What's New - Verified 4.10 Release

Version 4.10.0
Released to UAT: October 21st 2026
Released to Production: October 28th 2026
Release Type: Feature Release

Highlights

Configurable Decision Engine score bands: administrators can set fail and pass thresholds for Biometric Match and ten liveness signals, with a review zone in between.
Selfie integrity checks always on: Selfie Signature, JS Integrity and Camera Blocklist are now always applied in Proof decision policies.
More accurate device identification: current Android handsets are identified correctly in transaction records.

Custom score bands: on the Decision Engine Proof page, Biometric Match, Selfie PAD, Selfie Deepfake and the eight Document PAD checks each have a Custom score band switch. With the switch on, administrators set a Fail below and a Pass at or above value; scores in between go to Review. With the switch off, the vendor default applies, and previously entered values are restored when the switch is turned back on.
Below threshold outcome: each scored signal can send scores below its threshold to Review or Decline. In Review, the signal never declines.
Validation and audit: invalid bands are reported against the signal and block Deploy; every band change is recorded in the audit log with old and new values.
Selfie integrity checks always on: Selfie Signature, JS Integrity and Camera Blocklist are now always applied. The Lenient preset sends them to Review. If one of these checks was switched off for a tenant, it is switched back on the next time the policy is deployed.
Quality profile: "Match profile" is renamed Quality profile, and signal names and descriptions are updated.

Document capture at timeout: a document image still being processed when the capture screen timed out could be uploaded without its integrity signature and cause the Proof to be rejected. Such images are now discarded, and the user can retry the capture.
Document Upload API response: the Document Upload API could return HTTP 500 with an empty body even though the document images were accepted. It now returns HTTP 200.
Device identification for newer Android handsets: devices running Android 17, such as the Pixel 10, were recorded as "Generic Android 6.0". The device database is updated.

For technical integration details or questions about this release, please contact your authID representative or [email protected].