Marketplace
Buyer delivery

Buyer library.

Product, file, course, and template access built from authoritative delivery truth while payment, billing, payouts, and ledger truth stay in their own systems.

DownloadsFailures
Access sourceAuthoritative

Only provider-confirmed payment, valid free flow, audited grant, or approved import authority can create access.

Download modeSigned

Private storage keys stay internal and buyer download authorizations are scoped and short-lived.

Runtime scopeDelivery only

Delivery does not mutate checkout, Stripe, orders, subscriptions, payouts, or the ledger.

Buyer-safe delivery

Signed downloads

Entitlement-bound
SurfaceShowsBoundary
LibraryEntitlements from authoritative delivery sourcesNo seller financial internals.
DownloadsFile grants and signed authorization statusNo private storage keys.
CoursesEnrollment and progress stateAccess remains entitlement-bound.
TemplatesTemplate license and install stateInstallations stay scoped.