Venue Access Control

Venue access control is the set of checks that decide whether the person standing at a door, gate, or turnstile is allowed in, and it usually asks three separate questions at once, whether it does so with a clipboard or a scanner: does this person hold something that grants entry (a ticket, a badge, a membership card), is the person holding it the person it was issued to, and does this person clear whatever eligibility condition applies (an age threshold for alcohol service, a staff-only clearance, a VIP tier)?

The overwhelmingly common way this happens today is manual: door staff glance at a ticket QR code, glance at a photo ID, glance at the face in front of them, and make a judgment call, with rigor that varies by staff member, by fatigue, and by how long the line behind them is. That manual check has two structural weaknesses. It's trivially bypassable in ways that don't require sophistication, a borrowed ID, an older sibling's face that's "close enough," a fake ID that passes a two-second glance, and it leaves no reconstructable record. If something goes wrong later (an incident inside the venue, a licensing-board inspection, a dispute about who was let in and on what basis) there's usually nothing to point to beyond a staff member's memory.

Access control also breaks down when the same ticket gets shared: one legitimate ticket purchase, used by two or more different people at different points in an event, which is straightforward revenue loss for the venue and a genuinely hard problem for a system that only checks whether a QR code scans as valid, not whether the person scanning it is the person who bought it.

Where the regulatory pressure comes from, and where it doesn't

The regulatory picture splits sharply by venue type, and conflating the two is a common mistake. Stadium and professional football entry in Türkiye is identity-bound by statute, Law No. 6222 requires clubs to verify a fan's identity before entry, with the strictest provisions aimed at minors (ages 7–17) and foreign nationals, precisely because the law was written in response to stadium violence and disorder, not ticketing fraud. That's a hard legal floor a club cannot opt out of.

Age-of-entry at bars, clubs, and festivals is a different animal: it's typically a licensing condition attached to the venue's alcohol-service or entertainment license, not a standalone statute mandating identity capture the way stadium entry, hotel guest registration, or telecom SIM activation are. The exact terms of that licensing condition vary by jurisdiction and should be confirmed against local law before being presented to a venue as "the law requires this": the honest framing there is liability reduction and faster doors, not a statutory mandate.

Who actually built this

Nobody owns "access control" as a concept, it's as old as the door with a guard standing next to it, formalized over the last several decades by the physical-security industry generally (badge systems, turnstile manufacturers, door-management software vendors) with no single standards body governing it end to end. The one concrete, citable exception in this entry is Türkiye's Law 6222, a real statute written by the Turkish legislature, not by any private company. Passolig, soon rebranded "Passo Taraftar", is the commercial operator that built its ticketing platform to satisfy that law, migrating in the 2025–26 season toward reading Turkey's chipped national ID card (T.C. kimlik kartı) directly at the gate rather than a standalone fan card. None of this is Solidus's design.

Solidus today

Solidus has not built a venue-access product. What exists is the general-purpose identity-verification and credential-issuance pipeline behind Solidus Verify, live on a public testnet, unaudited, uncertified, which is the kind of engine a venue-access check would eventually be built on top of. No turnstile, door system, or ticketing platform has been integrated. Passo and E-Kent are name-level research targets in Solidus's own planning documents, with no decision-maker contact yet established and no pilot underway. Where this vertical would matter is not as a replacement for a venue's own security staff or licensing responsibility, but as a portability layer on top of infrastructure Passo is already building for an unrelated legal reason, a fan's identity credential, once it exists, being usable at the gate without a fresh scan.

See also

Ticketing Identity is the narrower question of binding a specific ticket to a specific person, distinct from the broader gate-entry check described here. KYC is the underlying identity-verification pipeline a venue-access credential would draw from. Credential Portability is what makes a credential issued elsewhere (a hotel check-in, a SIM activation) usable at a venue gate without re-verification. Level of Assurance governs how strong that credential needs to be for a gate check versus a bank account.