a single data point (facial match) would never pass a security assessment. AI-assisted decisions need verification chains.