1. There will be a 1:1 relationship between a payment code owner and their identity.

Bear in mind, the spec defines "identity" to mean:

Identity is a particular extended public/private key pair.

So that's not quite what is meant normally by identity. It's not a government / real name identity or an email address or phone number kind of identity.