<mxfile host="app.diagrams.net" agent="architecture-diagram" version="24.0.0">
  <diagram name="Key Custody — What Nobody Holds Is the Design" id="38-key-custody">
    <mxGraphModel dx="1400" dy="900" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1770" pageHeight="900" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="_box1" value="Signing — one key makes a checkpoint believable" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#b85450;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=34;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#b85450;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="80" width="1680" height="140" as="geometry" />
        </mxCell>
        <mxCell id="_ico2" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="_box1">
          <mxGeometry x="9" y="7" width="20" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.kk1" value="&lt;b&gt;Managed HSM Pool&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;own subscription&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="410" y="110" width="180" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico3" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.kk1">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.kk2" value="&lt;b&gt;EC P-384, Non-Exportable&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;FIPS 140-3 L3&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="620" y="110" width="230" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico4" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.kk2">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.kk3" value="&lt;b&gt;Crypto User: Signer Only&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;one workload identity&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="890" y="110" width="230" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico5" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAACp0lEQVRoge3YS6hNURzH8Y/rcUUeISl5RpRkoCu5MVKKDIiUMUMzJFNSKAMjAyNRkpTHjBiR3BiYkAmlPJPIOzkGax933e1sd++z97Gp861/Z5+z1v6v33+dvdb/vzZdunTpUicjStzbizWYiwl4iQE8Ki+rs0zHcbxHo4XdxxblJqdj9Asz3Up42s5jfD0yW9OPL/KJb9o1jKpDbJpJeKGY+KYdrEHvbxzUnvgGPmHm35c8yAg81X4ADez+66ojlmaIKmJXOyWuJ0efORWMU4WPluTZIXorGGfsMBq2YxNm4Z2we53A2wrGtkr5R+h2hu/pSVure14mY5dmHD6WDOBYC789uDnMfW+Ef6U050oGsLKFzy2pPrewB6fxI/r9RBUBLMH3NsVfyfB5Kupz19D1eCRqe15FALCvDfHPZT8C16N+B1Jt/Sk/Y7JE5dlGmxzG0QL9n2GDkARbEc/4l1Rb+nvmblkkgAb2YiueDNPvLPpwr4D/tminUjyPy1iH9ZiHiUKxN4ALeFiVwOFot9T9ikuJ1UqRR+i/pE84Pj4wmMze4ww2Y7GQ6GAGlgt7+UDS9ztmJ+0bhYVdJp98kPN8MVVIXnFC+ZNl5YjmWugRsmoZ8bGtEDlOswB3hN0m78F8ZMbvr5PPKYlVxcLmRTqAyULmnF/RQI2K/KT5NbHpAA5hUYcG7QhxALOxoy4huIFdOCmsvVzEeWAzRlcsKi93sNag8FfYn+fG+B9YU7GoIlw3dNZzn6HjAOp89bHa0B0v92TGj9CEyuQUpx8XhTprmbAWcvFPvPZL2JhYIf77WigO4HFtKkoQB3CyA/6nJZ9vhfc9VZE52TuVrxjTRV6zGt2WBFHW3/FYcFaxNkl16+MjviXXI4XTW7t89vt5uUuXLl1q5CeNJmvbT2E7DgAAAABJRU5ErkJggg==;" vertex="1" parent="n.kk3">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.kk4" value="&lt;b&gt;Rotation with Overlap&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;old key still verifies&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1150" y="110" width="210" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico6" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAADPklEQVRoge3ZT4hVZRjH8U/j2FBp6eTCzDSjICdoEJFctOgPZCltDEJcBC3cWLgIQqlQqGhTi1y4K4j+QAstIXIXTiAi4sLKNFSC/gmWf2agbCZ1bPHewduZc859zznvnTb3B+/innPf5/k+7znneZ/zHHr6f3VDl+zehAWY3fo9hgu4ltpRqgBWYh1WYxiLcv7zN07iML7GlxhN5L+W5uNlnBZWtuoYx248PNPgA3gFF2uC540RrCjwNws7has1goVN4B/CiYTg7eMK3saNGfiPM//bWRd+Mya6BN8+juDOAvhr+KwO/LYZAG8fP2Nvwbn/BNAfAf8q3qwQ7DiO4izOCSl1EZbgnkgbd7VGY70gbsUm8AEebwEX6V5swbFIux2vQJlW458Ig+/jjlijLfVhA051K4ABHO9g6A88WRE8q1uFvSB5AJ0e2p9wf0P4KfXju5QBDCrfpM5hWSL4WfioAnxUAFtLJl/FUwnhP6wIHxVAWW3zXkL4qisfFcDKkol/CTtkCr1UE35aAH0Zw2W3x6f4rTk7wkLV1aWyk/sUR76mgdOs1grFW9XVv5zlyJYSZwscfoOv0rAjLNQKrMphKNIVHMQP7Qfz3shuM/3WGsNkNcaeeuppJtStvlBTLRBeYW/OHB/Fu8JLE6ansHXYgdsrOBvDW0JZnEo78GLBuW+FNDxNt+BP9bb3cdWCLlO/sB8V+VpaNHF5TfipkarEfrrEx49lE4cawH+SCL5PaAgU+XmnGwHscb2J21SbOvgaTh1ASvhhoWQv8jXSyUDVAFLCLxXu7zJ/j+ZNzBZtVXSmwdx2DeGA8iTwBfbHGKp6Cx3A3TXB+4QmV6fUPYrFMQbrPsQT2BXrRMjzzwpN3E62J7G+zFh7KTGE7yMh8nRV+PqyrwV3Br8LrcaFQlvxMTwh/wtOnrbjjViAsitQ5/Wv6dgeC94pgD3CLn1yhsAn8VpVeLivAH4qVQ7i8y7Dj+KZOvCEZlN7j3K3/Dz/vPJiq+7YKz4RFGpQKGM3Kt8j5uF1nE8APoJHmoLX1Rw8J2SeS+KhTwuF2YNNAVK+kQ0IfZ4HhOdpPuYK6fUifhU+aBzCLwn99tRTE/0LVTPMb3gooi8AAAAASUVORK5CYII=;" vertex="1" parent="n.kk4">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_box7" value="Encryption — one key per tenant, one data key per segment" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#b85450;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=34;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#b85450;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="240" width="1680" height="140" as="geometry" />
        </mxCell>
        <mxCell id="_ico8" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="_box7">
