diff --git a/Gemfile b/Gemfile
index 0bff02cfa36..170805bac18 100644
--- a/Gemfile
+++ b/Gemfile
@@ -52,7 +52,7 @@ gem 'rack-timeout', require: false
 gem 'redacted_struct'
 gem 'redis', '>= 3.2.0'
 gem 'redis-namespace'
-gem 'redis-session-store', '>= 0.11.4'
+gem 'redis-session-store', github: '18F/redis-session-store', tag: 'v0.12-18f'
 gem 'retries'
 gem 'rotp', '~> 6.1'
 gem 'rqrcode'
@@ -72,7 +72,7 @@ gem 'view_component', '~> 2.82.0'
 gem 'webauthn', '~> 2.5.2'
 gem 'xmldsig', '~> 0.6'
 gem 'xmlenc', '~> 0.7', '>= 0.7.1'
-gem 'yard'
+gem 'yard', require: false
 
 # This version of the zxcvbn gem matches the data and behavior of the zxcvbn NPM package.
 # It should not be updated without verifying that the behavior still matches JS version 4.4.2.
diff --git a/Gemfile.lock b/Gemfile.lock
index 7cc691748c9..d0cdd966ca7 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -23,6 +23,15 @@ GIT
   specs:
     identity_validations (0.7.2)
 
+GIT
+  remote: https://github.com/18F/redis-session-store.git
+  revision: 253aa4f466cf61e129625ea01d1f120fb9c8685d
+  tag: v0.12-18f
+  specs:
+    redis-session-store (0.12.pre.18f)
+      actionpack (>= 6, < 8)
+      redis (>= 3, < 6)
+
 GIT
   remote: https://github.com/18F/saml_idp.git
   revision: d8e7deb7da3aa43bae0e5b0891c8de123d492484
@@ -213,8 +222,8 @@ GEM
     coderay (1.1.3)
     coercible (1.0.0)
       descendants_tracker (~> 0.0.1)
-    concurrent-ruby (1.2.0)
-    connection_pool (2.2.5)
+    concurrent-ruby (1.2.2)
+    connection_pool (2.3.0)
     cose (1.3.0)
       cbor (~> 0.5.9)
       openssl-signature_algorithm (~> 1.0)
@@ -394,7 +403,7 @@ GEM
     mini_histogram (0.3.1)
     mini_mime (1.1.2)
     mini_portile2 (2.8.1)
-    minitest (5.17.0)
+    minitest (5.18.0)
     msgpack (1.6.0)
     multiset (0.5.3)
     nenv (0.3.0)
@@ -521,15 +530,12 @@ GEM
       ffi (~> 1.0)
     redacted_struct (1.1.0)
     redcarpet (3.6.0)
-    redis (5.0.5)
+    redis (5.0.6)
       redis-client (>= 0.9.0)
-    redis-client (0.12.0)
+    redis-client (0.14.0)
       connection_pool
     redis-namespace (1.8.1)
       redis (>= 3.0.4)
-    redis-session-store (0.11.5)
-      actionpack (>= 6, < 8)
-      redis (>= 3, < 6)
     regexp_parser (2.6.1)
     reline (0.2.7)
       io-console (~> 0.5)
@@ -797,7 +803,7 @@ DEPENDENCIES
   redacted_struct
   redis (>= 3.2.0)
   redis-namespace
-  redis-session-store (>= 0.11.4)
+  redis-session-store!
   retries
   rotp (~> 6.1)
   rqrcode
diff --git a/app/controllers/idv/address_controller.rb b/app/controllers/idv/address_controller.rb
index 72670ac32c5..a52f40c116b 100644
--- a/app/controllers/idv/address_controller.rb
+++ b/app/controllers/idv/address_controller.rb
@@ -7,6 +7,8 @@ class AddressController < ApplicationController
 
     def new
       analytics.idv_address_visit
+
+      @presenter = AddressPresenter.new(pii: @pii)
     end
 
     def update
diff --git a/app/controllers/idv/in_person/usps_locations_controller.rb b/app/controllers/idv/in_person/usps_locations_controller.rb
index 7adb827a183..6e62cb11ecf 100644
--- a/app/controllers/idv/in_person/usps_locations_controller.rb
+++ b/app/controllers/idv/in_person/usps_locations_controller.rb
@@ -104,7 +104,6 @@ def update_params
         params.require(:usps_location).permit(
           :formatted_city_state_zip,
           :name,
-          :phone,
           :saturday_hours,
           :street_address,
           :sunday_hours,
diff --git a/app/forms/idv/in_person/address_form.rb b/app/forms/idv/in_person/address_form.rb
index dd229925f64..a9bf9764bdf 100644
--- a/app/forms/idv/in_person/address_form.rb
+++ b/app/forms/idv/in_person/address_form.rb
@@ -15,9 +15,14 @@ def self.model_name
       def submit(params)
         consume_params(params)
 
+        cleaned_errors = errors.deep_dup
+        cleaned_errors.delete(:city, :nontransliterable_field)
+        cleaned_errors.delete(:address1, :nontransliterable_field)
+        cleaned_errors.delete(:address2, :nontransliterable_field)
+
         FormResponse.new(
           success: valid?,
-          errors: errors,
+          errors: cleaned_errors,
         )
       end
 
diff --git a/app/forms/idv/state_id_form.rb b/app/forms/idv/state_id_form.rb
index 5b2a1a1b7c3..1ad31ec5d4a 100644
--- a/app/forms/idv/state_id_form.rb
+++ b/app/forms/idv/state_id_form.rb
@@ -18,9 +18,13 @@ def initialize(pii)
     def submit(params)
       consume_params(params)
 
+      cleaned_errors = errors.deep_dup
+      cleaned_errors.delete(:first_name, :nontransliterable_field)
+      cleaned_errors.delete(:last_name, :nontransliterable_field)
+
       FormResponse.new(
         success: valid?,
-        errors: errors,
+        errors: cleaned_errors,
       )
     end
 
diff --git a/app/javascript/packages/document-capture/components/address-search.tsx b/app/javascript/packages/document-capture/components/address-search.tsx
index e8a5374c797..cf5b791766f 100644
--- a/app/javascript/packages/document-capture/components/address-search.tsx
+++ b/app/javascript/packages/document-capture/components/address-search.tsx
@@ -16,11 +16,9 @@ export interface PostOffice {
   city: string;
   distance: string;
   name: string;
-  phone: string;
   saturday_hours: string;
   state: string;
   sunday_hours: string;
-  tty: string;
   weekday_hours: string;
   zip_code_4: string;
   zip_code_5: string;
@@ -49,11 +47,9 @@ const formatLocations = (postOffices: PostOffice[]): FormattedLocation[] =>
     id: index,
     distance: po.distance,
     name: po.name,
-    phone: po.phone,
     saturdayHours: po.saturday_hours,
     streetAddress: po.address,
     sundayHours: po.sunday_hours,
-    tty: po.tty,
     weekdayHours: po.weekday_hours,
     isPilot: !!po.is_pilot,
   }));
diff --git a/app/javascript/packages/document-capture/components/in-person-location-step.tsx b/app/javascript/packages/document-capture/components/in-person-location-step.tsx
index f447c5ee5e1..6712e3b8ef1 100644
--- a/app/javascript/packages/document-capture/components/in-person-location-step.tsx
+++ b/app/javascript/packages/document-capture/components/in-person-location-step.tsx
@@ -12,7 +12,6 @@ interface PostOffice {
   address: string;
   city: string;
   name: string;
-  phone: string;
   saturday_hours: string;
   state: string;
   sunday_hours: string;
@@ -25,7 +24,6 @@ interface FormattedLocation {
   formattedCityStateZip: string;
   id: number;
   name: string;
-  phone: string;
   saturdayHours: string;
   streetAddress: string;
   sundayHours: string;
@@ -53,7 +51,6 @@ const formatLocation = (postOffices: PostOffice[]) => {
       formattedCityStateZip: `${po.city}, ${po.state}, ${po.zip_code_5}-${po.zip_code_4}`,
       id: index,
       name: po.name,
-      phone: po.phone,
       saturdayHours: po.saturday_hours,
       streetAddress: po.address,
       sundayHours: po.sunday_hours,
diff --git a/app/javascript/packages/document-capture/components/in-person-locations.tsx b/app/javascript/packages/document-capture/components/in-person-locations.tsx
index d0727730200..6ea458b12b0 100644
--- a/app/javascript/packages/document-capture/components/in-person-locations.tsx
+++ b/app/javascript/packages/document-capture/components/in-person-locations.tsx
@@ -7,7 +7,6 @@ export interface FormattedLocation {
   distance: string;
   id: number;
   name: string;
-  phone: string;
   saturdayHours: string;
   streetAddress: string;
   sundayHours: string;
@@ -55,7 +54,6 @@ function InPersonLocations({ locations, onSelect, address }: InPersonLocationsPr
             streetAddress={item.streetAddress}
             selectId={item.id}
             formattedCityStateZip={item.formattedCityStateZip}
-            phone={item.phone}
             weekdayHours={item.weekdayHours}
             saturdayHours={item.saturdayHours}
             sundayHours={item.sundayHours}
diff --git a/app/javascript/packages/document-capture/components/location-collection-item.spec.tsx b/app/javascript/packages/document-capture/components/location-collection-item.spec.tsx
index af8291bf55e..013d181f665 100644
--- a/app/javascript/packages/document-capture/components/location-collection-item.spec.tsx
+++ b/app/javascript/packages/document-capture/components/location-collection-item.spec.tsx
@@ -67,7 +67,6 @@ describe('LocationCollectionItem', () => {
     const { getByText } = render(
       <LocationCollectionItem
         distance="1.0 mi"
-        phone="555-123-4567"
         name=""
         streetAddress="123 Test Address"
         formattedCityStateZip=""
@@ -81,7 +80,6 @@ describe('LocationCollectionItem', () => {
 
     const addressParent = getByText('123 Test Address').parentElement!;
     expect(addressParent.textContent).to.contain('in_person_proofing.body.location.distance');
-    expect(addressParent.textContent).to.contain('555-123-4567');
   });
 
   context('when no retail hours are known', () => {
diff --git a/app/javascript/packages/document-capture/components/location-collection-item.tsx b/app/javascript/packages/document-capture/components/location-collection-item.tsx
index 87b1bcd38b0..266cfd2f0cf 100644
--- a/app/javascript/packages/document-capture/components/location-collection-item.tsx
+++ b/app/javascript/packages/document-capture/components/location-collection-item.tsx
@@ -6,7 +6,6 @@ interface LocationCollectionItemProps {
   formattedCityStateZip: string;
   handleSelect: (event: React.FormEvent<HTMLInputElement>, selection: number) => void;
   name?: string;
-  phone?: string;
   saturdayHours: string;
   selectId: number;
   streetAddress: string;
@@ -19,7 +18,6 @@ function LocationCollectionItem({
   formattedCityStateZip,
   handleSelect,
   name,
-  phone,
   saturdayHours,
   selectId,
   streetAddress,
@@ -62,12 +60,6 @@ function LocationCollectionItem({
                 {`${t('in_person_proofing.body.location.retail_hours_sun')} ${sundayHours}`}
               </div>
             )}
-            {phone && (
-              <div>
-                <h4>{t('in_person_proofing.body.location.contact_info_heading')}</h4>
-                <div>{`${t('in_person_proofing.body.location.phone')} ${phone}`}</div>
-              </div>
-            )}
             <Button
               id={`location_button_mobile_${selectId}`}
               className="tablet:display-none margin-top-2 width-full"
diff --git a/app/javascript/packages/personal-key-input/index.js b/app/javascript/packages/personal-key-input/index.js
deleted file mode 100644
index 6c36cc9bd7d..00000000000
--- a/app/javascript/packages/personal-key-input/index.js
+++ /dev/null
@@ -1,21 +0,0 @@
-import base32Decode from 'base32-decode';
-import base32Encode from 'base32-encode';
-
-/**
- * Coerce mistaken user input from 'problem' letters:
- * https://en.wikipedia.org/wiki/Base32#Crockford.27s_Base32
- *
- * @param {string} value User-provided text input
- *
- * @return {string} Encoded input
- */
-export function encodeInput(value) {
-  value = value.replace(/-/g, '');
-  value = base32Encode(base32Decode(value, 'Crockford'), 'Crockford');
-
-  // Add back the dashes
-  value = (value.match(/.{4}/g) || [value]).join('-');
-
-  // And uppercase
-  return value.toUpperCase();
-}
diff --git a/app/javascript/packages/personal-key-input/index.spec.js b/app/javascript/packages/personal-key-input/index.spec.js
deleted file mode 100644
index 552cd52e419..00000000000
--- a/app/javascript/packages/personal-key-input/index.spec.js
+++ /dev/null
@@ -1,19 +0,0 @@
-import { encodeInput } from './index.js';
-
-describe('personal-key-input', () => {
-  describe('encodeInput', () => {
-    it('removes Crockford-encoded characters', () => {
-      expect(encodeInput('LlIi-1111-1111-1111')).to.equal('1111-1111-1111-1111');
-
-      expect(encodeInput('LlII-0000-0000-0000')).to.equal('1111-0000-0000-0000');
-
-      expect(encodeInput('1234-1234-1234-1234')).to.equal('1234-1234-1234-1234');
-
-      expect(encodeInput('7P41-1JFN-W7JA-DVR2')).to.equal('7P41-1JFN-W7JA-DVR2');
-
-      expect(encodeInput('')).to.be.a('string');
-
-      expect(encodeInput('abc')).to.be.a('string');
-    });
-  });
-});
diff --git a/app/javascript/packages/personal-key-input/package.json b/app/javascript/packages/personal-key-input/package.json
deleted file mode 100644
index a98c03debac..00000000000
--- a/app/javascript/packages/personal-key-input/package.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "name": "@18f/identity-personal-key-input",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "dependencies": {
-    "base32-decode": "^1.0.0",
-    "base32-encode": "^1.1.1"
-  }
-}
diff --git a/app/javascript/packs/README.md b/app/javascript/packs/README.md
index a8fcea8410d..f3bfe556281 100644
--- a/app/javascript/packs/README.md
+++ b/app/javascript/packs/README.md
@@ -14,5 +14,5 @@ import { FormSteps } from '@18f/identity-form-steps';
 
 const appRoot = document.getElementById('app-root');
 
-render(<FormSteps initialValues={{ personalKey: appRoot.dataset.personalKey }} />, appRoot);
+render(<FormSteps initialValues={appRoot.dataset} />, appRoot);
 ```
diff --git a/app/jobs/fraud_rejection_daily_job.rb b/app/jobs/fraud_rejection_daily_job.rb
new file mode 100644
index 00000000000..67c2840f818
--- /dev/null
+++ b/app/jobs/fraud_rejection_daily_job.rb
@@ -0,0 +1,19 @@
+class FraudRejectionDailyJob < ApplicationJob
+  queue_as :low
+
+  def perform(_date)
+    profiles_eligible_for_fraud_rejection.find_each do |profile|
+      analytics.automatic_fraud_rejection(verified_at: profile.verified_at)
+      profile.reject_for_fraud(notify_user: false)
+    end
+  end
+
+  private
+
+  def profiles_eligible_for_fraud_rejection
+    Profile.where(
+      fraud_review_pending: true,
+      verified_at: ..30.days.ago,
+    )
+  end
+end
diff --git a/app/models/profile.rb b/app/models/profile.rb
index 024abbbe2fa..09c5b62a085 100644
--- a/app/models/profile.rb
+++ b/app/models/profile.rb
@@ -60,9 +60,9 @@ def deactivate_for_fraud_review
     update!(active: false, fraud_review_pending: true, fraud_rejection: false)
   end
 
-  def reject_for_fraud
+  def reject_for_fraud(notify_user:)
     update!(active: false, fraud_review_pending: false, fraud_rejection: true)
-    UserAlerts::AlertUserAboutAccountRejected.call(user)
+    UserAlerts::AlertUserAboutAccountRejected.call(user) if notify_user
   end
 
   def decrypt_pii(password)
diff --git a/app/presenters/idv/address_presenter.rb b/app/presenters/idv/address_presenter.rb
new file mode 100644
index 00000000000..407f9f05663
--- /dev/null
+++ b/app/presenters/idv/address_presenter.rb
@@ -0,0 +1,31 @@
+module Idv
+  class AddressPresenter
+    def initialize(pii:)
+      @pii = pii
+    end
+
+    def puerto_rico_address?
