Buy against the correct main licence
EPAdmin Addons opens the product-filtered Orbit premium library and My add-on purchases. Free components stay in the product Plugin Library. One-time or monthly purchases attach to the selected immutable main EmailaPanel entitlement; no second addon activation key is issued. A copied package purchased for main licence B cannot execute under main licence A.
No premium Panel package is currently published. An empty catalogue is not a missing download button. Main native licence and installation acceptance remain required independently of any future marketplace purchase.
Protected installation prerequisites
The signed native extension manifest may contain publisher-signed orbit_addon with format: 1, product_code: panel and the reviewed addon UUID. The existing root-controlled registration must map orbit_main to the approved main product_id, entitlement_id, installation_id and key_sha256.
The separately protected native licence still needs its extensions feature. The existing runner service also requires its private orbit-installation-key.json credential containing the already enrolled main installation key. Do not generate an addon key, copy another customer's identity or give keys to extension code. Native publisher trust and full inventory are separate from marketplace licence rights.
Online admission and transfer
Before process launch and every brokered API action, the protected parent renews the main lease and performs fresh verified HTTPS addon checks with a one-use installation-key proof bound to endpoint, body and lease. There is no permanent positive rights cache or outage grace. Failed/revoked/expired checks deny premium use while preserving core hosting, accepted work, exports, backups and recovery.
Approved IP/installation transfer retains the same main entitlement UUID, so purchases follow that licence. The protected local mapping must be updated to the genuinely approved successor identity; copying a ZIP alone does not transfer rights.
Verify without running code
After the exact installed runner, publisher package, mapping, credential and sandbox are independently accepted, the registered unprivileged service user can run the installed runner with --extension REVIEWED-ID --check-premium. It verifies rights at that instant without executing extension code. Obtain the exact executable path from the matching approved release; there is no browser root installer or automatic whole-panel overwrite.
Current acceptance boundary
This source integration and isolated tests do not complete root service deployment, real main mapping, commercial publisher/package acceptance or genuine purchase/IP-transfer acceptance. Those remain pending. Never bypass native trust/recovery gates because Orbit shows a paid invoice. Purchase/history remains available in Orbit Area when premium execution is unavailable.