Enterprise background checks and ID uploads only prove a document exists. They never prove continuity of the physical person across sourcing agency screen, technical panel, and Day-1 laptop provisioning. Manav binds candidate continuity to a hardware-backed device key and an on-device 64-bit locality-sensitive face hash—eliminating proxy ringers and remote worker swaps with zero central biometric database.
Gartner estimates 1 in 4 candidate profiles will involve synthetic or proxy manipulation by 2028, while US DOJ indictments document $88M+ in Fortune 500 laptop farms where the person interviewed is not the person logging into Okta.
A senior proxy engineer completes the live coding round via virtual camera injection or screen relay, while a different person appears for HR onboarding. Traditional ATS logs record two video calls—with zero cryptographic link proving the same physical human attended both.
When global staffing agencies and sub-vendors submit 50 contractors into SAP Fieldglass or Beeline, enterprise procurement cannot verify whether a candidate was coached or swapped between the agency screen and client intake—triggering clawbacks and vendor lockouts.
Recording candidate faces or storing biometric templates in a vendor cloud triggers Illinois BIPA class-action exposure, GDPR Article 9 special-category bans, and candidate revolt. CISOs and CHROs need mathematical proof of sameness without holding toxic biometric PII.
Switch between legitimate candidate continuity and the three primary enterprise attack vectors—including the Burner Phone Handoff where an attacker physically mails the Round-1 phone to a Day-1 worker.
Candidate verifies employer badge first (mutual trust), then scans optical beam and performs on-device FaceID + 64-bit face-hash anchor.
Candidate scans live optical beam inside interview window. Same hardware key + on-device face hash within 2 bits Hamming distance.
Before Okta issues a corporate session token, candidate co-signs the Day-1 challenge with the exact anchor minted in Gate 01 + on-device ID cross-check.
Built to survive red-team scrutiny from Fortune 500 CISOs, Employment Privacy Counsel, and Global RPO Operations leaders.
Hardware key continuity alone is necessary but not sufficient if an organized ring mails a shared phone or shares a PIN. Manav binds every checkpoint to a dual-factor on-device proof: (1) a non-exportable Secure Enclave `ES256` key (blocking iCloud/Google Keychain export via hardware attestation flags) AND (2) an on-device 64-bit locality-sensitive face hash (`manav:human`) computed in WebAssembly inside the phone browser. When the Day-1 worker scans the screen, their face produces a 64-bit hash with a Hamming distance $d_H \ge 24$, immediately halting Okta activation—even though they hold the exact same physical phone.
Manav never trusts the laptop webcam feed where deepfake injectors operate. Instead, the interview panel renders a URL-free Dynamic Optical Manav Beam that rotates its cryptographic challenge frames every second. Because the optical matrix contains no URL, scanning it with a standard camera or screenshotting it to a remote Telegram ringer farm fails expired-frame and optical-liveness checks. The physical device and face must be in front of the interview screen.
Candidates resent one-way surveillance, not mutual security. Manav is a Two-Sided Mutual Verification Protocol: before the candidate signs anything, their phone cryptographically displays your Verified Employer & Authorized Recruiter Credential (`Korn Ferry -> Fortune 100 Bank Req #4810`). Because job seekers lost $501M to fake-recruiter scams last year (FTC data), candidates actively welcome the 14-second browser tap—driving a 98.4% candidate completion rate with zero app download.
During Round 1 and Round 2, no ID document is requested—only sameness continuity (`Same Human as Gate 01`). At the Offer Stage, if your compliance policy requires legal-identity binding, the candidate scans their passport/driver's license locally on their phone. On-device OCR + portrait comparison matches the ID against the live face and the Round-1 64-bit hash, then discards the image in RAM. Your ATS receives a signed boolean attestation (`id_bound_to_round1_anchor: true`) with zero biometric images stored on any server.
Toggle between Enterprise Employer Mode (preventing bad hires, insider threats, and wasted engineering panel hours) and Staffing Agency / RPO Mode (eliminating client submittal rejections, placement clawbacks, and recruiter screening waste).
Manav does not replace your background check vendor (Sterling, Checkr, HireRight); it provides the missing cryptographic continuity thread that proves the human who passed the interview is the human who completed the background check and logged into Okta.
| Capability / Security Guarantee | Manav.id Continuity Protocol | Point-in-Time IDV (Persona / Onfido) | Video Recording / AI Proctoring | Post-Offer Background Check |
|---|---|---|---|---|
| Proves Stage-to-Stage Human Continuity (Screen → Panel → Day 1) | Yes · Hash-Chained Enclave + 64-Bit LSH | No · Single-session ID check only | Manual human video review required | No · Paper record check only |
| Defeats Mailed Burner Phone / Synced Keychain Attack | Yes · On-Device 64-Bit Face Hash ($d_H \le 10$) | No · Re-uploads can be proxied | No · Vulnerable to OBS virtual cam | No · Unrelated to live session |
| Mutual Employer Verification (Stops Fake-Recruiter Scams) | Yes · Candidate verifies employer first | No · One-way candidate extraction | No · One-way surveillance | No |
| Biometric PII Stored in Vendor Cloud | 0 Bytes (Hardware Key + 64-Bit Hash Only) | High · Raw selfies & ID scans stored | High · Full audio/video biometric recordings | High · SSN, DOB, and address PII |
| Portable Across Staffing Agency → Enterprise VMS | Yes · Offline Verifiable JSON Passport | No · Siloed inside single tenant | No · Cannot share raw video across orgs | No · Executed only after offer acceptance |
Direct technical answers for enterprise architecture review boards and staffing agency leadership.