Real-time verification failed event push

Webhook

Pushed per-device when a verification attempt is rejected (expired validity, unrecognised credential, anti-spoof failure, etc.).