Fifteen roles. One rulebook. Zero over-reach.
Attribute-based access enforces separation of duties. The actor who creates an artefact can never be the actor who approves it.
Candidate
Self-register, check results, request re-marks, download certificates.
School
Bulk-enrol cohorts, print admission cards, monitor registrations.
Centre manager
Configure centres, allocate rooms, manage staffing.
Invigilator
Offline-capable exam-day console — check-in, incidents, sealed uploads.
Question setter
Draft items inside the sealed authoring enclave.
Moderator
Review, approve and version questions before release.
Examiner
Mark anonymised scripts online with rubric assistance.
Chief examiner
Deliberation, moderation, sample re-marks.
Exams officer
Operate the cycle, approve key gates, dispatch communications.
Director
Executive oversight, four-eyes approvals, statistics.
Misconduct officer
Case management, hearings, evidence chain-of-custody.
Certificate officer
Issuance, reprints, transcript management.
Sysadmin
Operational health — no access to exam content.
Security officer
Audit ledger review, anomaly response, key ceremonies.
Public verify
Anyone can verify a certificate — no login required.