Every download gets its own build.
Your source is compiled and obfuscated server-side into its own VM build, then sealed with a one-time key on every download. No two downloaded copies are byte-identical, and behind a key, a copy that runs is watermarked and bound to the license that pulled it.