There is no possible way to achieve this goal without 4 happening though: or moreover, without it being possible.
Your prior 3 ideas all end up at "potential government surveillance of the people".
There is no way to implement verification like this without surveiling everyone, even if you don't plan to use the data - the possibility will always be there.