Presence, proven. Not assumed.
Advanced liveness verification and fraud decisioning for onboarding you have to defend.
One capture · live presence · fraud adjudication · sealed records
- Capture
- one shot · seconds
- Liveness
- active light challenge
- Scope
- presence · no documents · no names
- Output
- tamper-evident record
Eight strata between a capture and a verdict.
Presence is not established in one look. Sentry cuts down through a single capture one layer at a time, and does not stop until the verdict is bedrock.
Specimen session · notional values. Not measurements
- Stratum 01 · Acquisition0 m
A claim of presence arrives.
An applicant faces a camera. One capture, one upload. Every judgement that follows happens server-side, where an attacker cannot reach it. At this depth nothing is established.
- Channel
- remote · unattended
- Capture
- one shot · uploaded
- Assertion
- unverified
- Confidence
- —
- Stratum 02 · Framing−40 m
The capture must be worth judging.
Obstruction, pose, and light are ruled on before anything else is. A covered face or a washed-out frame is coached and recaptured (in English or Bangla), not guessed at.
- Subject
- single · unobstructed
- Pose
- within tolerance
- Light
- usable
- Coaching
- EN · বাংলা
- Stratum 03 · Challenge−95 m
The light writes on a living face.
A brief pattern of screen light, issued fresh for this session alone, must return reflected from the face in front of the camera. A recording answers yesterday's challenge, and fails today's.
- Challenge
- fresh · this session
- Response
- observed in face
- Replay
- ruled out
- Injection
- ruled out
- Stratum 04 · Presence−160 m
A screen is not skin.
Trained anti-spoof networks read the material of the capture itself: the texture that separates living skin from a photograph, a display, or a mask. Each fails differently. All fail.
- Analysis
- trained networks
- Material
- consistent with skin
- Display
- not a display
- Presence
- 0.97
- Stratum 05 · Pulse−235 m
A photograph has no pulse.
Physiological signals are read across the capture window: the involuntary evidence of a living subject that no static artefact can manufacture.
- Window
- seconds of capture
- Physiology
- consistent with life
- Static artefact
- ruled out
- Weight
- corroborating
- Stratum 06 · Provenance−310 m
A recapture leaves fingerprints.
Displays and re-captured footage betray themselves in structure a camera sees and an eye does not. Provenance is established: a person, directly captured. Not footage of one.
- Structure
- no display artefacts
- Recapture
- ruled out
- Provenance
- direct capture
- Forensics
- clear
- Stratum 07 · Escalation−375 m
Ambiguity is escalated, not guessed.
Every signal is weighed jointly, with device and network intelligence beside it. Clear sessions resolve in seconds. Anything ambiguous routes to a named officer with the evidence already assembled.
- Signals
- weighed jointly
- Verdict
- ambiguous
- Routed to
- named officer
- Decision
- human · attributable
- Stratum 08 · Record−440 m
The verdict becomes evidence.
Every stratum above is bound into one tamper-evident record: what was captured, what was checked, what fired, who decided. Verifiable long after the session is gone.
- Strata bound
- 7 of 7
- Decision
- attributable
- Retention
- policy-governed
- State
- sealed
A face is not a password. It has to be there.
An active light challenge resolves a live subject in front of a real camera. It rejects the photograph, the replay, and the recapture.
The whole verification is one capture.
No gauntlet of retries, no multi-step ceremony. The applicant faces the camera once, a brief light plays, and the verdict arrives in seconds, with coaching in English or Bangla when the capture needs another go.
Drawn representation · specimen data. Not a product recording
Built for fraud-heavy onboarding environments.
Six instruments aimed at the specific ways remote onboarding gets attacked, and at the operational reality of running it.
A single capture, a verdict in seconds
The applicant faces the camera once. No document juggling, no repeated selfies: the friction lives with the attacker, not the applicant, in English or Bangla.
A light challenge no recording can answer
A brief pattern of screen light, issued fresh and never reused, must return from the face in front of the camera. Replayed video and injected footage answer the wrong challenge.
Trained anti-spoof networks
Trained networks read material and texture, physiological signals corroborate a living subject, and display forensics rule out re-captured footage. Each attack fails differently. All fail.
Nothing on the device worth attacking
The phone captures and uploads; every judgement happens server-side. Decision policy tunes per channel and risk segment without an app release, and without handing attackers the logic.
Ambiguity routes to a named officer
Clear sessions resolve in seconds. Borderline sessions land on the bench with the evidence already assembled, and whatever is decided is attributed to the officer who decided it.
Every verdict exits as evidence
Each session becomes a tamper-evident, hash-chained record (what was captured, what fired, who decided), retained under policy and feeding the Sigilith Platform.
Individually unremarkable. Jointly, a pattern.
Device, network, velocity and repeat-artefact signals are weighed together, surfacing coordinated attempts that any single check would clear.
The operations floor for every verdict.
Verification is not fire-and-forget. Every session lands in Sigilith Command (triage, live monitoring, fraud and threat intelligence, and an audit trail that proves itself), built for the people defending the perimeter.
Coordinated submission pattern
ReviewInnocent explanation · a branch office onboarding customers over one shared connection could produce this pattern. Which is why findings route to people, with their reasoning attached.
Sessions awaiting a human verdict, triaged by risk.
Operational distributions across channels and segments.
Presentation-attack metrics aligned to ISO/IEC 30107-3.
Append-only and hash-chained: the log proves itself.
Role-based duties; operators see what their role allows.
Capture data held under policy, and destroyed under it.
Where the ambiguous sessions land.
Rejected and ambiguous sessions route to the bench with everything the engine found already assembled, so the officer is deciding, not investigating.
- Capture
- one shot · clear
- Challenge
- answered · fresh
- Surface
- no display artefacts
- Physiology
- corroborating
- Device
- automation markers
- Correlation
- 2 linked sessions
Whichever action is taken is recorded against the officer who took it, with the evidence exactly as it stood at that moment.
Drawn representation · specimen data. Not a product recording
Presence, not identity.
Sentry answers one question: is a live human actually there. It reads no documents, stores no names, and keeps no identity data. Identity stays with the systems that already own it.
Designed for controlled decision workflows.
Decisions are attributable
Every resolution carries the officer who made it, the evidence in front of them, and the moment it was taken.
Automation has a boundary
The engine prepares decisions and escalates ambiguity. It does not quietly resolve cases it cannot substantiate.
Adverse outcomes are explainable
A rejection can be reconstructed: which signals fired, at what thresholds, against which policy revision.
Records outlive the session
Verification artefacts and outcomes are retained under policy and remain verifiable after the applicant is long gone.
- Reporting
- aligned to ISO/IEC 30107-3
- Audit trail
- append-only · hash-chained
- Access
- role-based · least privilege
- Tenancy
- isolated · enforced at the row
Document intelligence is where the research points next.
Extraction that survives non-Latin scripts and worn, damaged artefacts: the problem our published OCR research was built on. Stated plainly: in research, not in the product today. When it lands, it exits into the same sealed record.
See Sentry against your own cases.
Request a live walkthrough of the one-shot capture, the command deck, and the record that comes out the other end.