stable Diffusion and recovered roughly a hundred near-exact copies, every one of them from a heavily duplicated training image. Rare, not zero, and concentrated on duplicates.

  3. Why did rerolling the seed fix it, when adding more descriptive words to the prompt would probably not have?

    One answer

    The seed determines the starting noise, and composition is settled in the first few denoising steps out of that noise. A new seed produces a genuinely different arrangement from identical words. The prompt, by contrast, is what steered the model into the region of the distribution where the duplicated photograph sits. Adding adjectives refines a request inside that same region and can easily pull harder toward the very image being avoided. When the problem is that the output is too close to one specific thing the model saw repeatedly, the control that moves you is the one that changes where the walk begins.

Test yourself6 questions on this modulePractice. Nothing is recorded and no score is kept.
  1. 1

    On a modern sampler, thirty steps and eighty steps produce images that are close to identical, and the eighty-step version takes nearly three times as long. What accounts for that?

  2. 2

    A model places the letters of a shop sign in the right order in the latent, and the finished image still shows a smear. Which part of the pipeline destroyed it?

  3. 3

    Raising guidance from seven to sixteen on the same seed gives waxy skin, clipped white highlights and posterised colour. What is the mechanism?

  4. 4

    You send a colleague your prompt, seed, model file, sampler, step count, guidance and resolution. She runs it on her own machine and gets a visibly different picture. What is the most likely reason?

  5. 5

    Which prompt carries the highest chance of returning something close to an exact reproduction of a specific existing work?

  6. 6

    A prompt written as a long comma-separated keyword list gets good results on a 2022 checkpoint and vague, generic results on a current one. What changed?

Module 2

9 lessons · 68 min

Steering it: prompts and what sits around them

A prompt is a piece of text aimed at a specific encoder, and almost everything people believe about prompting is a description of one encoder's habits. This block covers what your words are competing against, what negative prompts and weighting actually do to the arithmetic, the token limit that silently eats long prompts, why the advice reversed when models changed encoder, when a reference image beats any sentence, and how to keep a prompt as a reproducible record rather than a lucky accident.

By the end you can

Diagnose a failing prompt by identifying which part of the pipeline is ignoring it — encoder type, token limit, guidance, attribute binding or a missing reference — and rewrite it for the specific model in front of you rather than by adding adjectives

  1. 10Writing a prompt that gets what you meant7 minWrite the caption that would have sat under the picture you want, not a wish list of adjectives.
  2. 11Tag soup or sentences: why the advice reversed8 minPrompt style should match the captions a model was trained on, so keyword lists suit CLIP-era models and plain descriptive sentences suit models trained on machine-written captions.
  3. 12What a negative prompt really does8 minA negative prompt replaces the empty prompt in the guidance calculation, so it defines what the image is pushed away from rather than issuing a prohibition, and it only exists on models that use classifier-free guidance.
  4. 13Weighting, emphasis and where it breaks8 minPrompt weighting scales token embeddings before they reach the model, which is a blunt intervention on a representation the model never saw scaled during training.
  5. 14The token limit that eats long prompts7 minCLIP-based pipelines read about 75 tokens of prompt and silently discard or awkwardly average the rest, so a long prompt on an older model is mostly inert.
  6. 15When a reference image beats any sentence8 minConditioning on an image passes thousands of numbers of visual information where a prompt passes tens, so anything you can show is better shown than described.
  7. 16Reading the metadata, keeping the record7 minGeneration parameters are usually written into the output file, so a result is recoverable and auditable if you keep the file and know where to look.
  8. 17The prompt you sent is not the prompt it got8 minHosted image services rewrite, expand and filter prompts before the model sees them, which explains results that do not match the words you typed and makes reproducibility a property of the service rather than of your record.
  9. 18A prompt is not an asset7 minPrompts are tightly coupled to one model version and transfer badly, so the durable asset is the reference material, the workflow and the record, not the words.
Case studyThe second batch did not match the firstA two-person knitwear export business in Tiruppur, six months after a set of lookbook images that can no longer be reproducedRead it

Kavitha Anandh and her brother run a knitwear unit in Tiruppur with nine machines and one important customer: a German buyer who takes about seventy per cent of what they make. In March the buyer asked for lifestyle images for a lookbook. Not product shots on white — garments worn in a room, the same room every time, the same light, so that the set read as one place across a season.

Neither of them had a studio or a budget for one. Kavitha built the room on a hosted image service over four evenings and produced thirty images. The buyer was pleased enough to ask for thirty more in September, for the second half of the range.

In September she opened the text file where she had saved every prompt, pasted the first one in exactly as written, and got a different apartment. Warmer light. Different furniture. A window on the wrong wall. She tried the next one, and the next. Nothing matched.

Her brother's diagnosis was that the service had got worse, which is the diagnosis everybody reaches first. Kavitha's was that she did not actually know what the service had been doing in March, and she ran two tests to find out.

The first: she re-ran one March prompt six times without changing a character. She did not get six variations of one apartment. She got six different apartments, with different furniture and different architecture. Variation within a scene is what a seed change produces. Variation of the scene itself points at something upstream deciding what the scene is.

The second test was the one that settled it. She asked for an empty room, bare walls, a single grey box on the floor, nothing else. She got a styled living room with a plant, a rug and afternoon light through a window. Nothing she had typed asked for any of that. A language model was reading her short request, writing a longer and more detailed description, and handing that to the image model. Her words were an input to that expansion, not the instruction the image model received. And the expansion was itself a generation, which is why identical text produced different rooms.

That left three ways forward, with the buyer's deadline three weeks out.

The first was to rent a flat in Coimbatore, hire a photographer and models, and shoot the second thirty properly. Roughly a lakh and a half, three days, and it does not solve the problem — the March images would still not match the September ones, so the set would be split down the middle whichever way she went.

The second was to accept the mismatch and present it to the buyer as a new season look. Cheapest, fastest, and it asks a customer who is seventy per cent of the business to absorb an inconsistency they did not ask for.

The third was to rebuild locally. A second-hand machine with twelve gigabytes of video memory, a free node-based interface, an open checkpoint archived onto a disk she controlled, and then redo all sixty images so the whole set came from one place. That meant spending money on hardware, losing days of a three-week window to setting it up, and accepting that a mid-sized open model would not be quite as polished out of the box as the hosted service had been.

She chose the third, and her reasoning was not about this season. It was that the buyer would ask again in March, and in September after that, and a pipeline that cannot be re-run is not a pipeline.

What actually happened

The machine cost forty-two thousand rupees. The evening she had budgeted for installation became two.

Her first local results were worse than the hosted ones, and badly so: waxy skin, hard black outlines, colours pushed to the edge of the range. She assumed the open checkpoint was simply inferior. It was not. She had carried her habits across, including a guidance scale of seven, and the model card for the checkpoint specified a useful band of three to four because the model bakes guidance in during training. Everything she had generated had been extrapolated far outside the range the decoder could render. Dropping the number to three and a half fixed it in one generation.

The second thing she carried across was her prompt style — long comma-separated keyword strings, written for a service whose behaviour she had never actually diagnosed. The local checkpoint used a text encoder trained on written-out descriptions, and it responded much better to plain sentences describing what was in the frame. Her prompts got shorter and the results got more accurate.

Then she did the thing that made the rest work. She fixed one seed per room, saved the node graph as a file, kept the checkpoint on two disks, and photographed the corner of her own office on her phone to use as a depth map for the composition. Sixty images took four days.

The buyer noticed that the set was more consistent than the spring one, not less. The following season Kavitha reused the same room seeds and the same depth map and changed only the garments.

What she keeps now is the checkpoint file, the node graph, the phone photographs and a text file of parameters with a date against each. The prompts themselves turned out to be the least durable thing in the folder.

Worth arguing about

  1. She pasted the March prompt in character for character and got a different room. What does that tell you about where reproducibility actually lives on a hosted service?

    One answer

    It tells her the prompt is not the input to the image model. A hosted service can expand, rewrite and filter a request before the model sees it, and the expansion is itself a generative step, so identical text produces a different operative description each time. On a pipeline like that, the prompt and the seed together do not define the output, and neither does any record she keeps. Reproducibility is a property the service either provides or does not, and it can be withdrawn silently by a model update. That is the argument for keeping a local copy of any model a body of work depends on.

  2. Why was 'an empty room, bare walls, a single grey box, nothing else' a good test prompt, where 'a woman in a red coat' would have taught her nothing?

    One answer

    Because it is structurally sparse and the expansion is visible against it. A detailed subject prompt returns a detailed image whether or not anything was added, so there is nothing to compare. A deliberately under-specified, slightly odd request has an obvious correct answer — an almost empty frame — and every plant, rug and window that comes back is something a layer she cannot see decided to add. The test works by leaving a gap and seeing who fills it.

  3. Her first local images looked burnt and waxy and she blamed the checkpoint. What was the actual cause, and what is the general habit that would have caught it faster?

    One answer

    Guidance. She was running at a scale of seven on a model whose card specified three to four, so the guided prediction was being extrapolated outside the range the decoder was trained to render, which is what produces clipped highlights, posterised colour and plastic skin. The general habit is to read the three numbers the model's author published — native resolution, step count and guidance scale — before forming any opinion of a checkpoint. Guidance values are not comparable across model families, and advice written for one is actively wrong for another.

