shareGuard

Wallet role: a check to run after the holder approves sharing and before the answer leaves the phone, for the credential types the guard names (see ShareGuard). The sdk-face module's FaceShareGuard is the ready-made one: selfie liveness + face match against the credential's photo. Null (default) → share on consent alone.