<mxfile host="app.diagrams.net" agent="architecture-diagram" version="24.0.0">
  <diagram name="Key Management and Trust Roots" id="30-keys-and-trust-roots">
    <mxGraphModel dx="1400" dy="900" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1500" pageHeight="1210" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="_box1" value="Offline root — ceremony, air-gapped, two-person" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#b85450;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=34;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#b85450;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="80" width="1410" height="190" as="geometry" />
        </mxCell>
        <mxCell id="_ico2" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="_box1">
          <mxGeometry x="9" y="7" width="20" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_box3" value="TUF root" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#c9d3de;dashed=1;dashPattern=6 6;verticalAlign=top;align=left;spacingLeft=12;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="60" y="110" width="1370" height="140" as="geometry" />
        </mxCell>
        <mxCell id="n.j-root" value="&lt;b&gt;root.json&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;5-of-9 threshold&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="460" y="140" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico4" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-root">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.j-share" value="&lt;b&gt;Root Key Shares&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;HSM smartcards&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="660" y="140" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico5" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-share">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.j-old" value="&lt;b&gt;Superseded Roots&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;verifiable 7 y&lt;/font&gt;" style="shape=cylinder3;boundedLbl=1;backgroundOutline=1;size=11;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;fontColor=#1e3a1e;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="860" y="140" width="180" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico6" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-old">
          <mxGeometry x="12" y="39" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_box7" value="Online signing — the keyless path" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#b85450;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=34;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#b85450;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="290" width="1410" height="190" as="geometry" />
        </mxCell>
        <mxCell id="_ico8" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="_box7">
          <mxGeometry x="9" y="7" width="20" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_box9" value="CA and logs" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#c9d3de;dashed=1;dashPattern=6 6;verticalAlign=top;align=left;spacingLeft=12;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="60" y="320" width="1370" height="140" as="geometry" />
        </mxCell>
        <mxCell id="n.j-int" value="&lt;b&gt;Fulcio Intermediate&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;Vault PKI · 90 d&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="440" y="350" width="200" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico10" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-int">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.j-rek" value="&lt;b&gt;Rekor Signing Key&lt;/b&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="680" y="350" width="180" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico11" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-rek">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.j-ct" value="&lt;b&gt;CT Log Key&lt;/b&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="890" y="350" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico12" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-ct">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_box13" value="Long-lived — air-gap and release path" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#b85450;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=34;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#b85450;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="510" width="1410" height="190" as="geometry" />
        </mxCell>
        <mxCell id="_ico14" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="_box13">
          <mxGeometry x="9" y="7" width="20" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_box15" value="HSM held" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#c9d3de;dashed=1;dashPattern=6 6;verticalAlign=top;align=left;spacingLeft=12;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="60" y="540" width="1370" height="140" as="geometry" />
        </mxCell>
