Server-rack QRs require a PIN before revealing internal Confluence or Jira pages. Every redirect change is mirrored on-chain — passes ISO 27001 audit without sweat.
An unlock interstitial at /unlock/:id blocks walk-in scanners at the Cloudflare WAF before they hit the wiki. Every destination change is logged immutably to the EternalRegistry contract on Base. Workspace roles split admins from read-only support engineers.
Free tier includes 1 permanent QR and the recovery key — upgrade the slot with the exact modules this case uses whenever you need them.