diff --git a/fixtures/api/user.yaml b/fixtures/api/user.yaml
index c170eb0..7cfb6fe 100644
--- a/fixtures/api/user.yaml
+++ b/fixtures/api/user.yaml
@@ -1,7 +1,7 @@
 parameters:
     password_hash: '$2y$13$PiPZCpgPCMk1d0B/GPzM/.LkmW2qVtiSu61eM2iXePr.zXNfUTZNe' # The password is 'I<3BambooShoots'.
 
-Panda\Account\Domain\Model\User:
+Panda\Account\Infrastructure\Symfony\Security\User:
     user_panda:
         __construct: ['panda@example.com']
         password: <{password_hash}>
diff --git a/spec/Account/Domain/Provider/AuthorizedUserProviderSpec.php b/spec/Account/Domain/Provider/AuthorizedUserProviderSpec.php
index aa367c4..382df7e 100644
--- a/spec/Account/Domain/Provider/AuthorizedUserProviderSpec.php
+++ b/spec/Account/Domain/Provider/AuthorizedUserProviderSpec.php
@@ -4,7 +4,7 @@
 
 use Panda\Account\Domain\Exception\AuthorizedUserNotFoundException;
 use Panda\Account\Domain\Model\UserInterface;
-use Panda\Account\Domain\Provider\AuthorizedUserProvider;
+use Panda\Account\Infrastructure\Symfony\Security\AuthorizedUserProvider;
 use Panda\AccountOHS\Domain\Provider\AuthorizedUserProviderInterface;
 use PhpSpec\ObjectBehavior;
 use Symfony\Bundle\SecurityBundle\Security;
diff --git a/src/Account/Domain/Factory/UserFactory.php b/src/Account/Domain/Factory/UserFactory.php
index d20b5df..2a1bba7 100644
--- a/src/Account/Domain/Factory/UserFactory.php
+++ b/src/Account/Domain/Factory/UserFactory.php
@@ -4,9 +4,9 @@
 
 namespace Panda\Account\Domain\Factory;
 
+use Panda\Account\Domain\Hasher\UserPasswordHasherInterface;
 use Panda\Account\Domain\Model\User;
 use Panda\Account\Domain\Model\UserInterface;
-use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
 
 final readonly class UserFactory implements UserFactoryInterface
 {
diff --git a/src/Account/Domain/Hasher/UserPasswordHasherInterface.php b/src/Account/Domain/Hasher/UserPasswordHasherInterface.php
new file mode 100644
index 0000000..9a598ba
--- /dev/null
+++ b/src/Account/Domain/Hasher/UserPasswordHasherInterface.php
@@ -0,0 +1,12 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Panda\Account\Domain\Hasher;
+
+use Panda\Account\Domain\Model\UserInterface;
+
+interface UserPasswordHasherInterface
+{
+    public function hashPassword(UserInterface $user, #[\SensitiveParameter] string $plainPassword): string;
+}
diff --git a/src/Account/Domain/Model/User.php b/src/Account/Domain/Model/User.php
index ad73955..51112e6 100644
--- a/src/Account/Domain/Model/User.php
+++ b/src/Account/Domain/Model/User.php
@@ -10,11 +10,11 @@ class User implements UserInterface
 {
     use TimestampableTrait;
 
-    private readonly Uuid $id;
+    protected readonly Uuid $id;
 
-    private ?string $password = null;
+    protected ?string $password = null;
 
-    public function __construct(private string $email)
+    public function __construct(protected string $email)
     {
         $this->id = Uuid::v4();
     }
@@ -34,16 +34,6 @@ public function setEmail(string $email): void
         $this->email = $email;
     }
 
-    public function getUserIdentifier(): string
-    {
-        return $this->email;
-    }
-
-    public function getRoles(): array
-    {
-        return ['ROLE_USER'];
-    }
-
     public function getPassword(): ?string
     {
         return $this->password;
@@ -54,10 +44,6 @@ public function setPassword(string $password): void
         $this->password = $password;
     }
 
