ALWAYS

Every operation carries an owner: the routes take an owner/{ownerId} prefix, and loading the state checks it.