Why it matters
the default container's scope validation is designed to prevent scoped services from being resolved directly or indirectly from the root provider. Resolving them from root can fail at runtime or accidentally stretch scoped state to application lifetime.
A classroom pass only works for one lesson. Taking it home for the whole year breaks the rules.