System Architecture
Security & Cryptographic Architecture
Engineered for hostile civic environments and low-trust municipal networks
Encrypted Anonymous Ballots
Votes in executive committee elections and dues referendums are cryptographically hashed using salted SHA-256 before write. Even system administrators cannot match a voter's identity to their ballot.
Dual-Signatory Fund Ledger
Community treasury withdrawals cannot be triggered unilaterally. Every withdrawal payload requires independent cryptographic approval from both the Treasurer and an Auditor.
Tamper-Proof Timestamps
Notice filings and sensor audit records receive UTC timestamps anchored in immutable append-only audit tables, preventing post-facto municipal denials or falsified dates.
Offline PWA Sandbox
Sensor readings captured in offline field mode remain encrypted in browser IndexedDB sandbox until a secure, authenticated sync connection is negotiated.
