I don’t know what you mean by
double-blind to the donor AND recipient
But to me that phrase kinda implies that the donor doesn’t know who they donated to. Which…no. It should be blind to the recipient. Entirely blind. But people donating can still choose where to donate to.
Ah I see. I’m not sure that’s technically possible, but if it were, that’d be great.
I think better would be simply outlawing any communication between a donor and recipient, if the donor wishes to officially remain anonymous. Not they “have no way” to prove their identity, but they’re not allowed to prove it—or even imply it.