N2
Common service and authorisation layer
Unit E0 · Verification type Test, Review
- Route modules (loaders, actions) and MCP tools call application services exclusively; an architecture test (dependency-cruiser) prohibits imports from
server/persistenzinapp/,server/mcpandserver/jobs. - Authorisation checks take place in the application service, never in the controller or tool.