A door that decides alone
Entitlement is checked at the gate itself, not at a desk. A valid, paid, in-date membership opens the lane; anything else does not — consistently, at any hour, with no judgement call to make.
Where the network is unreliable, the gate holds a cached copy of who may enter and keeps working through the outage, buffering every entry and reconciling when the connection returns.