Issue domain-bound serial keys, collect Stripe card or Bacs Direct Debit subscriptions, enforce contract terms and suspend access centrally.
Ed25519-signed responses, domain binding, installation IDs, activation limits, expiry, revocation and a controlled outage grace period.