DECISION: dual-spoof / amispoof PAD — swap SP-D to real MiniFASNet single-frame?

[ahmetabdullahgultekin]

SP-D currently wires the LIGHT in-repo PassiveLivenessDetector (no published accuracy).
Recommendation: swap to MiniFASNet single-frame (measured CASIA AUC 0.945), host the
1.7MB minifasnet_v2.onnx via the SHA-verified fetch pipeline; advisory-only, never a gate.
Keep light detector as fallback. Needs owner sign-off.
From docs/AUDIT_FINDINGS_2026-06-12.md §E.