+      @pii[:state] == 'PR'
+    end
+
+    def pii
+      @pii
+    end
+
+    def address_line1_hint
+      "#{I18n.t('forms.example')} 150 Calle A Apt 3" if puerto_rico_address?
+    end
+
+    def address_line2_hint
+      "#{I18n.t('forms.example')} URB Las Gladiolas" if puerto_rico_address?
+    end
+
+    def city_hint
+      "#{I18n.t('forms.example')} San Juan" if puerto_rico_address?
+    end
+
+    def zipcode_hint
+      "#{I18n.t('forms.example')} 00926" if puerto_rico_address?
+    end
+  end
+end
diff --git a/app/services/analytics_events.rb b/app/services/analytics_events.rb
index 83fff0f245f..88992adc829 100644
--- a/app/services/analytics_events.rb
+++ b/app/services/analytics_events.rb
@@ -163,6 +163,16 @@ def authentication_confirmation_reset
     track_event('Authentication Confirmation: Reset selected')
   end
 
+  # @param [Date] verified_at
+  # Tracks when a profile is automatically rejected due to being under review for 30 days
+  def automatic_fraud_rejection(verified_at:, **extra)
+    track_event(
+      'Fraud: Automatic Fraud Rejection',
+      verified_at: verified_at,
+      **extra,
+    )
+  end
+
   # Tracks when the user creates a set of backup mfa codes.
   # @param [Integer] enabled_mfa_methods_count number of registered mfa methods for the user
   def backup_code_created(enabled_mfa_methods_count:, **extra)
diff --git a/app/services/doc_auth/processed_alert_to_log_alert_formatter.rb b/app/services/doc_auth/processed_alert_to_log_alert_formatter.rb
index a21c09429a4..8884b1618a6 100644
--- a/app/services/doc_auth/processed_alert_to_log_alert_formatter.rb
+++ b/app/services/doc_auth/processed_alert_to_log_alert_formatter.rb
@@ -1,34 +1,35 @@
 module DocAuth
   class ProcessedAlertToLogAlertFormatter
-    def get_alert_result(log_alert_results, side, alert_name_key, result)
-      if log_alert_results.dig(alert_name_key, side.to_sym).present?
-        alert_value = log_alert_results[alert_name_key][side.to_sym]
-        Rails.logger.
-          info("ALERT ALREADY HAS A VALUE: #{alert_value}, #{result}")
-      end
-      result
-    end
-
     def log_alerts(alerts)
       log_alert_results = {}
 
-      alerts.keys.each do |key|
-        alerts[key.to_sym].each do |alert|
+      alerts.each do |key, key_alerts|
+        key_alerts.each do |alert|
           alert_name_key = alert[:name].
             downcase.
-            parameterize(separator: '_').to_sym
+            parameterize(separator: '_').
+            to_sym
+
           side = alert[:side] || 'no_side'
 
-          log_alert_results[alert_name_key] =
-            { "#{side}": get_alert_result(
-              log_alert_results,
-              side,
-              alert_name_key,
-              alert[:result],
-            ) }
+          check_for_dupe!(log_alert_results, side, alert_name_key, alert[:result])
+
+          log_alert_results[alert_name_key] = {
+            "#{side}": alert[:result],
+          }
         end
       end
+
       log_alert_results
     end
+
+    private
+
+    def check_for_dupe!(log_alert_results, side, alert_name_key, result)
+      alert_value = log_alert_results.dig(alert_name_key, side.to_sym)
+      if alert_value.present?
+        Rails.logger.info("ALERT ALREADY HAS A VALUE: #{alert_value}, #{result}")
+      end
+    end
   end
 end
diff --git a/app/services/encrypted_redis_struct_storage.rb b/app/services/encrypted_redis_struct_storage.rb
index 2a185910895..80a4e8d674b 100644
--- a/app/services/encrypted_redis_struct_storage.rb
+++ b/app/services/encrypted_redis_struct_storage.rb
@@ -60,8 +60,11 @@ def store(struct, expires_in: 60)
   end
 
   def key(id, type:)
-    return [type.redis_key_prefix, id].join(':') if type.respond_to?(:redis_key_prefix)
-    raise "#{self} expected #{type.name} to have defined class method redis_key_prefix"
+    if type.respond_to?(:redis_key_prefix)
+      return ['redis-pool', type.redis_key_prefix, id].join(':')
+    else
+      raise "#{self} expected #{type.name} to have defined class method redis_key_prefix"
+    end
   end
 
   # Assigns member fields from a hash. That way, it doesn't matter
diff --git a/app/services/irs_attempts_api/redis_client.rb b/app/services/irs_attempts_api/redis_client.rb
index 45005335aba..a549258826c 100644
--- a/app/services/irs_attempts_api/redis_client.rb
+++ b/app/services/irs_attempts_api/redis_client.rb
@@ -1,7 +1,7 @@
 module IrsAttemptsApi
   class RedisClient
     cattr_accessor :redis_pool do
-      ConnectionPool.new(size: 10) do
+      ConnectionPool.new(size: IdentityConfig.store.redis_irs_attempt_api_pool_size) do
         Redis::Namespace.new(
           'irs-attempt-api',
           redis: Redis.new(url: IdentityConfig.store.redis_irs_attempt_api_url),
diff --git a/app/services/out_of_band_session_accessor.rb b/app/services/out_of_band_session_accessor.rb
index 7d37afe7882..f06e3c9a472 100644
--- a/app/services/out_of_band_session_accessor.rb
+++ b/app/services/out_of_band_session_accessor.rb
@@ -11,7 +11,9 @@ def initialize(session_uuid)
 
   def ttl
     uuid = session_uuid
-    session_store.instance_eval { redis.ttl(prefixed(uuid)) }
+    session_store.instance_eval do
+      with_redis { |client| client.ttl(prefixed(uuid)) }
+    end
   end
 
   # @return [Pii::Attributes, nil]
diff --git a/app/services/phone_recaptcha_validator.rb b/app/services/phone_recaptcha_validator.rb
index 0e30be5e428..2a86b1bd0db 100644
--- a/app/services/phone_recaptcha_validator.rb
+++ b/app/services/phone_recaptcha_validator.rb
@@ -24,7 +24,13 @@ def score_threshold
   private
 
   def validator
-    @validator ||= validator_class.new(score_threshold:, **validator_args)
+    @validator ||= validator_class.new(
+      score_threshold:,
+      extra_analytics_properties: {
+        phone_country_code: parsed_phone.country,
+      },
+      **validator_args,
+    )
   end
 
   def score_threshold_country_override
diff --git a/app/services/proofing/mock/device_profiling_backend.rb b/app/services/proofing/mock/device_profiling_backend.rb
index e883f3800d8..f323b3d26a3 100644
--- a/app/services/proofing/mock/device_profiling_backend.rb
+++ b/app/services/proofing/mock/device_profiling_backend.rb
@@ -14,13 +14,13 @@ def record_profiling_result(session_id:, result:)
         raise ArgumentError, "unknown result=#{result}" if !RESULTS.include?(result)
 
         REDIS_POOL.with do |redis|
-          redis.setex("device_profiling:#{session_id}", RESULT_TIMEOUT, result)
+          redis.setex("redis-pool:device_profiling:#{session_id}", RESULT_TIMEOUT, result)
         end
       end
 
       def profiling_result(session_id)
         REDIS_POOL.with do |redis|
-          redis.get("device_profiling:#{session_id}")
+          redis.get("redis-pool:device_profiling:#{session_id}")
         end
       end
     end
diff --git a/app/services/recaptcha_validator.rb b/app/services/recaptcha_validator.rb
index 75fc17738ea..d8d7bf796ce 100644
--- a/app/services/recaptcha_validator.rb
+++ b/app/services/recaptcha_validator.rb
@@ -3,9 +3,14 @@ class RecaptchaValidator
   EXEMPT_ERROR_CODES = ['missing-input-secret', 'invalid-input-secret']
   VALID_RECAPTCHA_VERSIONS = [2, 3]
 
-  attr_reader :recaptcha_version, :score_threshold, :analytics
+  attr_reader :recaptcha_version, :score_threshold, :analytics, :extra_analytics_properties
 
-  def initialize(recaptcha_version: 3, score_threshold: 0.0, analytics: nil)
+  def initialize(
+    recaptcha_version: 3,
+    score_threshold: 0.0,
+    analytics: nil,
+    extra_analytics_properties: {}
+  )
     if !VALID_RECAPTCHA_VERSIONS.include?(recaptcha_version)
       raise ArgumentError, "Invalid reCAPTCHA version #{recaptcha_version}, expected one of " \
                            "#{VALID_RECAPTCHA_VERSIONS}"
@@ -14,6 +19,7 @@ def initialize(recaptcha_version: 3, score_threshold: 0.0, analytics: nil)
     @score_threshold = score_threshold
     @analytics = analytics
     @recaptcha_version = recaptcha_version
+    @extra_analytics_properties = extra_analytics_properties
   end
 
   def exempt?
@@ -80,6 +86,7 @@ def log_analytics(recaptcha_result: nil, error: nil)
       recaptcha_version:,
       evaluated_as_valid: recaptcha_result_valid?(recaptcha_result),
       exception_class: error&.class&.name,
+      **extra_analytics_properties,
     )
   end
 
diff --git a/app/services/service_provider_request_proxy.rb b/app/services/service_provider_request_proxy.rb
index 1a8cbaf5ffb..0840f2ae695 100644
--- a/app/services/service_provider_request_proxy.rb
+++ b/app/services/service_provider_request_proxy.rb
@@ -3,7 +3,7 @@
 # to checking the db if no redis object is available. Following release can remove db dependence.
 # To migrate code simply replace ServiceProviderRequest with ServiceProviderRequestProxy
 class ServiceProviderRequestProxy
-  REDIS_KEY_PREFIX = 'spr:'.freeze
+  REDIS_KEY_PREFIX = 'redis-pool:spr:'.freeze
 
   # This is used to support the .last method. That method is only used in the
   # test environment
@@ -78,7 +78,7 @@ def self.key(uuid)
   end
 
   def self.flush
-    REDIS_POOL.with { |namespaced| namespaced.redis.flushdb } if Rails.env.test?