        <mxCell id="n.j-air" value="&lt;b&gt;Air-Gap Release Key&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;never exported&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="440" y="570" width="200" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico16" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAACWUlEQVRoge3ZPWgUURAH8F8SBVGMhV8IIqgIgo2llSJRLCQYQSsLS62CNhZa2NhZmMpaQcRSLBQ7I4gimsbEQhQtrggmGGIIqMGcxd7JcmTv4+3bXZT8YWDv9s3sf+bNm7dvllVUi76SntOPQziJA9iJtVhCDVN4gpf4XRKnrrAZNzGNehfyFbewtQqyaQzgCuZ0R7xV5nENa8omDhvxqAey7eS5kmdjB95HIt+UD5I1UzjWSRZhTPJNmcCGoh24k4PgMr5JKlDWmPtFkj8cSHwJ17GlYWcQo1jMGD9UBPk+4alzPsPmkJVn440C9q6jgeTfdrD7MEPvRHpQfwQHTgfqjXe4/yzj/5H0j7wO9OFUoO5A4P1hEdNol/DKM6V9AJ+20d0dy4HQ/G/K5Qy7ZzroHYvlwEhOB5ZxG/sls7EHNyTltZ3e2VgODOd0IFT+OpB3Ec/m1A/FXPMirwO1nPqh+BTT2Bflpk9NqozG2MgmI9joBc2zRhSMSipJmTNwPBb5CxWQfy3SLlwF+bpIr9NVpE0d92KQryryE1ifl3xVkY9yqK8q8uMitFWqiPw8rorQ2Cqb/IweW4vtauooxjqM6RXvJDm9HduwIOmbTuIxXojU3C0i5z82iBeOItJmGnuLINuaHrHSZgw/G9cLuKuEV+9z4kV+U9FkV8KrQLKVOpA+DwyW9dCYiHGgacUMvhdgd0Xk3el+STrJTczikiSNSkfIl5UHVRBNo4gUKhX/lQOLmaOyEaJTGC7qbSP7gSOVME2h9ZXhIPZ1oVeXfGH5HJ3RKv4x/AHr4cvIBpx95gAAAABJRU5ErkJggg==;" vertex="1" parent="n.j-air">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.j-bun" value="&lt;b&gt;Policy Bundle Key&lt;/b&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="680" y="570" width="180" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico17" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-bun">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.j-base" value="&lt;b&gt;Base Image Key&lt;/b&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="890" y="570" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico18" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-base">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_box19" value="Distribution and rotation" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#6c8ebf;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=12;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#5b7fa6;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="730" width="1410" height="190" as="geometry" />
        </mxCell>
        <mxCell id="_box20" value="To every verifier" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#c9d3de;dashed=1;dashPattern=6 6;verticalAlign=top;align=left;spacingLeft=12;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="60" y="760" width="1370" height="140" as="geometry" />
        </mxCell>
        <mxCell id="n.j-meta" value="&lt;b&gt;TUF Metadata&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;timestamp 1 d&lt;/font&gt;" style="shape=cylinder3;boundedLbl=1;backgroundOutline=1;size=11;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;fontColor=#1e3a1e;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="430" y="790" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico21" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-meta">
          <mxGeometry x="12" y="39" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.j-tb" value="&lt;b&gt;In-Cluster Trust Bundle&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;≤ 30 d offline&lt;/font&gt;" style="shape=cylinder3;boundedLbl=1;backgroundOutline=1;size=11;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;fontColor=#1e3a1e;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="640" y="790" width="220" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico22" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-tb">
          <mxGeometry x="12" y="39" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.j-rot" value="&lt;b&gt;Rotation Runbook&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;no re-signing needed&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="890" y="790" width="180" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico23" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAADPklEQVRoge3ZT4hVZRjH8U/j2FBp6eTCzDSjICdoEJFctOgPZCltDEJcBC3cWLgIQqlQqGhTi1y4K4j+QAstIXIXTiAi4sLKNFSC/gmWf2agbCZ1bPHewduZc859zznvnTb3B+/innPf5/k+7znneZ/zHHr6f3VDl+zehAWY3fo9hgu4ltpRqgBWYh1WYxiLcv7zN07iML7GlxhN5L+W5uNlnBZWtuoYx248PNPgA3gFF2uC540RrCjwNws7has1goVN4B/CiYTg7eMK3saNGfiPM//bWRd+Mya6BN8+juDOAvhr+KwO/LYZAG8fP2Nvwbn/BNAfAf8q3qwQ7DiO4izOCSl1EZbgnkgbd7VGY70gbsUm8AEebwEX6V5swbFIux2vQJlW458Ig+/jjlijLfVhA051K4ABHO9g6A88WRE8q1uFvSB5AJ0e2p9wf0P4KfXju5QBDCrfpM5hWSL4WfioAnxUAFtLJl/FUwnhP6wIHxVAWW3zXkL4qisfFcDKkol/CTtkCr1UE35aAH0Zw2W3x6f4rTk7wkLV1aWyk/sUR76mgdOs1grFW9XVv5zlyJYSZwscfoOv0rAjLNQKrMphKNIVHMQP7Qfz3shuM/3WGsNkNcaeeuppJtStvlBTLRBeYW/OHB/Fu8JLE6ansHXYgdsrOBvDW0JZnEo78GLBuW+FNDxNt+BP9bb3cdWCLlO/sB8V+VpaNHF5TfipkarEfrrEx49lE4cawH+SCL5PaAgU+XmnGwHscb2J21SbOvgaTh1ASvhhoWQv8jXSyUDVAFLCLxXu7zJ/j+ZNzBZtVXSmwdx2DeGA8iTwBfbHGKp6Cx3A3TXB+4QmV6fUPYrFMQbrPsQT2BXrRMjzzwpN3E62J7G+zFh7KTGE7yMh8nRV+PqyrwV3Br8LrcaFQlvxMTwh/wtOnrbjjViAsitQ5/Wv6dgeC94pgD3CLn1yhsAn8VpVeLivAH4qVQ7i8y7Dj+KZOvCEZlN7j3K3/Dz/vPJiq+7YKz4RFGpQKGM3Kt8j5uF1nE8APoJHmoLX1Rw8J2SeS+KhTwuF2YNNAVK+kQ0IfZ4HhOdpPuYK6fUifhU+aBzCLwn99tRTE/0LVTPMb3gooi8AAAAASUVORK5CYII=;" vertex="1" parent="n.j-rot">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.j-hsm" value="&lt;b&gt;HSM Appliance&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;PKCS#11 · logged per op&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="530" y="950" width="200" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico24" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-hsm">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.j-quo" value="&lt;b&gt;Root Ceremony Quorum&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;grant ≠ use&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#08427b;strokeColor=#073b6f;fontColor=#ffffff;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="770" y="950" width="200" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_plate25" value="" style="rounded=1;arcSize=22;html=1;fillColor=#ffffff;strokeColor=none;movable=0;resizable=0;connectable=0;" vertex="1" parent="n.j-quo">
          <mxGeometry x="5" y="29" width="32" height="32" as="geometry" />
