Salesforce OWD and Sharing Rules: the Four-Layer Model That Trips Every Admin

We took over a Salesforce org mid-project once where the previous team had set Opportunity OWD to Public Read/Write, then built twelve Sharing Rules trying to restrict access back down to individual t