You had an issue with biometric auth passing when it shouldn’t. What went wrong there?

A biometric authentication bug allowed unauthorized access because the fallback path wasn't properly checked. When Face ID failed, the system returned a cached success result in edge cases, which went undetected for weeks. The fix required strict evaluation of authentication state on every attempt with no result reuse.