Test yourself6 questions on this modulePractice. Nothing is recorded and no score is kept.
  1. 1

    A colleague fills the negative prompt box on a distilled model that runs at guidance 1 and reports that it makes no difference at all. Why not?

  2. 2

    You append 'and a bright yellow rubber duck' to the end of a long prompt, fix the seed and generate. No duck appears and nothing else changes. What have you established?

  3. 3

    Weighting a colour at 1.2 makes it more present. At 1.8 the colour sometimes disappears entirely. What is going on?

  4. 4

    Why does a depth map extracted from a rough sketch place two objects more reliably than the sentence 'the red mug is to the left of the blue one'?

  5. 5

    You suspect a hosted service is rewriting your prompt before the model sees it. Which test would show it most clearly?

  6. 6

    Your studio is moving from one base checkpoint to a newer one. Which part of your existing work is most likely to still do its job unchanged?

Module 3

10 lessons · 79 min

Where it breaks, and why

Every generative failure has a mechanism, and knowing the mechanism tells you whether a prompt can fix it. This block works through the durable ones: counting and attribute binding, negation, spatial relations, the pull toward the training-set average, the bias that pull carries, physics and reflections, detail at small scale, refusals and false positives from safety filters, and the visible tells that used to identify a generated image and are now disappearing.

By the end you can

Look at a failed generation and classify the failure by mechanism — binding, negation, resolution, distribution pull, physics or filtering — and state for each whether a prompt change, a structural control, a different model or a manual fix is the only thing that will work

  1. 19What hands and text told us7 minThese models nail local texture and fail global constraints — anything you must count, spell, or match across a picture.
  2. 20Counting, and the objects that swap their attributes8 minNothing in the architecture ties an adjective to a noun or enforces a quantity, so counts and attribute assignments are emergent rather than guaranteed and degrade sharply above three or four objects.
  3. 21Why "without" summons the thing8 minA caption-trained encoder represents which concepts are present far better than logical operators over them, so naming something in order to exclude it tends to make it more likely.
  4. 22Left, right, behind: the relations it cannot hold8 minSpatial relations are learned as weak statistical associations rather than represented geometrically, so relational prompts fail unpredictably and are better solved with a conditioning map than with words.
  5. 23The pull toward the average8 minGuidance and short prompts both push output toward the most typical example in the training distribution, which is why unspecified images converge on a narrow, glossy sameness.
  6. 24The bias, and what mitigating it actually does9 minDemographic skew in generated images is the distribution pull applied to people, measured and reproducible, and every available mitigation trades one problem for another rather than removing it.
  7. 25Reflections, shadows and things that must agree8 minThe model matches local texture statistics without enforcing any global constraint, so anything that must agree across the picture — a reflection, a shadow, a continuing line — fails in a characteristic way.
  8. 26Faces in crowds and other small things7 minDetail quality is set by how many latent cells a subject occupies, so anything small in frame degrades regardless of prompt, model quality or output resolution.
  9. 27Refusals, filters and the false positives8 minSafety filtering happens at several separate points with different failure characteristics, and the classifier-based stages produce predictable false positives on medical, artistic and non-Western content.
  10. 28The tells, and why they are disappearing8 minThe visible artefacts people use to identify generated images are transient consequences of specific architectures, so a detection habit built on them expires and confident identification by eye is not reliable.
Case studyForty cards, three wrong, and a term starting MondayA small educational publisher in Patna, proofing a Class 2 counting set eleven days after an intern started generating itRead it

Saraswati Prakashan prints workbooks and teaching aids for low-fee private schools across three districts. In June they took an order for a Class 2 numeracy set: forty flashcards covering the numbers one to ten, two cards for each number, each card showing that many of something familiar. Mangoes. Kites. Bangles. Lassi glasses.

An intern generated the cards over eleven days. He was careful. He regenerated each card until the count looked right, sometimes fifteen or twenty times, and he checked every one before handing them over.

The proofreader was Ramesh Jha, a retired primary teacher who had been reading proofs for the firm for nine years. He printed the set at full size, laid it out on the table, and counted.

Seven kites had eight kites. Nine bangles had eleven. And five mangoes had five mangoes and, behind a leaf at the left edge, most of a sixth.

The intern's defence was that he had checked them, and he had. He had checked them on a laptop screen at the size four cards fit side by side, which is the size at which a sixth mango behind a leaf is a leaf.

Anjali Prasad, who runs the firm, had to decide by that evening. The distributor's van to the districts left Monday morning. The next van was in three weeks, which was after the counting chapter would have been taught.

She had three options and none of them was free.

She could ship thirty-seven cards. But a counting set missing five, seven and nine is not a counting set, and the schools had ordered it because the counting chapter starts in week two.

She could have Ramesh count all forty at full size and have the intern regenerate the three that failed. This was the option everyone in the room preferred, and it was the one Anjali distrusted, for a reason worth stating precisely. The intern's method had produced three failures in forty. Applying the same method to the three failures produces failures at the same rate. It also assumes Ramesh caught everything, and two people in the office had already disagreed about the mango, which meant the error count was not three but somewhere between three and five.

Or she could stop prompting for counts altogether. Generate one good mango, cut it out, duplicate it five times, vary the rotation and the shadow, and place them by hand in a free editor. Forty cards at roughly twenty-five minutes each is about sixteen hours. Two people, two days. Monday becomes Wednesday, which means the van is missed and a private courier is paid.

There was a second thing on the table, and it had eaten two of the intern's eleven days. The lassi cards kept coming back as milkshakes in tall American glasses with straws. He had tried thirty variations of the wording. He had tried weighting the word. He had put milkshake in the negative prompt. Nothing moved it, and he had concluded that he was bad at prompting.

He was not. Those are two different failures with two different fixes, and the eleven days had gone on treating them as one.

What actually happened

Anjali chose the composite. Two people, two days, and a private courier on Wednesday that cost six thousand rupees against a job worth about ninety.

All forty cards were correct, because a person placed each object and a person can count. The generative model did what it is reliably good at — producing one convincing mango, one convincing kite, one convincing bangle, each generated large and therefore with enough latent cells to hold real detail — and the arrangement, which is the part with a global constraint in it, was done by hand.

The lassi problem took eleven minutes. They put six steel glasses on a table in the office kitchen, photographed them on a phone, extracted a depth map and generated from that. The result was a glass anybody in Patna would recognise, because the geometry came from a real glass rather than from a caption corpus that has very little to say about lassi and a great deal to say about milkshakes.

Anjali wrote two rules afterwards and put them on the wall.

If a specification contains a number, nobody prompts for the number. The elements are generated and the arrangement is assembled.

And every proof is read at full print size, not on a screen at a size that flatters it.

The second rule was not new. It is what Ramesh had been doing for nine years and what everybody else in the building had quietly stopped doing when the work moved onto screens.

Worth arguing about

  1. The intern regenerated 'seven kites' until it looked right, and shipped eight. What is wrong with 'regenerate until it looks right' as a method for a count?

    One answer

    It selects on the reviewer's inspection rather than on the property being specified, so its error rate is the error rate of the inspection. Nothing in the generation process counts — each region of the latent settles into something plausible for its neighbourhood, with no global register tracking how many objects have been placed — so whether a card has seven or eight kites is close to random above about four objects. Regenerating until it passes a glance produces a set that passes glances, and a card that fails at full size on a table was always going to. The count has to be established by something that actually counts, which means a person placing objects.

  2. Would 'exactly seven kites, (seven:1.5), eight kites in the negative prompt' have worked? Say why in terms of the mechanism.

    One answer

    No. All three are attempts to argue with a machine that has no counter. Repeating or weighting the number scales a token vector that the model was never trained to see scaled, which mostly makes the concept spread rather than making it precise. A negative prompt moves the point the guidance pushes away from, and there is no distinct visual signature for 'eight kites' separate from 'kites', so pushing away from it pushes away from kites. A count is a global, discrete, exact constraint, and none of the available prompt controls acts on global constraints at all.

  3. The lassi glasses came back as milkshakes and no amount of rewording moved them. Why is that a different failure from the wrong count, and what fixed it?

    One answer

    The count failure is a mechanism problem: the model has the concept and no way to enforce a quantity. The lassi failure is a coverage problem: the caption corpus the model learned from has thin and mostly wrong material for that object, so the nearest well-covered thing is a milkshake, and specifying harder only adds adjectives on top of the wrong object. The distinction is between 'underspecified' and 'not there'. Coverage gaps are fixed by supplying the thing rather than a word for it — a reference image, a depth map, or a small fine-tune. Six glasses on a kitchen table and a phone took eleven minutes and moved the model further than two days of wording had.

Test yourself6 questions on this modulePractice. Nothing is recorded and no score is kept.
  1. 1

    Requests for one, two or three objects return the right number almost always; five is a coin toss and eight is random. What explains the cliff?

  2. 2

    'A room with absolutely no elephant in it' returns an elephant a noticeable share of the time. Why?

