Desktop workspace session without client-side authority.

Render identity, filter navigation by permissions, and post auditable actions through server-mediated endpoints. The client only presents allowed UI hints.