The dashboard uses application data. Todo statuses and filters, feature flag payloads, audit/webhook records and OAuth payloads gain typed boundaries. Admin writes require their audited path, and one request scope owns server auth/database work.
Sources: dashboard, Todo contracts, audited admin writes, request scope.