  3. 3

    Image models handle 'above' and 'below' more reliably than 'left' and 'right'. What is the most likely reason?

  4. 4

    A crowd scene generated at 1024 pixels has melted faces in the background. You regenerate at 1536 and the faces are still wrong. Why did the larger size not fix it?

  5. 5

    A generated room contains a mirror, and the mirror shows a plausible room that is not the room in the picture. Which statement identifies the mechanism?

  6. 6

    A relational prompt places two objects correctly about one time in three, so you keep regenerating. Why is that the worst possible kind of feedback?

Module 4

9 lessons · 74 min

Control: getting the picture you actually need

Prompting produces a starting frame; control produces a deliverable. This block covers the mechanisms that let you decide rather than hope — the denoise strength that governs how much of an existing image survives, masked regeneration and its context window, structural conditioning maps, small fine-tunes trained on your own material, the honest state of character consistency, what an upscaler invents, why compositing is still the job, and the free toolchain that runs all of it on ordinary hardware.

By the end you can

Take a nearly-right generation to a finished deliverable using the appropriate mechanism at each stage — denoise strength, masked regeneration, a conditioning map, a small fine-tune, an upscaler and a manual composite — and say which of those a given defect requires

  1. 29Editing what you already have8 minPrompting gets you a starting frame; masks, denoise strength and structural inputs get you a finished image.
  2. 30Denoise strength: the number that decides how much survives8 minImage-to-image adds noise to an existing picture and denoises from there, so the strength value sets how far back along the schedule you start and therefore how much of the original can survive.
  3. 31Masks, feathering and the context window8 minMasked regeneration replaces only the masked latent while conditioning on the surrounding pixels, so what the model can see around the mask determines whether the repair matches.
  4. 32Conditioning on structure: depth, edges and pose9 minA control network injects a spatial map into the denoising loop at every step, fixing geometry while leaving content and style to the prompt, and each map type constrains a different thing.
  5. 33Teaching it something it does not know9 minA small fine-tune such as a LoRA adjusts a low-rank correction to the model's weights from a few dozen images, which is the only reliable way to add a subject, style or object the base model has no coverage for.
  6. 34The same face twice8 minCharacter consistency has no exact solution because nothing in the pipeline stores an identity, so the working methods all trade fidelity, effort and flexibility against each other.
  7. 35What an upscaler invents8 minUpscaling adds plausible detail rather than recovering real detail, so it improves photographs and fabricates evidence, and the distinction matters most in exactly the cases people reach for it.
  8. 36Compositing is still the job8 minGenerated elements assembled by hand in an ordinary editor beat single-pass generation for anything that must be exact, which is why the finishing skill matters more than the prompting skill.
  9. 37What runs on the machine you have8 minLocal generation is possible on modest hardware through quantisation, smaller models and tiled processing, so the choice between hosted and local is a real one rather than a matter of budget alone.
Case studySixty old product photographs and a trade fair in nine daysA knitwear exporter in Ludhiana, deciding whether to upscale a 2011 photo archive or reshoot itRead it

Harbans Knitwear has been selling cardigans and pullovers to domestic wholesalers for thirty years. Gurpreet Sandhu, who runs it now, had nine days until a trade fair in Delhi and no catalogue.

What he had was the website his cousin built in 2011: sixty product photographs, six hundred pixels on the long edge, shot against a bedsheet. On a phone they look acceptable. At A4, which is about two and a half thousand pixels wide at print resolution, they are unusable.

Reshooting meant pulling sixty garments out of the warehouse, two days of a photographer at Ludhiana rates, and the packing staff working around it in their busiest month. It also meant discovering that eleven of the sixty styles had been discontinued and no longer existed in the building or anywhere else.

The design studio he hired proposed something cheaper. They ran the six-hundred-pixel files through a generative upscaler and sent back sixty images at print size, sharp, clean and convincing. The quote for the whole catalogue dropped by about two-thirds.

Meena Kaur, who has run production for eleven years, opened one at full size and said the stitch was wrong.

The original photograph showed a cable-knit cardigan at six hundred pixels, where the cable is a grey suggestion of texture rather than a countable pattern. The upscaled version had a clean, confident, entirely plausible cable — with a different repeat, a different rope width and a different crossing rhythm from the cable the factory actually knits. The button had become a different button. The cuff rib had become a deeper rib than the garment has.

Gurpreet's first instinct was that this did not matter much, and it is worth sitting with why, because it is the instinct most people have. The picture looked better. It looked more like a good cardigan than the original did. Nothing in it was ugly or obviously wrong.

Meena's objection was commercial rather than aesthetic. A buyer at a trade fair points at a photograph and orders four hundred pieces against a style number. If the photograph shows a cable the factory does not knit, the shipment that arrives is not the one that was ordered, and a buyer who has to explain that to their own customer does not come back.

So the decision had a real cost on both sides, nine days out.

Shipping the upscaled catalogue meant a book that looked better than anything Harbans had ever printed, delivered on time and within budget, carrying sixty photographs of garments that were slightly not the garments. Reshooting meant thirty-five thousand rupees, a day and a half the packing bay could not spare, eleven styles with no photograph at all, and a catalogue that would look plainer than the competition's on the next table.

Meena proposed a test before anyone decided. It took forty minutes.

She took one cardigan that still existed, photographed it properly on the shop floor, and downscaled her own photograph to six hundred pixels. Then she ran that through the same upscaler and laid the result beside the real photograph at full size.

Eight visible differences. Four of them were on things a buyer specifies in an order: the stitch repeat, the rib depth at the cuff, the button, and the woven label, which had come back with confident lettering that was not the company's name.

That settled it, and it settled it with evidence rather than with an argument about whether AI is trustworthy.

What actually happened

They reshot the forty-nine styles that still existed, in a day and a half, in the packing bay. A grey paper sweep, two windows, a bedsheet clipped over one of them as a diffuser and a tripod. The photographer they had quoted was not needed for a garment flat-lay, and Meena took most of them herself.

The eleven discontinued styles went into the catalogue at the size the old photographs honestly supported — a seventy-millimetre square on the page, captioned as archive images of styles no longer in production — rather than enlarged to fill a page with detail nobody could order.

Generative tools did not leave the job. They moved to where they invent nothing a buyer can specify. Each new photograph went through an image-to-image pass at a denoise strength of about zero point two, which unified the light across two days of changing weather without moving a single edge. Each button got a masked detail pass, generated at the model's native resolution inside a tight crop and scaled back, which is where the detail the original frame could not hold actually came from. And the backgrounds were cleaned with masked regeneration rather than by hand.

The difference between those passes and the upscale is not the technology. It is that a buyer cannot order a background, and can order a cable.

The catalogue went to the fair. Gurpreet has since had the same conversation with two other suppliers who were offered the cheap version, and the round-trip test — photograph it properly, shrink it, upscale it, compare — is what he shows them, because it takes forty minutes and ends the argument.

Worth arguing about

  1. Upscaling a generated landscape is uncontroversial and upscaling the cardigan was not. What is the distinction, stated precisely?

    One answer

    An upscaler is a plausibility engine, not a recovery engine: it produces the detail that most often appeared where a smudge of that shape appeared in its training data. For a generated landscape, invented detail is no less legitimate than the rest of the picture, because nothing in it is a claim about a real object. The cardigan photograph is a representation of a specific garment that a buyer will order against a style number, so invented detail is a false statement about a product. The same operation is finishing in one case and fabrication in the other, and the difference is whether anything outside the file is supposed to match it.

  2. Why was Meena's round-trip test more useful than the studio and the factory arguing about whether the upscaled images looked right?

    One answer

    Because it produced a ground truth. Looking at an upscaled image tells you whether the invented detail is plausible, which it always is — plausibility is what the model optimises. Shrinking a known photograph and upscaling it back gives you the real garment and the model's guess side by side at the same size, so every difference is a measured error rather than a matter of taste. It is the same move as running an image through an autoencoder and straight back out to see the pipeline's ceiling: construct a case where you already know the answer, then see what the tool says.

  3. They ran a generative pass over the new photographs anyway, at a denoise strength of about 0.2, and a masked detail pass on every button. Why is that acceptable when the upscale was not?

    One answer

    Because of what each operation is allowed to change. A denoise strength around 0.2 starts the loop near the bottom of the schedule, so shapes and identity survive intact and only surface finish and lighting move — which is exactly the inconsistency two days of changing daylight produced. A masked detail pass regenerates a small region at the model's native resolution while conditioning on the surrounding real pixels, so the button is rendered with the cells it needs from a photograph that actually contains that button. Neither invents a specification. The upscale, by contrast, was asked to produce detail that was never captured at all, and it obliged.

Test yourself6 questions on this modulePractice. Nothing is recorded and no score is kept.
  1. 1

    You set an image-to-image pass to 30 steps and a strength of 0.4, and it finishes much faster than a fresh generation at 30 steps. Why?

  2. 2

    You inpaint a face in a large photograph and it comes back lit from the wrong side. What is the most likely cause?

  3. 3

    Inpainting a small face in a wide shot produces dramatically more detail than the same face did in the original generation. What makes the difference?

  4. 4

    You condition on a canny edge map of a photograph and prompt for an oil painting. The result is a photograph with paint texture over it. What should you change?

