// Execute the real put$start() method
        final JsonResponse<ApiResult> jsonResponse = action.put$start("job-1");

        // Verify: response contains non-null jobLogId
        assertNotNull(jsonResponse);
        final ApiResult apiResult = jsonResponse.getJsonResult();
        assertNotNull(apiResult);
        final String responseJobLogId = extractJobLogId(apiResult);

        // Verify initial state
        assertNull(result);

        // Setup with JSON response (easier to create without LastaFlute context)
        JsonResponse<?> expectedResponse = new JsonResponse<>(new HashMap<>());
        authenticator.setResponseForType(SsoResponseType.METADATA, expectedResponse);

        // Execute
        result = authenticator.getResponse(SsoResponseType.METADATA);

- `@Execute` marks web endpoints
- `@Resource` for DI
- `@Secured({ "role", "role-view" })` for authorization
- Return `HtmlResponse` for JSP, `JsonResponse` for APIs

### Service
- Inject behaviors (Bhv) for data access
- Use `OptionalEntity<T>` for nullable returns
- Plain classes (no extends/implements)

### Helper
- Stateless utility classes