⚡ Biometric Consent Intake

step 1 of 4

Operator authentication

Paste the legal-tier audit token + your name. Both stored in this tab's session only; cleared on close. Never persists to disk. Your name is recorded as operator_of_record in the audit row for legal traceability.

Photo capture

Take or upload a clear photo. Stored quarantined under data/biometric/uploads/ with mode 0700/0600 + SHA-256 integrity hash. Audit chain records the upload event.

Option A — File upload

Option B — Camera capture

Preview

No photo selected yet.

✓ Intake complete

Audit chain rows (HMAC-SHA256, persisted to data/_catalog/subjects/<id>.audit.jsonl):

Consent grant

StatusGiven Given at Retention until

Audit hmac

Verification

Operator: confirm the audit chain by running:

./scripts/staffing/verify_biometric_erasure.sh <candidate_id>

Or hit GET /audit/subject/<id> with legal-tier auth to read the full chain.

Phase 1.6 BIPA Gates · Consent template v1 · Destruction runbook