Step 4 of 5

Backend Query

System verifies customer instruction against database records

Verification Process

🔍

Querying Backend Database

CREF-73D9-221B

Reference Exists

CREF-73D9-221B found in database

Customer Identity

Sarah Mitchell (CLIENT-SM-4892)

Device Signature Valid

Signed with passkey from registered device (DEVICE-AP-9821-FID2)

Matter Match

Property Purchase - 45 Oak Avenue (REF-9F2A-47B1)

Instruction Type

Bank account details for receiving funds

Payload Integrity

Data not tampered with, signature valid

Not Superseded

Latest instruction, no newer version exists

Backend Verification Checks

🔍 Reference Lookup

Does CREF-73D9-221B exist in the database? If not, instruction is invalid and should be rejected immediately.

👤 Customer Identity

Which customer submitted this instruction? Confirms Sarah Mitchell is the correct client for this matter.

📱 Device Verification

Which device signed the instruction? Ensures it came from Sarah's registered device with valid passkey signature.

📁 Matter Context

For which matter was this instruction issued? Links instruction to correct property transaction.

📋 Instruction Type

What category of instruction? Bank details, document approval, authority to proceed, etc.

💾 Payload Data

What are the actual details? Full bank account information, document references, etc.

🔒 Tampering Check

Has the instruction been altered? Cryptographic signature proves integrity.

🔄 Supersession Check

Has this been replaced by a newer instruction? Ensures agent acts on latest information.

Cryptographic Proof

Why This Cannot Be Faked

Because the instruction was signed with Sarah's device-bound passkey, the backend has cryptographic proof of authenticity:

  • The signature was generated using Sarah's private key stored in device hardware
  • Only Sarah's biometric (Face ID/Touch ID) could trigger signature generation
  • The signature is mathematically tied to the exact instruction payload
  • Any modification to the data would invalidate the signature
  • An attacker cannot forge or replay the signature
  • The backend verifies the signature using Sarah's registered public key

What Happens Next?

Display Verification Result

The backend has completed all checks and determined that CREF-73D9-221B is a genuine, valid instruction from Sarah Mitchell. The add-in will now display the full verification result to David, including all instruction details and a clear confirmation that he can safely act on this information.