When activation or payload install fails, the CLI says which verification stage rejected it.

Update the CLI, then run `codexflow license inspect --activation-file <path>`. Unknown key IDs usually mean the CLI is older than the issuing key set.

Check that the manifest and archive are from the same secure access page. The archive checksum must match the signed manifest.

Run `codexflow license status`, `codexflow payload list`, and `codexflow emit` from the target project.

Email support with the CodexFlow order ID or Stripe receipt. Access links can be regenerated by admin.