In multi-tiered cloud architectures, the application code doesn't manage the TLS handshake directly. Instead, traffic lands on an ingress controller, a load balancer, or an edge API provider. Lesson 2 maps out how to structure smoke tests to explicitly verify that these upstream layers pass traffic downward without dropping headers or bottlenecking the TLS handshake. 3. The Blueprint for a Resilient Production Configuration