🎥 Media & Biometrics

Four governed SQL operators for face search, image similarity, perceptual-hash matching, and DNS-tunnel detection. (The MCP face_match tool is gated behind ADR-155 — these SQL-reachable operators are the unblocked path.)

client.face_search(
    "gallery-1", [0.12, -0.34, 0.56, ...],   # 128-dim probe embedding
    k=5, threshold=0.6, purpose="investigation",
)
# QueryResult: columns entity_id, gallery_id, score, modality (ranked desc)
 
client.match_pdq(
    "corpus-1", "a1b2c3d4e5f67890...",        # PDQ hex hash
    threshold=0.9, purpose="investigation",
)
# QueryResult: entity_id, media_type, corpus_id, score, matcher
 
client.similar_image(
    "media-42", threshold=0.6, index="ncmec",
    purpose="investigation",
)
# QueryResult: near-duplicate images, ranked desc
 
client.dns_tunnel_detect("ws-finance-01", purpose="security")
# {"data": [{"domain": "exfil.bad.tld", "entropy": 7.8, "count": 1242}]}

Next: Governance & Compliance — GDPR Art. 17 erasure, session commit/review/discard, and data export.