KYC Should Be Modeled as an Auditable Evidence Workflow, Not a Simple Flag

A single is_verified field cannot capture a genuine KYC process, which typically involves personal details, identity documents, liveness checks, address proof, database and sanctions screening, and staff review. Each step should be tracked with its own status, so one rejected or resubmitted step does not erase evidence from completed ones. Overall approval should follow from required steps and policy rather than whichever provider responds last. Provider integrations should be handled through adapters that normalize outcomes and keep restricted raw responses, with media stored behind protected references and sensitive identifiers kept out of logs. Every review action should be recorded in an audit trail capturing actor, change, reason, and timestamp.