Enterprise invariants
- Every query is scoped by workspace before data leaves the server.
- Encrypted values stay server-side; browsers receive only masked operational fields.
- Side effects use idempotency keys to prevent duplicate contacts or appointments.