-    public function eraseCredentials(): void
-    {
-    }
-
     public function compare(OwnerInterface $owner): bool
     {
         return $this->getId() === $owner->getId();
diff --git a/src/Account/Domain/Model/UserInterface.php b/src/Account/Domain/Model/UserInterface.php
index a32e551..6b51638 100644
--- a/src/Account/Domain/Model/UserInterface.php
+++ b/src/Account/Domain/Model/UserInterface.php
@@ -6,14 +6,14 @@
 
 use Panda\AccountOHS\Domain\Model\Owner\OwnerInterface;
 use Panda\Core\Domain\Model\TimestampableInterface;
-use Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface;
-use Symfony\Component\Security\Core\User\UserInterface as SymfonyUserInterface;
 
-interface UserInterface extends TimestampableInterface, OwnerInterface, SymfonyUserInterface, PasswordAuthenticatedUserInterface
+interface UserInterface extends TimestampableInterface, OwnerInterface
 {
     public function getEmail(): string;
 
     public function setEmail(string $email): void;
 
+    public function getPassword(): ?string;
+
     public function setPassword(string $password): void;
 }
diff --git a/src/Account/Domain/Repository/UserRepositoryInterface.php b/src/Account/Domain/Repository/UserRepositoryInterface.php
index 48aad87..ed42bf6 100644
--- a/src/Account/Domain/Repository/UserRepositoryInterface.php
+++ b/src/Account/Domain/Repository/UserRepositoryInterface.php
@@ -5,10 +5,9 @@
 namespace Panda\Account\Domain\Repository;
 
 use Panda\Account\Domain\Model\UserInterface;
-use Symfony\Component\Security\Core\User\PasswordUpgraderInterface;
 use Symfony\Component\Uid\Uuid;
 
-interface UserRepositoryInterface extends PasswordUpgraderInterface
+interface UserRepositoryInterface
 {
     public function save(UserInterface $user): void;
 
diff --git a/src/Account/Infrastructure/Configuration/Doctrine/mapping.yaml b/src/Account/Infrastructure/Configuration/Doctrine/mapping.yaml
index a965179..85accd0 100644
--- a/src/Account/Infrastructure/Configuration/Doctrine/mapping.yaml
+++ b/src/Account/Infrastructure/Configuration/Doctrine/mapping.yaml
@@ -1,9 +1,9 @@
 doctrine:
     orm:
         mappings:
-            Account:
+            DomainAccount:
                 is_bundle: false
                 type: xml
                 dir: '%kernel.project_dir%/src/Account/Infrastructure/Configuration/Doctrine/mappings'
-                prefix: 'Panda\Account\Domain\Model'
+                prefix: 'Panda\Account'
                 alias: Account
diff --git a/src/Account/Infrastructure/Configuration/Doctrine/mappings/User.orm.xml b/src/Account/Infrastructure/Configuration/Doctrine/mappings/Domain.Model.User.orm.xml
similarity index 85%
rename from src/Account/Infrastructure/Configuration/Doctrine/mappings/User.orm.xml
rename to src/Account/Infrastructure/Configuration/Doctrine/mappings/Domain.Model.User.orm.xml
index a8dceab..c11e114 100644
--- a/src/Account/Infrastructure/Configuration/Doctrine/mappings/User.orm.xml
+++ b/src/Account/Infrastructure/Configuration/Doctrine/mappings/Domain.Model.User.orm.xml
@@ -4,7 +4,7 @@
     xmlns="http://doctrine-project.org/schemas/orm/doctrine-mapping"
     xmlns:gedmo="http://gediminasm.org/schemas/orm/doctrine-extensions-mapping"
 >
-    <entity name="Panda\Account\Domain\Model\User" table="panda_user">
+    <mapped-superclass name="Panda\Account\Domain\Model\User" table="panda_user">
         <id name="id" column="id" type="uuid" />
 
