Ah I see. I’m not sure that’s technically possible, but if it were, that’d be great.

I think better would be simply outlawing any communication between a donor and recipient, if the donor wishes to officially remain anonymous. Not they “have no way” to prove their identity, but they’re not allowed to prove it—or even imply it.