+    REDIS_POOL.with { |client| client.flushdb } if Rails.env.test?
   end
 
   def self.hash_to_spr(hash, uuid)
diff --git a/app/services/usps_in_person_proofing/post_office.rb b/app/services/usps_in_person_proofing/post_office.rb
index bdb987c8b65..eb69e755632 100644
--- a/app/services/usps_in_person_proofing/post_office.rb
+++ b/app/services/usps_in_person_proofing/post_office.rb
@@ -4,7 +4,6 @@ module UspsInPersonProofing
     :city,
     :distance,
     :name,
-    :phone,
     :saturday_hours,
     :state,
     :sunday_hours,
diff --git a/app/services/usps_in_person_proofing/proofer.rb b/app/services/usps_in_person_proofing/proofer.rb
index 79dafbce50e..3f6b660c9f3 100644
--- a/app/services/usps_in_person_proofing/proofer.rb
+++ b/app/services/usps_in_person_proofing/proofer.rb
@@ -214,7 +214,6 @@ def parse_facilities(facilities)
           city: post_office['city'],
           distance: post_office['distance'],
           name: post_office['name'],
-          phone: post_office['phone'],
           saturday_hours: hours['saturdayHours'],
           state: post_office['state'],
           sunday_hours: hours['sundayHours'],
diff --git a/app/services/usps_in_person_proofing/transliterable_validator.rb b/app/services/usps_in_person_proofing/transliterable_validator.rb
new file mode 100644
index 00000000000..7ab49ca5f00
--- /dev/null
+++ b/app/services/usps_in_person_proofing/transliterable_validator.rb
@@ -0,0 +1,91 @@
+module UspsInPersonProofing
+  # Validator that can be attached to a form or other model
+  # to verify that specific supported fields are transliterable
+  # and conform to additional character requirements
+  #
+  # == Example
+  #
+  #   validates_with UspsInPersonProofing::TransliterableValidator,
+  #     fields: [:first_name, :last_name],
+  #     reject_chars: /[^A-Za-z\-' ]/,
+  #     message: ->(invalid_chars)
+  #       "Rejected chars: #{invalid_chars.join(', ')}"
+  #     end
+  #
+  class TransliterableValidator < ActiveModel::Validator
+    # Initialize the validator with the given fields configured
+    # for transliteration validation
+    #
+    # @param [Hash] options
+    # @option options [Array<Symbol>] fields Fields for which to validate transliterability
+    # @option options [Regexp] reject_chars Regex of chars to reject post-transliteration
+    # @option options [String,#call] message Error message or message generator
+    def initialize(options)
+      super
+      @fields = options[:fields]
+      @reject_chars = options[:reject_chars]
+      @message = options[:message]
+    end
+
+    # Check if the configured values on the record are transliterable
+    #
+    # @param [ActiveModel::Validations] record
+    def validate(record)
+      return unless IdentityConfig.store.usps_ipp_transliteration_enabled
+
+      @fields.each do |field|
+        next unless record.respond_to?(field)
+
+        value = record.send(field)
+        next unless value.respond_to?(:to_s)
+
+        invalid_chars = get_invalid_chars(value)
+        next unless invalid_chars.present?
+
+        record.errors.add(
+          field,
+          :nontransliterable_field,
+          message: get_error_message(invalid_chars),
+        )
+      end
+    end
+
+    def transliterator
+      @transliterator ||= Transliterator.new
+    end
+
+    private
+
+    # Use unsupported character list to generate error message
+    def get_error_message(unsupported_chars)
+      return unless unsupported_chars.present?
+      if @message.respond_to?(:call)
+        @message.call(unsupported_chars)
+      else
+        @message
+      end
+    end
+
+    def get_invalid_chars(value)
+      # Get transliterated value
+      result = transliterator.transliterate(value)
+      transliterated = result.transliterated
+
+      # Remove question marks corresponding with unsupported chars
+      # for transliteration
+      unless transliterated.count(Transliterator::REPLACEMENT) > result.unsupported_chars.length
+        transliterated = transliterated.gsub(Transliterator::REPLACEMENT, '')
+      end
+
+      # Scan for unsupported chars for the field
+      if @reject_chars.is_a?(Regexp)
+        additional_chars = transliterated.scan(@reject_chars)
+      else
+        additional_chars = []
+      end
+
+      # Create sorted list of unique unsupported characters
+      (result.unsupported_chars + additional_chars).sort.uniq
+    end
+  end
+end
diff --git a/app/services/usps_in_person_proofing/transliterator.rb b/app/services/usps_in_person_proofing/transliterator.rb
index dfe7315758e..0f4fe333ba5 100644
--- a/app/services/usps_in_person_proofing/transliterator.rb
+++ b/app/services/usps_in_person_proofing/transliterator.rb
@@ -11,7 +11,8 @@ class Transliterator
       :original,
       # Transliterated value
       :transliterated,
-      # Characters from the original that could not be transliterated
+      # Characters from the original that could not be transliterated,
+      # in the same order and quantity as in the original string
       :unsupported_chars,
       keyword_init: true,
     )
@@ -24,13 +25,15 @@ class Transliterator
     # @return [TransliterationResult] The transliterated value
     def transliterate(value)
       stripped = value.to_s.gsub(/\s+/, ' ').strip
-      transliterated = I18n.transliterate(stripped, locale: :en)
-
       unsupported_chars = []
-      unless stripped.count(REPLACEMENT) == transliterated.count(REPLACEMENT)
-        transliterated.chars.zip(stripped.chars).each do |val, stripped|
-          unsupported_chars.append(stripped) if val == REPLACEMENT && stripped != REPLACEMENT
-        end
+      transliterated = ''
+
+      # Some transliterations result in more than one character, so length is
+      # not always guaranteed to match
+      stripped.chars.each do |char|
+        tl_char = I18n.transliterate(char, locale: :en)
+        unsupported_chars.append(char) if tl_char == REPLACEMENT && char != REPLACEMENT
+        transliterated += tl_char
       end
 
       # Using struct instead of exception here to reduce likelihood of logging PII
diff --git a/app/validators/idv/form_state_id_validator.rb b/app/validators/idv/form_state_id_validator.rb
index 47152083c51..97a7193d3ac 100644
--- a/app/validators/idv/form_state_id_validator.rb
+++ b/app/validators/idv/form_state_id_validator.rb
@@ -9,6 +9,16 @@ module FormStateIdValidator
                 :state_id_jurisdiction,
                 :state_id_number,
                 presence: true
+
+      validates_with UspsInPersonProofing::TransliterableValidator,
+                     fields: [:first_name, :last_name],
+                     reject_chars: /[^A-Za-z\-' ]/,
+                     message: ->(invalid_chars) do
+                       I18n.t(
+                         'in_person_proofing.form.state_id.errors.unsupported_chars',
+                         char_list: invalid_chars.join(', '),
+                       )
+                     end
     end
   end
 end
diff --git a/app/validators/idv/in_person/form_address_validator.rb b/app/validators/idv/in_person/form_address_validator.rb
index 176601d605f..fe302148872 100644
--- a/app/validators/idv/in_person/form_address_validator.rb
+++ b/app/validators/idv/in_person/form_address_validator.rb
@@ -7,6 +7,26 @@ module FormAddressValidator
       included do
         validates :same_address_as_id,
                   presence: true
+
+        validates_with UspsInPersonProofing::TransliterableValidator,
+                       fields: [:city],
+                       reject_chars: /[^A-Za-z\-' ]/,
+                       message: ->(invalid_chars) do
+                         I18n.t(
+                           'in_person_proofing.form.address.errors.unsupported_chars',
+                           char_list: invalid_chars.join(', '),
+                         )
+                       end
+
+        validates_with UspsInPersonProofing::TransliterableValidator,
+                       fields: [:address1, :address2],
+                       reject_chars: /[^A-Za-z0-9\-' .\/#]/,
+                       message: ->(invalid_chars) do
+                         I18n.t(
+                           'in_person_proofing.form.address.errors.unsupported_chars',
+                           char_list: invalid_chars.join(', '),
+                         )
+                       end
       end
     end
   end
diff --git a/app/views/idv/address/new.html.erb b/app/views/idv/address/new.html.erb
index 8a552420925..53c024783ba 100644
--- a/app/views/idv/address/new.html.erb
+++ b/app/views/idv/address/new.html.erb
@@ -9,6 +9,15 @@
 
 <% title t('titles.doc_auth.address') %>
 
+<% if @presenter.puerto_rico_address? %>
+  <%= render AlertComponent.new(
+        type: :info,
+        class: 'margin-bottom-4',
+      ) do %>
+    <%= t('doc_auth.info.address_guidance_puerto_rico_html') %>
+  <% end %>
+<% end %>
+
 <%= render PageHeadingComponent.new.with_content(t('doc_auth.headings.address')) %>
 
 <%= simple_form_for(
@@ -21,25 +30,28 @@
         form: f,
         name: :address1,
         label: t('idv.form.address1'),
+        hint: @presenter.address_line1_hint,
         required: true,
         maxlength: 255,
-        input_html: { value: @pii['address1'] },
+        input_html: { value: @presenter.pii['address1'] },
       ) %>
   <%= render ValidatedFieldComponent.new(
         form: f,
         name: :address2,
-        label: t('idv.form.address2_optional'),
+        label: t('idv.form.address2'),
+        hint: @presenter.address_line2_hint,
         required: false,
         maxlength: 255,
-        input_html: { value: @pii['address2'] },
+        input_html: { value: @presenter.pii['address2'] },
       ) %>
   <%= render ValidatedFieldComponent.new(
         form: f,
         name: :city,
         label: t('idv.form.city'),
+        hint: @presenter.city_hint,
         required: true,
         maxlength: 255,
-        input_html: { value: @pii['city'] },
+        input_html: { value: @presenter.pii['city'] },
       ) %>
   <%= render ValidatedFieldComponent.new(
         form: f,
@@ -47,7 +59,7 @@
         collection: us_states_territories,
         label: t('idv.form.state'),
         required: true,
-        selected: @pii['state'],
+        selected: @presenter.pii['state'],
       ) %>
   <div class="tablet:grid-col-6">
     <%# using :tel for mobile numeric keypad %>
@@ -56,9 +68,10 @@
           name: :zipcode,
           as: :tel,
           label: t('idv.form.zipcode'),
+          hint: @presenter.zipcode_hint,
           required: true,
           pattern: '(\d{5}([\-]\d{4})?)',
-          input_html: { value: @pii['zipcode'], class: 'zipcode' },
+          input_html: { value: @presenter.pii['zipcode'], class: 'zipcode' },
           error_messages: {
             patternMismatch: t('idv.errors.pattern_mismatch.zipcode'),
           },
diff --git a/app/views/idv/in_person/ready_to_verify/show.html.erb b/app/views/idv/in_person/ready_to_verify/show.html.erb
index de00b1b3c50..4367928cfe1 100644
--- a/app/views/idv/in_person/ready_to_verify/show.html.erb
+++ b/app/views/idv/in_person/ready_to_verify/show.html.erb
@@ -108,10 +108,6 @@
         <%= t('date.day_names')[5] %>: <%= @presenter.selected_location_hours(:saturday) %><br>
         <%= t('date.day_names')[6] %>: <%= @presenter.selected_location_hours(:sunday) %>
       </div>
-      <div>
-        <span class="usa-sr-only"><%= t('in_person_proofing.body.barcode.retail_phone_label') %>: </span>
-        <%= @presenter.selected_location_details['phone'] %>
-      </div>
     </address>
   </section>
 <% end %>
diff --git a/app/views/partials/personal_key/_key.html.erb b/app/views/partials/personal_key/_key.html.erb
index 116e4198038..d8a62da1b9a 100644
--- a/app/views/partials/personal_key/_key.html.erb
+++ b/app/views/partials/personal_key/_key.html.erb
@@ -1,8 +1,14 @@
 <div class="border-y border-primary-light bg-primary-lightest padding-y-3 text-center">
   <div class="bg-personal-key padding-top-4 margin-y-2">
     <div class="personal-key-block">
-      <% code.split('-').each do |word| %>
-        <% concat(content_tag(:strong, word, class: 'personal-key-block__code', data: { personal_key: '' })) %>
+      <% code_html = safe_join(
+           code.split('-').map { |word| content_tag(:strong, word, class: 'personal-key-block__code') },
+         ) %>
+      <% if local_assigns[:code_example] %>
+        <div class="usa-sr-only"><%= t('users.personal_key.accessible_labels.code_example') %></div>
+        <div aria-hidden="true"><%= code_html %></div>
+      <% else %>
+        <%= code_html %>
       <% end %>
     </div>
   </div>
diff --git a/app/views/reactivate_account/index.html.erb b/app/views/reactivate_account/index.html.erb
index dedbd93e630..7007c7ca37f 100644
--- a/app/views/reactivate_account/index.html.erb
+++ b/app/views/reactivate_account/index.html.erb
@@ -29,13 +29,14 @@
   <%= t('instructions.account.reactivate.explanation') %>
 </p>
 
-<div class="scale-down">
+<figure class="margin-0 scale-down" aria-label="<%= t('users.personal_key.accessible_labels.preview') %>">
   <%= render 'partials/personal_key/key',
              code: 'XXXX-XXXX-XXXX-XXXX',
+             code_example: true,
              personal_key_generated_at: @personal_key_generated_at,
              show_save_buttons: false
   %>
-</div>
+</figure>
 
 <div class="grid-row">
   <div class="tablet:grid-col-10 tablet:grid-offset-1">
diff --git a/app/views/user_mailer/shared/_in_person_ready_to_verify.html.erb b/app/views/user_mailer/shared/_in_person_ready_to_verify.html.erb
index fbecd121669..2ebe6e8b6cb 100644
--- a/app/views/user_mailer/shared/_in_person_ready_to_verify.html.erb
