# Phase 10 — Read-only customer licence portal

## Install
Extract this archive at the ABSDev project root, preserving paths. Merge `IntegratedLicensingServiceProvider.php` if locally customised. Do not replace the production licensing application.

```sh
composer dump-autoload
php artisan optimize:clear
php artisan route:list --path=account/sonardesk -v
```

Visit `/account/sonardesk` while signed in with a **verified** ABSDev account. Licences are matched to `customer_email` case-insensitively; no cross-application SSO or automatic account linking is claimed.

## Security and scope
- Authenticated and verified users only, rate-limited.
- Ownership checked on each licence detail request, returning 404 for non-owners.
- No subscription cancellation, upgrade, activation changes, key retrieval or checkout.
- No new migrations, secrets or third-party API calls.
- Existing Paddle billing, licensing APIs, admin routes and webhooks are untouched.
- Test with one owner, one unrelated user and an unverified user before release.

## Phase 11
Downloads, releases and update feeds.