# Remote Feature Activation

Premium features must remain controlled by license entitlements and cloud heartbeat state.

## Gate Inputs

- signed license certificate
- billing entitlement snapshot
- module entitlement
- feature entitlement
- domain binding
- installation fingerprint
- heartbeat freshness
- offline grace validity
- tamper status
- tenant policy
- user permission

## Cloud-Controlled Features

- AI cloud gateway
- marketplace install
- signed update download
- premium analytics
- competitor intelligence
- AI workflow builder

## Restriction Policy

When validation fails:

- keep core data accessible
- disable premium AI
- disable marketplace install
- disable signed update download
- disable premium modules
- record feature gate evaluation
- show admin-only warning

## Billing Entitlement Input

The billing control plane feeds the license heartbeat with entitlement groups:

- core
- updates
- marketplace
- ai_basic
- ai_advanced
- sms
- white_label
- enterprise_support

Past-due subscription, failed payment, empty credit wallet, fraud review, or revoked license can remove premium entitlements while keeping core data accessible.
