Ocular scan

In-house iPhone capture. Server runs Worldcoin open-iris (MIT). Not Orb IR hardware — front camera for now.

1. Wallet-sign challenge
2. Two captures (liveness)
3. open-iris template → trustLevel 4

Align one eye inside the ring.

We don't store your scan. Frames are deleted right after infer, and the iris template itself is never written to disk — only an opaque nullifier (a one-way hash) is kept, to prove uniqueness without keeping the biometric. Fallback content-hash is off unless explicitly enabled for dev.