"We get called in to fix apps more often than to start them. Usually someone generated a working screen, wired it straight to live data with no permission model, and found the gap only when the wrong ...