         <field name="email" column="email" length="180" unique="true" />
@@ -12,5 +12,5 @@
 
         <field name="createdAt" column="created_at" type="datetime"><gedmo:timestampable on="create"/></field>
         <field name="updatedAt" column="updated_at" type="datetime"><gedmo:timestampable on="update"/></field>
-    </entity>
+    </mapped-superclass>
 </doctrine-mapping>
diff --git a/src/Account/Infrastructure/Configuration/Doctrine/mappings/Infrastructure.Symfony.Security.User.orm.xml b/src/Account/Infrastructure/Configuration/Doctrine/mappings/Infrastructure.Symfony.Security.User.orm.xml
new file mode 100644
index 0000000..78998ac
--- /dev/null
+++ b/src/Account/Infrastructure/Configuration/Doctrine/mappings/Infrastructure.Symfony.Security.User.orm.xml
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<doctrine-mapping xmlns="http://doctrine-project.org/schemas/orm/doctrine-mapping">
+    <entity name="Panda\Account\Infrastructure\Symfony\Security\User" table="panda_user" />
+</doctrine-mapping>
diff --git a/src/Account/Infrastructure/Configuration/Symfony/Service/provider.php b/src/Account/Infrastructure/Configuration/Symfony/Service/provider.php
index 783471a..69d2b8c 100644
--- a/src/Account/Infrastructure/Configuration/Symfony/Service/provider.php
+++ b/src/Account/Infrastructure/Configuration/Symfony/Service/provider.php
@@ -2,7 +2,7 @@
 
 declare(strict_types=1);
 
-use Panda\Account\Domain\Provider\AuthorizedUserProvider;
+use Panda\Account\Infrastructure\Symfony\Security\AuthorizedUserProvider;
 use Panda\AccountOHS\Domain\Provider\AuthorizedUserProviderInterface;
 use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 use function Symfony\Component\DependencyInjection\Loader\Configurator\service;
diff --git a/src/Account/Infrastructure/Doctrine/Orm/UserRepository.php b/src/Account/Infrastructure/Doctrine/Orm/UserRepository.php
index 6ead842..f163332 100644
--- a/src/Account/Infrastructure/Doctrine/Orm/UserRepository.php
+++ b/src/Account/Infrastructure/Doctrine/Orm/UserRepository.php
@@ -5,7 +5,7 @@
 use Doctrine\ORM\EntityManagerInterface;
 use Panda\Account\Domain\Model\User;
 use Panda\Account\Domain\Model\UserInterface;
-use Panda\Account\Domain\Repository\UserRepositoryInterface;
+use Panda\Account\Infrastructure\Symfony\Security\UserRepositoryInterface;
 use Panda\Core\Infrastructure\Doctrine\Orm\DoctrineRepository;
 use Symfony\Component\Security\Core\Exception\UnsupportedUserException;
 use Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface;
diff --git a/src/Account/Domain/Provider/AuthorizedUserProvider.php b/src/Account/Infrastructure/Symfony/Security/AuthorizedUserProvider.php
similarity index 89%
rename from src/Account/Domain/Provider/AuthorizedUserProvider.php
rename to src/Account/Infrastructure/Symfony/Security/AuthorizedUserProvider.php
index 584dfe3..a6bc18b 100644
--- a/src/Account/Domain/Provider/AuthorizedUserProvider.php
+++ b/src/Account/Infrastructure/Symfony/Security/AuthorizedUserProvider.php
@@ -2,10 +2,9 @@
 
 declare(strict_types=1);
 
