Secure Computer based exam running on Local Area network.

I need a serverless, database-less computer-based examination application that runs natively on Debian. After the central server sends an encrypted question set to the primary server at each exam centre, everything must function inside the local network with zero internet access. Questions remain encrypted at rest and are decrypted only in RAM while displayed.

Authentication is strictly facial recognition—no usernames, no passwords. Two roles are required: Administrator (for setup, question import and audit) and Student (to sit the exam).

Key requirements
• Desktop client, full-screen kiosk mode, never a browser
• Stateless design: all data travels inside the encrypted exam package; nothing persists in a traditional database
• Strong encryption (AES-256 or better) and integrity checks to thwart tampering
• LAN discovery so clients auto-detect the primary server
• Facial-recognition module with liveness detection (OpenCV, TensorFlow or similar) . We have Luxand.
• Intuitive, distraction-free interface; candidates must feel at ease immediately
• Append-only, signed log of every action for later audits
• Simple CLI installer and updater compatible with standard Debian tooling

Acceptance criteria
1. Smooth dry-run of a 200-seat exam with no internet connectivity
2. Independent security test confirming no data leakage or unencrypted artifacts
3. Facial verification accuracy of at least 99 % while rejecting spoof attempts

Deliver a clean codebase plus .deb packages and a concise admin manual. If any third-party libraries are required, they must be open-source and Debian-friendly. I’d appreciate a brief outline of your proposed tech stack and timeline alongside your bid.