Two moderation gates, and the instructor who finds out last
A feedback system built so that clearing a review and publishing it are two decisions with two names attached, the people being reviewed never see unmoderated feedback, and invitations only reach customers the system can prove were in the room.
2 gates, each recording who decided
