In a previous thread on this subject, I had suggested using a blockchain mechanism to identify the original creator and then have a “read-only” flag for the creation (build mode and CAZ), that should be set by the original creator before uploading to Canvas.
The original creation stays with the creator, and just the read-only copy (like a PDF from a document) is uploaded on Canvas. Such creations with a read-only flag can be downloaded and locally changed, but cannot (should not) be able to be re-uploaded to Canvas. The embedded blockchain identifier will ensure that the original creator is credited with the creation even if someone bypasses the Canvas workflow and directly shares the creation with another.