The chain holds only a fingerprint of each picture. These are the pictures themselves, kept here so that the fingerprint describes something that still exists — and so that no one else is the only one holding it.
Give this number to whoever publishes tasks. It says which community you belong to, and says nothing about who you are.
Tasks are published by the office, not by you. This looks on the chain for one that draws from your community.
Whether you are asked to witness this task is decided by a random draw nobody can predict — not the contractor, not the office. Your device works it out on its own, with no signal needed.
Photograph the structure, not the people.
Does this thing exist, at this place, at about this time?
A capture waits here until the chain accepts it. If its task has closed, or was on a different chain, it will wait forever. This asks the chain about each one and says which.
The chain holds only fingerprints. The pictures and records themselves go to the office store by themselves, as soon as a report is accepted, so that a reviewer has something to check those fingerprints against. Your own copies stay on this phone either way.
Every protection in this system is a refusal, and a refusal is invisible while everything works. These send the chain four reports that should be turned away, each with one thing wrong, and show you which protection caught it.
Ready.