-namespace Panda\Account\Domain\Provider;
+namespace Panda\Account\Infrastructure\Symfony\Security;
 
 use Panda\Account\Domain\Exception\AuthorizedUserNotFoundException;
-use Panda\Account\Domain\Model\UserInterface;
 use Panda\AccountOHS\Domain\Model\Owner\OwnerInterface;
 use Panda\AccountOHS\Domain\Provider\AuthorizedUserProviderInterface;
 use Symfony\Bundle\SecurityBundle\Security;
diff --git a/src/Account/Infrastructure/Symfony/Security/User.php b/src/Account/Infrastructure/Symfony/Security/User.php
new file mode 100644
index 0000000..70eb633
--- /dev/null
+++ b/src/Account/Infrastructure/Symfony/Security/User.php
@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Panda\Account\Infrastructure\Symfony\Security;
+
+use Panda\Account\Domain\Model\User as DomainUser;
+
+final class User extends DomainUser implements UserInterface
+{
+    public function getUserIdentifier(): string
+    {
+        return $this->getEmail();
+    }
+
+    public function getRoles(): array
+    {
+        return ['ROLE_USER'];
+    }
+
+    public function eraseCredentials(): void
+    {
+    }
+}
diff --git a/src/Account/Infrastructure/Symfony/Security/UserInterface.php b/src/Account/Infrastructure/Symfony/Security/UserInterface.php
new file mode 100644
index 0000000..61c8dd2
--- /dev/null
+++ b/src/Account/Infrastructure/Symfony/Security/UserInterface.php
@@ -0,0 +1,13 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Panda\Account\Infrastructure\Symfony\Security;
+
+use Panda\Account\Domain\Model\UserInterface as DomainUserInterface;
+use Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface;
+use Symfony\Component\Security\Core\User\UserInterface as SymfonyUserInterface;
+
+interface UserInterface extends DomainUserInterface, SymfonyUserInterface, PasswordAuthenticatedUserInterface
+{
+}
diff --git a/src/Account/Infrastructure/Symfony/Security/UserRepositoryInterface.php b/src/Account/Infrastructure/Symfony/Security/UserRepositoryInterface.php
new file mode 100644
index 0000000..96c2a04
--- /dev/null
+++ b/src/Account/Infrastructure/Symfony/Security/UserRepositoryInterface.php
@@ -0,0 +1,12 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Panda\Account\Infrastructure\Symfony\Security;
+
+use Panda\Account\Domain\Repository\UserRepositoryInterface as DomainUserRepositoryInterface;
+use Symfony\Component\Security\Core\User\PasswordUpgraderInterface;
+
+interface UserRepositoryInterface extends DomainUserRepositoryInterface, PasswordUpgraderInterface
+{
+}
diff --git a/src/Core/Domain/Model/TimestampableTrait.php b/src/Core/Domain/Model/TimestampableTrait.php
index e67646e..24191bc 100644
--- a/src/Core/Domain/Model/TimestampableTrait.php
+++ b/src/Core/Domain/Model/TimestampableTrait.php
@@ -9,9 +9,9 @@
  */
 trait TimestampableTrait
 {
-    private ?\DateTimeInterface $createdAt = null;
+    protected ?\DateTimeInterface $createdAt = null;
 
-    private ?\DateTimeInterface $updatedAt = null;
+    protected ?\DateTimeInterface $updatedAt = null;
 
     public function getCreatedAt(): ?\DateTimeInterface
     {
diff --git a/src/Core/Infrastructure/Configuration/Symfony/Package/security.yaml b/src/Core/Infrastructure/Configuration/Symfony/Package/security.yaml
index adba790..4d097c6 100644
--- a/src/Core/Infrastructure/Configuration/Symfony/Package/security.yaml
+++ b/src/Core/Infrastructure/Configuration/Symfony/Package/security.yaml
@@ -7,7 +7,7 @@ security:
         # used to reload user from session & other features (e.g. switch_user)
         app_user_provider:
             entity:
-                class: Panda\Account\Domain\Model\User
+                class: Panda\Account\Infrastructure\Symfony\Security\User
                 property: email
     firewalls:
         dev:
diff --git a/src/Report/Domain/Calculator/OperationValueCalculator.php b/src/Report/Domain/Calculator/OperationValueCalculator.php
index cfabb56..1ef7c68 100644
--- a/src/Report/Domain/Calculator/OperationValueCalculator.php
+++ b/src/Report/Domain/Calculator/OperationValueCalculator.php
@@ -7,8 +7,8 @@
 use Panda\AccountOHS\Domain\Model\Owner\OwnerInterface;
 use Panda\Exchange\Domain\Repository\ExchangeRateLogRepositoryInterface;
 use Panda\Portfolio\Domain\Model\Portfolio\PortfolioInterface;
+use Panda\Report\Domain\Exception\ExchangeRateLogNotFoundException;
 use Panda\Trade\Domain\Model\Transaction\OperationInterface;
-use Webmozart\Assert\Assert;
 
