In my head it would be booting into Chromium to run an offline web app, and the app would make requests against a CouchDB service on the local network. No transaction data would be written to the Pi's memory.

This is all just spitballing though. I'm literally just considering it.