The privacy release adds a documented erase path, non-PII tombstones, audit export for operations, and deployment hardening for on-prem and cloud installs.

• Erase deletes documents, images and SMS rows and anonymises PII.
• Audit history remains append-only.
• The same compose topology runs on a mini-PC or a VPS.

This release adds the operational layer around the visit: reusable RFID cards, queued SMS delivery, and configurable retention for ID images, visitor records and audit events.

• Cards move between available, assigned, lost and disabled.
• SMS and cloud OCR queue until connectivity returns.
• Retention purge is admin-only and audited.

The first release covers the full visitor journey: site-QR registration, Qatar ID and passport capture, confidence-scored extraction, supervisor review, QR passes, gate entry and exit, and an append-only audit trail.

• Works on web, Android, iOS and Windows desktop against one API.
• Offline-first: check-in keeps working on the LAN.
• Registration never equals approval.