Live checkout Checkout URL is freshly generated from the production store and production variant.

Do not reuse test-mode or historical checkout URLs.

Price visible Product name, CN¥69 price, and currency are visible on the checkout page.

The report records price evidence without publishing the private checkout URL.

PayPal visible PayPal appears as an available payment method in the live checkout.

Payment method visibility is one gate; it does not prove fulfillment works.

Paid event A controlled paid order creates a paid Lemon Squeezy event.

Use redacted order and event references in public launch notes.

Signature gate The paid event passes x-signature verification against the exact raw body.

This protects fulfillment from forged or modified webhook bodies.

Duplicate replay Replaying the paid event does not duplicate delivery, license, email, or entitlement writes.

Lemon Squeezy retries and manual replays must be process-once safe.

Private delivery Fulfillment sends a private ZIP or license only after the signed paid event.

The paid archive must not be published as a public GitHub Pages asset.

Refund rollback Refund or chargeback events revoke or annotate access once with support evidence.

Refund rollback should be safe under duplicate webhook delivery.

Support copy Buyer delivery, resend, duplicate purchase, and broken archive support paths are documented.

Clear support boundaries reduce refund friction after the buy link goes public.

Publish gate The public checkout remains disabled until the owner approves the live smoke evidence.

This keeps the site safe while live key and final purchase verification are pending.

Lemon Squeezy PayPal live checkout report