# QR Service App Pack

Thin WordPress wrappers call `wp_flask_bridge_invoke()` exclusively. Bridge
Core owns authentication, tenant resolution, subscriptions, nonces and signed
transport. This pack never generates QR tokens or OTP values and never changes
QR state locally.