Ambassadors are frozen, read-only wrappers around domain entities, providing a stable interface that is safe to pass across domain boundaries in a modular monolith.