Commercial subscription state is authoritative for entitlement grants, access projection is derived and revocable on separate surfaces, and cache plus background jobs must converge within bounded latency when payment or plan changes revoke feature access.