By THE UNKNOWN BRAND · Editorial standards

Published 2026-08-01 · Updated 2026-09-06

The safest approval system moves risk decisions forward. Legal should not discover the central claim after every frame has been finished.

01Kuwait Army02Gulf Bank03Midana04Warba Bank05Dabdoob06Boursa Kuwait07Palmy08World Defense Show09Hyundai10Kellyville

In brief

• A regulated AI video approval workflow runs five gates in order — claim and use, references and rights, route, sequence, master — and one named owner closes each.
• The Central Bank of Kuwait requires banks to adopt a board-endorsed advertising and publicity policy, and bars unreal or inaccurate information that may lead customers to unsound understanding.
• Google requires election advertisers to disclose synthetic content clearly and conspicuously; most Gulf brand work is not election advertising, so that rule does not bind it.
• WCAG 2.2 sets captions for prerecorded media as Success Criterion 1.2.2 at Level A, and audio description as Success Criterion 1.2.5 at Level AA.
• The C2PA specification says provenance should not judge whether data is good or bad; it proves the record has not been tampered with, not that a claim is true.

Why banks and government teams need a different workflow

Regulated organisations carry duties an ordinary advertiser does not. Claims are reviewed against regulation, not only against taste, and the institution’s public trust is part of what every film spends. Generated video adds a further duty: the organisation should be able to show what was generated, from which references, and with whose permission. None of that is difficult if it is decided early. All of it is painful if it is discovered at the end, which is why the safest approval system moves risk decisions forward. Legal should not meet the central claim after every frame has been finished.

The duty is written down somewhere, and it is usually more specific than a marketing team expects. The Central Bank of Kuwait requires banks to set up a policy for advertising and publicity “endorsed by their boards of directors”. Advertising materials must not contain “unreal or inaccurate information that may lead to unsound understanding to the existing and potential customers”. A bank announcing an award must also disclose the awarding entity, the methodology and the standards behind it. In Saudi Arabia the Food and Drug Authority applies the same logic to product claims. They “should state the truth about the product”, with “no overstatement, ambiguity, or deception”. They “should be supported by evidence relevant to the claims”. Find the clause that governs your category before Gate 1 opens. Note also which language binds — the Central Bank publishes those instructions in English as a translation, and treats the Arabic as the authority.

First, a stakeholder map

Before the gates below can work, the organisation needs to know who closes each kind of decision. The map that follows is a starting template; titles vary, but the separation of decisions should not.

Name individuals, not departments, and agree the map before Gate 1 opens. Observers may comment at any gate; only the named owner closes it. Discovering a missing stakeholder at Gate 4 is the most expensive way to learn who should have been at Gate 1.

Gate is a decision point that one named owner closes. Observers may comment at any gate; only the named owner closes it, and it closes when that person closes it, not when a meeting ends.

Gate 1 · claim and use

Document the audience, channel, commercial or public-service claim, mandatory lines, prohibited implications, disclosure need and who owns the final decision.

Whether the film has to say it was generated is decided by category, channel and platform, and the platforms publish their wording. Google requires election advertisers to disclose synthetic or digitally altered content: media that “inauthentically depict real or realistic-looking people or events”. The disclosure must be “clear and conspicuous”, and Google supplies example wording such as “This video content was synthetically generated.” Most Gulf brand work is not election advertising, so that rule does not bind it. It is still the clearest published picture of what a disclosure looks like once someone has been made to write one down. Meta puts the duty on the buyer rather than the maker: “Advertisers are responsible for understanding and complying with all applicable laws and regulations.” A disclosure discovered at Gate 5 is a re-cut, a re-super and a second approval round in two languages.

Gate 2 · references and rights

Approve product files, identity references, logos, locations, voices, the music route and any real-person permissions. Record the licence or source for each controlled input.

Gate 3 · route

Review the concept, script and representative frames. The question at this gate is whether the direction is permissible and useful, not whether the final grain is perfect.

Gate 4 · sequence

Review the edit for implication, continuity, supers, language, accessibility and disclosure. Generated shots can be acceptable individually but misleading in sequence. This gate therefore reviews the film as an argument rather than as a set of frames.

Accessibility at this gate has a published standard rather than an opinion. WCAG 2.2 sets Captions (Prerecorded) as Success Criterion 1.2.2 at Level A. The criterion reads: “Captions are provided for all prerecorded audio content in synchronized media”. It sets Audio Description (Prerecorded) as Success Criterion 1.2.5 at Level AA. Government and banking clients often inherit a conformance target from their own digital policy. The film is measured against it after the campaign is live. Ask which level the organisation is held to before the edit locks. Retro-fitting captions in two languages is a second approval round, not a file export.

Gate 5 · master

Approve the final audio, subtitles, legal lines, aspect ratios, version names, expiry dates and destination. Archive the approval and the exact master checksum where the organisation requires it.

