REQUIRED BACKGROUND: boost-start, boost-wrapper-config.

Canonical examples (ship with boost)

factory/contrib/google.golang.org/grpc/v1/client/examples/examplesvc/ — minimal client wiring
factory/contrib/google.golang.org/grpc/v1/server/examples/examplesvc/ — minimal server wiring
factory/contrib/google.golang.org/grpc/v1/server/examples/examplesvcautotls/ — server with auto-TLS

Read examplesvcautotls before enabling TLS on a new service — it shows the certificate-manager wiring boost expects.

Two halves

Path	When
`factory/contrib/google.golang.org/grpc/v1/client/`	Outbound gRPC calls — dial options, interceptors
`factory/contrib/google.golang.org/grpc/v1/server/`	Inbound gRPC service — listener, interceptors, TLS

Configure under boost.factory.grpc.client.* and boost.factory.grpc.server.* (override with the matching BOOST_FACTORY_GRPC_* envs).