          <mxGeometry x="9" y="7" width="20" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.ke1" value="&lt;b&gt;Tenant KEK&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;500 keys in HSM&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="460" y="270" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico9" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.ke1">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.ke2" value="&lt;b&gt;Segment DEK&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;wrapped, per object&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="660" y="270" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico10" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.ke2">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.ke3" value="&lt;b&gt;Blob Encryption Scope&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;bound to the prefix&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="870" y="270" width="210" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico11" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.ke3">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.ke4" value="&lt;b&gt;Shred = Destroy DEK&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;instant, irreversible&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1110" y="270" width="200" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico12" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.ke4">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_box13" value="Publication — what an outsider needs and gets" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#6c8ebf;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=12;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#5b7fa6;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="410" width="1680" height="140" as="geometry" />
        </mxCell>
        <mxCell id="n.kp1" value="&lt;b&gt;Public Verification Key&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;published, versioned&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="420" y="440" width="220" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico14" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.kp1">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.kp2" value="&lt;b&gt;Verification Algorithm&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;specified, open&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="680" y="440" width="220" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico15" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAAB8UlEQVRoge2YvUrDUBhAj+ggrQouoiBI/auKDj6HiJO/gwq+gG/g5KQvIVZRcHB1EVx8AtFBB62Wan0C0VKH9GIISZovuclNsAe+7ZJ7TnobmkKb/0seKAFXwIhhFzE54BpoNOcFKBg1EuCUz1SEl3wmIvLADd7yap6AHkOOngSVVzNvRtMdqfyRGU13Wp1555wBXXEKFYELYDfAWumdPwY69Sv/UQQqtg0Pfdam8s7b5dUcZEF+Cqj6COzb1uo8NmvAJ1ADVsPKD7eQt0dI5Us+8ttA3ba2DmyFCdgRCJVjkrdHbEoD+oF7gVhc8pEiBjVGRJFX8wWMmYjQIa9mURoQNeJEo/wz0BsmAGAAuBPKn+P9nJfKV4HpsPJhIlInL4kwLt8NzGH9NHBjCHjw2PAUfWf+DZiQyo8Dj80LlJshQSNSIf/quFAtYITOp01Fl3yQiBzWa2CHSfmCj7w9YlZ43TDyk1J5gMuAG0giEpMHuBVsFCQiUXmABeBHsOGHT0Ti8opl4FuwsdsXWyr/DszokNcRYVxesY78OO0J5bUdGy+kn4RkYrvzTlZiiEhMPo6IxOUVOiKMySuiRBiXV4SJSI28QhKROnlFkIjUyiv8IlIvr3CLyIy8YgPr774G1vtz0axOOEaBJaDPtEibpPkFWbT2ZbcE/xkAAAAASUVORK5CYII=;" vertex="1" parent="n.kp2">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.kp3" value="&lt;b&gt;TSA Certificate Chain&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;third-party root&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#f5f5f5;strokeColor=#8c8c8c;fontColor=#333333;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="930" y="440" width="210" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico16" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.kp3">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.kp4" value="&lt;b&gt;Witness Anchor&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;phase 3&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#f5f5f5;strokeColor=#8c8c8c;fontColor=#333333;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1180" y="440" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico17" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAAB40lEQVRoge3Yz6sOURzH8dfjXlfuQkoW6ooiIUk2imRna+kvYCMLUlIsWNhYKFtZKUp3y80/YGOHKD+6RCGJErnyazF3MsbM85z73HnmTDnv+tQ0c2bm8znnzJyZL4lEIpH4n+k1dJ21mMJKfMFjvG7o2iNjChfwFL8q9ARnsTqWwTrGcE7W01XGy/qEo5ob7UWxAjPCjJd1DRPtW/7DOG4bznyuqyKOxPkAgyE6jD24IXtOPmMWV7B9VObX4WtDAb73OfYDZ4xglC41ZD5UJ5s038PLlgPMYUOIuSUBbTbJ3vltMoFDIQ1DArRtPmdvSKOQALFW0kXfdxlO4IV253+uOyEmx2v2b8U0tgTHbZ57w564Ex/E6fWynuE4loeaX4VXHTBe1kNsCwlwuQNm6/RuUIg1+NYBo/30SGk6FV+jB7G0X8IOsBlH6g5Oi9/DIZotmi6OQKwVd6Gsl33e4O8AUf+WFsjGfKMYoPNVhAKT+UYxwIMIRoblTdXO3eI/oCGakxUX/qGHux0wOEg3q8zn7JP9l8Y2Waef2NUvAJzqgNE6XRxknmwqnZ5PG9twUdfVf/5Xsh/3O2D8I46pKbUMqr+MzQc5gB2y1Xqy7xnN8BbPcUtWknzfwj0TiUQikWif37lJeEKjXHZHAAAAAElFTkSuQmCC;" vertex="1" parent="n.kp4">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_box18" value="What no principal holds, by construction" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#c9d3de;dashed=1;dashPattern=6 6;verticalAlign=top;align=left;spacingLeft=12;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="580" width="1680" height="150" as="geometry" />
        </mxCell>
