Governed identity at the physical boundary

Seeing a person is not permission to open a door.

Camera presence, badge possession, voice identity and liveness are evidence. VALO evaluates that evidence, authorizes the exact access request, expresses the decision deterministically and lets a separate gateway enforce it.

No camera access No microphone access No biometric storage No real door control
North lab · Door A-17 SIMULATION
LIVE PRESENCE Observed
CAM-17 · source attested · synthetic frame
Request Amina Berg → North lab Maintenance inspection · 14:30–15:00

Interactive deterministic demo

Change the evidence. Watch the boundary respond.

This browser surface uses synthetic inputs only. It does not identify a real person, capture media, contact an access-control system or create production authorization.

01

Access request

Exact action

Voice and camera factors are simulated evidence. They never create authority.

02

Decision path

ALLOW
  1. 1
    VAIG evaluates Evidence is coherent; residual risk is low. VAIG has no authority.
    LOW RISK
  2. 2
    REHT authorizes The exact request is inside the current mandate and evidence requirements.
    CLEARED
  3. 3
    RACS expresses the decision Dumb, deterministic contract. No evaluation, interpretation or enforcement.
    ALLOW
  4. 4
    Gateway would enforce Simulated unlock is permitted. No external effect is performed by this page.
    SIMULATED
  5. 5
    Veritas records Decision inputs, action digest and non-execution state are recorded below.
    RECEIPT

Hard boundary

Biometric confidence is not authority.

OBSERVE

Camera and microphone

May produce bounded presence, liveness or identity findings under an explicit lawful purpose.

EVALUATE

VAIG

Assesses evidence quality, mismatches, replay indicators, context and risk. It never authorizes.

AUTHORIZE

REHT

Determines whether this exact principal, target, purpose and moment are permitted under the current mandate.

EXPRESS

RACS

Returns the deterministic decision contract. It is intentionally dumb and cannot enforce anything.

ENFORCE

Access gateway

Verifies the authorization-bound decision and controls the physical lock. This browser demo has no such connector.

PROVE

Veritas

Records what was proposed, observed, authorized, enforced and actually observed afterwards.

Illustrative browser receipt

Bound to the request. Explicit about what did not happen.

The receipt contains synthetic evidence states and a SHA-256 action digest. It contains no biometric template, raw audio, raw video, credential secret or production proof.