Designing a Multi-User Jupyter Deployment: JupyterHub Architecture, Trust Boundaries, and Failure Modes
JupyterHub splits one shared Jupyter Server into per-user servers behind a single login. Here is the minimal four-component design, where the trust boundaries actually fall, and the checks that catch orphaned servers and leaked routes.