Staff tap the NFC tag at the location or scan the QR on a live display, then log "Cleaning done" or "Checked." The NFC tag carries a trust token whose hash is the only thing the server stores; the display QR refreshes every 15 seconds and stays valid for 30.
With "Verification required" on, a log cannot be written without one of these two methods. "Fresh session required" means the log must be written within 5 minutes of the scan. Every log stores the verified and fresh flags, and reports show them.
NFC verification works only in the EnaFeedback mobile app, which reads the trust token. An NFC tap without the app opens the location in the browser as an unverified session, the same as a QR scan. Cleaning logs do not include photos; the evidence is the location session itself.