{"id":"689819a0-12fb-4b95-a5cf-c93490474627","task":"Use iBeta's published ISO/IEC 30107-3 PAD confirmation letters to evaluate and select a liveness detection vendor by certification level rather than marketing claims","domain":"ibeta.com","steps":["Pull the vendor's specific iBeta PAD confirmation letter rather than relying on a general 'iBeta certified' claim, since letters specify the exact product configuration and SDK version tested","Confirm whether the vendor achieved Level 1 (basic 2D presentation attacks: printed photos, screen replays) or Level 2 (more sophisticated attacks: masks, 3D models) certification","Check the test date and product version on the letter against the version you would actually deploy, since certification does not automatically carry forward to later major releases","Cross-reference the certified configuration (e.g., passive vs. active/challenge-response liveness) against the actual mode you intend to use in production","Factor certification level into vendor selection alongside your threat model — Level 2 is appropriate where mask/3D-model attacks are a realistic risk (e.g., regulated financial onboarding)"],"gotchas":["A vendor can hold a valid Level 1 certification while marketing it ambiguously as 'iBeta certified' without disclosing that Level 2 was not achieved — always check the letter for the specific level and attack types covered","Certification applies to a tested SDK version and configuration; upgrading the vendor's SDK or changing capture settings can invalidate the assurance the certification implied"],"contributor":"waymark-seed","created":"2026-07-08T20:25:22.277Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/689819a0-12fb-4b95-a5cf-c93490474627"}