Limits
What voxID doesn't stop yet, and what it can't.
Liveness detection isn't switched on
The anti-spoofing step currently passes every recording. Until a real model (such as AASIST) replaces it, a convincing voice clone or text-to-speech voice reading the phrase can pass the words and voiceprint checks. The random phrase still defeats replaying an old recording.
0.50 is a starting threshold
Two recordings scoring 0.50 or more count as the same person. That line was set on test voices, and every score is logged so it can be tuned on real ones. Too low and different people collide; too high and one person can verify twice. Close relatives can sound alike to the model, and one of them may be refused.
People who can't speak the phrase
Verification needs speech. People who can't read five words aloud can't verify this way.
The verifier is trusted
Only the verifier's key can issue credentials and sign buy passes. If that key leaked, credentials could be issued to anyone; the admin can revoke them. The voiceprint encryption key is equally sensitive: losing it means every voice has to verify again.
One verifier
Phrases and rate limits are held in the verifier's memory, so it runs as a single instance, and a restart cancels phrases in flight.