# How CRS treats the decision

### How CRS treats the decision
We treat **only `Approve` as a pass**. Both `Review` and `Deny` are treated as **identity verification failures** — the user **cannot continue with the identity verification process** when one of these statuses is returned.
The `POST /users/dit-identity` endpoint is the gate. As soon as it returns `Review` or `Deny`, the verification flow stops there: we do not move on to SMFA, customer OTP, or any subsequent step, and enrollment with Equifax is not attempted.
There is **no step-up path** on top of a `Review` or `Deny` decision. We do not offer KBA, manual review, or any retry that re-runs DIT with additional information. If the recommendation isn't `Approve`, the consumer cannot be enrolled through this integration — route them to whatever fallback your product uses for unverifiable users (manual support, alternative product, etc.).
This is intentionally strict: rather than building branching logic around partial trust signals, we rely on Equifax's overall recommendation as a single gate.


---

Version: v3

## Description:

  - `How CRS treats the decision` ()
    We treat only Approve as a pass. Both Review and Deny are treated as identity verification failures — the user cannot continue with the identity verification process when one of these statuses is returned. The POST /users/dit-identity endpoint is the gate. As soon as it returns Review or Deny, the verification flow stops there: we do not move on to SMFA, customer OTP, or any subsequent step, and enrollment with Equifax is not attempted. There is no step-up path on top of a Review or Deny decision. We do not offer KBA, manual review, or any retry that re-runs DIT with additional information. If the recommendation isn't Approve, the consumer cannot be enrolled through this integration — route them to whatever fallback your product uses for unverifiable users (manual support, alternative product, etc.). This is intentionally strict: rather than building branching logic around partial trust signals, we rely on Equifax's overall recommendation as a single gate.