downpipe control plane: vendor-side licensing and advisory assurance. It mints the licence the in-account engine verifies and receives a content-free beacon. It holds no customer data and no Cloudflare token, and can never reach a customer account, backup or restore.