CAP-108 — Device registration & trust

Category	Authentication & security
Business goal	Not yet linked to a business goal
Satisfying module	MOD-068
Mode	GATE
BD owner	BD09 Technology
Human needed	No

Fingerprints each device on first login and assigns it a trust level based on the authentication ceremony completed. Trusted devices unlock biometric-only login on subsequent sessions; new or unrecognised devices are challenged with full MFA before trust is granted. Device trust records are tied to the customer's identity and revoked on logout or suspicious activity.