Tag
Permission as a spendable one-shot resource, the token registry your backend must own, deep links as versioned contracts, sending discipline with collapse keys and quiet hours, and the four health metrics.
External IDs as the one crucial decision, the logout() that prevents privacy incidents, permission etiquette that triples opt-ins, REST sends with collapse keys, and the delivery feedback loop everyone skips.
Adapty handles paywalls and receipt validation; your ASP.NET Core backend owns the truth. Idempotent webhook handlers, the server API for profiles and promo grants, and access levels as roles.
The in_app_purchase integration done properly: the purchase stream from app start, pending states, completing purchases before Play auto-refunds, and the backend validation that makes revenue real.
BLE-first control paths with replay-proof signed commands, access modeled as revocable grants, the marketplace layer for renting spots, and the fleet operations nobody demos.
