Capacity and waitlists are server-enforced. QR check-in is idempotent. Protected documents use the vault (no public URLs). Communications create notification intents — never browser-side provider calls.