Public explainer

Simple, secure coordination for the Grade 4 teacher appreciation video.

This public mini site explains how SIS Cairo West can collect short student-made contributions, protect family privacy, and route approved stakeholders into a restricted workflow portal without mixing private actions into the public homepage.

Six-step delivery workflow

1. Confirm roster and consentAdmins and guardians confirm who can participate and whether any media can ever leave school-internal use.
2. Capture short, safe clipsAdults supervise filming, keep takes short, and avoid revealing backgrounds or student identifiers.
3. Upload to the restricted queueFiles land in private storage outside the public webroot with size and type validation plus audit logging.
4. Review before useSchool admins or producers approve, reject, or request changes before any clip becomes usable.
5. Assemble the final tributeOnly approved media is used for the internal cut; public use requires separate guardian consent.
6. Retain carefullyExports, backups, and retention decisions stay documented in the operational runbooks.

Who does what

  • School admin: roster authority, consent oversight, audit visibility, and final school sign-off.
  • Producer coordinator: manages the review queue and prepares approved material for editing.
  • Parent / guardian: updates consent and uploads student-safe contributions for linked children.
  • Student: participates inside adult-managed limits and only sees approved items linked to their profile.

Built-in safeguards

  • Password hashing with scrypt and constant-time verification.
  • Secure session cookies, CSRF tokens, role checks, and rate limiting.
  • Restricted file serving; private data never sits in the public webroot.
  • Append-only audit events with hash chaining for tamper evidence.
  • Consent-aware review flow that blocks public visibility without explicit guardian approval.