QR Ordering
QR ordering lets guests resolve a table QR code, start or reuse a table session, build a cart, submit an order, and track status using a private session key.
Security Boundary
Public QR APIs should not expose internal tenant fields, raw session hashes, or backend-only identifiers.