“What is not included is the date during which she is considered immune.”
Decode the QR code and you get a name, a date of birth, the vaccine, the dose count and the date. That is all. The rules about who counts as immune live in the scanner app, not the code. For once a government system collected only what it needed, and someone checked instead of taking its word.