Protect important state

Transactional and business-critical data needs clear ownership, validation and predictable state changes. The invariants that matter should be visible in code and tests.