# Datasheet: Licensing & Storefront Platform

## Product Overview
* **Tagline:** Offline RSA Key & Validation Engine
* **Recommended for:** Enterprise & Edge Software Vendors deploying to secure, air-gapped, or SCADA environments.

---

## Core Differentiators
* **100% Disconnected Validation:** Unlike internet-dependent platforms (Auth0, Keygen.sh), our SDK validates customer licenses locally in 100% disconnected or zero-trust environments.
* **Hardware Profile Fingerprinting:** Combines offline RSA signatures with local hardware profile hashes (CPU model, MAC addresses) to prevent license sharing and unauthorized replication.
* **Low-Impact Footprint:** Lightweight client validation libraries (Python/Go) that integrate with zero network overhead.

---

## System Requirements

### Hardware Specs
| Component | Minimum | Recommended (Production) |
|-----------|---------|-------------------------|
| **CPU** | Any x86_64 or ARM64 | Multi-core processor (for validation concurrency) |
| **RAM** | 512 MB | 1 GB |
| **Disk** | 10 MB | 50 MB (for local audit logging) |
| **HSM** | Not required | FIPS 140-2 Level 3 HSM (for private key storage on signing server) |

### Software & Environment
* **Supported OS:** Windows 10/11, Windows Server 2016+, Linux (CentOS/Ubuntu/Debian), macOS 11+.
* **Runtimes:** Python >= 3.9, Go >= 1.18, Node.js >= 16.0.
* **Cryptography Libraries:** OpenSSL 1.1.1+, PKCS#11 (if integrated with hardware security modules).

---

## Security & Compliance Posture
* **FIPS-Style RSA Signing:** Encrypts and signs licenses using RSA-4096 and SHA-256 signatures.
* **Air-Gapped Compliance:** Fully compatible with air-gapped networks. Contains no outbound tracking or analytics telemetry.
* **Integrity Protection:** Hashed fingerprint profile blocks memory spoofing and binary cloning attempts.

---

## Deployment & Integration Options
* **Auth Model:** Offline cryptographic signature verification via public keys.
* **Supported Languages:** Native libraries for Python, Go, C++, and Node.js.
* **Offline Signing Cadence:** Admin utility to issue `.lic` keys locally, with built-in expiration enforcement loops.
