Close the gap at the nozzle.
The place to fix attribution is the moment of transfer, enforced in hardware. The operator authorises with a credential before the pump will enable, recorded against the transaction. An NFC tag on the receiving vessel is read — and held for the full duration of the draw — so the volume is bound to a specific machine, not just a timestamp.
Metering is positive-displacement or Coriolis, temperature-compensated to a reference volume, so the temperature column stops masquerading as loss. The transaction is then reconciled against consumption, stored, and ticketed where required. And because the fuel often travels to the equipment, this lives on a mobile dispenser — truck- or skid-mounted, with store-and-forward records from sites that have neither mains power nor reliable coverage.