Entrust Identity Verification evidence metadata plus sensitive-read-marked document, image, video, signature, timeline, check, and evidence-folder downloads into file references. Generated from the current commit-pinned official Entrust/Onfido OpenAPI v3.6 bundle. Enroll the connection at the origin for the tenant data region (EU, US, or CA); /v3.6 remains binding-owned. For an API token, store the complete Authorization value Token token=<API_TOKEN>. The current connection descriptor does not perform the provider OAuth client-credentials exchange. Reads are uncached, secret-bearing and binary reads are marked sensitive-read, every mutation is grant-off and approval-gated, and no identity resource is misrepresented as a task, note, or project Source.