SonarDesk-Licencing-Server/docs/RELEASE-HARDENING.md

Licensing/email release checks

• Production app endpoint: https://sonardsk.absdev.net.
• Stage app endpoint: https://sonardesk.stage.absdev.net.
• Production must use Paddle production credentials and the production webhook destination.
• MAIL_MAILER must be a real delivery transport in production; never log.
• Run the Laravel scheduler continuously so pending licence-key emails retry automatically.
• Verify php artisan sonardesk:license-deliver reports no unexpected pending delivery failures.
• Verify a real Paddle purchase creates one licence, sends one key email, activates a clean Mac, validates after relaunch, and deactivates from the portal.
• Never deploy .env, signing seeds, Paddle secrets, or webhook secrets from source control.