pull down to refresh

this is crazy:

┌─────────────────────────────────────────────────────────┐
│                    the user                             │
│  (signs up for OpenAI, wants to use GPT-5)              │
└─────────────────┬───────────────────────────────────────┘
                  │
                  │ "verify your identity"
                  │
┌─────────────────▼───────────────────────────────────────┐
│  inquiry.withpersona.com                                │
│  Persona verification flow                              │
│  - government ID scan (Microblink)                      │
│  - selfie capture + LIVENESS DETECTION                  │
│  - video capture                                        │
│  - PUBLIC FIGURE FACIAL MATCHING                        │
│  - device fingerprint (FingerprintJS)                   │
│  - browser/network signals                              │
└─────────────────┬───────────────────────────────────────┘
                  │
                  │ complete identity dossier
                  │ (ID photos, selfie, video, PII, scores)
                  │
┌─────────────────▼───────────────────────────────────────┐
│  openai-watchlistdb.withpersona.com                     │
│  34.49.93.177 (dedicated GCP)                           │
│  Envoy proxy + internal service mesh                    │
│                                                         │
│  screens against:                                       │
│  - OFAC SDN list (US sanctions)                         │
│  - 200+ global sanctions/warning lists                  │
│  - PEP classes 1-4 (with FACIAL SIMILARITY scoring)     │
│  - adverse media (terrorism to cybercrime)              │
│  - crypto address watchlists (Chainalysis, TRM Labs)    │
│  - custom FinCEN screening lists                        │
│  - fitness & probity lists                              │
└─────────────────┬───────────────────────────────────────┘
                  │
                  │ result: approved / flagged / denied
                  │
┌─────────────────▼───────────────────────────────────────┐
│  OpenAI                                                 │
│  - grants or denies access                              │
│  - no explanation provided                              │
│  - no appeal mechanism                                  │
│  - data retained (1 year? 3 years? permanently?)        │
└─────────────────────────────────────────────────────────┘

meanwhile, on the government side:

┌─────────────────────────────────────────────────────────┐
│  withpersona-gov.com (FedRAMP Authorized)               │
│  34.27.15.233 (dedicated GCP, us-central1)              │
│                                                         │
│  SAME CODEBASE. same company. same data model.          │
│                                                         │
│  proven in source code:                                 │
│  - files SARs directly to FinCEN                        │
│  - files STRs directly to FINTRAC (Canada)              │
│  - STRs tagged with intelligence program codenames      │
│  - biometric face databases (3-year retention)          │
│  - 13 types of tracking lists                           │
│  - PEP facial recognition with similarity scoring       │
│  - 269 verification checks                              │
│  - Chainalysis crypto screening                         │
│  - custom FinCEN screening list uploads                 │
│  - OpenAI-powered AI copilot for operators              │
└─────────────────────────────────────────────────────────┘

Proof of identity is fine but they require proof of address and this will be very bad and doesn't accept you mention you live with your parents and proof with name of your parents as proof of address like students having +18 years old. Common issue for multiple stupid KYC sites.

reply