+++ b/app/views/user_mailer/shared/_in_person_ready_to_verify.html.erb
@@ -83,8 +83,5 @@
       <%= t('date.day_names')[5] %>: <%= @presenter.selected_location_hours(:saturday) %><br>
       <%= t('date.day_names')[6] %>: <%= @presenter.selected_location_hours(:sunday) %>
     </div>
-    <div>
-      <%= @presenter.selected_location_details['phone'] %>
-    </div>
   </div>
 <% end %>
diff --git a/config/application.yml.default b/config/application.yml.default
index 4d730b64a56..65a69014dd5 100644
--- a/config/application.yml.default
+++ b/config/application.yml.default
@@ -73,6 +73,7 @@ doc_auth_error_sharpness_threshold: 40
 doc_auth_error_glare_threshold: 40
 database_pool_extra_connections_for_worker: 4
 database_pool_idp: 5
+database_socket: ''
 database_statement_timeout: 2_500
 database_timeout: 5_000
 deliver_mail_async: false
@@ -261,6 +262,7 @@ redis_url: redis://localhost:6379/0
 redis_pool_size: 10
 redis_session_pool_size: 10
 redis_throttle_pool_size: 5
+redis_irs_attempt_api_pool_size: 1
 reg_confirmed_email_max_attempts: 20
 reg_confirmed_email_window_in_minutes: 60
 reg_unconfirmed_email_max_attempts: 20
diff --git a/config/database.yml b/config/database.yml
index 2c6db8b6611..c9e9cd9efd1 100644
--- a/config/database.yml
+++ b/config/database.yml
@@ -78,7 +78,7 @@ production:
     <<: *defaults
     database: <%= IdentityConfig.store.database_name %>
     username: <%= IdentityConfig.store.database_username %>
-    host: <%= IdentityConfig.store.database_host %>
+    host: <%= IdentityConfig.store.database_socket.present? ?  IdentityConfig.store.database_socket : IdentityConfig.store.database_host %>
     password: <%= IdentityConfig.store.database_password %>
     pool: <%= primary_pool %>
     sslmode: 'verify-full'
diff --git a/config/initializers/job_configurations.rb b/config/initializers/job_configurations.rb
index b6b611de704..3685875a79e 100644
--- a/config/initializers/job_configurations.rb
+++ b/config/initializers/job_configurations.rb
@@ -140,6 +140,12 @@
         cron: cron_1w,
         args: -> { [Time.zone.now] },
       },
+      # Reject profiles that have been in fraud_review_pending for 30 days
+      fraud_rejection: {
+        class: 'FraudRejectionDailyJob',
+        cron: cron_24h,
+        args: -> { [Time.zone.today] },
+      },
     }
   end
   # rubocop:enable Metrics/BlockLength
diff --git a/config/initializers/redis.rb b/config/initializers/redis.rb
index f7b166a38a7..ca87a0a353e 100644
--- a/config/initializers/redis.rb
+++ b/config/initializers/redis.rb
@@ -1,8 +1,5 @@
 REDIS_POOL = ConnectionPool.new(size: IdentityConfig.store.redis_pool_size) do
-  Redis::Namespace.new(
-    'redis-pool',
-    redis: Redis.new(url: IdentityConfig.store.redis_url),
-  )
+  Redis.new(url: IdentityConfig.store.redis_url)
 end
 
 REDIS_THROTTLE_POOL = ConnectionPool.new(size: IdentityConfig.store.redis_throttle_pool_size) do
@@ -11,10 +8,3 @@
     redis: Redis.new(url: IdentityConfig.store.redis_throttle_url),
   )
 end
-
-REDIS_SESSION_POOL_WRAPPER = ConnectionPool::Wrapper.new(
-  size: IdentityConfig.store.redis_session_pool_size,
-) do
-  # redis-session-store does its own namespacing in session_store.rb
-  Redis.new(url: IdentityConfig.store.redis_url)
-end
diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb
index 47c1fd80942..713df6f1ae8 100644
--- a/config/initializers/session_store.rb
+++ b/config/initializers/session_store.rb
@@ -13,7 +13,7 @@
     ttl: IdentityConfig.store.session_timeout_in_minutes.minutes,
 
     key_prefix: "#{IdentityConfig.store.domain_name}:session:",
-    client: REDIS_SESSION_POOL_WRAPPER,
+    client_pool: REDIS_POOL,
   },
   on_session_load_error: SessionEncryptorErrorHandler,
   on_redis_down: proc { |error, _env, _sid| raise error },
diff --git a/config/locales/doc_auth/en.yml b/config/locales/doc_auth/en.yml
index 0b1f16f6464..23fe39ad651 100644
--- a/config/locales/doc_auth/en.yml
+++ b/config/locales/doc_auth/en.yml
@@ -143,6 +143,8 @@ en:
       only_add_sp_services_html: You are trying to access
         <strong>%{service_provider_name}</strong> services
     info:
+      address_guidance_puerto_rico_html: For Puerto Rico residents:<br><br>Please
+        enter urbanization or condominium on address line 2.
       camera_required: Your mobile phone must have a camera and a web browser.
       capture_status_big_document: Too Close
       capture_status_capturing: Capturing
diff --git a/config/locales/doc_auth/es.yml b/config/locales/doc_auth/es.yml
index 81d05bfbcd6..9b0cbad34db 100644
--- a/config/locales/doc_auth/es.yml
+++ b/config/locales/doc_auth/es.yml
@@ -172,6 +172,9 @@ es:
       only_add_sp_services_html: Está tratando de acceder a los servicios
         <strong>%{service_provider_name}</strong>
     info:
+      address_guidance_puerto_rico_html: Para residentes de Puerto
+        Rico:<br><br>Incluyan en su dirección la urbanización o departamento en
+        la línea de dirección 2.
       camera_required: Su teléfono móvil debe tener una cámara y un navegador web.
       capture_status_big_document: Demasiado cerca
       capture_status_capturing: Capturando
diff --git a/config/locales/doc_auth/fr.yml b/config/locales/doc_auth/fr.yml
index 440ada355b8..6bb17c70dee 100644
--- a/config/locales/doc_auth/fr.yml
+++ b/config/locales/doc_auth/fr.yml
@@ -178,6 +178,9 @@ fr:
       only_add_sp_services_html: Vous essayez d’accéder aux services de
         <strong>%{service_provider_name}</strong>
     info:
+      address_guidance_puerto_rico_html: Pour les résidents de Porto
+        Rico:<br><br>Veuillez indiquer l’urbanisation ou la copropriété à la
+        ligne 2 de votre adresse.
       camera_required: Votre téléphone portable doit avoir une caméra et un navigateur Web.
       capture_status_big_document: Trop près
       capture_status_capturing: Prendre la photo
diff --git a/config/locales/idv/en.yml b/config/locales/idv/en.yml
index 6efa7febe14..ef8b12b0005 100644
--- a/config/locales/idv/en.yml
+++ b/config/locales/idv/en.yml
@@ -110,7 +110,7 @@ en:
         - You’ll have to re-enter your personal information, like your name,
           state-issued ID, etc.
     form:
-      address1: Address
+      address1: Address line 1
       address2: Address line 2
       address2_optional: Address line 2 (optional)
       city: City
diff --git a/config/locales/idv/es.yml b/config/locales/idv/es.yml
index 08d77ffb78d..9ae6520090d 100644
--- a/config/locales/idv/es.yml
+++ b/config/locales/idv/es.yml
@@ -119,7 +119,7 @@ es:
         - Tendrá que volver a ingresar su información personal, como su nombre,
           documento de identidad emitido por el estado, etc.
     form:
-      address1: Dirección
+      address1: Línea de dirección 1
       address2: Línea de dirección 2
       address2_optional: Línea de dirección 2 (opcional)
       city: Ciudad
diff --git a/config/locales/idv/fr.yml b/config/locales/idv/fr.yml
index 409b423caa6..f34e8031dae 100644
--- a/config/locales/idv/fr.yml
+++ b/config/locales/idv/fr.yml
@@ -124,7 +124,7 @@ fr:
         - Vous devrez ressaisir vos informations personnelles, comme votre nom,
           pièce d’identité officielle, etc.
     form:
-      address1: Adresse
+      address1: Adresse Ligne 1
       address2: Adresse Ligne 2
       address2_optional: Adresse Ligne 2 (optional)
       city: Ville
diff --git a/config/locales/in_person_proofing/en.yml b/config/locales/in_person_proofing/en.yml
index 9342ce86453..35724d29f4b 100644
--- a/config/locales/in_person_proofing/en.yml
+++ b/config/locales/in_person_proofing/en.yml
@@ -19,7 +19,6 @@ en:
         questions: Question?
         retail_hours: Retail hours
         retail_hours_closed: Closed
-        retail_phone_label: Phone number
         return_to_partner_html: You may now close this window or %{link} to complete any
           next steps you can access until your identity has been verified.
         return_to_partner_link: return to %{sp_name}
@@ -33,7 +32,6 @@ en:
         prompt_detail_b: Alternatively, if you are having trouble adding your ID online,
           you may be able to try in person at limited post office locations.
       location:
-        contact_info_heading: Contact Information
         distance:
           one: '%{count} mile away'
           other: '%{count} miles away'
@@ -43,7 +41,6 @@ en:
           to verify in person at a local United States Post Office in select
           locations.
         none_found: No locations found.
-        phone: 'Phone:'
         po_search:
           address_search_hint: 'Example: 1234 N Example St., Allentown, PA 12345'
           address_search_label: Enter an address to find a Post Office near you
@@ -59,8 +56,7 @@ en:
             other: There are %{count} participating Post Offices within 50 miles of
               %{address}.
           results_instructions: Select a Post Office location below, or search again using
-            a different address. For facility accessibility, use the contact
-            information listed for the Post Office location.
+            a different address.
           search_button: Search
         post_office: Post Office ™
         retail_hours_heading: Retail Hours
@@ -89,6 +85,10 @@ en:
           ID in person.
     form:
       address:
+        errors:
+          unsupported_chars: 'Our system cannot read the following characters:
+            %{char_list}. Please try again using substitutes for those
+            characters.'
         same_address: Is this address displayed on the state-issued ID that you are
           bringing to the Post Office?
         same_address_choice_no: I have a different address on my ID
@@ -101,6 +101,9 @@ en:
           year: 'Example: 1986'
         dob: Date of birth
         dob_hint: 'Example: 4 28 1986'
+        errors:
+          unsupported_chars: 'Our system cannot read the following characters:
+            %{char_list}. Please try again using the characters on your ID.'
         first_name: First name
         last_name: Last name
         memorable_date:
diff --git a/config/locales/in_person_proofing/es.yml b/config/locales/in_person_proofing/es.yml
index 21f038496cb..03f7fa8d6d2 100644
--- a/config/locales/in_person_proofing/es.yml
+++ b/config/locales/in_person_proofing/es.yml
@@ -21,7 +21,6 @@ es:
         questions: '¿Tiene alguna pregunta?'
         retail_hours: Horario de atención al público
         retail_hours_closed: Cerrado
-        retail_phone_label: Número de teléfono
         return_to_partner_html: Ya puede cerrar esta ventana o %{link} para finalizar
           los pasos a los que tenga acceso hasta que su identidad sea
           verificada.
@@ -36,7 +35,6 @@ es:
         prompt_detail_b: Si tiene problemas para añadir su documento de identidad en
           línea, puede intentarlo en persona en algunas oficinas de correos.
       location:
-        contact_info_heading: Información del contacto
         distance:
           one: '%{count} milla de distancia'
           other: '%{count} millas de distancia'
@@ -46,7 +44,6 @@ es:
           posible que pueda realizar la verificación en persona en una oficina
           de correos local de los Estados Unidos en determinadas localidades.
         none_found: No se encontraron localidades.
-        phone: 'Telefono:'
         po_search:
           address_search_hint: 'Ejemplo: 1234 N Example St., Allentown, PA 12345'
           address_search_label: Introduzca una dirección para encontrar una Oficina de
@@ -67,8 +64,6 @@ es:
               millas de la %{address}.
           results_instructions: Seleccione una ubicación de la Oficina de Correos a
             continuación, o busque de nuevo utilizando una dirección diferente.
-            Para la accesibilidad de las instalaciones, utilice la información
-            de contacto que aparece para la ubicación de la Oficina de Correos.
           search_button: Búsqueda
         post_office: Oficina de Correos
         retail_hours_heading: Horario de atención al público
@@ -101,6 +96,10 @@ es:
           información para confirmar que coincide con su cédula en persona.
     form:
       address:
+        errors:
+          unsupported_chars: 'Los siguientes caracteres no pueden ser leídos por nuestro
+            sistema: %{char_list}. Inténtelo nuevamente usando sustitutos para
+            estos caracteres.'
         same_address: '¿Aparece esta dirección en la cédula de identidad emitido por el
           Estado que va a llevar a la oficina de Correos?'
         same_address_choice_no: Tengo una dirección diferente en mi cédula de identidad
@@ -113,6 +112,10 @@ es:
           year: 'Ejemplo: 1986'
         dob: Fecha de nacimiento
         dob_hint: 'Ejemplo: 4 28 1986'
+        errors:
+          unsupported_chars: 'Los siguientes caracteres no pueden ser leídos por nuestro
+            sistema: %{char_list}. Inténtelo nuevamente usando los caracteres de
+            su documento de identidad.'
         first_name: Nombre
         last_name: Apellido
         memorable_date:
diff --git a/config/locales/in_person_proofing/fr.yml b/config/locales/in_person_proofing/fr.yml
index 4a6b33fc8a3..e2b5b154caa 100644
--- a/config/locales/in_person_proofing/fr.yml
+++ b/config/locales/in_person_proofing/fr.yml
@@ -22,7 +22,6 @@ fr:
         questions: Des questions?
         retail_hours: Heures de vente au détail
         retail_hours_closed: Fermé
-        retail_phone_label: Numéro de téléphone
         return_to_partner_html: Vous pouvez maintenant fermer cette fenêtre ou %{link}
           afin d’effectuer toutes les étapes suivantes auxquelles vous pouvez
           accéder jusqu’à ce que votre identité ait été confitmée.
