The VERIFIED stamp comes only from a live challenge — a photo, screen-replay or deepfake feed cannot open its mouth, blink or smile on command. Passive signals also flag a synthetic face that lacks a coherent rPPG pulse. PoC — not yet a certified anti-spoofing system.