license-guy

Ed25519 certificate authority and subscription tier enforcement

Updated: March 29, 2026

license-guy

Ed25519 certificate authority and tier enforcement

License-Guy manages the cryptographic licensing system that gates F3L1X features by subscription tier. It issues Ed25519-signed certificates that can be validated locally without network access.

What It Does

License-Guy provides:

  1. Certificate Issuance - Generate Ed25519-signed license certificates
  2. Tier Enforcement - Gate MCP tools and realms by subscription level
  3. Offline Validation - Cryptographic verification without internet
  4. Certificate Revocation - Revoke compromised or expired certificates

Key Capabilities

Ed25519 Certificates

Each F3L1X installation receives a signed certificate containing:
- User identity (linked to Herald JWT)
- Subscription tier (Seed, Elevated, Apex, Founder)
- Expiration date
- Realm access list

The certificate is validated locally using the public key - no server call needed for basic tier checks.

Tier Gating

Tier Access Level
Seed Pipeline-Go kernel, local realm execution, no Herald
Elevated 10 core realms, Herald JWT, marketplace read, ecosystem updates
Apex All realms, marketplace write/publish, C-Suite realms, realm spawn
Founder Lifetime Elevated + Apex (capped at 100 founding members)
  • Herald - Issues JWT tokens that complement license certificates
  • Login-Master - Authentication flow that triggers certificate issuance
  • 402-Payment - Handles payment verification for tier upgrades

Further Reading

Want to query this documentation programmatically? The F3L1X MCP server gives any AI agent search_docs, get_doc_page, and get_realm_doc tool access to the full docs library — available on the Elevated plan.