Photos, fingerprints and location

A photo is reduced to a phone-friendly size, then a SHA-256 fingerprint is computed from the exact bytes that are stored.

The fingerprint goes into the audit trail. Changing the photo later changes the fingerprint, so the change is visible.

Location is attached when the phone allows it. It is never required.