Everything below is the same two primitives — proof that a live human is present, and a mandate that names who authorised the machine — applied to a different context. Not seven products. Seven places the same proof is already doing work.
Biometric PaymentThe face is the payment method. The account resolves through open finance, settlement runs account-to-account, and the receipt carries the proof that a living person authorised it. No card number exists to be stolen.
Biometric SignatureNot a click on a link in an email. Proof that a live human signed, at that second, with the document sealed under an anchored hash. Years later, anyone can verify it without asking you for anything.
Biometric TicketingA bot cannot have a face. Tickets bind to the buyer rather than to a link, so reselling means transferring on your own rails at your price cap — and entry at the gate is a glance, not a queue.
Digital IDOne integration instead of a document check per country. The same person resolves to the same coordinate on any device, anywhere, and the document you would have collected stays where it is.
Global ScreeningSanctions, background and credit across 190+ countries, answered as a proof rather than as a file of someone’s data. Continuous, so a name that becomes a match tomorrow does not wait for an annual review.
FaceTokenOne token per human, per party. Your bank and a shop each hold a different value for the same person, derived on the device — so neither can be matched against the other, even if both companies try.
AI Media StreamingLicensed media an agent can actually play, with the entitlement checked against a mandate rather than a password. The rights holder gets a record of who authorised the play, not a shared login.
And whatever you build nextNone of these required a new product. They required the same two calls with different rules — which is why the seventh took a fortnight and not a quarter.Read the quickstart ↗
Primitive oneProof of a live humanThree seconds of living tissue resolve to a coordinate that already existed. Nothing is enrolled, nothing is stored, and the proof expires. A recording has no pulse to read, so it never gets past the first line.How oneface works ↗
Primitive twoA mandate that names the humanA verified person grants an amount, a counterparty set and a window. The rail refuses anything outside it — however convincingly the agent is asked. Every action under it leaves an anchored receipt.How mandates work ↗
Call the two primitives and see what you can build.Sandbox keys in minutes, REST and MCP from the same account, and a failed call is never billed.
