The PEM files in this directory are snapshots of the official C2PA Conformance
Program trust lists from https://github.com/c2pa-org/conformance-public.

They are bundled so credential trust validation remains local and reproducible.
Refresh both files before a release and record the update in the release notes.