tamper-evident system design