Gouvernance des ALT générés par LLM 2025 — Scoring qualité et audits signés en pratique

// pipelines/alt/scoring.ts
import { scoreRelevance } from './models/clip'
import { scoreToxicity } from './models/toxicity'
import { evaluatePolicy } from './rules/policy'

export async function scoreAlt({ imageVector, altText }: { imageVector: Float32Array; altText: string }) {
  const [relevance, toxicity, compliance] = await Promise.all([
    scoreRelevance(imageVector, altText),
    scoreToxicity(altText),
    evaluatePolicy(altText)
  ])
  return { relevance, toxicity, compliance }
}

graph TD
    A[Prompt Builder] --> B[Génération LLM]
    B --> C[Scoring]
    C -->|OK| D[Workbench relecteur]
    C -->|Échec| E[Ajusteur de prompt]
    D --> F[Signature C2PA]
    F --> G[Livraison CDN]

// components/AltWorkbench.tsx
function AltWorkbench({ imageUrl, generatedAlt }: Props) {
  const [value, setValue] = useState(generatedAlt)
  return (
    <div className="grid gap-4 md:grid-cols-2">
      <img src={imageUrl} alt="preview" className="rounded-lg" />
      <textarea value={value} onChange={e => setValue(e.target.value)} className="h-64 font-mono" />
      <aside>
        <h3>Mots interdits</h3>
        <ForbiddenList text={value} />
        <h3>Contrôles accessibilité</h3>
        <AltQualityScore text={value} />
      </aside>
    </div>
  )
}

// pipelines/alt/sign.ts
import { sign } from '@contentauth/toolkit'

export async function signAlt({ altText, manifest }: { altText: string; manifest: any }) {
  const signed = await sign(Buffer.from(altText), {
    signer: {
      name: 'Unified Image Tools ALT Review',
      certificate: process.env.C2PA_CERT!,
      privateKey: process.env.C2PA_KEY!
    },
    assertions: [
      {
        label: 'org.unified.alt-text',
        data: { altText, version: manifest.version, reviewer: manifest.reviewer }
      }
    ]
  })
  return signed
}

// components/OptimizedImage.tsx
import manifest from '../../data/c2pa-manifest.json'

export function OptimizedImage({ id }: { id: string }) {
  const data = manifest[id]
  return (
    <figure>
      <img src={data.src} alt={data.alt.text} data-alt-signature={data.alt.signature} />
      <figcaption>{data.caption}</figcaption>
      <link rel="alternate" type="application/c2pa" href={data.manifestUrl} />
    </figure>
  )
}

CREATE TABLE alt_audit (
  asset_id TEXT,
  alt_text TEXT,
  relevance NUMERIC,
  toxicity NUMERIC,
  compliance NUMERIC,
  reviewer TEXT,
  signed_at TIMESTAMP DEFAULT now()
);

prompts:
  default: |
    Génère un texte ALT de 120 caractères maximum décrivant l’image.
    Interdit : deviner race/genre, émotions spéculatives.
    Doit inclure : sujet, arrière-plan, couleur, composition.
  product: |
    Génère un ALT produit de 80 caractères maximum.
    Doit inclure : nom du produit, caractéristique clé, couleur.

# Windows (NVDA)
nvda --speech-log --playback optimized-image.html > logs/nvda-20250929.log