Architecture
A routed application surface sits behind authentication, with account-scoped inbox data and scheduled work separated from request-time interaction.
Engineering evidence
The live login route, isolated product shell, inbox states, and scheduled digest behavior are the current evidence boundary.
Constraints
This asset is a public, security-reviewed explanation. Secrets, credentials, private repository content, and internal operating records are excluded.