The record's integrity
Every entry chained to the one before it, a nightly fingerprint timestamped where nobody can touch it, and a check you can run any time.
Mohanji's one technical requirement was a proper system where nobody can touch it. The record is built for that: every entry carries a fingerprint of the one before it, so a hidden change would break the chain, and each night the whole school's record is reduced to one fingerprint and timestamped by an independent public service.
Run the check
Under Settings, Integrity, Check every entry walks the whole chain and confirms that every entry is exactly as it was written, nothing changed, nothing missing. It runs on its own every night as well, and you get an email only if it does not verify.
The public page
Your school has a page at goodnessfactor.com/verify/your-school. It lists every day with entries, the day's fingerprint and whether its public timestamp is confirmed. Anyone can open a day, see its entry hashes, recompute the fingerprint in their own browser and download the proof. Nothing on the page identifies a child, a teacher or an act.
Copy link on the Integrity tab gives the address to put in a letter to families or an inspector's report.
What the stages mean
- Fingerprint recorded: written at 00:30 UTC the next day.
- Timestamp requested: accepted by the public timestamp service.
- Confirmed: the timestamp is in the public record, with its block number.
- Checked: the proof was verified against that record.
What it does not do
It does not stop a wrong entry from being made; the review board does that, with a reversal that is itself an entry. It stops a wrong entry from being hidden, and a right one from being quietly changed, and it lets anyone outside the school see that for themselves.