@@ -38,7 +37,6 @@ fr:
           d’identité en ligne, vous pourrez peut-être essayer de le faire en
           personne dans certains bureaux de poste.
       location:
-        contact_info_heading: Information de contact
         distance:
           one: 'à %{count} mile'
           other: 'à %{count} miles'
@@ -48,7 +46,6 @@ fr:
           vous pourrez peut-être vérifier en personne dans un bureau de poste
           américain local dans certains endroits.
         none_found: Aucun endroit trouvé.
-        phone: 'Téléphone:'
         po_search:
           address_search_hint: 'Exemple : 1234 N Example St., Allentown, PA 12345'
           address_search_label: Entrez une adresse pour trouver un bureau de poste près de chez vous.
@@ -68,8 +65,6 @@ fr:
               miles autour de %{address}.
           results_instructions: Sélectionnez un emplacement de bureau de poste ci-dessous,
             ou effectuez une nouvelle recherche en utilisant une autre adresse.
-            Pour l’accessibilité des installations, utilisez les informations de
-            contact indiquées pour l’emplacement du bureau de poste.
           search_button: Rechercher
         post_office: Bureau de Poste
         retail_hours_heading: Heures de vente au détail
@@ -103,6 +98,10 @@ fr:
           d’identité en personne.
     form:
       address:
+        errors:
+          unsupported_chars: 'Notre système ne parvient pas à lire les caractères suivants
+            : %{char_list}. Veuillez réessayer en utilisant d’autres caractères
+            alternatifs.'
         same_address: Cette adresse figure-t-elle sur la pièce d’identité délivrée par
           l’État que vous apportez au bureau de poste?
         same_address_choice_no: J’ai une adresse différente sur mon document d’identité
@@ -115,6 +114,10 @@ fr:
           year: 'Exemple: 1986'
         dob: Date de naissance
         dob_hint: 'Exemple: 4 28 1986'
+        errors:
+          unsupported_chars: 'Notre système ne parvient pas à lire les caractères suivants
+            : %{char_list}. Veuillez réessayer en utilisant les caractères de
+            votre carte d’identité.'
         first_name: Prénom
         last_name: Nom de famille
         memorable_date:
diff --git a/config/locales/users/en.yml b/config/locales/users/en.yml
index 822db41cfe6..dd061d38381 100644
--- a/config/locales/users/en.yml
+++ b/config/locales/users/en.yml
@@ -19,6 +19,9 @@ en:
       instructions: Enter your password to confirm that you want to delete your account.
       subheading: 'If you delete your account:'
     personal_key:
+      accessible_labels:
+        code_example: A personal key example with 16 characters
+        preview: Personal key preview
       close: Close
       confirmation_error: You’ve entered an incorrect personal key.
       generated_on_html: Your personal key was generated on %{date}
diff --git a/config/locales/users/es.yml b/config/locales/users/es.yml
index 07abc67e688..b9e7d13d2d8 100644
--- a/config/locales/users/es.yml
+++ b/config/locales/users/es.yml
@@ -20,6 +20,9 @@ es:
       instructions: Ingrese su contraseña para confirmar que desea eliminar su cuenta.
       subheading: 'Si elimina su cuenta:'
     personal_key:
+      accessible_labels:
+        code_example: Un ejemplo de clave personal con 16 caracteres
+        preview: Vista previa de la clave personal
       close: Cerrar
       confirmation_error: Ha ingresado una clave personal incorrecta.
       generated_on_html: Tu clave personal fue generada el %{date}
diff --git a/config/locales/users/fr.yml b/config/locales/users/fr.yml
index 06555d77fd4..3cbf54382e6 100644
--- a/config/locales/users/fr.yml
+++ b/config/locales/users/fr.yml
@@ -22,6 +22,9 @@ fr:
         supprimer votre compte.
       subheading: 'Si vous supprimez votre compte:'
     personal_key:
+      accessible_labels:
+        code_example: Un exemple de code personnel à 16 caractères
+        preview: Aperçu du code personnel
       close: Fermer
       confirmation_error: Vous avez entré un clé personnelle erronée.
       generated_on_html: Votre clé personnelle a été générée le %{date}
diff --git a/db/primary_migrate/20230307203559_add_index_on_fraud_review_pending_to_profiles.rb b/db/primary_migrate/20230307203559_add_index_on_fraud_review_pending_to_profiles.rb
new file mode 100644
index 00000000000..4635dc24d5b
--- /dev/null
+++ b/db/primary_migrate/20230307203559_add_index_on_fraud_review_pending_to_profiles.rb
@@ -0,0 +1,7 @@
+class AddIndexOnFraudReviewPendingToProfiles < ActiveRecord::Migration[7.0]
+  disable_ddl_transaction!
+
+  def change
+    add_index :profiles, [:fraud_review_pending], algorithm: :concurrently
+  end
+end
diff --git a/db/schema.rb b/db/schema.rb
index 8e240675cd5..7a161d48c19 100644
--- a/db/schema.rb
+++ b/db/schema.rb
@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema[7.0].define(version: 2023_02_14_213731) do
+ActiveRecord::Schema[7.0].define(version: 2023_03_07_203559) do
   # These are extensions that must be enabled in order to support this database
   enable_extension "pg_stat_statements"
   enable_extension "pgcrypto"
@@ -433,6 +433,7 @@
     t.string "initiating_service_provider_issuer"
     t.boolean "fraud_review_pending", default: false
     t.boolean "fraud_rejection", default: false
+    t.index ["fraud_review_pending"], name: "index_profiles_on_fraud_review_pending"
     t.index ["name_zip_birth_year_signature"], name: "index_profiles_on_name_zip_birth_year_signature"
     t.index ["reproof_at"], name: "index_profiles_on_reproof_at"
     t.index ["ssn_signature"], name: "index_profiles_on_ssn_signature"
diff --git a/lib/identity_config.rb b/lib/identity_config.rb
index 714cf08c821..1f70d93cd85 100644
--- a/lib/identity_config.rb
+++ b/lib/identity_config.rb
@@ -139,6 +139,7 @@ def self.build_store(config_map)
     config.add(:database_password, type: :string)
     config.add(:database_pool_extra_connections_for_worker, type: :integer)
     config.add(:database_pool_idp, type: :integer)
+    config.add(:database_socket, type: :string)
     config.add(:database_statement_timeout, type: :integer)
     config.add(:database_timeout, type: :integer)
     config.add(:database_username, type: :string)
@@ -358,6 +359,7 @@ def self.build_store(config_map)
     config.add(:recovery_code_length, type: :integer)
     config.add(:recurring_jobs_disabled_names, type: :json)
     config.add(:redis_irs_attempt_api_url)
+    config.add(:redis_irs_attempt_api_pool_size, type: :integer)
     config.add(:redis_throttle_url)
     config.add(:redis_url)
     config.add(:redis_pool_size, type: :integer)
diff --git a/lib/tasks/review_profile.rake b/lib/tasks/review_profile.rake
index e5a14b85857..11dd01f2c72 100644
--- a/lib/tasks/review_profile.rake
+++ b/lib/tasks/review_profile.rake
@@ -41,7 +41,7 @@ namespace :users do
       if user.fraud_review_pending? && user.proofing_component.review_eligible?
         profile = user.fraud_review_pending_profile
 
-        profile.reject_for_fraud
+        profile.reject_for_fraud(notify_user: true)
 
         puts "User's profile has been deactivated due to fraud rejection."
       elsif !user.proofing_component.review_eligible?
diff --git a/scripts/validate-workspaces.js b/scripts/validate-workspaces.js
index 85ce5b71906..8d78988191d 100755
--- a/scripts/validate-workspaces.js
+++ b/scripts/validate-workspaces.js
@@ -147,7 +147,6 @@ const EXCEPTIONS = {
     'app/javascript/packages/memorable-date/package.json',
     'app/javascript/packages/normalize-yaml/package.json',
     'app/javascript/packages/password-toggle/package.json',
-    'app/javascript/packages/personal-key-input/package.json',
     'app/javascript/packages/phone-input/package.json',
     'app/javascript/packages/spinner-button/package.json',
     'app/javascript/packages/time-element/package.json',
diff --git a/spec/controllers/idv/image_uploads_controller_spec.rb b/spec/controllers/idv/image_uploads_controller_spec.rb
index adc7a82cfae..58a3bd64182 100644
--- a/spec/controllers/idv/image_uploads_controller_spec.rb
+++ b/spec/controllers/idv/image_uploads_controller_spec.rb
@@ -689,7 +689,7 @@
         expect(json[:errors]).to eq [
           {
             field: 'front',
-            message: 'We couldn’t verify the front of your ID. Try taking a new picture.',
+            message: I18n.t('doc_auth.errors.general.multiple_front_id_failures'),
           },
         ]
       end
diff --git a/spec/controllers/idv/in_person/usps_locations_controller_spec.rb b/spec/controllers/idv/in_person/usps_locations_controller_spec.rb
index 93495e9140b..b97ab2dc175 100644
--- a/spec/controllers/idv/in_person/usps_locations_controller_spec.rb
+++ b/spec/controllers/idv/in_person/usps_locations_controller_spec.rb
@@ -25,7 +25,6 @@
       usps_location: {
         formatted_city_state_zip: 'BALTIMORE, MD, 21233-9715',
         name: 'BALTIMORE',
-        phone: '410-555-1212',
         saturday_hours: '8:30 AM - 5:00 PM',
         street_address: '123 Fake St.',
         sunday_hours: 'Closed',
@@ -52,7 +51,6 @@
           city: 'ARLINGTON',
           distance: '6.02 mi',
           name: 'ARLINGTON',
-          phone: '703-993-0072',
           saturday_hours: '9:00 AM - 1:00 PM',
           state: 'VA',
           sunday_hours: 'Closed',
@@ -63,7 +61,6 @@
           city: 'WASHINGTON',
           distance: '6.59 mi',
           name: 'FRIENDSHIP',
-          phone: '202-842-3332',
           saturday_hours: '8:00 AM - 4:00 PM',
           state: 'DC',
           sunday_hours: '10:00 AM - 4:00 PM',
@@ -74,7 +71,6 @@
           city: 'CHEVY CHASE',
           distance: '8.99 mi',
           name: 'BETHESDA',
-          phone: '301-941-2670',
           saturday_hours: '9:00 AM - 4:00 PM',
           state: 'MD',
           sunday_hours: 'Closed',
diff --git a/spec/controllers/saml_idp_controller_spec.rb b/spec/controllers/saml_idp_controller_spec.rb
index 935d220d9a1..456d874848f 100644
--- a/spec/controllers/saml_idp_controller_spec.rb
+++ b/spec/controllers/saml_idp_controller_spec.rb
@@ -223,7 +223,7 @@
     end
 
     it 'accepts requests with correct cert and correct session index and renders logout response' do
-      REDIS_POOL.with { |namespaced| namespaced.redis.flushdb }
+      REDIS_POOL.with { |client| client.flushdb }
       session_accessor = OutOfBandSessionAccessor.new(session_id)
       session_accessor.put_pii(foo: 'bar')
       saml_request = OneLogin::RubySaml::Logoutrequest.new
@@ -260,7 +260,7 @@
       logout_response = OneLogin::RubySaml::Logoutresponse.new(response.body)
       expect(logout_response.success?).to eq(true)
       expect(logout_response.in_response_to).to eq(saml_request.uuid)
-      REDIS_POOL.with { |namespaced| namespaced.redis.flushdb }
+      REDIS_POOL.with { |client| client.flushdb }
     end
 
     it 'rejects requests from a correct cert but no session index' do
diff --git a/spec/controllers/test/device_profiling_controller_spec.rb b/spec/controllers/test/device_profiling_controller_spec.rb
index ecd09ab62b1..36055cca13b 100644
--- a/spec/controllers/test/device_profiling_controller_spec.rb
+++ b/spec/controllers/test/device_profiling_controller_spec.rb
@@ -4,9 +4,9 @@
   let(:session_id) { SecureRandom.uuid }
 
   around do |ex|
-    REDIS_POOL.with { |namespaced| namespaced.redis.flushdb }
+    REDIS_POOL.with { |client| client.flushdb }
     ex.run
-    REDIS_POOL.with { |namespaced| namespaced.redis.flushdb }
+    REDIS_POOL.with { |client| client.flushdb }
   end
 
   describe '#index' do
diff --git a/spec/features/idv/doc_auth/address_step_spec.rb b/spec/features/idv/doc_auth/address_step_spec.rb
index f2b4440e5b3..fffcb328841 100644
--- a/spec/features/idv/doc_auth/address_step_spec.rb
+++ b/spec/features/idv/doc_auth/address_step_spec.rb
@@ -4,38 +4,56 @@
   include IdvStepHelper
   include DocAuthHelper
 
-  before do
-    sign_in_and_2fa_user
-    complete_doc_auth_steps_before_address_step
