Process, request and client session — what lives in each, who owns it, and the one question that tells you where a value belongs.