Companies, properties, tickets, time, payroll and the per-building P&L live behind this boundary. Production fails closed: nothing is served without a session.