# Clearer venue context and deliberate staff notifications

Business sales will leave client receipts unsent until staff explicitly choose
a receipt channel. Receipt sending requires notification permission. Bulk
check-in will honor selected notification channels after successful check-in;
Don't notify remains silent, and unavailable channels prevent that attendee's
change with an explanation.

Business POS transaction permissions will match web POS. Staff with restricted
location access cannot use organization-wide POS, and configured active tenders
can be read with POS access without permission to edit business settings.

Consumer class details will use the class venue for policies, forms, waivers and
add-ons, including when a shared link carries a conflicting venue. Branded class
reads remain bound to the configured venue. Existing purchases and configured
network rights retain server enforcement.

The shared native session repair also prevents late refreshes from restoring a
logged-out account and uses the existing local-session revocation endpoint.

These changes are under local verification. Native signed-build testing and
release acceptance remain separate; this note does not announce a deployment.