  5. 5

    A LoRA trained on twenty-five photographs of a person reproduces the face well and always puts the same bookshelf behind them. What went wrong in the training set?

  6. 6

    A low-resolution security camera frame is run through a generative upscaler and a recognisable face appears. What has the upscaler produced?

Module 5

11 lessons · 89 min

Time and space: video and three dimensions

Adding time to a generative model changes the arithmetic and adds a whole class of failure. This block covers why a second of video costs what it costs, the mechanisms that hold a moving picture together and the ones that let it flicker, how motion and camera are conditioned, why clips drift as they lengthen, how a talking head is made and what consent it requires, how to test a claim that a model understands physics, how to evaluate a video model honestly, what synthetic video means for believing anything, and the separate world of generated three-dimensional objects.

By the end you can

Explain why generated video is short, expensive and inconsistent in terms of its underlying mechanism, design a fair test of a video model's claims, and say what a generated 3D asset is actually made of and where it can and cannot be used

  1. 38Video, and what it still cannot do8 minVideo models produce shots, not films; plan the edit and budget for the takes you throw away.
  2. 39Why a second of video costs what it does8 minVideo generation is not image generation repeated, because the model must attend across frames as well as within them, so cost rises faster than the frame count and memory becomes the binding limit.
  3. 40What holds a moving picture together8 minConsistency across frames comes from temporal attention over a limited window, so anything that must persist longer than that window has no mechanism keeping it stable.
  4. 41Conditioning a clip: stills, frames and video in8 minA video model can be anchored by a first frame, a last frame, a full input video or a reference image, and each conditioning route constrains a different thing and fails differently.
  5. 42Directing motion, and what actually lands8 minCamera and motion instructions work only where the training captions contained consistent film vocabulary, so standard shot language lands and invented descriptions do not, and explicit trajectory conditioning beats both.
  6. 43Why clips get worse as they get longer8 minExtending a clip by conditioning each chunk on the previous one accumulates error, because each chunk's small imperfections become the ground truth for the next.
  7. 44Talking heads, lip sync and the consent line9 minA talking-head system drives face and mouth motion from an audio track, which makes convincing video of a person saying words they never said cheap, and the only real control on it is consent recorded before the fact.
  8. 45Testing a claim that it understands physics8 minClaims that a video model has learned physics should be tested with occlusion, conservation and causal-order cases, because local plausibility over a few seconds is achievable without any physical model at all.
  9. 46Testing a video model honestly8 minA demonstration reel is selected output, so judging a video model requires a fixed prompt battery, a stated number of attempts per prompt, and a usable-shot rate rather than an impression.
  10. 47What synthetic video does to believing anything8 minThe main effect of convincing synthetic video is not that fakes are believed but that real recordings can be denied, so the useful response is provenance and verification rather than detection.
  11. 48Generated objects and the space around them8 minGenerated 3D comes in two incompatible forms — meshes you can edit and animate, and radiance representations you can only view — and confusing them wastes a great deal of time.
Case studyThirty shots, one launch reel, and a bid due on FridayA three-person video house in Ahmedabad, deciding whether to bid a co-operative bank film as generated workRead it

Brightbox is Nilesh Trivedi, an editor and a junior. They make corporate films for banks, hospitals and two engineering firms, mostly two to four minutes, mostly shot.

A district co-operative bank invited them to bid on a two-minute film explaining a new micro-loan product, to run on branch televisions and to be forwarded on WhatsApp. Budget two lakh forty thousand rupees. Done the usual way that is a two-day shoot, a small crew, two hired actors and a location fee, and about a lakh eighty of the budget is committed before anybody opens an edit timeline.

Riya, the junior, had watched a video model's launch reel the week before and proposed generating the whole film. Twenty thousand rupees of credits, no crew, no location, no actors. The margin was the entire argument and it was a good one.

Nilesh's objection was not that it would not work. It was that nobody in the room knew the hit rate, and a launch reel cannot contain that number. Every clip in a reel is real output. It is also the survivor of an unknown number of attempts, chosen by people whose job is to choose well, on prompts selected because they produced something.

It was Tuesday. The bid was due Friday.

Option one was to bid on the strength of the reel. Two lakh forty, a healthy margin, and find out during production whether the shots the bank actually needs are shots this model can make.

Option two was to spend Wednesday and about nine thousand rupees of credits measuring it, and bid on Thursday with a number. The cost of that is specific: two of the three days before the bid go into a test rather than into the treatment and the storyboard, and a competing production house on the second floor of the same building was bidding on the same job.

The shot list decided it, or rather the shot list made the question answerable. The bank's film needed a farmer signing a form, which is hands on paper. Two people talking across a counter. A branch board with the bank's name legible. A scooter arriving at a gate. And the same woman appearing in four separate shots across the film, because she is the borrower the story follows from application to first instalment.

Every one of those is a known weak spot, and Nilesh knew that in general. Hands at the point of contact with an object are where the model's learned appearance of a gesture stops matching what a gesture is. Legible text in video is roughly where image models were in 2022. A character who must be recognisably the same person in shot one and shot nine has no mechanism keeping her the same, because nothing in the pipeline stores an identity. He could have recited all of that on Tuesday afternoon.

What he could not recite was the rate, and the rate is the only thing a bid needs. Knowing that hands are hard tells you to expect trouble. Knowing that hands come back usable one time in twelve tells you whether to put them in the quote, and knowing that they come back usable zero times in twelve tells you the shot does not exist at any budget.

There was also a number underneath the whole argument that Riya had not included in her twenty thousand rupees. List prices are quoted per generated second, and what a production actually spends is the cost per second it can use. At a one-in-eight hit rate — which is ordinary once a shot has a specific requirement attached to it rather than being pretty — an eight-second clip listed at two hundred rupees has really cost sixteen hundred, plus the hour of somebody's attention spent watching seven failures. Teams that budget for the keeper run out of money somewhere around shot four of thirty.

They ran the test.

What actually happened

They fixed ten prompts before generating anything: a person walking toward camera, two people talking with one gesturing, hands performing a task, a slow dolly on a static object, an animal moving quickly, water, a vehicle crossing frame, legible text on a sign held in shot, an object passing behind another and re-emerging, and a specific action with a first and last frame supplied. Four attempts each. Forty clips, a little over nine thousand rupees, about five hours including the waiting.

Before they looked at anything, Riya wrote the scoring rule on a sheet of paper: usable means a shot I would put in a paying client's edit without an apology. Usable or not usable. No middle category, because the middle category is where people talk themselves into a clip.

Six of forty.

The average was not the useful part. The distribution was. Slow dolly on a static object: four of four. Water: three of four. Vehicle crossing frame: two of four. Hands on paper: zero of four, every attempt. Legible signage: zero of four. The same person across separate shots: the face changed every time, so the count was zero before they discussed it.

That is three of the five things the film needed, at a rate of nothing, and no amount of budget for retries changes a zero.

They bid two lakh twenty for a hybrid, and the treatment named which shots were which. A half-day shoot at a real branch with two bank staff who volunteered covered the seven shots involving hands, faces and signage, which cost about forty thousand including the day. Twelve atmosphere shots were generated: a field at dawn, a market, traffic, a shutter going up, none of them containing a face anyone had to recognise or a word anyone had to read. Six more shots were stills with a keyframed crop moving across them, which cost nothing, never drift and are exact.

They won. The bank's marketing officer said afterwards that the competing bid was three pages of adjectives and theirs was a shot list with a method against each line.

The forty clips are still on a disk. When the model released a new version in November, Riya ran the same ten prompts again in an afternoon and the number moved from six to eleven, which is the only way either of them would believe it had improved.

Worth arguing about

  1. Every clip in the launch reel was genuine output from the model. Why is the reel still uninformative for a bid?

    One answer

    Because it is selected on two axes the viewer cannot see: how many attempts produced each clip, and which prompts were tried at all. A model with a one-in-twenty hit rate and a model with a one-in-two hit rate produce identical reels, and a reel will not contain the prompt that never worked. The number a bid needs is a usable-shot rate on prompts chosen by the buyer, and no reel can carry it. That is not dishonesty on the vendor's part; it is a structural property of showing chosen output.

  2. Riya wrote the definition of 'usable' down before generating anything, and allowed no middle category. Why do both of those matter?

    One answer

    Writing it first stops the standard moving to fit the results, which it does silently once effort and money have been spent. Refusing a middle category forces each clip to be counted as something, and the middle category is where a clip that would need an apology in a client edit gets recorded as nearly fine. Together they turn an impression into a rate that is comparable across models, across months and against anyone's claim. It is the same discipline as fixing a test set before looking at it.

  3. Hands on paper and legible signage scored zero of four. Should they have spent a day writing better prompts for those shots?

    One answer

    No. Both are global, exact constraints — a hand has a correct number of fingers in a correct arrangement, and a sign has a correct sequence of letters — and the model is strong on local plausibility and weak on constraints that can only be checked by taking in the whole frame. Prompt wording acts on what concepts are present, not on whether a global constraint holds. A rate of zero over four attempts is a signal to change the method rather than the words: shoot those shots, or supply the structure another way. They shot them, in half a day, for about forty thousand rupees.

