Ordering v1

Buyers arrive on their own signed link at /order/<token>. Staff work at /desk.