Examinations, run with a steady hand.
Schedule sittings, seat candidates, proctor live, and publish results from one console. Every tenant on its own hostname, every exam behind a human proctor and a short-lived code.
Platform status
Framework
PHP
Environment
Request id
Phase1 · Foundation
What is built
Security headers on every response. Content-Security-Policy with a per-request nonce, HSTS, frame denial, and host-only session cookies.
One envelope for the API. Every /api/v1 response carries a request id, an API version and a stable error code.
Next: tenancy. Organizations, subdomains, custom domains and the tenant resolver arrive in Phase 2.