Test yourself6 questions on this modulePractice. Nothing is recorded and no score is kept.
  1. 1

    A five-second clip at 24 frames per second is 120 frames, and it costs far more than 120 images. Where does the extra cost come from?

  2. 2

    Video models offer frame counts like 49, 81 and 121 rather than round numbers. What sets those figures?

  3. 3

    A character's jacket keeps its buttons for four seconds and changes at five. Which explanation fits?

  4. 4

    You supply a first and a last frame and the model produces a morph in which the objects melt into one another rather than a movement. What does that tell you?

  5. 5

    You build a thirty-second clip by generating six chunks, each conditioned on the last frames of the previous one. By chunk five the contrast has crept up, faces have regularised and the scene has reorganised. What is the best correction?

  6. 6

    A client wants a generated 3D asset of a product that will be animated and eventually 3D printed. Why is a Gaussian splat capture the wrong answer however good it looks?

Module 6

9 lessons · 73 min

Voice and speech

Speech is the medium where synthesis became convincing first and where the consequences are sharpest. This block covers how a synthetic voice is actually produced, what a voice print is and why a few seconds of audio is enough, why synthetic speech still sounds flat and what fixes it, how uneven the coverage of languages and accents is, the recognition half of the pipeline and where it fails, what breaks in a dubbing chain, why detecting a synthetic voice is harder than people assume, and the fraud pattern that every organisation should already have a control for.

By the end you can

Describe the path from text to a waveform through tokens, an acoustic model and a vocoder, judge what a voice-cloning claim requires in consent and disclosure, and specify a verification control that defeats voice-impersonation fraud without relying on detection

  1. 49Voice, and the line you do not cross9 minClone a voice only with the owner's informed, written, revocable consent — and tell the audience before they believe it.
  2. 50From text to a waveform8 minModern speech synthesis converts text into discrete audio tokens with a language model and turns those tokens back into sound with a neural codec, which is why it now sounds natural and why it hallucinates.
  3. 51What a voice print actually is8 minA speaker embedding is a few hundred numbers summarising vocal identity, extracted from seconds of audio and used as conditioning, which is why cloning is fast, cheap and effectively impossible to prevent.
  4. 52Prosody, and why it still sounds slightly wrong8 minProsody carries meaning that the text does not, so a system given only text has to guess the interpretation, and its guesses are wrong in ways that are subtle and cumulative.
  5. 53The languages it does badly, and who that is8 minSpeech systems inherit the distribution of their training audio, so quality varies by orders of magnitude across languages and accents, and the gap falls on exactly the people least able to route around it.
  6. 54The other half: turning speech into text8 minRecognition models are trained to produce plausible transcripts, so they fail by writing fluent text that was not said, which is more dangerous than failing by writing nothing.
  7. 55The dubbing chain, and where it breaks8 minA dubbing pipeline is four error-prone models in series, so errors compound and the only reliable control is a human check at each stage rather than at the end.
  8. 56Can you tell? Mostly not8 minSynthetic-speech detection relies on artefacts that compression and re-recording destroy and that new models do not produce, so detection is a weak signal and the practical defence is verification instead.
  9. 57The fraud that already happens8 minVoice-impersonation fraud follows a fixed script — urgency, authority, secrecy, an irreversible payment — and the control that defeats it is an out-of-band check, which works regardless of how convincing the voice is.
Case studyThe voice that opened the accountA co-operative credit society in Kolhapur, after a member's voice from a public meeting was used on its telephone lineRead it

The Sahakari Patsanstha in Kolhapur has about nine thousand members. A large number of them are farmers and retired mill workers, and a meaningful number have no smartphone at all.

In 2023 the society added voice verification to its telephone line. A member calls, speaks a short passphrase, a speaker-verification system compares it against an enrolled sample, and a clerk can then read a balance, discuss a loan instalment or accept a change to a standing instruction. Complaints about the phone line fell by roughly two-thirds inside a year. The manager, Prakash Kulkarni, considered it the best thing the society had done for its older members in a decade.

In March a member in Ichalkaranji discovered that his balance had been read out to someone, his registered mobile number had been changed, and two transfers totalling one lakh forty thousand rupees had left the account over the following week.

The member had not called. His son had not called. What had happened was simpler than anyone expected. The member had spoken for about ninety seconds at a co-operative federation's annual meeting the previous year, and the video was on a Facebook page with four hundred followers.

A speaker embedding — a few hundred numbers summarising vocal identity — can be extracted from a few seconds of clean speech and used to condition a speech model directly, with no training run at all. Ninety seconds of a man speaking clearly into a microphone at a public meeting is not a marginal sample. It is a good one.

The society recovered about forty thousand rupees and wrote off the rest.

At the board meeting in April there were two proposals.

The first was to remove voice verification entirely and go back to one-time passwords. This is the safe-sounding answer and it has a real cost. The OTP flow is what produced the complaints in the first place. Around six hundred members have no smartphone, and for a farmer eleven kilometres out during the monsoon, being told to come to the branch to change a mobile number is not a minor inconvenience.

The second came from a younger director who had been approached by a vendor. A synthetic-speech detector, one lakh ten thousand rupees a year, quoted at ninety-six per cent accuracy. It preserved the service and it addressed the attack directly.

Prakash's nephew, who works in software in Pune, was at the meeting because he had driven his uncle there. He asked for the whiteboard and did an arithmetic problem that took four minutes.

Suppose one call in a thousand uses a cloned voice, which is generous. The society takes about ten thousand calls a month. That is ten fraudulent calls, of which a ninety-six per cent detector catches about ten. It also examines nine thousand nine hundred and ninety genuine calls and flags four per cent of them, which is about four hundred.

Four hundred members a month, most of them elderly, most of them people for whom the telephone line is the only route into their own money, treated as suspected impostors, so that ten fraudulent calls are caught.

The room went quiet, the director said the vendor had not mentioned that, and the nephew said the vendor would not have, because the ninety-six per cent is a true number and the four hundred is what the true number does at this base rate.

What actually happened

The board took neither proposal.

Voice stopped being authentication and became convenience. A member may still speak the passphrase and be greeted by name, and the clerk may still discuss a balance. But nothing that moves money and nothing that changes a contact detail happens on the strength of that call. A payment instruction or a standing-instruction change is confirmed by the clerk calling back on the number already held on file — not the number that called — and a change to the registered number itself is done at the branch, in person, with the passbook.

The rule went onto a laminated card at every clerk's desk. The sentence Prakash considers most important on that card is the last one: a clerk who declines to act on a telephone instruction is following society policy and will not be questioned for it. The March incident had been processed by a clerk who thought the caller sounded impatient and did not want a complaint about him.

They also sent a printed note to every member about the other kind of call — the grandchild in hospital, the urgent transfer, the request not to tell anyone — suggesting a family word agreed in person, never sent by message, and making the point that hanging up to call back is a normal and reasonable thing to do. Eleven months later two members reported exactly that call. Both hung up. Neither lost anything.

The detector was not bought. The director who had proposed it now does the base-rate arithmetic himself before buying anything, and has said so more than once, with some feeling, about a different vendor.

Worth arguing about

  1. Ninety seconds of a man speaking at a public meeting was enough. What does that imply about advising members to protect their voices?

    One answer

    That the advice cannot work as a defence. Cloning is zero-shot: a speaker encoder produces a vector of a few hundred numbers from a short clean sample, and that vector is used as conditioning at generation time with no training run. Three to thirty seconds is the working range, and quality of the sample matters far more than length. The amount required is below the threshold of ordinary social participation — a voicemail greeting, a video, a recorded meeting — so nobody can withhold it. Advice about reducing the sample surface is marginal. The control that works removes the value of the clone by ensuring nobody acts on a voice alone.

  2. The detector was quoted at ninety-six per cent accuracy, and the nephew's arithmetic produced four hundred flagged members a month. Explain where those four hundred come from.

    One answer

    From the base rate. Accuracy is a rate per call, and the number of errors it produces depends on how many calls of each kind there are. With one fraudulent call in a thousand, ten thousand monthly calls contain about ten fakes and about nine thousand nine hundred and ninety genuine calls. A four per cent false-positive rate applied to the large group is about four hundred people, against about ten correct catches from the small one. The detector is working exactly as specified; the rarity of the event swamps a good error rate. This is why any screening system for a rare event needs a confirmatory step rather than a decision.

  3. Why does the card say that a clerk who declines will not be questioned, and why is that sentence load-bearing rather than decorative?

    One answer

    Because the attack works on social pressure, not on technology. The fraud script is urgency, authority, secrecy and an irreversible transfer, and the authority element is aimed precisely at making refusal feel costly to the person answering the phone. A policy that a clerk is technically allowed to invoke but will be blamed for invoking is not a control. Naming refusal as the safe option converts declining from an act of individual courage into compliance, which is the only version that survives a caller who sounds impatient and senior.

Test yourself6 questions on this modulePractice. Nothing is recorded and no score is kept.
  1. 1

    A synthetic narration inserts a word that was not in the script, and occasionally trails off into unrelated babble. Which property of the architecture predicts that?