 final readonly class OperationValueCalculator implements OperationValueCalculatorInterface
 {
@@ -35,7 +35,10 @@ public function calculate(
             $ticker,
             $datetime,
         );
-        Assert::notNull($exchangeRate);
+
+        if (null === $exchangeRate) {
+            throw new ExchangeRateLogNotFoundException(sprintf('Exchange rate log for %s datetime not found.', $datetime->format('Y-m-d H:i:s')));
+        }
 
         return $operation->getQuantity() * $exchangeRate->getRate();
     }
diff --git a/src/Report/Domain/Exception/ExchangeRateLogNotFoundException.php b/src/Report/Domain/Exception/ExchangeRateLogNotFoundException.php
new file mode 100644
index 0000000..2c7ff7c
--- /dev/null
+++ b/src/Report/Domain/Exception/ExchangeRateLogNotFoundException.php
@@ -0,0 +1,10 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Panda\Report\Domain\Exception;
+
+final class ExchangeRateLogNotFoundException extends \Exception
+{
+    protected $message = 'Exchange rate log not found.';
+}
diff --git a/src/Trade/Domain/Exception/EmptyAdjustmentsException.php b/src/Trade/Domain/Exception/EmptyAdjustmentsException.php
new file mode 100644
index 0000000..178b11c
--- /dev/null
+++ b/src/Trade/Domain/Exception/EmptyAdjustmentsException.php
@@ -0,0 +1,10 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Panda\Trade\Domain\Exception;
+
+final class EmptyAdjustmentsException extends \InvalidArgumentException
+{
+    protected $message = 'Adjustments cannot be empty.';
+}
diff --git a/src/Trade/Domain/Factory/TransactionFactory.php b/src/Trade/Domain/Factory/TransactionFactory.php
index f704031..1ca553d 100644
--- a/src/Trade/Domain/Factory/TransactionFactory.php
+++ b/src/Trade/Domain/Factory/TransactionFactory.php
@@ -6,11 +6,11 @@
 
 use Panda\AccountOHS\Domain\Model\Owner\OwnerInterface;
 use Panda\AccountOHS\Domain\Provider\AuthorizedUserProviderInterface;
+use Panda\Trade\Domain\Exception\EmptyAdjustmentsException;
 use Panda\Trade\Domain\Model\Transaction\OperationInterface;
 use Panda\Trade\Domain\Model\Transaction\Transaction;
 use Panda\Trade\Domain\Model\Transaction\TransactionInterface;
 use Panda\Trade\Domain\ValueObject\TransactionTypeEnum;
-use Webmozart\Assert\Assert;
 
 final class TransactionFactory implements TransactionFactoryInterface
 {
@@ -93,7 +93,9 @@ public function createFee(
         \DateTimeInterface $concludedAt,
         ?OwnerInterface $owner = null,
     ): TransactionInterface {
-        Assert::notEmpty($adjustments);
+        if ([] === $adjustments) {
+            throw new EmptyAdjustmentsException();
+        }
 