        <mxCell id="n.kn1" value="&lt;b&gt;Exportable Private Key&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;no export path&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#5c1a17;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="560" y="610" width="220" height="100" as="geometry" />
        </mxCell>
        <mxCell id="_ico19" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.kn1">
          <mxGeometry x="9" y="38" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.kn2" value="&lt;b&gt;Standing HSM Admin&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;PIM, quorum, audited&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#5c1a17;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="820" y="610" width="190" height="100" as="geometry" />
        </mxCell>
        <mxCell id="_ico20" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.kn2">
          <mxGeometry x="9" y="38" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.kn3" value="&lt;b&gt;Sign and Delete&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;no such principal&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#5c1a17;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1040" y="610" width="170" height="100" as="geometry" />
        </mxCell>
        <mxCell id="_ico21" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.kn3">
          <mxGeometry x="9" y="38" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_e22" value="wraps" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.ke1" target="n.ke2">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="550" y="400" />
              <mxPoint x="750" y="400" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_e23" value="public half" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.kk2" target="n.kp1">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="740" y="240" />
              <mxPoint x="440" y="240" />
              <mxPoint x="440" y="400" />
              <mxPoint x="530" y="400" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="title" value="Key Custody — What Nobody Holds Is the Design" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=20;fontStyle=1;fontColor=#16202c;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="20" width="1680" height="30" as="geometry" />
        </mxCell>
        <mxCell id="rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#c9d3de;" vertex="1" parent="1">
          <mxGeometry x="40" y="50" width="1680" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg24" value="" style="rounded=1;arcSize=30;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;" vertex="1" parent="1">
          <mxGeometry x="40" y="810" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg25" value="Security / platform" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="70" y="810" width="110" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg26" value="" style="rounded=1;arcSize=30;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
          <mxGeometry x="210" y="810" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg27" value="Application we own" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="240" y="810" width="110" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg28" value="" style="rounded=1;arcSize=30;html=1;fillColor=#f5f5f5;strokeColor=#8c8c8c;" vertex="1" parent="1">
          <mxGeometry x="370" y="810" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg29" value="External / third party" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="400" y="810" width="130" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg30" value="" style="rounded=1;arcSize=30;html=1;fillColor=#f8cecc;strokeColor=#b85450;" vertex="1" parent="1">
          <mxGeometry x="550" y="810" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg31" value="Risk / gap" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="580" y="810" width="70" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg32" value="" style="html=1;endArrow=none;strokeColor=#5a6570;strokeWidth=1.4;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="660" y="820" as="sourcePoint" />
            <mxPoint x="690" y="820" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="_lg33" value="synchronous" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="690" y="810" width="70" height="20" as="geometry" />
        </mxCell>
        <mxCell id="note" value="Every use of the signing key is itself an audit event in this log, which means the log records the operations that make the log believable. A rotation overlaps so old checkpoints keep verifying, and needs two approvals recorded as events before it can begin." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="840" width="1680" height="20" as="geometry" />
        </mxCell>
        <mxCell id="foot-rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#e3e9ef;" vertex="1" parent="1">
          <mxGeometry x="40" y="860" width="1680" height="10" as="geometry" />
        </mxCell>
        <mxCell id="foot" value="v 1.0   ·   owner Data &amp; AI Global Practice   ·   date 2026-09" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=9;fontColor=#9aa7b4;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="870" width="1680" height="10" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