  2. 2

    Cloning a voice from a short sample takes seconds and produces no file that is recognisably a copy of anyone. What is actually happening?

  3. 3

    An automatic transcript of a long interview reads perfectly and contains a sentence nobody said. Why is that failure more dangerous than the older kind?

  4. 4

    An automatic dubbing pipeline delivers a fluent, well-timed Portuguese track in which a speaker's name is wrong throughout. Where is the highest-value place to intervene?

  5. 5

    A helpline takes 10,000 calls a month, about ten of which use a cloned voice. A detector accurate 95 per cent of the time in both directions is deployed. Roughly what happens?

  6. 6

    Which single control defeats voice-impersonation fraud regardless of how convincing the clone becomes?

Module 7

9 lessons · 73 min

Music and sound

Music is the medium where the technical problem and the legal problem are hardest at the same time. This block covers how audio is generated at all, why music is harder than speech, what source separation makes possible, where generated sound effects are genuinely good, the state of the training-data dispute, when a melody becomes infringement, what platforms do about generated tracks, and where generated music is the right answer rather than the cheap one.

By the end you can

Explain how a music model represents and generates audio, judge whether a generated track carries a real infringement risk and on what basis, and choose between generated music, licensed library music and a commissioned composer for a specific brief with reasons you could defend

  1. 58Music, and whose music it learned from8 minGenerated music can still infringe a real melody, and "a model wrote it" is not a defence.
  2. 59How a machine writes a waveform8 minMusic models generate stacks of discrete audio tokens produced by a neural codec, so the codec's bitrate sets the ceiling on quality and the token rate sets the cost of length.
  3. 60Why music is harder than speech8 minMusic requires structure over minutes and simultaneous independent voices, both of which fall outside a model's attention window and neither of which local plausibility supplies.
  4. 61Pulling a mix apart8 minSource separation splits a finished mix into instrument stems with free tools at usable quality, which enables real work and does not change the rights position of the recording at all.
  5. 62Sound effects, foley and where it is already good8 minGenerated sound effects are at production quality for many categories because a sound effect is short and unstructured, which is exactly the regime these models handle well.
  6. 63Whose music it learned from9 minThe music industry's dispute over training data is further advanced than in any other medium, and it has produced both litigation and licensing, which makes the shape of the disagreement unusually visible.
  7. 64When a tune becomes somebody else's8 minMusic infringement can turn on a few seconds of melody, the standards are inconsistent and unpredictable, and "a model generated it" is not a defence anywhere.
  8. 65What platforms do about it8 minDistribution platforms enforce their own rules on generated music through matching systems and upload policies, and those rules bite faster and harder than any court would.
  9. 66When generated music is the right answer8 minGenerated music competes with library music rather than with composition, so the honest choice depends on whether the music needs to be specific, and saying which is which protects both your work and your relationships.
Case studyThe theme that sounded like somethingA Malayalam cooking channel in Kochi, four days before a twelve-episode season goes liveRead it

Ruchi Vibes has three hundred and forty thousand subscribers and a house style: a home kitchen, one cook, no studio lighting. Twelve episodes of the new season were shot, cut and graded, with a launch on Monday.

The title theme was eight seconds under the card, with a longer version used as a bed under the recipe segments. Jomon, a musician in Thrippunithura who had written the previous two seasons, quoted twenty-eight thousand rupees for a theme and three stings. The producer, Deepa Menon, said no, and the editor, Fahad, generated a theme in an afternoon from a text description.

It was good. It was catchy in the specific way a title theme has to be, which is that you can hum it after hearing it twice.

On Thursday, four days out, Deepa's mother heard it from the next room and said it was from a film. She could not name the film. Fahad said he had never heard it before in his life, which was true and not relevant. Two people in the office said it reminded them of something and two said it did not.

The decision had to be made that day, because Fahad was colour-grading for the rest of the week.

Launching meant going out with a hook that four people had split evenly on. If it turned out to be close to an existing melody, the consequence would not arrive as a lawyer's letter. It would arrive as an automated content match on the video platform, on every episode at once, with the revenue redirected to whoever registered the recording while the channel argued with a queue.

Changing it meant re-rendering twelve episode openers and thirty-six segment transitions, about a day and a half of the only editor's time in a week that had no day and a half in it, plus either paying a rush rate to Jomon with four days' notice or generating something else and having the identical conversation about that.

Fahad's position, argued with some heat, was that a model had made the melody, that he had never knowingly heard the film song anybody was vaguely gesturing at, and that a generated tune cannot be somebody else's tune because nobody wrote it.

Deepa did not know enough to answer that properly and she knew she did not. What she did know, from a year of running a channel on a platform, was that the question of who wrote it and the question of what would happen on Monday were not the same question and might not have the same answer.

There is a reason the risk concentrates on exactly this eight seconds. Popular film melodies appear in training data many times over — the original recording, covers, live versions, karaoke tracks, reaction videos, tutorials, and hundreds of hours of other people's content with the song playing underneath. That is the duplication pattern that produces something close to reproduction rather than something merely in the same idiom. A hook is also short, which is the length at which music infringement is actually litigated, and memorable, which is the property a title theme is chosen for. The channel had asked for the most dangerous possible thing and had been delighted when it arrived.

There was a third cost that did not appear on any spreadsheet. Jomon had written the last two seasons and had not been told the channel was generating this one. He would hear the theme on Monday like everybody else, in a city where the people who do this work all know each other.

What actually happened

Deepa spent an hour on it and did three separate things.

She hummed the hook into the query-by-humming feature of an ordinary music app. It returned nothing conclusive, which she correctly treated as no evidence rather than as a clearance.

She sent the eight seconds to four people who had not heard it, with no context beyond asking what it reminded them of. Three named the same 2007 film song. When she found that song, the first four notes of the phrase and its rhythm lined up. Not the whole melody, and enough.

Then she checked the thing that actually decides what happens to a channel. The film's label had the recording registered in the platform's audio matching system. A sufficiently close match on twelve simultaneous uploads would be handled by software, applied immediately, and appealed into a queue, and the season's opening week is where a season's revenue is.

She changed it.

Fahad generated new material for the segment beds — ambient and textural, no hook, nothing anyone could hum — because that is the regime where generated audio is genuinely strong and where there is no melody to be substantially similar to anything. Those took an afternoon and carried no risk worth the word.

For the eight-second title theme she called Jomon and paid him twelve thousand rupees for the theme alone, without the stings. He wrote it in two days. She told him, unprompted, that the beds were generated, what the licence permitted and what it had cost. He said he would much rather be told than find out, and that library music had been taking that work from him for fifteen years before any of this.

The openers re-rendered overnight. The launch did not move.

What Deepa took from it, and now applies as a rule, is a distinction rather than a position. Where the music has to be memorable, it is worth paying a person, because memorability is exactly where generated music is weakest and where infringement risk is concentrated. Where the music only has to be appropriate, generation is competing with library music rather than with a composer, and it wins on cost and on fitting the cut exactly.

Worth arguing about

  1. Why did Deepa treat the eight-second title theme as risky and the segment beds as not, when both were generated by the same tool on the same afternoon?

    One answer

    Because infringement in music turns on the composition, and a composition claim needs a melody to be substantially similar to. A hook is a melodic figure short enough and distinctive enough to be compared with another one, and popular hooks are exactly the material that appears many times over in training data — the original, covers, karaoke versions, background in other videos — which is the duplication pattern that produces near-reproduction. Ambient, textural material has no melodic line to compare, so the risk is close to nil. The risk is not evenly spread across generated audio; it concentrates precisely where memorability lives.

  2. Fahad had genuinely never heard the 2007 song. Why does that not help?

    One answer

    Because liability for publishing an infringing work falls on the publisher, and the usual defence of independent creation is hard to run when the model was trained on the catalogue containing the original. 'A model generated it' is not a defence in any jurisdiction. Access and substantial similarity are assessed on the output and the training corpus, not on what the operator personally remembers hearing. Fahad's innocence is real and it is about his state of mind, which is not the question a claim asks.

  3. She checked the platform's matching position separately from the question of whether it actually infringed. Why is that a distinct question and the more urgent one?

    One answer

    Because the platform's system decides first and asks later. Audio fingerprint matching is automatic, applies the rights holder's chosen policy immediately across every upload at once, and is appealed into a queue rather than to a person. A track can be matched without a court ever agreeing it infringes, and a track can infringe without ever being matched. For a channel whose revenue is concentrated in a launch week, the operative constraint is the contractual and automated layer, not the legal one, and it bites far faster.

Test yourself6 questions on this modulePractice. Nothing is recorded and no score is kept.
  1. 1

    You want to know the best audio quality a music model can ever produce, before judging any of its output. What do you do?

  2. 2

    Speech synthesis became convincing before music did, even though speech carries meaning and music does not. What best explains the order?

  3. 3

    You separate a commercial recording into stems with free software and use the isolated vocal in a track you publish. Which statement is accurate?

  4. 4

    Generated sound effects are production-ready for many categories while generated songs are not. What property of a sound effect accounts for that?

  5. 5

    Major labels sued the largest music-generation companies in 2024 over training data, and by late 2025 the disputes were moving toward licensing arrangements. What does that leave you with?

