Program-wide desk for all clients + internal ops. Severity sets the SLA; severity × client tier sets the priority. Money & security tickets are human-gated (drafted here, released by a person). A client only ever sees its own tickets (add ?client=<id> to scope).