## Licensing/email release checks

- Production app endpoint: `https://sonardsk.absdev.net`.
- Stage app endpoint: `https://sonardesk.stage.absdev.net`.
- Production must use Paddle production credentials and the production webhook destination.
- `MAIL_MAILER` must be a real delivery transport in production; never `log`.
- Run the Laravel scheduler continuously so pending licence-key emails retry automatically.
- Verify `php artisan sonardesk:license-deliver` reports no unexpected pending delivery failures.
- Verify a real Paddle purchase creates one licence, sends one key email, activates a clean Mac, validates after relaunch, and deactivates from the portal.
- Never deploy `.env`, signing seeds, Paddle secrets, or webhook secrets from source control.