  6. 6

    You publish twelve videos carrying a generated theme that turns out to resemble a registered recording. What happens first, in practice?

Module 8

8 lessons · 65 min

Provenance, detection and disclosure

If you cannot tell by looking, the question becomes what can be established and how. This block covers why detection is structurally weak, what a watermark can and cannot survive, how cryptographic content credentials work and where the chain breaks, how to verify a claim rather than an image, the second-order harm of universal doubt, how to write a disclosure that actually informs somebody, what the platforms currently require, and a verification routine borrowed from newsrooms that anybody can run.

By the end you can

Assess an image or clip of unknown origin using provenance, source and corroboration rather than inspection, explain why a detector's positive result is a weak signal at realistic base rates, and write a disclosure that tells a reader what was synthetic and what was not

  1. 67Why detection is the wrong hope8 minDetectors learn the fingerprints of the generators they were trained on, so they degrade on new models, on compressed files and at realistic base rates, which makes their output a signal to investigate rather than a verdict.
  2. 68What a watermark can survive8 minAn invisible watermark embeds a signal robust to ordinary handling, which makes it a useful record of compliant generation and not a defence against anyone who does not want to be marked.
  3. 69Signed provenance, and where the chain breaks9 minContent Credentials attach a cryptographically signed record of how a file was made and edited, which establishes origin rather than detecting fakery, and the chain breaks wherever a tool or platform does not carry it.
  4. 70Verify the claim, not the picture8 minAlmost every question about a suspicious image is answered by finding its earliest appearance and its source, which is free, fast and unaffected by how good the generator was.
  5. 71When everything can be denied8 minUniversal awareness that media can be fabricated lets genuine evidence be dismissed, so the second-order harm arrives without anyone needing to make a fake at all.
  6. 72Writing a disclosure somebody can use8 minA useful disclosure says what was synthetic and what was not, at the point of viewing, in the viewer's terms, which is a different thing from a legal label that protects the publisher.
  7. 73What the platforms require now8 minPlatform disclosure rules are contractual, automatic and inconsistent between services, so the practical obligation on a publisher is set by where the work is distributed rather than by where they live.
  8. 74A routine you can actually run8 minA short, written, repeatable checklist beats expertise applied inconsistently, because the failure in verification is almost always skipping a step under time pressure.
Case studyThe strongest picture on the desk at eleven at nightThe digital desk of a Marathi daily in Chiplun, during a night of flooding in the KonkanRead it

Late July, heavy rain across the Konkan for a third day. Asmita Joshi runs the digital desk of a Marathi daily with a print edition in three districts and most of its readership on a phone.

At twenty to eleven a photograph arrived on the paper's tipline: a bus submerged to the windows, a man standing on the roof holding a child, a temple spire in the background. It was the strongest image anyone had of the night. Three competing outlets were running flood coverage with nothing like it.

The sender was a number with no name. The messaging app labelled the image as forwarded many times.

The desk publishes at eleven. On a night like that one, the traffic is the month's traffic, and the paper's own district is exactly where its readers expect it to be first.

Running the picture with a line saying the paper could not independently verify it is the ordinary compromise, and on that night it was not a small thing. People in low-lying parts of Chiplun were deciding whether to move to a relative's house. An image of a bus underwater on a named road is information they would act on. If it was fabricated or misplaced, the paper would be the outlet that laundered it into the record, and a correction at nine the next morning reaches a fraction of the audience the picture does.

Holding it meant a competitor running it within the hour, the paper looking slow on its own ground, and — if the picture was real — failing to show readers something true on the night it mattered.

A reporter, Nikhil, had put the file through a detector he found by searching. It reported eighty-seven per cent AI, and he wanted to lead with that.

Asmita asked him four questions. Eighty-seven per cent of what. Trained on which generators, and is this image from one of them. What happens to that number after a photograph has been through two rounds of messaging-app compression. And at a base rate where the great majority of pictures sent to a tipline on a flood night are real photographs taken by real people, what proportion of the images this tool flags are actually generated.

She was not being clever at Nikhil's expense. She had been accused twice of running a fake and once, more damagingly, of calling a real photograph fake.

Then she ran the routine, and it took twenty minutes.

Preserve first: save the file, screenshot the message and the number, note the time it arrived and the claim being made. Write the claim in one sentence — this shows a bus submerged tonight on the Chiplun road.

Reverse image search on two services. One returned nothing. The other returned a visually similar photograph from the 2021 Konkan floods, which was a different bus on a different road, so it ruled nothing in or out.

Source: a number with no name, forwarded many times, no original poster findable. A dead end, and dead ends are findings.

Place: the temple spire was distinctive. Satellite imagery showed a temple of that shape on a road near Chiplun. Street-level imagery from 2022 showed the building beside it as a single-storey shop. In the photograph it was two storeys with a blue plastic water tank on the roof.

Time: that was the one that ended it, and it had been in front of everybody for twenty minutes. The photograph is in daylight. It had been sent at twenty to eleven at night, as a picture of that night.

What actually happened

The picture was from the 2021 flood on the same road. The building had been rebuilt in the years since and had gained a storey and a water tank, which is why the street imagery disagreed. The bus was a real bus and the water was real water, and the only false thing about it was the date it was being given.

This is the most common form of misleading media and it involves no generation at all. It survives every kind of inspection, because nothing in the pixels is fake. The detector's eighty-seven per cent was pointing at an image that no model had touched.

Asmita did not run it. The paper ran the story at ten past eleven with two photographs from its own stringer in Khed — a flooded approach road and a rescue boat, both less dramatic — and a short note at the foot explaining how images sent to the tipline are checked, with the method in it rather than an assertion of care. A competitor ran the bus picture at twenty past eleven and took it down at nine the next morning.

Three days later the other half of the problem arrived. A reader sent a genuine photograph of a collapsed retaining wall behind a new municipal building, and within a few hours supporters of a local politician were saying online that it was AI-generated. On another day that would have been unanswerable. Because the desk had the stringer's own capture with its time and place, a second photograph of the same wall from a different angle taken by a different person an hour later, and a written note of what had been established, it could publish the basis rather than the conclusion.

Asmita now keeps the routine printed and taped inside a cupboard door, and the version she teaches to reporters on their phones is only the first three steps, because those three catch most of what circulates in a group chat and take under two minutes.

Worth arguing about

  1. The detector reported eighty-seven per cent AI on a photograph that no model had touched. What does that tell you about the tool, and what does it tell you about this case?

    One answer

    About the tool: nothing surprising. Detectors learn the fingerprints of the generators in their training set, degrade sharply on anything else, and lose much of the signal they rely on to compression — and this file had been through repeated messaging-app re-encoding. At a base rate where nearly every tipline image is a real photograph, most of a detector's positives are wrong however good its stated accuracy. About the case: nothing at all. It pointed at a real photograph and would have pointed the desk away from the actual problem, which was the date rather than the pixels.

  2. Which step actually settled it, and why is that kind of step durable when inspection is not?

    One answer

    The time check — daylight in a photograph presented as tonight — supported by the place check, where street-level imagery showed a single-storey building where the photograph had two storeys and a water tank. Both depend on facts outside the file: an archive of street imagery, the position of the sun, a building that was rebuilt. None of them is affected by how good any generator becomes, so the method does not expire with a model release. Inspection-based methods are calibrated against the artefacts of current systems and are obsolete by design.

  3. Three days later a genuine photograph was publicly called AI-generated. Why did detection have nothing to offer there, and what did?

    One answer

    Because the claim being made was that a real recording was fabricated, and no detector can establish that something is real — the absence of generation artefacts, like the absence of a watermark, proves nothing. That is the liar's dividend: it costs the accuser nothing, needs no fake to exist, and cannot be answered by better detection. What answered it was provenance and corroboration: the paper's own stringer capturing the image, a recorded time and place, and a second photograph of the same wall from a different angle by a different person. Positive evidence about origin is the only thing that touches this, which is why provenance at capture matters more as generators improve.

Test yourself6 questions on this modulePractice. Nothing is recorded and no score is kept.
  1. 1

    A detector that is 95 per cent accurate in both directions is run over 100,000 images, of which about 100 are generated. Roughly what fraction of its positive results are correct?

  2. 2

    An image carries no invisible watermark from any known generator. What does that establish?

  3. 3

    A photograph arrives with valid Content Credentials showing capture by a named camera model at a stated time. What have you established?

  4. 4

    During a crisis, the single most common form of misleading imagery in circulation is not generated at all. What is it, and why does inspection miss it?

  5. 5

    Why can better detection not address the liar's dividend?

  6. 6

    An organisation adds 'this content may contain AI-generated material' to every page it publishes. What is the main cost of that policy?

Module 9

10 lessons · 88 min

Ownership, law and the parts nobody has settled

The legal questions around generative media are genuinely unresolved, differ by country, and are moving. This block sets out the shape of each disagreement rather than pretending to resolve it: whether training on copyrighted work is lawful, whether the output can be owned and by whom, what protects a person's face and voice, why style sits outside copyright, what the licence on a model actually permits, what a vendor's indemnity is worth, the disclosure duties that are already law in several places, and what to write into a contract when the law will not tell you.

