Each capture reads the linked device token once and passes it to every runtime scan request, while handsets without an account keep the previous anonymous request shape. HTTP 402 responses are narrowed as untrusted data and exposed separately for both scans and collection writes; issue #284 tracks the dedicated upgrade-offer UI.