Designing spoof-resistant liveness checks

Liveness is more than a single score. We use a layered pipeline that blends passive signals (texture, moire detection, motion micro-variance) with active prompts (head tilt, blink, depth cues).

The goal is to minimize false rejections while keeping spoof acceptance extremely low. We treat the liveness score as a gating mechanism and only allow fallback paths for low-risk scenarios.

Operationally, every liveness decision is logged alongside the kiosk device, camera metadata, and confidence bands for audit review.