+  context 'with mainland address' do
+    before do
+      sign_in_and_2fa_user
+      complete_doc_auth_steps_before_address_step
+    end
+
+    it 'allows the user to enter in a new address' do
+      expect_step_indicator_current_step(t('step_indicator.flows.idv.verify_info'))
+      expect(page).not_to have_content(t('doc_auth.info.address_guidance_puerto_rico_html'))
+      expect(page).not_to have_content(t('forms.example'))
+      fill_out_address_form_ok
+
+      click_button t('forms.buttons.submit.update')
+      expect(page).to have_current_path(idv_verify_info_path)
+    end
+
+    it 'does not allow the user to enter bad address info' do
+      fill_out_address_form_fail
+
+      click_button t('forms.buttons.submit.update')
+      expect(page).to have_current_path(idv_address_path)
+    end
+
+    it 'allows the user to click back to return to the verify step' do
+      click_doc_auth_back_link
+
+      expect(page).to have_current_path(idv_verify_info_path)
+    end
+
+    it 'sends the user to start doc auth if there is no pii from the document in session' do
+      visit sign_out_url
+      sign_in_and_2fa_user
+      visit idv_address_path
+
+      expect(page).to have_current_path(idv_doc_auth_welcome_step)
+    end
   end
 
-  it 'allows the user to enter in a new address' do
-    expect_step_indicator_current_step(t('step_indicator.flows.idv.verify_info'))
-
-    fill_out_address_form_ok
-
-    click_button t('forms.buttons.submit.update')
-    expect(page).to have_current_path(idv_verify_info_path)
-  end
-
-  it 'does not allows the user to enter bad address info' do
-    fill_out_address_form_fail
-
-    click_button t('forms.buttons.submit.update')
-    expect(page).to have_current_path(idv_address_path)
-  end
-
-  it 'allows the user to click back to return to the verify step' do
-    click_doc_auth_back_link
-
-    expect(page).to have_current_path(idv_verify_info_path)
-  end
-
-  it 'sends the user to start doc auth if there is no pii from the document in session' do
-    visit sign_out_url
-    sign_in_and_2fa_user
-    visit idv_address_path
-
-    expect(page).to have_current_path(idv_doc_auth_welcome_step)
+  context 'with Puerto Rico address' do
+    before do
+      sign_in_and_2fa_user
+      complete_doc_auth_steps_before_document_capture_step
+      complete_document_capture_step_with_yml('spec/fixtures/puerto_rico_resident.yml')
+      complete_ssn_step
+      click_button t('idv.buttons.change_address_label')
+    end
+
+    it 'shows address guidance and hint text' do
+      expect(page.body).to include(t('doc_auth.info.address_guidance_puerto_rico_html'))
+      expect(page).to have_content(t('forms.example'))
+    end
   end
 end
diff --git a/spec/features/idv/doc_auth/document_capture_step_spec.rb b/spec/features/idv/doc_auth/document_capture_step_spec.rb
index a59ea8dece3..ef3ea2810f7 100644
--- a/spec/features/idv/doc_auth/document_capture_step_spec.rb
+++ b/spec/features/idv/doc_auth/document_capture_step_spec.rb
@@ -150,8 +150,8 @@
         },
       )
 
-      attach_file 'Front of your ID', 'app/assets/images/logo.png'
-      attach_file 'Back of your ID', 'app/assets/images/logo.png'
+      attach_file I18n.t('doc_auth.headings.document_capture_front'), 'app/assets/images/logo.png'
+      attach_file I18n.t('doc_auth.headings.document_capture_back'), 'app/assets/images/logo.png'
 
       form = page.find('#document-capture-form')
       front_url = form['data-front-image-upload-url']
diff --git a/spec/features/idv/doc_auth/test_credentials_spec.rb b/spec/features/idv/doc_auth/test_credentials_spec.rb
index 2117b529bdf..3b257a90c3b 100644
--- a/spec/features/idv/doc_auth/test_credentials_spec.rb
+++ b/spec/features/idv/doc_auth/test_credentials_spec.rb
@@ -18,10 +18,7 @@
 
   it 'allows proofing with test credentials' do
     complete_doc_auth_steps_before_document_capture_step
-
-    attach_file 'Front of your ID', File.expand_path('spec/fixtures/ial2_test_credential.yml')
-    attach_file 'Back of your ID', File.expand_path('spec/fixtures/ial2_test_credential.yml')
-    click_on 'Submit'
+    complete_document_capture_step_with_yml('spec/fixtures/ial2_test_credential.yml')
 
     expect(page).to have_current_path(idv_ssn_path)
 
@@ -42,7 +39,7 @@
       'Back of your ID',
       File.expand_path('spec/fixtures/ial2_test_credential_forces_error.yml'),
     )
-    click_on 'Submit'
+    click_on I18n.t('forms.buttons.submit.default')
 
     expect(page).to have_content(I18n.t('doc_auth.errors.alerts.barcode_content_check'))
     expect(page).to have_current_path(idv_doc_auth_document_capture_step)
diff --git a/spec/features/idv/in_person_spec.rb b/spec/features/idv/in_person_spec.rb
index 021ab7ec7de..40e8e4e86aa 100644
--- a/spec/features/idv/in_person_spec.rb
+++ b/spec/features/idv/in_person_spec.rb
@@ -411,4 +411,76 @@
       expect(page).to have_current_path(idv_doc_auth_welcome_step)
     end
   end
+
+  context 'transliteration' do
+    before(:each) do
+      allow(IdentityConfig.store).to receive(:usps_ipp_transliteration_enabled).
+        and_return(true)
+    end
+    it 'shows validation errors', allow_browser_log: true do
+      sign_in_and_2fa_user
+      begin_in_person_proofing
+      complete_location_step
+      complete_prepare_step
+      expect(page).to have_current_path(idv_in_person_step_path(step: :state_id), wait: 10)
+
+      fill_out_state_id_form_ok
+      fill_in t('in_person_proofing.form.state_id.first_name'), with: 'T0mmy "Lee"'
+      fill_in t('in_person_proofing.form.state_id.last_name'), with: 'Джейкоб'
+      click_idv_continue
+      expect(page).to have_content(
+        I18n.t(
+          'in_person_proofing.form.state_id.errors.unsupported_chars',
+          char_list: '", 0',
+        ),
+      )
+
+      expect(page).to have_content(
+        I18n.t(
+          'in_person_proofing.form.state_id.errors.unsupported_chars',
+          char_list: 'Д, б, е, ж, й, к, о',
+        ),
+      )
+
+      fill_in t('in_person_proofing.form.state_id.first_name'),
+              with: InPersonHelper::GOOD_FIRST_NAME
+      fill_in t('in_person_proofing.form.state_id.last_name'), with: InPersonHelper::GOOD_LAST_NAME
+      click_idv_continue
+
+      expect(page).to have_current_path(idv_in_person_step_path(step: :address), wait: 10)
+      fill_out_address_form_ok
+
+      fill_in t('idv.form.address1'), with: 'Джордж'
+      fill_in t('idv.form.address2_optional'), with: '(Nope) = %'
+      fill_in t('idv.form.city'), with: 'Елена'
+      click_idv_continue
+
+      expect(page).to have_content(
+        I18n.t(
+          'in_person_proofing.form.address.errors.unsupported_chars',
+          char_list: 'Д, д, ж, о, р',
+        ),
+      )
+
+      expect(page).to have_content(
+        I18n.t(
+          'in_person_proofing.form.address.errors.unsupported_chars',
+          char_list: '%, (, ), =',
+        ),
+      )
+
+      expect(page).to have_content(
+        I18n.t(
+          'in_person_proofing.form.address.errors.unsupported_chars',
+          char_list: 'Е, а, е, л, н',
+        ),
+      )
+
+      fill_in t('idv.form.address1'), with: InPersonHelper::GOOD_ADDRESS1
+      fill_in t('idv.form.address2_optional'), with: InPersonHelper::GOOD_ADDRESS2
+      fill_in t('idv.form.city'), with: InPersonHelper::GOOD_CITY
+      click_idv_continue
+      expect(page).to have_current_path(idv_in_person_step_path(step: :ssn), wait: 10)
+    end
+  end
 end
diff --git a/spec/features/phone/add_phone_spec.rb b/spec/features/phone/add_phone_spec.rb
index 37b65286867..8444ee068b9 100644
--- a/spec/features/phone/add_phone_spec.rb
+++ b/spec/features/phone/add_phone_spec.rb
@@ -205,10 +205,13 @@
   end
 
   scenario 'adding a phone with a reCAPTCHA challenge', js: true do
+    user = create(:user, :signed_up)
+
     allow(IdentityConfig.store).to receive(:phone_recaptcha_mock_validator).and_return(true)
     allow(IdentityConfig.store).to receive(:phone_recaptcha_score_threshold).and_return(0.6)
+    fake_analytics = FakeAnalytics.new(user:)
+    allow_any_instance_of(ApplicationController).to receive(:analytics).and_return(fake_analytics)
 
-    user = create(:user, :signed_up)
     sign_in_and_2fa_user(user)
     within('.sidenav') { click_on t('account.navigation.add_phone_number') }
 
@@ -221,6 +224,23 @@
     expect(page).to have_content(t('two_factor_authentication.header_text'))
     visit account_path
     within('.sidenav') { click_on t('account.navigation.add_phone_number') }
+    expect(fake_analytics).to have_logged_event(
+      'reCAPTCHA verify result received',
+      hash_including(
+        recaptcha_result: {
+          'success' => true,
+          'score' => 0.5,
+          'error-codes' => [],
+          'challenge_ts' => kind_of(String),
+          'hostname' => anything,
+        },
+        evaluated_as_valid: false,
+        score_threshold: 0.6,
+        recaptcha_version: 3,
+        exception_class: nil,
+        phone_country_code: 'CA',
+      ),
+    )
 
     # Passing international should display OTP confirmation
     fill_in t('two_factor_authentication.phone_label'), with: '3065550100'
diff --git a/spec/fixtures/puerto_rico_resident.yml b/spec/fixtures/puerto_rico_resident.yml
new file mode 100644
index 00000000000..b52658f3be8
--- /dev/null
+++ b/spec/fixtures/puerto_rico_resident.yml
@@ -0,0 +1,12 @@
+document:
+  first_name: FAKEY
+  last_name: MCFAKERSON
+  middle_name: FAKER
+  address1: URB EL CONQUISTADOR
+  address2: Q41 Calle Rojo 19PR
+  city: San Juan
+  state: PR
+  zipcode: 00976
+  dob: 01/06/1998
+  phone: +1 787-555-1212
+  state_id_jurisdiction: 'PR'
diff --git a/spec/jobs/fraud_rejection_daily_job_spec.rb b/spec/jobs/fraud_rejection_daily_job_spec.rb
new file mode 100644
index 00000000000..9a1022acef3
--- /dev/null
+++ b/spec/jobs/fraud_rejection_daily_job_spec.rb
@@ -0,0 +1,25 @@
+require 'rails_helper'
+
+RSpec.describe FraudRejectionDailyJob do
+  subject(:job) { FraudRejectionDailyJob.new }
+  let(:job_analytics) { FakeAnalytics.new }
+
+  before do
+    allow(job).to receive(:analytics).and_return(job_analytics)
+  end
+
+  describe '#perform' do
+    it 'rejects profiles which have been review pending for more than 30 days' do
+      create(:profile, fraud_review_pending: true, verified_at: 31.days.ago)
+      create(:profile, fraud_review_pending: true, verified_at: 20.days.ago)
+
+      rejected_profiles = Profile.where(fraud_rejection: true)
+
+      expect { job.perform(Time.zone.today) }.to change { rejected_profiles.count }.by(1)
+      expect(job_analytics).to have_logged_event(
+        'Fraud: Automatic Fraud Rejection',
+        verified_at: rejected_profiles.first.verified_at,
+      )
+    end
+  end
+end
diff --git a/spec/mailers/user_mailer_spec.rb b/spec/mailers/user_mailer_spec.rb
index 39f58c6e340..c31c0471968 100644
--- a/spec/mailers/user_mailer_spec.rb
+++ b/spec/mailers/user_mailer_spec.rb
@@ -561,7 +561,7 @@ def expect_email_body_to_have_help_and_contact_links
       create(
         :in_person_enrollment,
         :pending,
-        selected_location_details: { name: 'FRIENDSHIP', phone: '202-842-3332' },
+        selected_location_details: { name: 'FRIENDSHIP' },
         status_updated_at: Time.zone.now - 2.hours,
       )
     end
@@ -572,12 +572,6 @@ def expect_email_body_to_have_help_and_contact_links
       )
     end
 
-    it 'renders the phone number' do
-      expect(mail.html_part.body).to have_content(
-        '202-842-3332',
-      )
-    end
-
     it_behaves_like 'a system email'
     it_behaves_like 'an email that respects user email locale preference'
   end
diff --git a/spec/models/profile_spec.rb b/spec/models/profile_spec.rb
index e0a6eb6fb96..b79ceaf2990 100644
--- a/spec/models/profile_spec.rb
+++ b/spec/models/profile_spec.rb
@@ -313,17 +313,7 @@
   end
 
   describe '#reject_for_fraud' do
-    let(:profile) do
-      profile = create(:profile, user: user)
