Capstone checkpoint

Before we map the production upgrades, a short checkpoint. These are the five design calls that make the RBAC wall hold. If you can answer them without the repo open, you have internalised the pattern.