Decisions
RevenueCat/Superwall gate access, not Firestore
Paid access ignores Firestore subscription fields for granting entitlements.
active Verified from source
Context
Subscription fields are written to users/{uid} for analytics/display.
Decision
isPaidSubscriber consults Superwall and RevenueCat only (plus explicit
bypasses). Comment in source: Firebase data is no longer consulted for granting
access.
Consequences
Tampering with Firestore subscription fields must not unlock premium. Promo access that only sets Firestore fields may fail unless Superwall status is also synced.