Public guest experience outside. Protected Host operations inside.

ReturnOS separates public booking and discovery routes from authenticated Host administration and uses guarded activation for live operations.