CRYPTOGRAPHY & DATA SOVEREIGNTY

Biometric data never crosses your building perimeter.

Designed for campus guardians and factory compliance officers who refuse to upload student or worker faces to third-party cloud buckets.

LOCAL VECTOR ENGINE AES-256-GCM · HMAC HOST LOCK · SHA-256

Four Hardware & Privacy Controls

LAYER 01

Zero Outbound Facial Frames

Every camera frame stays strictly inside your local school or plant VLAN. Only compact 128-dimensional mathematical descriptors live in local MongoDB.

LAYER 02

HMAC-SHA256 Host Fingerprint Lock

Activation derives an irreversible machine identifier from CPU model, architecture, hostname, and primary NIC MAC to prevent unauthorized cloning.

LAYER 03

AES-256-GCM Encrypted Backups

Scheduled local snapshots encrypt attendance records, rosters, and biometric profiles with PBKDF2-derived keys (100,000 SHA-256 rounds) stored right inside your backup vault.

LAYER 04

Cross-Platform AST Sealed Codebase

Release zips undergo static AST string-array obfuscation and dead-code hardening while keeping clean cross-platform Node compatibility and verifiable SHA-256 digests.

LIVE KEY & CHECKSUM INSPECTOR

Verify license token and release SHA-256.

Queries POST /api/verify and GET /download/checksum directly on this server to inspect binding status, seat limits, expiry timestamp, and sealed zip digest.