Card-anchored authentication on the cards you already issue. Your risk engine decides when. Your keys validate.
Use case 1
An extra challenge method, used only when your risk engine asks for it.
Use case 2
The app account is bound to the physical card from day one.
Use case 3
Tap-and-PIN offered directly in your merchants' online checkout.
No new rails. No card reissuance. You keep the decision.