QR payload — and what it deliberately is not
ODPP1|7QK4M2|K9
ODPP1 — namespace and format version, so a future v2 label is distinguishable at a glance.
7QK4M2 — six characters of Crockford base32 drawn from a CSPRNG. One billion possibilities, no sequence, no meaning.
K9 — checksum. A misread is rejected at the device before it ever reaches the server.
Not a URL
A URL means any passer-by with a phone camera gets a tappable link to a government case system. An opaque token scanned by a generic camera app shows meaningless text and goes nowhere.
No personal data
No name, no NIN, no offence. The label is stuck to a folder that sits on open counters and travels in a bag through a taxi park. It must reveal nothing to a person holding it.
Not guessable
Random, not sequential. Nobody can enumerate the next case, and a stolen label tells an attacker nothing about any other file.
Works offline
The device does not need to resolve the token to record a scan. It stores token, direction, location, officer and device clock, and syncs when there is signal.