Institutional Governance Architecture.
We describe only verified technical controls. EduCodex is engineered to ensure mathematical integrity, tamper-resistant audit trails, and strict tenant isolation.
Database-Enforced Row Level Security (RLS)
Every query is bound to cryptographic JWT claims with organization_id and school_id discriminators at the PostgreSQL boundary. Multi-tenant isolation is enforced at the database engine level, not merely in application code.
Append-Only Immutable Event Ledgers
Posted financial journals and receipts cannot be silently edited or deleted. Financial corrections require explicit counter-reversal journal vouchers with recorded audit justifications.
Contextual RBAC & Multi-Campus Scoping
Users hold context-specific privileges per campus (e.g. Accountant write access at Rajkot Campus, and strict read-only audit access at Ahmedabad Branch). Cross-campus permission leaks are blocked.
Accounting Period Hard-Locks
Once a monthly or financial year period is closed by controllers, back-dated postings and mutations are prohibited by database-level triggers.
Mathematical Fixed-Point Precision
Strict adherence to Decimal.js and PostgreSQL numeric types with zero binary floating-point representation drift across all fee assessments and ledger lines.
Dual-Verification Segregation of Duties
Maker-checker workflows for high-value fee concessions (> ₹10k), fee refunds, and cashier shift handovers to vault custodians.