Governator
Theme

Help

Specification state 39457a1
N2

Common service and authorisation layer

Unit E0 · Verification type Test, Review

  • Route modules (loaders, actions) and MCP tools call application services exclusively; an architecture test (dependency-cruiser) prohibits imports from server/persistenz in app/, server/mcp and server/jobs.
  • Authorisation checks take place in the application service, never in the controller or tool.