Stage 2 foundations are live: protected app shell, session restore, logout, and the first HR employee directory.