Liveness — made it actually verify motion (no Google Cloud)
- App now sends real motion evidence (face-box track + spoof live-score) instead of a hash; server verifies a face genuinely moved. Bare digests like "11"×32 now fail.
- Removed the Google Cloud / Play Integrity requirement from the critical path (it stays as an optional layer).
- Commits: 89fb399 (Colosseum) ; migration 0023 applied to live DBs; all four services restarted healthy.
- Tests: Colosseum 332 backend / 121 Android
APK re-release (both builds)
- Rebuilt, re-signed, re-hosted:
- Colosseum (USDC): capture.fun/capture.apk — 67.4 MB, CN=capture-usdc
Infra fixes
- usdc.capture.fun 502 → root cause was a missing UFW allow (8102) on the docker bridge; added it, now live.
- Flipped USDC liveness_required to true to match Clock In.
Repo hygiene / release visibility
- Added dated Nov 3 status entries to both READMEs.
- Pushed v1.1.0 tags + created GitHub Release:
- chunli0x/capture → 232521d
Give feedback to the team
Your message is private to you and the Capture team.
Create an account to send feedbackAfter signup, you can write a private message with this update attached.