Proof of personhood without scanning your eyeballs
Duration: NaN:NaN:NaN
Speaker: Jay Sojitra
Type: Lightning Talk
Expertise: Deep prior knowledge
Event: Devcon
Date: Nov 2026
AI agents can now pass for human in most online interactions, which quietly breaks something load-bearing: "one human, one account." Sybil resistance underpins voting, airdrops, reputation, and moderation and CAPTCHAs and phone numbers fail the moment a model solves them faster than we do.
The industry's default fix is biometric: scan an iris or face for a uniqueness token. I'll argue this fails on three axes that also work as a rubric for judging any personhood system, revocability (you can't rotate a leaked iris), linkability (the enrollment set becomes the ultimate cross-context tracking key), and inclusivity (scan-or-be-excluded).
Then the alternatives, with honest tradeoffs: ZK nullifiers for one-token-per-person without a stored identifier; proofs derived from credentials people already hold; and social-graph attestation. None is free, I'll be clear on where each leaks or breaks.