Window & tab
Page Visibility, window focus, full-screen exit, second display, clipboard, idle time, and a heartbeat that notices its own absence. No permissions, works on every platform, prevents nothing.
Detection: reliable · Prevention: none
Prototype · runs entirely in your browser
Browser proctoring, with the ceiling drawn in
Three things a plain web page can watch — the tab, the window, and the candidate's face — wired to a policy engine that warns for five seconds and then decides. Switch the signals on and off, sit the exam, and try to beat it. It is not hard to beat, and that is the most useful thing this prototype has to say. The second most useful is what it does with a violation by default: it stops the clock and calls a person, rather than failing anyone by machine.
Camera
MediaPipe Face Landmarker on the device: face present, face count, head yaw and pitch calibrated against the candidate's own neutral pose, iris direction, eye openness. No frame leaves the page and no emotion is inferred.
Attention monitoring · not eye tracking
Policy
Grace, then a five-second warning with an audible alarm that is heard even from another tab, then penalty points, a pause for a human, or termination. Seven presets from "never acts" to "one strike", all editable and shareable as a link.
Default: pause and call a proctor, never auto-fail
Read this before demoing it to anyone
- Detection is not prevention. A plain browser produces evidence. Blocking other applications needs a browser extension or a locked-down browser like Safe Exam Browser.
- A second device is invisible. A phone next to the laptop is outside every browser API, and outside most of the paid products too.
- There is no web eye tracking. WebGazer's own paper reports around 3.6° of average error, with calibration that breaks as soon as the head moves. Head pose is what the industry actually means by "gaze", and it is what this measures.
- Mobile cannot be locked down. App switching is detectable; screenshots, split view and a second app are not. Full-screen lock is not a control on iPhone.
- Auto-failing is the dangerous part. ExamSoft flagged roughly a third of candidates on one bar exam; one deployed system detected faces for 78% of darker skin tones against 92% of lighter ones, with six times as many "missing face" flags; a US court has ruled a room scan unconstitutional. Flag for a human, do not fail by machine.
- The EU treats this as high-risk. Exam proctoring is an Annex III high-risk use under the AI Act, and inferring emotion in education has been prohibited outright since February 2025.