Student Defaults
Applied when a student record does not carry its own value.
Per-student overrides live in the STUDENTS array.
Verification
If set: the front QR encodes an HTTPS URL ending in the full
256-bit card-content fingerprint, and the back prints the same URL.
If empty: the QR carries the card ID and full 256-bit fingerprint, and
the card is visibly marked OFFLINE / UNVERIFIED.
Important: the fingerprint detects accidental/inconsistent edits,
but it is not a digital signature and is not secret. This HTML does not
create a verification server. Before official issuance, implement a
server-side registry of approved fingerprints that checks active/revoked
status, expiry, and the registered student name/photo. The server must
show the official record for comparison; do not trust a QR or hash alone.
Validity
Dates are rendered as DD/MM/YYYY <calendar>. Keep
Academic year consistent with the calendar choice.
For the MRZ, Ethiopian-calendar dates are converted to Gregorian
YYMMDD; Gregorian dates are used directly.
Identifiers
Printed anti-copy cues: layered guilloché waves, card-specific rosette, fingerprint-derived line angle, geometric corner ornaments, low-opacity ghost portrait, fine-line portrait overlay, microprint with serial/fingerprint, layered border and a simulated hologram effect. The simulated effect is not a genuine hologram. For stronger physical protection, print on tamper-evident stock and apply a genuine optical variable device / destructible laminate through an authorized printer.