Run the entire factory
on one thread.

Your session is carried in a signed, HTTP-only cookie that defaults to HTTPS-only with same-site protection, so it cannot be read by page scripts and does not travel to other sites. Every state-changing action additionally carries a one-time token.

Successful sign-ins, failed attempts, sign-outs and permission denials are appended to an audit trail with the actor, the module, the record and the timestamp. The application only ever adds to that trail - no screen edits or deletes an entry.

What you can see and do is decided per module and per action - view, create, edit, approve, import, manage - with per-user overrides on top of your role. Every one of those checks runs on the server, not just in the interface.