Everything waiting on a human
Ordered by how close each item is to breaching. Reporting obligations first, then anything already past its deadline, then by deadline. Countdowns run on server time.
Safeguarding escalations (POCSO ss.19/20/21)
A report to the SJPU or local police is a criminal-law obligation with a personal penalty for failing to make it. Escalate; never delete.
Photos an automated filter has not cleared
Under the stub scanner nothing is ever cleared automatically, so this queue is the only path from ingest to a child seeing their own homework photo again.
Mentor reviews an automated filter has not cleared
A rating whose text is not cleared is withheld ENTIRELY — the stars go with it, so a learner who writes something costs the mentor the whole rating until this is decided. Read it as what will sit under a named person's profile on a product used by minors.
Tier-boundary contradictions
An unresolved flag also holds the affected account's assurance level down, so leaving one open is a silent ceiling as well as an unwatched safeguarding signal.
Mentor verification
The only path that verifies a mentor's identity, background check and safeguarding undertaking (L-08). Verifying does not itself list them — the mentor still has to publish — but it is the safeguarding gate a named adult stranger must pass before adults on this platform can book them. Record the payee account in the same sitting: settlement refuses to pay a mentor with none on file.
Account status
Suspension kills live sessions immediately. It does not lift itself: a review date is an intention to look again, not a timer.
Data-rights requests
Only the ones that need a person: every export (nothing produces an export artefact yet) and every erasure waiting on a guardian to co-sign. Closing a request never starts the destruction clock.
Privacy notices and consent documents
Consent is recorded against a frozen document. A published version can never be edited — publish a new version instead.
Opportunity catalogue
The only way this content is ever authored (L-09) — there is no ingestion pipeline behind it. A draft is invisible to every student; publishing puts it in front of minors as well as adults, so it asks before it does that, the same as a notice.
Opportunities
New opportunity
Exam calendar
New exam event
Audit log
Every privileged action, hash-chained. Each entry commits to the one before it, so removing or editing any of them breaks every hash after it.