-      profile.reject_for_fraud
-      profile
-    end
-
-    it 'sets fraud_rejection to true' do
-      expect(profile).to_not be_active
-    end
-
-    it 'sends an email' do
+    before do
       # This is necessary because UserMailer reaches into the
       # controller's params. As this is a model spec, we have to fake
       # the params object.
@@ -332,8 +322,36 @@
         email_address: OpenStruct.new(user_id: 'fake_user_id', email: 'fake_user@test.com'),
       )
       allow_any_instance_of(UserMailer).to receive(:params).and_return(fake_params)
+    end
+
+    context 'it notifies the user' do
+      let(:profile) do
+        profile = create(:profile, user: user, fraud_review_pending: true)
+        profile.reject_for_fraud(notify_user: true)
+        profile
+      end
+
+      it 'sets fraud_rejection to true' do
+        expect(profile).to_not be_active
+      end
+
+      it 'sends an email' do
+        expect { profile }.to change(ActionMailer::Base.deliveries, :count).by(1)
+      end
+    end
+
+    context 'it does not notify the user' do
+      let(:profile) do
+        profile = create(:profile, user: user, fraud_review_pending: true)
+        profile.reject_for_fraud(notify_user: false)
+        profile
+      end
 
-      expect { profile }.to change(ActionMailer::Base.deliveries, :count).by(1)
+      it 'does not send an email' do
+        expect(profile).to_not be_active
+
+        expect { profile }.to change(ActionMailer::Base.deliveries, :count).by(0)
+      end
     end
   end
 
diff --git a/spec/presenters/idv/in_person/ready_to_verify_presenter_spec.rb b/spec/presenters/idv/in_person/ready_to_verify_presenter_spec.rb
index 81674542e20..0b3b3f2b97f 100644
--- a/spec/presenters/idv/in_person/ready_to_verify_presenter_spec.rb
+++ b/spec/presenters/idv/in_person/ready_to_verify_presenter_spec.rb
@@ -50,7 +50,6 @@
       expect(selected_location_details).to include(
         'formatted_city_state_zip' => kind_of(String),
         'name' => kind_of(String),
-        'phone' => kind_of(String),
         'saturday_hours' => kind_of(String),
         'street_address' => kind_of(String),
         'sunday_hours' => kind_of(String),
diff --git a/spec/rails_helper.rb b/spec/rails_helper.rb
index 2aec91ab96f..3fe68c58dda 100644
--- a/spec/rails_helper.rb
+++ b/spec/rails_helper.rb
@@ -60,7 +60,7 @@ class Analytics
     end
 
     begin
-      REDIS_POOL.with { |namespaced| namespaced.redis.info }
+      REDIS_POOL.with { |client| client.info }
     rescue RuntimeError => error
       # rubocop:disable Rails/Output
       puts error
diff --git a/spec/requests/redis_down_spec.rb b/spec/requests/redis_down_spec.rb
index 4bb09437441..4a60038232d 100644
--- a/spec/requests/redis_down_spec.rb
+++ b/spec/requests/redis_down_spec.rb
@@ -3,7 +3,7 @@
 RSpec.describe 'redis down session error handling' do
   context 'with bad Redis connection' do
     it 'fails loudly' do
-      allow(REDIS_SESSION_POOL_WRAPPER).to receive(:setex).and_raise(Redis::CannotConnectError)
+      allow(REDIS_POOL).to receive(:with).and_raise(Redis::CannotConnectError)
       expect do
         get forgot_password_path
       end.to raise_error(Redis::CannotConnectError)
diff --git a/spec/services/doc_auth/processed_alert_to_log_alert_formatter_spec.rb b/spec/services/doc_auth/processed_alert_to_log_alert_formatter_spec.rb
index ea292aabbd8..97590bca66a 100644
--- a/spec/services/doc_auth/processed_alert_to_log_alert_formatter_spec.rb
+++ b/spec/services/doc_auth/processed_alert_to_log_alert_formatter_spec.rb
@@ -5,32 +5,35 @@
 
 RSpec.describe DocAuth::ProcessedAlertToLogAlertFormatter do
   let(:alerts) do
-    { passed: [{ alert: 'Alert_1', name: 'Visible Pattern', result: 'Passed' }],
-      failed:
-       [
-         { alert: 'Alert_1', name: '2D Barcode Read', result: 'Failed' },
-         { alert: 'Alert_2', name: 'Layout Valid', result: 'Attention' },
-         { alert: 'Alert_3', name: '2D Barcode Read', result: 'Failed' },
-         { alert: 'Alert_4', name: 'Visible Pattern', result: 'Failed' },
-         { alert: 'Alert_5', name: 'Visible Photo Characteristics', result: 'Failed' },
-       ] }
+    {
+      passed: [
+        { alert: 'Alert_1', name: 'Visible Pattern', result: 'Passed' },
+      ],
+      failed: [
+        { alert: 'Alert_1', name: '2D Barcode Read', result: 'Failed' },
+        { alert: 'Alert_2', name: 'Layout Valid', result: 'Attention' },
+        { alert: 'Alert_3', name: '2D Barcode Read', result: 'Failed' },
+        { alert: 'Alert_4', name: 'Visible Pattern', result: 'Failed' },
+        { alert: 'Alert_5', name: 'Visible Photo Characteristics', result: 'Failed' },
+      ],
+    }
   end
 
-  context('when ProcessedAlertToLogAlertFormatter is called') do
-    subject do
-      DocAuth::ProcessedAlertToLogAlertFormatter.new.log_alerts(alerts)
-    end
+  subject(:formatter) { DocAuth::ProcessedAlertToLogAlertFormatter.new }
+
+  describe('#log_alerts') do
+    subject(:logged_alerts) { formatter.log_alerts(alerts) }
 
     it('returns failed if both passed and failed are returned by the alert') do
-      expect(subject).to match(a_hash_including(visible_pattern: { no_side: 'Failed' }))
+      expect(logged_alerts).to match(a_hash_including(visible_pattern: { no_side: 'Failed' }))
     end
 
     it('returns the formatted log hash') do
-      expect(subject).to eq(
-        { '2d_barcode_read': { no_side: 'Failed' },
-          layout_valid: { no_side: 'Attention' },
-          visible_pattern: { no_side: 'Failed' },
-          visible_photo_characteristics: { no_side: 'Failed' } },
+      expect(logged_alerts).to eq(
+        '2d_barcode_read': { no_side: 'Failed' },
+        layout_valid: { no_side: 'Attention' },
+        visible_pattern: { no_side: 'Failed' },
+        visible_photo_characteristics: { no_side: 'Failed' },
       )
     end
   end
diff --git a/spec/services/encrypted_redis_struct_storage_spec.rb b/spec/services/encrypted_redis_struct_storage_spec.rb
index e37803064c7..6f3d2d091e0 100644
--- a/spec/services/encrypted_redis_struct_storage_spec.rb
+++ b/spec/services/encrypted_redis_struct_storage_spec.rb
@@ -16,7 +16,7 @@ def self.redis_key_prefix
 
     context 'with a struct that has a redis_key_prefix' do
       it 'prefixes the id' do
-        expect(key).to eq("example:prefix:#{id}")
+        expect(key).to eq("redis-pool:example:prefix:#{id}")
       end
     end
 
diff --git a/spec/services/out_of_band_session_accessor_spec.rb b/spec/services/out_of_band_session_accessor_spec.rb
index 025bc6b9fff..dbbbf1a4e20 100644
--- a/spec/services/out_of_band_session_accessor_spec.rb
+++ b/spec/services/out_of_band_session_accessor_spec.rb
@@ -6,9 +6,9 @@
   subject(:store) { described_class.new(session_uuid) }
 
   around do |ex|
-    REDIS_POOL.with { |namespaced| namespaced.redis.flushdb }
+    REDIS_POOL.with { |client| client.flushdb }
     ex.run
-    REDIS_POOL.with { |namespaced| namespaced.redis.flushdb }
+    REDIS_POOL.with { |client| client.flushdb }
   end
 
   describe '#ttl' do
diff --git a/spec/services/phone_recaptcha_validator_spec.rb b/spec/services/phone_recaptcha_validator_spec.rb
index 0c7d1145e02..08c0eefd487 100644
--- a/spec/services/phone_recaptcha_validator_spec.rb
+++ b/spec/services/phone_recaptcha_validator_spec.rb
@@ -16,7 +16,16 @@
 
   it 'passes instance variables to validator' do
     recaptcha_validator = instance_double(RecaptchaValidator, valid?: true)
-    expect(RecaptchaValidator).to receive(:new).and_return(recaptcha_validator)
+    expect(RecaptchaValidator).to receive(:new).
+      with(
+        score_threshold: score_threshold_config,
+        analytics:,
+        recaptcha_version:,
+        extra_analytics_properties: {
+          phone_country_code: parsed_phone.country,
+        },
+      ).
+      and_return(recaptcha_validator)
 
     validator.valid?('token')
   end
diff --git a/spec/services/proofing/mock/ddp_mock_client_spec.rb b/spec/services/proofing/mock/ddp_mock_client_spec.rb
index 7fce70e87e5..4e1a1f7ee44 100644
--- a/spec/services/proofing/mock/ddp_mock_client_spec.rb
+++ b/spec/services/proofing/mock/ddp_mock_client_spec.rb
@@ -2,9 +2,9 @@
 
 RSpec.describe Proofing::Mock::DdpMockClient do
   around do |ex|
-    REDIS_POOL.with { |namespaced| namespaced.redis.flushdb }
+    REDIS_POOL.with { |client| client.flushdb }
     ex.run
-    REDIS_POOL.with { |namespaced| namespaced.redis.flushdb }
+    REDIS_POOL.with { |client| client.flushdb }
   end
 
   let(:threatmetrix_session_id) { SecureRandom.uuid }
diff --git a/spec/services/proofing/mock/device_profiling_backend_spec.rb b/spec/services/proofing/mock/device_profiling_backend_spec.rb
index e318d80bed9..e4c64f09538 100644
--- a/spec/services/proofing/mock/device_profiling_backend_spec.rb
+++ b/spec/services/proofing/mock/device_profiling_backend_spec.rb
@@ -2,9 +2,9 @@
 
 RSpec.describe Proofing::Mock::DeviceProfilingBackend do
   around do |ex|
-    REDIS_POOL.with { |namespaced| namespaced.redis.flushdb }
+    REDIS_POOL.with { |client| client.flushdb }
     ex.run
-    REDIS_POOL.with { |namespaced| namespaced.redis.flushdb }
+    REDIS_POOL.with { |client| client.flushdb }
   end
 
   subject(:backend) { described_class.new }
diff --git a/spec/services/recaptcha_validator_spec.rb b/spec/services/recaptcha_validator_spec.rb
index 72eaf2edfad..c09aff94b14 100644
--- a/spec/services/recaptcha_validator_spec.rb
+++ b/spec/services/recaptcha_validator_spec.rb
@@ -3,9 +3,13 @@
 describe RecaptchaValidator do
   let(:score_threshold) { 0.2 }
   let(:analytics) { FakeAnalytics.new }
+  let(:extra_analytics_properties) { {} }
   let(:recaptcha_secret_key_v2) { 'recaptcha_secret_key_v2' }
   let(:recaptcha_secret_key_v3) { 'recaptcha_secret_key_v3' }
-  subject(:validator) { RecaptchaValidator.new(score_threshold:, analytics:) }
+
+  subject(:validator) do
+    RecaptchaValidator.new(score_threshold:, analytics:, extra_analytics_properties:)
+  end
 
   before do
     allow(IdentityConfig.store).to receive(:recaptcha_secret_key_v2).
@@ -233,6 +237,27 @@
         )
       end
 
+      context 'with extra analytics properties' do
+        let(:extra_analytics_properties) { { extra: true } }
+
+        it 'logs analytics of the body' do
+          valid
+
+          expect(analytics).to have_logged_event(
+            'reCAPTCHA verify result received',
+            recaptcha_result: {
+              'success' => true,
+              'score' => score,
+            },
+            evaluated_as_valid: true,
+            score_threshold: score_threshold,
+            recaptcha_version: 3,
+            exception_class: nil,
+            extra: true,
+          )
+        end
+      end
+
       context 'without analytics' do
         let(:analytics) { nil }
 
diff --git a/spec/services/usps_in_person_proofing/proofer_spec.rb b/spec/services/usps_in_person_proofing/proofer_spec.rb
index bbdd5483695..d29b18dbbaa 100644
--- a/spec/services/usps_in_person_proofing/proofer_spec.rb
+++ b/spec/services/usps_in_person_proofing/proofer_spec.rb
@@ -97,7 +97,6 @@ def check_facility(facility)
     expect(facility.address).to be_present
     expect(facility.city).to be_present
     expect(facility.name).to be_present
-    expect(facility.phone).to be_present
     expect(facility.saturday_hours).to be_present
     expect(facility.state).to be_present
     expect(facility.sunday_hours).to be_present
diff --git a/spec/services/usps_in_person_proofing/transliterable_validator_spec.rb b/spec/services/usps_in_person_proofing/transliterable_validator_spec.rb
new file mode 100644
index 00000000000..e06a8ff13a8
--- /dev/null
+++ b/spec/services/usps_in_person_proofing/transliterable_validator_spec.rb
@@ -0,0 +1,233 @@
+require 'rails_helper'
+
+RSpec.describe UspsInPersonProofing::TransliterableValidator do
+  let(:errors) { ActiveModel::Errors.new(nil) }
+  let(:valid_field) { nil }
+  let(:invalid_field) { nil }
+  let(:extra_field) { nil }
+  let(:other_invalid_field) { nil }
+  let(:model) do
+    double(
+      'SomeModel',
+      errors:,
+      valid_field:,
+      invalid_field:,
+      extra_field:,
+      other_invalid_field:,
+    )
+  end
+
+  let(:message) { 'Test message' }
+  let(:fields) { [:valid_field] }
+  let(:reject_chars) { /[^A-Za-z]/ }
+  let(:options) do
+    {
+      fields:,
+      reject_chars:,
+      message:,
+    }
+  end
+
+  before do
+    allow(IdentityConfig.store).to receive(:usps_ipp_transliteration_enabled).
