Live presence and match are native. The rest is plugged through the same interface, with an honest label and a record in the receipt.
hummand.presenca, hummand.match and passkey available; Serpro in accreditation; the others with adapter and mock, in target architecture.
Sources · what every step queries
Native or plugged, labelled.
Every policy step queries a source through the same interface: a request goes in, a summary with no personal data comes out; the sensitive part stays encrypted and the transient part is discarded. Every source has an adapter with a real contract and a mock with the personas of the acceptance scenarios; the real one enters when accreditation or the client arrives. The receipt records the source, the component and the version.A source is where each confirmation comes from: Hummand’s own presence check or an external service, like the civil database. A mock is a test version of a source, which answers like the real one without querying it.
Category
ProductSources
Two native, nine plugged.
N
Native
hummand.presencaavailable
Is there a living human right now? Active challenge by an AWS component certified by iBeta (PAD, ISO/IEC 30107-3); the receipt records the component and the verdict
Step: live presence
Real and mock adapter
hummand.matchavailable
Is it the same person as the reference the client gave? Transient comparison with the reference image
Retention: captured image and template discarded; the client reference stays encrypted only while the act is open; afterwards, the hash remains
Step: live presence, together with presence
I
Civil identity
serpro.datavalidin accreditation
CPF, registration data and facial biometrics against the government database (driver licence, national ID)
Step: civil identity, level 3
Real and mock adapter; the response is minimized and the raw data never leaves. Accreditation in progress at Serpro, on their timeline
Citizen authenticated at gov.br, with the account level: bronze, silver or gold
Step: federated account
Enters when a public-sector client pulls it
passkeyavailable
Possession of the device, with user verification on it (WebAuthn); nothing biometric reaches Hummand
Registered only after an approved presence; the receipt comes out at level 1
Step: passkey
dispositivo.atestacaotarget architecture
Intact app and device (Play Integrity, App Attest); requires the client's native app
Step: passkey, as possession
A
Signature and document
icp.brasiltarget architecture
Qualified signature (A1, A3, e-CPF): Hummand validates the chain and attaches it to the receipt
Step: legal signature; the gov.br signature enters through the same step
ocr.documentotarget architecture
Data and photo of the document (driver licence, ID card, passport); the photo becomes a transient reference for the match
Step: attached document; the hash goes in the receipt
V
Vital status
crctarget architecture
Death, marriage and birth certificates (CRC Nacional, Arpen agreement)
Lookups: certificate and exception-proof trigger
Restricted: only under agreement
sisobitarget architecture
Deaths reported by registry offices (INSS)
Lookup: exception-proof trigger
Restricted: public bodies only
Sources
Out by choice
Bureaus, fraud scores, device fingerprinting, PEP and sanctions lists, geolocation or behaviour as proof, age estimation from a face: not sources. SMS is only the delivery channel for the link.
No real source enters before a client pulls it. Until then the adapter exists, has a contract and answers with the personas of the acceptance scenarios; in production, a source that exists only as a mock responds as unavailable.
Where to start
hummand.presenca · hummand.match
Live presence and match
Availablenative, in production
Traits
Q
Question
is there a living human right now, and is it the same person as the reference?
C
Component
liveness detection by an AWS component certified by iBeta, declared in the receipt
R
Retention
none after the act: the reference stays encrypted while the act is open; afterwards, only the hash