FaceShareGuard

"Prove it's you": before a protected credential is shared, the holder looks into the front camera, passes a short liveness step and is matched against the credential's own photo. Nothing is stored and no image leaves the phone.

val sdk = Wallet.createWallet(
    issuer, trustedVerifiers, credentialTypes,
    shareGuard = FaceShareGuard(
        FaceCheckPolicy(docTypes = setOf("org.iso.23220.photoid.1")),
        FaceModel.fromBytes(modelBytes),
    ),
)

With the ready-made screens nothing else is needed, on Android or iOS: the check appears over the screen that is presenting. An iOS app with its own SwiftUI or UIKit screens presents FaceCheckHostViewController once over its root view.