         $transaction = new Transaction(
             TransactionTypeEnum::FEE,
diff --git a/tests/Api/ApiTestCase.php b/tests/Api/ApiTestCase.php
index 62c6831..fad0bdb 100644
--- a/tests/Api/ApiTestCase.php
+++ b/tests/Api/ApiTestCase.php
@@ -6,7 +6,7 @@
 
 use ApiTestCase\JsonApiTestCase;
 use Lexik\Bundle\JWTAuthenticationBundle\Encoder\JWTEncoderInterface;
-use Panda\Account\Domain\Model\UserInterface;
+use Panda\Account\Infrastructure\Symfony\Security\UserInterface;
 use Panda\Tests\Util\HttpMethodEnum;
 use Symfony\Component\HttpFoundation\Response;
 
diff --git a/tests/App/Account/Domain/Factory/UserFactoryTest.php b/tests/App/Account/Domain/Factory/UserFactoryTest.php
index fc7b6b6..5b068e2 100644
--- a/tests/App/Account/Domain/Factory/UserFactoryTest.php
+++ b/tests/App/Account/Domain/Factory/UserFactoryTest.php
@@ -5,10 +5,10 @@
 namespace Panda\Tests\App\Account\Domain\Factory;
 
 use Panda\Account\Domain\Factory\UserFactory;
+use Panda\Account\Domain\Hasher\UserPasswordHasherInterface;
 use PHPUnit\Framework\TestCase;
 use Prophecy\Argument;
 use Prophecy\PhpUnit\ProphecyTrait;
-use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
 use Webmozart\Assert\Assert;
 
 final class UserFactoryTest extends TestCase
diff --git a/tests/Architecture/LayersSeparationTest.php b/tests/Architecture/LayersSeparationTest.php
index 56ab25c..0cb3086 100644
--- a/tests/Architecture/LayersSeparationTest.php
+++ b/tests/Architecture/LayersSeparationTest.php
@@ -4,11 +4,14 @@
 
 namespace Panda\Tests\Architecture;
 
+use Doctrine\Common\Collections\ArrayCollection;
+use Doctrine\Common\Collections\Collection;
 use PHPat\Selector\Selector;
 use PHPat\Test\Builder\Rule;
 use PHPat\Test\PHPat;
 use Symfony\Component\Finder\Finder;
 use Symfony\Component\Finder\SplFileInfo;
+use Symfony\Component\Uid\Uuid;
 
 final class LayersSeparationTest
 {
@@ -26,19 +29,31 @@ public function test_domain_does_not_depend_on_other_layers(): Rule
             ->classes(...$this->applicationLayerSelectors, ...$this->infrastructureLayerSelectors);
     }
 
-    public function test_domain_does_not_depend_on_doctrine(): Rule
+    public function test_domain_does_not_depend_on_vendor(): Rule
     {
         $this->findAllLayers();
 
         return PHPat::rule()
             ->classes(...$this->domainLayerSelectors)
-            ->shouldNotDependOn()
-            ->classes(Selector::namespace('Doctrine'))
+            ->canOnlyDependOn()
+            ->classes(
+                Selector::namespace('Panda'),
+
+                // Allowed 3rd party classes
+                Selector::classname(Uuid::class),
+                Selector::classname(Collection::class),
+                Selector::classname(ArrayCollection::class),
 
-            // FIXME: requires too much effort to get rid of these dependencies for now
-            ->excluding(
-                Selector::classname('Doctrine\Common\Collections\ArrayCollection'),
-                Selector::classname('Doctrine\Common\Collections\Collection'),
+                // PHP root namespace
+                Selector::classname(\BackedEnum::class),
+                Selector::classname(\Countable::class),
+                Selector::classname(\DateTimeImmutable::class),
+                Selector::classname(\DateTimeInterface::class),
+                Selector::classname(\Exception::class),
+                Selector::classname(\InvalidArgumentException::class),
+                Selector::classname(\Iterator::class),
+                Selector::classname(\IteratorAggregate::class),
+                Selector::classname(\Throwable::class),
             );
     }