Where the organisation wants the record attached to the file rather than to a folder, content provenance standards such as C2PA can travel with the asset. It is worth being precise about what that buys. The specification is explicit. It “SHOULD NOT provide value judgments about whether a given set of provenance data is ‘good’ or ‘bad,’ merely whether the assertions included within can be validated as associated with the underlying asset, correctly formed, and free from tampering.” So provenance proves the record has not been tampered with, and shows where the file came from. It does not prove the claim is true, the licence was valid, or the sign-off was competent. Those stay human, and they stay at the gates.

Content provenance is a record that can travel with the asset itself rather than sitting in a folder. It proves the record has not been tampered with, and shows where the file came from. It does not prove the claim is true, the licence was valid, or the sign-off was competent.

Making the gates operational

Script lock

Once Gate 3 closes, the script and the claim list are frozen. Any change after lock, however small it looks, returns to the owner of Gate 1 rather than being absorbed silently into production. This single rule prevents most late-stage claim drift, because it makes every change visible to the person accountable for claims.

Script lock is the freeze that takes effect once Gate 3 closes. The script and the claim list stop changing. Any change after lock returns to the owner of Gate 1 rather than being absorbed silently into production.

Frame review

Representative frames are reviewed against the approved identity references before full sequence production begins. Reviewers at this stage are asked to judge permissibility and direction. They are asked explicitly not to judge finishing quality, so that early feedback stays on risk rather than on polish.

Compliance sign-off

Sign-off is a recorded decision, not a meeting that happened. It names the reviewer, the date, and the exact cut reviewed, identified by version name. A sign-off that cannot say which version it approved has not signed anything off.

Compliance sign-off is a recorded decision, not a meeting that happened. It names the reviewer, the date, and the exact cut reviewed, identified by version name. A sign-off that cannot say which version it approved has not signed anything off.

Versioned masters

Every delivered file carries a version name, and approval attaches to a version rather than to “the film”. When a master is superseded, the old version is withdrawn from use, so that the approved file and the published file cannot quietly diverge.

Versioned master is a delivered file carrying a version name, so approval attaches to a version rather than to the film in general. When a master is superseded, the old version is withdrawn from use. In Gulf work the version name should identify language as well as cut.

Audit trail

The brief, licences, gate approvals, sign-offs and master checksums are kept together as one record. A question may arrive a year later, from a regulator, an auditor or a new team. The organisation can then show what was claimed, what was generated, from which references, and who approved it, without reconstructing the story from inboxes.

Both languages are the film

In Gulf work the Arabic and English versions are usually both public. An approval of one is not an approval of the other. Supers, subtitles, mandatory lines and disclosure wording need review in each language at Gates 4 and 5. That is because a compliant English legal line with a loose Arabic rendering is still a compliance failure. The version names in the master list should therefore identify language as well as cut. Sign-off records can then say precisely which words, in which language, were approved.

Do not use an AI workflow to avoid accountability

The production method does not lower the standard for truth, consent or product accuracy. If the evidence needed for a claim cannot be supplied, the claim leaves the film. That rule costs a line of copy occasionally; the alternatives cost considerably more.

Sources

Every source below was opened and its quoted wording checked against the live page. A source we could not re-fetch was dropped, not softened. Where a rule could not be confirmed from the body that issues it, this guide says so rather than describe it from memory. Editorial responsibility sits with the studio, not an individual author. Found a moved link or a wrong citation? Email hello@theunknownbrand.com with the URL. We will correct the page and its modification date.

1. Central Bank of Kuwait — The post’s core premise that regulated organisations carry advertising duties an ordinary advertiser does not, and that those duties are written down by the regulator rather than negotiated on taste. Also supports the stakeholder map: CBK names a board and a Customer Complaint Unit as owners of advertising policy.
2. Saudi Food and Drug Authority (SFDA) — The post’s closing rule — that if the evidence needed for a claim cannot be supplied, the claim leaves the film — is a restatement of an actual GCC regulator’s published position, not a house preference.
3. Google (Google Ads policy — Political content) — Gate 1’s 'disclosure need' is a real, published platform requirement with defined trigger conditions and defined wording — decided by channel, not by taste.
4. Coalition for Content Provenance and Authenticity (C2PA), Technical Specification 2.1 — Gate 5’s archived record can be attached to the file itself via a published provenance standard — and, in the house construction, exactly what that record does NOT prove.
5. W3C — Web Content Accessibility Guidelines (WCAG) 2.2 — The word 'accessibility' in Gate 4 and 'subtitles' in Gate 5 map to named, numbered success criteria with conformance levels, so the gate can be closed against a standard instead of an opinion.
6. Meta — Advertising Standards — That the compliance duty sits with the advertising organisation rather than with the production supplier — which is why the post insists the named owner of each gate is inside the institution.

Frequently asked questions