Clock in against an office with a location, with a photo, a biometric or an NFC card depending on what the role needs. A missed punch is corrected through a request that somebody approves — not by an administrator editing the record.
The record has to be defensible. Attendance that an admin can silently edit is not evidence of anything.
Punches get missed. What matters is that fixing one leaves a trail.
Every correction has a requester, an approver and a timestamp.