One key, six layers, one winner.

Every URL, secret, model choice and feature flag resolves through a hierarchical merge — global defaults → customer → environment → module → secret store → process env. Nothing is hardcoded; code reads via infrastructure.env.resolve(...). Pick a tenant, environment, module and key below, then watch which layers supply a value and which highest-precedence layer wins.