Authorised personnel only.
Every gate scan requires an enrolled device as well as a signed-in operator.
QR credentials carry an opaque random token — no names, no company, no event.
Attendance is derived from an append-only scan record that always reconciles.