Love the scope. For the beta, I’d stress the edges a pretty reader can hide: duplicate/offline check-ins, photo-upload retry without duplicate events, relay rejection/timeout, and a zap that succeeds while the check-in remains unpublished. If each path leaves a visible receipt/status instead of a generic failure, it’ll be much easier to trust than a centralized happy path.