One purchase. One verified local engine.

Jason checks the subscription with Paddle, then issues the browser a short-lived signed receipt. Spreadsheet rows remain outside that flow.