Two defences, and both are people rather than filters: every requirement is confirmed on a phone call, and every tutor is verified in tiers that a guardian can inspect.
A guardian posts, and a consultant telephones them. The requirement is read back, the address confirmed, the budget sanity-checked. Only then does it appear. A job that fails the call is marked and never published — and a guardian we cannot reach is retried three times over 24 hours before anything is closed.
Call outcomes are recorded, not summarised: verified, unreachable, invalid, duplicate, fraud suspected, or edited-and-verified. Each one is attributable to the agent who made the call.
The Trust Ring on every tutor shows exactly how far they have come. It is never a single green tick, because a tick tells you nothing about what was checked.
Your exact address is withheld until you confirm a tutor. The board shows the area only. Your phone number is never on a public page and never in a job listing — the platform makes the introduction.
Every job has a report control. A reported post is reviewed by a person, and a post that fails review is taken down and the guardian's other posts re-examined.
Verification documents go into private storage, never a public bucket. They are served to reviewers through short-lived signed links and are never addressable by URL. Every staff view of a document is written to an audit trail with a name and a timestamp.
Identity in tiers, requirements confirmed by phone, and contact details held back until both sides have agreed. See exactly what each tier means.