By the end you can

Identify which distinct legal question a given situation raises — training, output ownership, likeness, style, model licence, or disclosure duty — describe how the answer differs across jurisdictions, and draft the contractual terms that make a piece of AI-assisted client work defensible without relying on a resolution that does not exist

  1. 75Who owns it, and who has to say it is AI12 minOwnership of AI output differs by country and is genuinely unsettled; the duty to label it is not.
  2. 76Was the training lawful?9 minWhether training on copyrighted work without permission is lawful is being answered differently in different countries and differently for different facts, so there is no single answer and any confident one is a jurisdiction or a sales position.
  3. 77Can anyone own the output?9 minMost copyright systems require a human author, so purely prompted output is unprotected in several major jurisdictions while human contribution to selection, arrangement and editing can be, and a few countries have a specific rule for computer-generated works.
  4. 78Faces, voices and the rights in a person9 minRights in a person's face and voice sit outside copyright, vary enormously by country, and are the area moving fastest in legislation, so this is where a generated work is most likely to be actionable.
  5. 79Style is not owned, and other things are8 minCopyright does not protect artistic style, so the strongest objections to style imitation have no copyright remedy, while trademark, passing off and false endorsement can reach the same conduct from another direction.
  6. 80Read the licence on the model8 minModel weights come with licences that restrict use, and outputs come with terms of service that assign or condition rights, so what you may do with a generated file is set by two documents most people never open.
  7. 81What an indemnity actually buys8 minA vendor indemnity is a conditional contractual promise with exclusions and caps, so it shifts some risk on some facts and never removes the obligation to check your own work.
  8. 82Where labelling is already the law9 minSeveral jurisdictions now impose legal duties to label synthetic content, with different triggers, timings and penalties, so the applicable rule depends on where the audience is rather than where you are.
  9. 83What to write down before you start8 minBecause the law is unsettled, the contract is what actually allocates risk in AI-assisted client work, and the terms that matter are short, specific and better raised at the start than discovered at the end.
  10. 84A procedure for the cases nobody has answered8 minWhen the law is unsettled, a written decision procedure based on recognisability, substitution, deception and reversibility produces defensible choices without needing a resolution that does not exist.
Case studyThe mark the client could not ownA four-person design studio in Delhi, in the meeting where a six-lakh identity job is being agreedRead it

Studio Sundial is Ira Bhatt and three others, working out of two rooms in Lado Sarai. The largest job they had been offered came from a two-year-old Gurugram company making a water-quality sensor for housing societies and small water plants. The company was closing a funding round and preparing to sell in the United Kingdom and the United States. They wanted a full identity: a mark, packaging, and a campaign of about forty images. The fee was six lakh forty thousand rupees, which was more than the studio had billed in the previous five months together.

The designer on the job had built the mark by generating around three hundred candidates on a hosted service, choosing one, and tidying it. The campaign images had been generated on the same service, on the studio's consumer subscription, which was what the studio had because it was what the studio could afford.

In the second meeting the founder asked the question every client asks, in the form every client asks it. We will own all of this, obviously, exclusively, everywhere.

The accurate answer is four paragraphs long and contains the words unsettled and depends on the country.

In the United States, the Copyright Office has been consistent across a series of decisions and a formal report: copyright requires a human author, prompts alone do not supply authorship however detailed or however many iterations were run, and material generated by a machine in response to a prompt is not protectable — though a human's own expressive contributions, including selection, arrangement and subsequent editing, can be. A registration for a graphic novel illustrated with generated images ended precisely there: the text and the page arrangement protected, the individual images not.

In the United Kingdom and in India there is an older provision deeming an author for a computer-generated work with no human author, being the person who made the arrangements necessary for its creation. It has barely been tested in either country, the UK has consulted on removing it, and the Indian position was left ambiguous by a registration naming an AI as co-author which the office then sought to withdraw.

In China, a court has found copyright in a generated image on the basis that the user's prompts, parameters and repeated refinement showed sufficient intellectual investment. Similar facts, opposite conclusion.

So the same mark might be unprotectable in one of the client's three markets, protected on different reasoning in another, and owned by legal fiction in the third.

Ira had to decide whether to say that, in the meeting where the fee was being agreed.

Saying yes was what every other studio the founder had spoken to had said. It is what a client expects to hear, and a long careful answer in a pitch sounds like a studio that is not sure of itself.

The cost of saying yes was not immediate and it was large. If the client registered the mark, built a brand on it and a competitor in the United States reproduced the artwork, there would be no copyright to stop them. And the founder's lawyers would read Studio Sundial's contract during funding diligence, where a warranty that the work was free of any third-party right and exclusively owned everywhere is a warranty the studio could not support.

The cost of saying the accurate thing was six lakh forty thousand rupees going to the studio that said yes.

What actually happened

She said it, in three sentences at the meeting and a page sent afterwards.

The three sentences were the jurisdictional position, stated without hedging in either direction: purely generated artwork may attract no copyright at all in the United States, is protected on different reasoning in China, and in India and the United Kingdom rests on an old provision that has hardly been tested.

The page was what to do about it, and that was the part that mattered. The mark would be redrawn as vector by a person, in Inkscape, using the generated candidate as a reference and nothing more, with the working files kept as evidence of the human work. The protection that actually matters for a brand mark is a registered trademark, which does not care how the artwork was drawn, and she costed registration in three jurisdictions. The campaign images would carry substantial human contribution — compositing, retouching, typography, arrangement — with layered files retained, because that contribution is the part that can be owned and the layered file is the proof it happened.

Two things changed in the studio's own position at the same time.

They moved to the service's business tier. The consumer tier's terms allowed inputs to be used for training, and the client's unreleased product photographs were going through it, which was a contractual problem before it was a privacy one. The tier also carried the vendor's indemnity, which did not exist on the plan they had been using — although Ira read the exclusions first, and found that it was drafted around copyright, said nothing about personality or publicity rights, required the output to be used substantially as generated, and was capped in a way that would not reach a client's own losses if a campaign had to be pulled.

And she rewrote her warranty. She warranted that she held the licences for the tools used, that she had carried out named checks — a reverse image search on every published image and a recognisability check on every face — and that she was not aware of any infringement. She struck the clause warranting that the work was free of any third-party right, because nobody can establish that about generated material and a warranty you cannot support is a liability rather than a reassurance.

She got the job. The founder told her afterwards that the page was why. Three other studios had said yes without qualification, and none of them had raised the question at all, which made him wonder what else they had not raised.

Worth arguing about

  1. Why is trademark the right route for the mark, when copyright is the right the client asked about?

    One answer

    Because trademark protects a sign used in trade as an indicator of origin, and it is acquired through use and registration regardless of how the artwork was made or whether any copyright subsists in it. It gives the client what they actually wanted — the ability to stop a competitor using a confusingly similar mark in their markets — without depending on an authorship question that different countries answer differently. Copyright in the artwork would be a second, weaker and jurisdictionally unreliable layer. Routing around the unsettled question is usually better than waiting for it to settle.

  2. Moving to the business tier bought an indemnity. What does that change, and what does it leave exactly where it was?

    One answer

    It transfers some risk on some facts: if a third party brings a copyright claim of the specified kind and the conditions are met, the vendor defends and pays within a cap. It leaves almost everything else. Most indemnities are drafted around copyright and exclude personality and publicity rights, which is among the most likely claims where real people are depicted. Many require the output to be used substantially as generated, which sits badly with a workflow built on compositing and retouching. Caps commonly stop at what was paid and exclude consequential loss, so a client's own losses from a pulled campaign — the media spend, the reprint — are not covered, and those are what gets claimed against the studio under its own contract.

  3. Striking the warranty that the work is free of any third-party right sounds like a studio weakening its own offer. Why is it the stronger position?

    One answer

    Because it is a warranty nobody can honestly give about generated material, and giving it converts an unknowable risk into a certain contractual breach the moment anything is asserted. Warranting what can be established instead — that the tool licences are held, that named checks were carried out, that no infringement is known — is enforceable, verifiable from the job folder, and true. It also shifts the conversation to what the studio actually did, which is a defensible record, rather than to a promise about the world. A client's lawyer reading it in diligence finds a supplier who understood the question.

Test yourself6 questions on this modulePractice. Nothing is recorded and no score is kept.
  1. 1

    An illustrator objects that a model produces work in her recognisable style. Which route could actually reach that conduct in most jurisdictions?

  2. 2

    Under the United States position, which part of a graphic novel illustrated with generated images is protectable?

  3. 3

    You fine-tune a non-commercially licensed open model and use the result for a paid client job, through a hosted interface whose terms allow commercial use. What is your position?

  4. 4

    Your tool vendor offers an indemnity on its business tier. Which claim is most likely to fall outside it, and is also among the likeliest to arise?

  5. 5

    A one-person studio in Pune publishes a synthetic presenter video aimed at viewers in the European Union and China. Whose disclosure rules apply?

  6. 6

    Working through the decision procedure for an unsettled case, which question is answered first, and why is it not a balancing exercise?

No ads. No data sale. No public scores on people. Ever.

© 2026 Addaly