ZAYEED preview
Home / Features

Everything Zayeed does

Grouped by the package it lives in, because that is also the boundary it is tested at. Nothing here is a platform-specific feature: if it is in the engine, every shell has it.

Grading engine

The part everything else is arranged around. It is a pure library: an expression grammar, a tolerance pipeline, a scoring model and a session state machine, with no I/O and no platform assumptions.

38,240 conformance cases. The grammar is pinned by a generated conformance suite that every change is run against, because "we improved the marker" and "we changed people's grades" are the same sentence.

Document model

Pack format

On-screen keyboard

Analytics

Database and sync

Interoperability

Import

Certificates

Getting work onto another machine

What is not built yet

Everything above this heading is implemented and ships in the builds you can download today. Everything below it is not, and is listed here for the same reason the rest of the page exists: a feature list that mentions only what works is read as a claim that everything else works too.

CapabilityStateWhere it stands
Code signingNot doneThe Windows, Linux and Android builds are real installers. The Android package is signed with our own release key, but no build carries a purchased code-signing certificate and none is distributed through a platform store, so the operating system will ask you to confirm the install. Every file is published with its SHA-256 so you can check it yourself, and every shell can now check a download against a signed release list instead of a printed number — against a key compiled into it, not one fetched from this site. That key is published and pinned: id b46538f1336eacf8, with the manifest at /dl/release.json. It proves the file is the one that was built, not who built it, which is what a certificate would add. See Downloads.
macOSWritten, not bundled hereThe same C# application, published for Apple silicon and for Intel, wrapped in a .app bundle by ops/bundle-macos.sh — which has to run on a Mac, because an executable bit, a bundle layout and the ad-hoc signature Apple silicon requires do not survive being produced anywhere else. No bundle has been built or tested on Apple hardware here, so none is offered on Downloads; it is unsigned and un-notarised, and macOS refuses a first double-click of such an application outright.
BillingPriced, invoiced, no cardEvery shell now shows the licence a device holds — what it covers, what the plan costs, how its seats are counted, when it renews — and one plan catalogue feeds the applications, the feature data and the pricing page alike, so a figure cannot appear on this website unless the identical figure is in the software. What is missing is one specific thing: a payment provider. The port exists, its only implementation quotes correctly from the published list and refuses to open a checkout, and a licence is therefore bought on an order form and invoiced — which is how Inspera, Cirrus, Surpass and ExamSoft all sell in any case. The licence-issuer key is pinned — id 5dee02756404b46a, separate from the release-signing one — so a token issued for it reads the same in every shell, and a token signed by anything else reports that it cannot be checked here rather than being guessed at. Going over a seat ceiling is a finding and an invoice question, never a locked door; marking is never gated by a licence in any plan, and a lapse closes paid features without closing papers, marking, results, certificates already issued or export. Both of those are tests on both platforms, not intentions.
Sync between buildings without an accountPartialOn one network segment two devices find each other and sync directly. Between buildings they meet at a rendezvous relay: nine characters read down the phone, two seats per code, sealed frames the relay cannot read and nothing kept afterwards. No relay is hosted for the public, so that route needs the server component running somewhere you control.
Device discovery on web and AndroidPartialSeeing another device directly needs a multicast socket. The Windows, Linux and Android applications have one; a browser tab cannot have one, so the web shell uses a carried file or a meeting code — which carry exactly the same changes.
iOSNot builtThe Android source is cross-platform, but no iOS build has been produced or tested.
Biometric identity verificationNot built, and not plannedCamera, microphone and screen supervision is built, on all four platforms, running on the candidate’s own machine — see Proctoring. What it does not do is say whose face it was: nothing is compared against a passport, a driving licence or a photograph on file. A sitting establishes that a face was present and that the face in view did not change, which is a different and smaller claim, and the review states it in those words. A third-party provider can still be booked for an identity check, and a review then names which capability came from whom.
Live human invigilationTools built; staff are yoursThe screen an invigilator watches a live hall on is built — every sitting being sat, ordered by who needs a human, with the attention ratio against a stated 25 sittings per invigilator printed on it, and six things a named person may do to a sitting while it runs, each carrying their reason into the same hash chain as the recording (Live monitoring). What is not here is the workforce: a person watching a candidate in real time is staffed, not coded, and this product does not staff one. A sitting can be booked against a proctoring service the centre contracts itself — the request out, the signed webhook back, its events folded into the same timeline marked with their source, and the same review desk where a named person records a decision against a cited moment. We resell no provider; a centre brings its own contract and its own credentials. A human invigilator in a hall is a provider too, and so is ‘none’, because a sitting with no arrangement and a sitting whose arrangement failed must not look the same in a report.
Screen supervision on WaylandRefused by the desktopOn a Wayland session no application is permitted to read the screen — that is the point of Wayland’s isolation, and it is a decision of the desktop rather than a fault here. The screen stream is refused in those words, the camera and microphone carry on, and the readiness screen says what is missing. An X11 session, which is still what most managed Linux estates run, works.
A listing in anybody’s storeNot doneAll five panels exist — PowerPoint, Google Slides, Teams, Zoom and Webex — and none of them is published in the Office store, the Teams catalogue, the Zoom Marketplace or Webex App Hub. Each is created against your own account from the manifest published beside it, which takes an administrator ten minutes and is also what keeps the deck, the answers and the names on your own relay. See Integrations.
A mail relay of our ownBy your relay, not oursCandidate notices are delivered — through the institution’s own SMTP relay, or a signed webhook on its own side, and through nothing at all until one of those is described. No relay is hosted here and Zayeed is never the sender: it has no address, no sending domain and no reputation of its own to lend to somebody else’s examination timetable. So a centre with no mail system still has the portal and the API as the delivery mechanism, and there is no SMS channel, no push notification and no templating. See Telling the candidate.
Booking with no networkBy designAll four shells book, move and give up seats, and none of them can do it offline. A desk in a hall depends on every other candidate in it and only the server knows about them, so an offline application shows the timetable it last heard, dated, with the booking controls withheld and the reason in a sentence. Nothing is queued for later: a queued booking is a promise about a desk the device cannot see. See Booking the seat.
AI authoring and gradingNot builtNo generative authoring and no AI-assisted marking. Marking is deterministic and stays that way.
Content marketplaceNot builtNo shared item bank between customers.
WCAG 2.2 AA auditSelf-assessed, not auditedAll 55 Level A and AA criteria are claimed one at a time in a published conformance report, and most of those claims are enforced by a check that fails the build. No independent audit has been carried out: an auditor would test with real assistive technology in the hands of people who depend on it, and would find what no check can see.

Write one question. Mark it four ways.

Run the Windows or Linux application, open the browser app, or scan into the Android shell. They are the same library, the same marks and the same rules — with or without a network.