S11 · Face Recognition

Declared state: built, not well structured.

This is the repository plan and evidence, not a live health reading. A task marked done may still depend on credentials, devices, deployment or a newer acceptance test.

Dependencies

No dependencies are declared in the catalog.

Tasks and gates

11.F1 · "Nobody there" and "can't tell" are different answers; the confirm gate fails open on

Tier F · done · Verification: hermetic-test

Gate: `test_camera.py`, `test_face_second_factor.py`

  • unverified-import · undated · docs/SYSTEMS-DETAILS.md:1830

11.F2 · ArcFace backend wired with a legacy fallback. *gate:* `test_face_arcface_backend.py`

Tier F · done · Verification: hermetic-test

Gate: `test_face_arcface_backend.py`

  • unverified-import · undated · docs/SYSTEMS-DETAILS.md:1832

11.F3 · **Liveness.** A printed photo or a phone screen used to pass. *gate:* new

Tier F · done · Verification: hermetic-test

Gate: new

  • unverified-import · undated · docs/SYSTEMS-DETAILS.md:1833

11.R1 · Recognition under real desk conditions: backlight, partial profile, glasses.

Tier R · open · Verification: hermetic-test

Gate: `test_face_recognition.py` extended fixture set, ≥90% owner recall.

    11.R2 · Multi-frame fusion — a verdict is taken over N frames, not one.

    Tier R · open · Verification: hermetic-test

    Gate: `test_camera.py` [fusion]

      11.R3 · Privacy: frames are never persisted, only embeddings and verdicts; asserted, not assumed.

      Tier R · open · Verification: hermetic-test

      Gate: `test_security_hardening.py` extended.

        11.E1 · Identity end-to-end: voice and face agree on the owner ≥95% of desk turns, and disagree

        Tier E · open · Verification: planned-test

        Gate: new `test_identity_fusion.py` - planned gate. new `test_identity_fusion.py` + a live day.

          HUD screen contracts

          All subsystems · Source: docs/systems-plan.json.