Entry scan binds participation to identity. Exit scan validates completion and triggers IPP settlement. Three-ID uniqueness prevents replay.