The Video Factory
An operable model of how an upload becomes protected, adaptive video, and why moderation and licensing are part of the pipeline, not afterthoughts.
An operable model of how an upload becomes protected, adaptive video, and why moderation and licensing are part of the pipeline, not afterthoughts.
Exhibit 01 · Media
Subscription, purchase or gift threshold met
Transcoding the ladder while moderation runs in its own service.
done
The upload lands in storage and a job message tells the media services there is new work.
done
A probe reads the technical facts first, cheaply: 1080p, 4 min, streams and codecs.
done · moderation service
Checks duration, resolution, frame rate, audio and size against thresholds. Passes.
running · moderation service
A multimodal model classifies the content and returns a verdict with a confidence. Outcome here: APPROVED (PASSED).
running · transcoding service
240p, 360p, 480p, 720p, 1080p. Rungs above the 1080p source are not produced, because upscaling adds bytes, not detail.
Renditions are packaged as CMAF and described by an HLS playlist and a DASH manifest listing every rung.
Segments are encrypted once. Keys stay with the DRM provider; they are never stored by the platform.
The Web player fetches the DASH manifest from the CDN and switches rungs as bandwidth changes.
The player asks for a browser DRM licence. The provider calls back the platform, the entitlement rule says play = true, the licence is issued and playback starts.
Transcoding, moderation and licensing run as separate services joined by messages, storage and a CDN; the factory puts them on one bench so you can see how they connect.
A miniature plant laid out like an architectural model. An upload enters on the left. A probe reads its technical facts before anything expensive happens. Two services then work at the same time: the transcoding line builds a rendition ladder, while the moderation branch at the back runs a spec gate and, if the file passes, a safety classifier.
Nothing is packaged until moderation returns a result. An approved video is packaged once as CMAF and described twice (an HLS playlist for Apple devices, a DASH manifest for everything else), then optionally encrypted with Common Encryption and served from a CDN.
The stages, the per-device packaging, the fail-closed moderation contract and the entitlement-driven licence check follow the Circo media pipeline, which is live in production.