+      and_return(usps_ipp_transliteration_enabled)
+  end
+
+  subject(:validator) { described_class.new(options) }
+
+  describe '#validate' do
+    context 'transliteration enabled' do
+      let(:usps_ipp_transliteration_enabled) { true }
+
+      let(:valid_field) { 'abc' }
+      let(:extra_field) { 'hello world' }
+
+      before do
+        allow(validator.transliterator).to receive(:transliterate) do |param|
+          UspsInPersonProofing::Transliterator::TransliterationResult.new(
+            changed?: true,
+            original: param,
+            transliterated: "transliterated#{param}",
+            unsupported_chars: [],
+          )
+        end
+      end
+
+      context 'no invalid fields' do
+        context 'with missing field' do
+          let(:fields) { [:missing_field, :valid_field] }
+
+          it 'does not check the configured field that is missing' do
+            expect do
+              validator.validate(model)
+            end.not_to raise_error
+          end
+        end
+
+        context 'with non-stringable field' do
+          let(:valid_field) { non_str_double }
+          let(:non_str_double) { double }
+
+          it 'does not attempt to transliterate the field' do
+            allow(non_str_double).to receive(:respond_to?).with(:to_s).and_return(false)
+
+            validator.validate(model)
+            expect(validator.transliterator).not_to have_received(:transliterate)
+          end
+        end
+
+        it 'does not check the non-configured field that is present' do
+          validator.validate(model)
+          expect(model).not_to have_received(:extra_field)
+        end
+
+        it 'checks the configured field that is present' do
+          validator.validate(model)
+          expect(model).to have_received(:valid_field)
+        end
+
+        it 'does not set validation message' do
+          validator.validate(model)
+          expect(errors).to be_empty
+        end
+      end
+
+      context 'one invalid field' do
+        let(:fields) { [:valid_field, :invalid_field] }
+
+        context 'failing regex check' do
+          let(:invalid_field) { '123' }
+
+          it 'sets a validation message' do
+            validator.validate(model)
+
+            expect(model.errors).to include(:invalid_field)
+          end
+        end
+
+        context 'failing transliteration' do
+          let(:invalid_field) { 'def' }
+
+          before do
+            allow(validator.transliterator).to receive(:transliterate).with('def').
+              and_return(
+                UspsInPersonProofing::Transliterator::TransliterationResult.new(
+                  changed?: true,
+                  original: 'def',
+                  transliterated: 'efg',
+                  unsupported_chars: ['*', '3', 'C'],
+                ),
+              )
+          end
+
+          it 'sets a validation message' do
+            validator.validate(model)
+
+            error = model.errors.group_by_attribute[:invalid_field].first
+
+            expect(error.type).to eq(:nontransliterable_field)
+            expect(error.options[:message]).to eq(message)
+          end
+        end
+
+        context 'with callable error message' do
+          let(:generated_message) { 'my_generated_message' }
+          let(:chars_passed) { [] }
+          let(:message) do
+            proc do |invalid_chars|
+              chars_passed.push(*invalid_chars)
+              generated_message
+            end
+          end
+
+          context 'combined transliteration and regex issues' do
+            let(:unsupported_chars_returned) { ['*', '3', 'C'] }
+            let(:transliterated_value_returned) { '1234' }
+            let(:invalid_field) { 'def' }
+            before do
+              allow(validator.transliterator).to receive(:transliterate).with('def').
+                and_return(
+                  UspsInPersonProofing::Transliterator::TransliterationResult.new(
+                    changed?: true,
+                    original: 'def',
+                    transliterated: transliterated_value_returned,
+                    unsupported_chars: unsupported_chars_returned,
+                  ),
+                )
+            end
+
+            context 'with remaining question mark in transliterated string' do
+              let(:transliterated_value_returned) do
+                "#{UspsInPersonProofing::Transliterator::REPLACEMENT * 4}1234"
+              end
+
+              it 'passes unique sorted chars to message generator' do
+                # The replacement character needs special treatment in this test,
+                # hence this precondition check.
+                expect(
+                  transliterated_value_returned.count(
+                    UspsInPersonProofing::Transliterator::REPLACEMENT,
+                  ),
+                ).to be > unsupported_chars_returned.size
+
+                validator.validate(model)
+
+                expect(chars_passed).to eq(
+                  ['*', '1', '2', '3', '4',
+                   UspsInPersonProofing::Transliterator::REPLACEMENT, 'C'],
+                )
+              end
+            end
+
+            context 'without remaining question mark in transliterated string' do
+              it 'passes unique sorted chars to message generator' do
+                # The replacement character needs special treatment in this test,
+                # hence this precondition check.
+                expect(
+                  transliterated_value_returned.count(
+                    UspsInPersonProofing::Transliterator::REPLACEMENT,
+                  ),
+                ).to be <= unsupported_chars_returned.size
+
+                validator.validate(model)
+
+                expect(chars_passed).to eq(['*', '1', '2', '3', '4', 'C'])
+              end
+            end
+
+            it 'sets the error from the message returned by the message generator' do
+              validator.validate(model)
+
+              error = model.errors.group_by_attribute[:invalid_field].first
+              expect(error.type).to eq(:nontransliterable_field)
+              expect(error.options[:message]).to eq(generated_message)
+            end
+          end
+        end
+      end
+
+      context 'multiple invalid fields' do
+        let(:fields) { [:other_invalid_field, :valid_field, :invalid_field] }
+        let(:invalid_field) { '123' }
+        let(:other_invalid_field) { "\#@$%" }
+
+        it 'sets multiple validation messages' do
+          validator.validate(model)
+
+          expect(errors).to include(:invalid_field)
+          expect(errors).to include(:other_invalid_field)
+        end
+      end
+    end
+
+    context 'transliteration disabled' do
+      let(:usps_ipp_transliteration_enabled) { false }
+
+      it 'does not validate fields' do
+        validator.validate(model)
+
+        expect(errors).to be_empty
+      end
+    end
+  end
+end
diff --git a/spec/services/usps_in_person_proofing/transliterator_spec.rb b/spec/services/usps_in_person_proofing/transliterator_spec.rb
index bbc0ac03dff..879dcb0f9e0 100644
--- a/spec/services/usps_in_person_proofing/transliterator_spec.rb
+++ b/spec/services/usps_in_person_proofing/transliterator_spec.rb
@@ -26,10 +26,10 @@
         it 'returns a list of the characters that transliteration does not support' do
           expect(result.unsupported_chars).to include('И', 'Љ')
         end
-        it 'transliterates using English locale when default does not match' do
+        it 'transliterates using English locale' do
           expect(I18n).to receive(:transliterate).
             with(duck_type(:to_s), locale: :en).
-            and_call_original
+            and_call_original.at_least(:once)
           result
         end
         it 'does not count question marks as unsupported characters by default' do
@@ -57,6 +57,65 @@
       end
     end
 
+    it 'correctly identifies invalid characters for multi-character transliteration' do
+      original = '123ßabẞcßßHelloИЉ'.freeze
+      result = transliterator.transliterate(original)
+      expect(result).to have_attributes(
+        changed?: true,
+        original: original,
+        transliterated: '123ssab?cssssHello??',
+        unsupported_chars: ['ẞ', 'И', 'Љ'],
+      )
+    end
+
+    it 'transliterates correctly when newlines are used' do
+      original = "123\rИa\nbẞcИИHelloИ\r\nЉ\n".freeze
+      result = transliterator.transliterate(original)
+      expect(result).to have_attributes(
+        changed?: true,
+        original: original,
+        transliterated: '123 ?a b?c??Hello? ?',
+        unsupported_chars: ['И', 'ẞ', 'И', 'И', 'И', 'Љ'],
+      )
+    end
+
+    context 'non-standard spacing characters' do
+      spaces = [
+        "\u2000", # En Quad
+        "\u2001", # Em Quad
+        "\u2002", # En Space
+        "\u2003", # Em Space
+        "\u2004", # Three-Per-Em Space
+        "\u2005", # Four-Per-Em Space
+        "\u2006", # Six-Per-Em Space
+        "\u2007", # Figure Space
+        "\u2008", # Punctuation Space
+        "\u2009", # Thin Space
+        "\u200A", # Hair Space
+        "\u200B", # Zero-Width Space
+        "\u200C", # Zero Width Non-Joiner
+        "\u200D", # Zero Width Joiner
+        "\u200E", # Left-To-Right Mark
+        "\u200F", # Right-To-Left Mark
+        "\u202F", # Narrow No-Break Space
+      ]
+      spaces.each do |space|
+        it "rejects \"\\u#{space.ord.to_s(16).rjust(
+          4,
+          '0',
+        )}\"" do
+          original = " #{space}Hello#{space}world".freeze
+          result = transliterator.transliterate(original)
+          expect(result).to have_attributes(
+            changed?: true,
+            original: original,
+            transliterated: '?Hello?world',
+            unsupported_chars: [space, space],
+          )
+        end
+      end
+    end
+
     context 'for additional values not supported for transliteration by default' do
       {
         # Convert okina to apostrophe
diff --git a/spec/support/features/doc_auth_helper.rb b/spec/support/features/doc_auth_helper.rb
index 0a52a1708f9..f1e35464b2f 100644
--- a/spec/support/features/doc_auth_helper.rb
+++ b/spec/support/features/doc_auth_helper.rb
@@ -116,6 +116,13 @@ def complete_document_capture_step
     attach_and_submit_images
   end
 
+  # yml_file example: 'spec/fixtures/puerto_rico_resident.yml'
+  def complete_document_capture_step_with_yml(proofing_yml)
+    attach_file I18n.t('doc_auth.headings.document_capture_front'), File.expand_path(proofing_yml)
+    attach_file I18n.t('doc_auth.headings.document_capture_back'), File.expand_path(proofing_yml)
+    click_on I18n.t('forms.buttons.submit.default')
+  end
+
   def complete_doc_auth_steps_before_email_sent_step
     allow(BrowserCache).to receive(:parse).and_return(mobile_device)
     complete_doc_auth_steps_before_upload_step
diff --git a/spec/views/partials/personal_key/_key.html.erb_spec.rb b/spec/views/partials/personal_key/_key.html.erb_spec.rb
index 3f697be8584..3ebe343e661 100644
--- a/spec/views/partials/personal_key/_key.html.erb_spec.rb
+++ b/spec/views/partials/personal_key/_key.html.erb_spec.rb
@@ -1,21 +1,34 @@
 require 'rails_helper'
 
 describe 'partials/personal_key/_key.html.erb' do
+  let(:personal_key) { 'abcd-efgh-ijkl-mnop' }
+  let(:locals) do
+    {
+      code: personal_key,
+      show_save_buttons: false,
+    }
+  end
+
   subject(:rendered) do
     render partial: 'key', locals: locals
   end
 
-  let(:personal_key) { 'XXXX-XXXX-XXXX-XXXX' }
+  it 'renders the code without whitespace between segments' do
+    expect(rendered).to have_content('abcdefghijklmnop')
+  end
+
+  context 'with example code' do
+    let(:locals) { super().merge(code_example: true) }
+
+    it 'renders code example description' do
+      expect(rendered).to have_content(t('users.personal_key.accessible_labels.code_example'))
+      expect(rendered).to have_css('[aria-hidden]', text: 'abcdefghijklmnop')
+    end
+  end
 
   context 'with local personal_key_generated_at' do
     let(:personal_key_generated_at) { Time.zone.parse('2020-04-09T14:03:00Z').utc }
-    let(:locals) do
-      {
-        code: personal_key,
-        personal_key_generated_at: personal_key_generated_at,
-        show_save_buttons: false,
-      }
-    end
+    let(:locals) { super().merge(personal_key_generated_at: personal_key_generated_at) }
 
     it 'displays the specified date' do
       expect(rendered).to have_css(
diff --git a/spec/views/shared/personal_key/_key.html.erb_spec.rb b/spec/views/shared/personal_key/_key.html.erb_spec.rb
deleted file mode 100644
index 4873bd53b5c..00000000000
--- a/spec/views/shared/personal_key/_key.html.erb_spec.rb
+++ /dev/null
@@ -1,12 +0,0 @@
-require 'rails_helper'
-
-describe 'partials/personal_key/_key.html.erb' do
-  let(:code) { 'abcd-efgh-ijkl-mnop' }
-
-  it 'renders the code without whitespace between segments' do
-    render 'partials/personal_key/key', code: code, show_save_buttons: true
-
-    doc = Nokogiri::HTML(rendered)
-    expect(doc.text).to include('abcdefghijklmnop')
-  end
-end
diff --git a/yarn.lock b/yarn.lock
index 0d867c73df7..c97bd69e82e 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2133,16 +2133,6 @@ balanced-match@^2.0.0:
   resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-2.0.0.tgz#dc70f920d78db8b858535795867bf48f820633d9"
   integrity sha512-1ugUSr8BHXRnK23KfuYS+gVMC3LB8QGH9W1iGtDPsNWoQbgtXSExkBu2aDR4epiGWZOjZsj6lDl/N/AqqTC3UA==
 
-base32-decode@^1.0.0:
-  version "1.0.0"
-  resolved "https://registry.yarnpkg.com/base32-decode/-/base32-decode-1.0.0.tgz#2a821d6a664890c872f20aa9aca95a4b4b80e2a7"
-  integrity sha512-KNWUX/R7wKenwE/G/qFMzGScOgVntOmbE27vvc6GrniDGYb6a5+qWcuoXl8WIOQL7q0TpK7nZDm1Y04Yi3Yn5g==
-
-base32-encode@^1.1.1:
-  version "1.1.1"
-  resolved "https://registry.yarnpkg.com/base32-encode/-/base32-encode-1.1.1.tgz#d022d86aca0002a751bbe1bf20eb4a9b1cef4e95"
-  integrity sha512-eqa0BeGghj3guezlasdHJhr3+J5ZbbQvxeprkcDMbRQrjlqOT832IUDT4Al4ofAwekFYMqkkM9KMUHs9Cu0HKA==
-
 base64-js@^1.3.1:
   version "1.5.1"
   resolved "https://registry.yarnpkg.com/base64-js/-/base64-js-1.5.1.tgz#1b1b440160a5bf7ad40b650f095963481903930a"