Proctoring detects; it does not prove: assessment integrity without surveillance
The proctoring debate is framed as privacy versus integrity, as though institutions must choose. For a large share of assessments that framing is simply wrong, because the thing proctoring is being used to establish — that this candidate produced this submission — has a cryptographic answer that collects nothing.
Can assessment integrity be established without surveillance?
Yes, by changing what is proved. Proctoring detects suspicious behaviour and produces a probability; binding proves that the enrolled person submitted this specific work, at this time, from a credential under their sole control. One watches, the other attests.
- Proctoring bundles two questions: who is this, and are they working alone. Only the second requires observation.
- Bound submission answers the first with a credential and collects no video, no room scan and no behavioural telemetry.
- It does not answer the second, and any honest comparison has to say so prominently rather than in a footnote.
Part of Education and credential identity
Separate the two questions
Remote proctoring is sold as one product answering one need. It is actually answering two questions with very different properties.
| Question | What proctoring does | What it achieves |
|---|---|---|
| Is this the enrolled candidate? | ID photo comparison at session start, face monitoring | Probabilistic; defeated by a determined substitution |
| Are they working alone and unaided? | Room scan, gaze tracking, audio, screen monitoring | Probabilistic; the genuine capability, and genuinely invasive |
Institutions deploy the whole apparatus because it arrives as a bundle. But a substantial share of assessments — take-home work, project submissions, written assignments, portfolio work — only ever needed the first question answered, and are subjected to the second because it came in the box.
What bound submission does
The candidate enrols a credential once. At submission, they sign a canonical statement carrying a hash of the submitted work, the assessment identifier and the time.
That establishes, cryptographically, that the enrolled candidate submitted this exact artefact. It collects no video, no biometric template, no room imagery, no keystroke telemetry and no network observation. There is nothing to retain, nothing to breach and nothing to litigate about.
The honest capability comparison
This belongs in the body of the article, not in a caveat at the end.
| Capability | Proctoring | Bound submission |
|---|---|---|
| Candidate identity at submission | Probabilistic | Cryptographic |
| Candidate worked alone | Probabilistic observation | Not addressed |
| No unauthorised materials used | Probabilistic observation | Not addressed |
| Submitted artefact is unaltered after submission | Not addressed | Cryptographic |
| Data collected about the candidate | Extensive | None beyond the credential |
| Litigation and regulatory exposure | Significant | Minimal |
A candidate can enrol a credential, sign a submission, and have had someone else do the work sitting beside them. Anyone claiming otherwise is selling something.
So where does each belong?
The decision rule follows from the table rather than from a preference.
- Attribution only required — essays, projects, portfolios, reflective work, take-home assessments. Bound submission. Proctoring adds surveillance and no capability the assessment needs.
- Collusion genuinely matters — licensure examinations, gateway competency tests, high-stakes summative assessment. Proctoring, or in-person invigilation, because the second question is the point.
- Both matter and stakes are extreme — professional licensure. Both, with the identity question answered cryptographically so the observation can focus on what it is actually good at.
Most institutions currently apply category two tooling to category one assessments, at scale, and then are surprised by the student response.
The cost argument nobody makes
Proctoring is licensed per examination or per candidate-hour. For an institution running tens of thousands of remote assessments a term, that is a material recurring line item.
Moving category one assessments off proctoring is a cost reduction and a privacy improvement simultaneously, which is an unusual combination and is the version of this argument that survives a budget meeting.
A note on what the debate is really about
Student objection to proctoring is frequently characterised as objection to being checked. Read the litigation and the student government resolutions and it is more specific than that: objection to room scans of bedrooms, to biometric collection, to retention by a third-party vendor, and to algorithmic flagging that disproportionately misfires on some candidates.
None of those objections attaches to a credential-based attribution. That is worth understanding before assuming the resistance is to integrity measures as such.
What each approach can and cannot establish
| Question | Proctoring | Binding |
|---|---|---|
| Was someone else in the room? | Sometimes | No |
| Did they use unauthorised material? | Sometimes | No |
| Did the enrolled person submit this? | Inferred | Yes |
| Is the submitted work unaltered since? | No | Yes |
| Cost to the honest candidate | Surveillance, anxiety, exclusion | One gesture |
Objections and honest limits
“Binding does not stop a proxy sitting the exam.” Correct, and stated plainly: it proves possession of an enrolled credential plus a local verification gesture, not who is in the chair. Combined with prior enrolment it makes a proxy defeat two separate processes at two separate times.
“So we still need proctoring.” For high-stakes certification, probably, and with clearer expectations of what it delivers. The argument is against relying on it as the integrity control for routine assessment, where its cost to honest candidates is highest.
Adding binding to assessment
- Enrol the credential separately from the exam. Ahead of time, so a proxy must defeat two processes.
- Sign the submission, not the session. A digest of the submitted work.
- Re-verify on long assessments. A mid-point gesture, seconds long.
- Retain the receipt with the grade record. So a later integrity question is a retrieval.
Terms used here
- Remote proctoring
- Monitoring a candidate through camera, screen capture and behavioural analysis during an assessment.
- Submission binding
- A signature over the submitted work, establishing who submitted it and that it has not changed since.
- Presentation attack
- Defeating an identity check by presenting synthetic or borrowed evidence to the sensor.
Frequently asked questions
Does bound submission stop cheating? No, and the article says so in the comparison table rather than burying it. It establishes who submitted the work. It does not establish who did the work.
Can a candidate lend their credential to someone else? They can hand over a device and authenticate on request, which is the same failure mode as lending an ID. It raises the cost and does not eliminate the possibility.
What about identity substitution in licensure exams? That is category two, where observation is the point. Bound submission complements proctoring there rather than replacing it.
Does this reduce our proctoring spend? Only if you move category one assessments off proctoring, which requires deciding which assessments actually need collusion detection. That classification is the work.
Does binding replace proctoring? Not for high-stakes certification. It replaces reliance on proctoring as the integrity control for routine assessment, where its cost to honest candidates is highest.
What does binding prove? That the enrolled credential submitted this specific work, with a local verification gesture, and that the work has not changed since.
Why enrol the credential ahead of the exam? So a proxy must defeat enrolment and the assessment separately, at different times, through different channels.
Where this fits in Manav
Manav binds the person to the exact record, credential or submission being authorised, and produces a receipt a receiving institution or an integrity panel can verify without contacting the issuer.
Sources and further reading
- Published litigation and regulatory complaints concerning remote proctoring and biometric collection.
- Illinois Biometric Information Privacy Act, 740 ILCS 14 (Justia)
- Assessment integrity standards and institutional academic integrity policies.
- Published research on differential performance of algorithmic proctoring flagging.
- W3C Web Content Accessibility Guidelines 2.2
- NIST SP 800-63A — identity proofing and enrolment