        </mxCell>
        <mxCell id="_ico26" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.j-quo">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_e27" value="delegates" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.j-root" target="n.j-int">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_e28" value="signs targets" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.j-root" target="n.j-meta">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="550" y="290" />
              <mxPoint x="420" y="290" />
              <mxPoint x="420" y="730" />
              <mxPoint x="520" y="730" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_e29" value="polled" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;dashed=1;endArrow=open;endFill=0;strokeColor=#d79b00;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.j-meta" target="n.j-tb">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_e30" value="PKCS#11" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.j-int" target="n.j-hsm">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="540" y="510" />
              <mxPoint x="410" y="510" />
              <mxPoint x="410" y="920" />
              <mxPoint x="630" y="920" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_e31" value="resident" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.j-air" target="n.j-hsm">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="540" y="730" />
              <mxPoint x="620" y="730" />
              <mxPoint x="620" y="920" />
              <mxPoint x="630" y="920" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_e32" value="still verifiable" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.j-old" target="n.j-tb">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="950" y="310" />
              <mxPoint x="660" y="310" />
              <mxPoint x="660" y="730" />
              <mxPoint x="750" y="730" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="title" value="Key Management and Trust Roots" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=20;fontStyle=1;fontColor=#16202c;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="20" width="1410" height="30" as="geometry" />
        </mxCell>
        <mxCell id="rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#c9d3de;" vertex="1" parent="1">
          <mxGeometry x="40" y="50" width="1410" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg33" value="" style="rounded=1;arcSize=30;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;" vertex="1" parent="1">
          <mxGeometry x="40" y="1110" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg34" value="Security / platform" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="70" y="1110" width="110" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg35" value="" style="rounded=1;arcSize=30;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
          <mxGeometry x="210" y="1110" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg36" value="Data store" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="240" y="1110" width="70" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg37" value="" style="rounded=1;arcSize=30;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
          <mxGeometry x="320" y="1110" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg38" value="Application we own" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="350" y="1110" width="110" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg39" value="" style="rounded=1;arcSize=30;html=1;fillColor=#08427b;strokeColor=#073b6f;" vertex="1" parent="1">
          <mxGeometry x="480" y="1110" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg40" value="Person or role" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="510" y="1110" width="90" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg41" value="" style="html=1;endArrow=none;strokeColor=#5a6570;strokeWidth=1.4;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="620" y="1120" as="sourcePoint" />
            <mxPoint x="640" y="1120" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="_lg42" value="synchronous" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="650" y="1110" width="70" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg43" value="" style="html=1;endArrow=none;dashed=1;strokeColor=#d79b00;strokeWidth=1.4;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="740" y="1120" as="sourcePoint" />
            <mxPoint x="760" y="1120" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="_lg44" value="event / async" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="770" y="1110" width="80" height="20" as="geometry" />
        </mxCell>
        <mxCell id="note" value="Rotation never invalidates signatures made under the previous root. No single identity may both grant signing authority and use it." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="1140" width="1410" height="20" as="geometry" />
        </mxCell>
        <mxCell id="foot-rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#e3e9ef;" vertex="1" parent="1">
          <mxGeometry x="40" y="1160" width="1410" height="10" as="geometry" />
        </mxCell>
        <mxCell id="foot" value="v 1.0   ·   owner Security Architecture   ·   date 2026-09" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=9;fontColor=#9aa7b4;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="1170" width="1410" height="10" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
