The person you onboarded is the person on payroll.
Your platform is where the hire becomes an employee. Manav binds that human to a passkey at onboarding, then re-verifies — 30 seconds, on their own device — at the moments that matter. The operative behind the laptop farm can’t sign.
The receipt below was signed and checked in this tab, with zero network calls.
Cryptographic fields
Background checks and KYC happen once, at hire. The fraud happens after: the person who aced four interviews is not the person who logs in Monday, or the identity is real but the worker behind it rotates nightly. Detection tools watch behavior — and lose. The only continuous fact is that the enrolled human either signs, or doesn’t.
Three integration points. Your brand, our receipt.
// Before the consequential action, from your backend: const receipt = await manav.sign({ action: 'payroll.reverify', payload: { employeeId, cycle }, approver: employee.principal, assurance: 'passkey+liveness', }); if (receipt.ceremony === 'completed') proceed(receipt.id); // Anyone verifies the receipt offline against our published JWKS — forever.
Run the ceremony yourself. Then try to fake it.
A controlled sandbox of the exact flow above — your system asks, the enrolled human signs on their own device, a receipt is issued, and you attack it. Real Ed25519, in this tab, nothing sent anywhere.
A 30-minute integration conversation.
Bring the flow in your product where this belongs. We’ll run the ceremony on it and hand you a receipt you can verify yourself before the call ends — and a straight answer on what an embed looks like commercially.