<mxfile host="app.diagrams.net" agent="architecture-diagram" version="24.0.0">
  <diagram name="Identity — The Caller's Authority, Carried All the Way Down" id="27-identity-and-authorization">
    <mxGraphModel dx="1400" dy="900" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1720" pageHeight="990" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="n.u-cxo" value="&lt;b&gt;CXO&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#08427b;strokeColor=#073b6f;fontColor=#ffffff;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="60" y="80" width="180" height="790" as="geometry" />
        </mxCell>
        <mxCell id="_plate1" value="" style="rounded=1;arcSize=22;html=1;fillColor=#ffffff;strokeColor=none;movable=0;resizable=0;connectable=0;" vertex="1" parent="n.u-cxo">
          <mxGeometry x="5" y="13" width="32" height="32" as="geometry" />
        </mxCell>
        <mxCell id="_ico2" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAACWklEQVRoge3Zz4tNYRzH8dfIrwmJGcZMIgpJEjZsiA1pLGhK2VDEcpLFWCkrG3tr/8GQHRNWipRhocxmombIaESNjDFj8XTrNHPunXueOfec2zTv+m7Ovd9z3p/uvec8z/eyRLm05Hy+lTiBbuzEFvzGKF6hH0M5XzMXVuAaRjAzTz3BwXI002nHc/OLJ2sKfSW4zqELw7LJJ+te4cYJWoXvdax8pa4WLV7hdp2C89UEthbsrh0/FyierPvF6nM9J/FK/cKqGJFlkQHORvZVYy2OxzTGBtgX2Zf7OWMDdET21aIzpik2wHRkXy3+xTTFBhiN7KvFSExTbIB3kX21eN+Ac1blknxvo9+xvMgA6zGWY4BS1kQ3ImVn1zjaCnZH+MifZpSdXdO4ULR4ko3Cjy9W/lbxynNZh0eyyU/gYhmytTiPD2qLT+EBtuV10bw39XAIZ7BLWHL8wWe8xmPhlrnEoiH2K7RfGI10YgMm8RBv6uhtRY+wfJ7CV3zCC/zIKpIlwBr04oowtErjozD3GRSmFePCTqsNe3EUJ4U712z+4hnuCmOaXOlW39Aqr+oXnjG5cFNYqxclX6kh7Fmo/OUSxJM1jM2x8oeFe3iZAWYwEBtgoAnkK3Uuq/yxJpBO1ttqotW2lD1ZEzeYA9id9kK1AKcb5xLNqbSDaQFasL2xLlHsSDuYFqBN+Kuo2ehKO5gWYHWDRWJJ9YqdCzUNizLAZOEW9ZHqlRZgTGNmnwtlMMube5X/9E3WN2zKEqAFdzTHYm5IWFhWFa1FB44o77nwBS+FrecSTcl/+F0YjmstwYwAAAAASUVORK5CYII=;" vertex="1" parent="n.u-cxo">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.u-app" value="&lt;b&gt;Client app&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="260" y="80" width="180" height="790" as="geometry" />
        </mxCell>
        <mxCell id="_ico3" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.u-app">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.u-entra" value="&lt;b&gt;Keycloak&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="470" y="80" width="180" height="790" as="geometry" />
        </mxCell>
        <mxCell id="_ico4" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAAIAAAACACAYAAADDPmHLAAAABmJLR0QA/wD/AP+gvaeTAAAJpklEQVR4nO2deYydVRnGfzOtQ8uibLKIoICsilETFIEIighGNkFs2SEBREQkahChEBAUWZUUCcrSsWgsUFxAXGJQgnGlwSUiVVPAFgXqggrdYNr6x8mdzNy5d+5Z3uc757vzPcnzz2Tynee89733O8t7ngMNGjRo0KBBgwYNGjSYWhjILQCnYS6wVW4hheDjwFO5RVSJE4H1DUd5R1o464UNgb+SP+glcR2wX0pQ64TLyR/wEvkLyng9S7E9sIL8wS6Vx8eHth64m/xBLpnLgI2io1s49sO963IHuXReEhvgkjEILCJ/cOvAlcAOcWEuFx8if2DrxK/GhblMvBx4mvxBrRPXAW+NCXaJuJ78Aa0jf04fTAtfB6whfzDrytnhIS8L3yN/EOvMZbiV01rifeQPYD9wTmjgS8DLgMXkD14/cAVuBdUMg5YP64KPArtV0M5UwIa4/ZPa4JXAc+T/5vQTazUt/DL5A9aPrMW08E3ACPmD1a+c5f9RdIcyix4EDhA8dyGwxPN/34CbgVjjEeBHHf4+E5jR9rch4BTsY/0ksAew2vi5Jvggmqx/DDer8MXGwN+MNYwAe4UEA/iasYYWLwrUUQlmAk+g6fB7I/ScYqxhboSG7YAXjHWsB54HXhWhR4qL0Xz490fqGQB+aaTh38CWkTouMdLQztsj9UigyvQXSVtL2AebApRzEjSofhnXAnsn6DKF6l13nYG2+Yka/kjY+KMTVGOjn1HAtPDtaMq8lgObGujbBvhvgo5DDTSAmx0pkuBYI31RGAR+1UGUBc801HlRpIb7DDWo1keWknG38DQPgTH8LTDNUOcGwF8CNaSOPzrhlkANvvy0sU4vbAL8PUKsDw8U6D0mUMO1Ag1bAf8J1OHD54FtQ4RMT+4KXBjaqCcW4t6X1ngMFyzfQdNigYblwBXANcbP3Rj3q/mC5/+PpDa4E24p0jqTVwGvTRXXBd8P1PIM8AqBjiHgT4FarPliaie+JRKm2vM+PFLP5wvTU0QCvEsk6incT5k1Ur5xa4BdBZog/BepiASYBvxeJOrEWFE98MlEXd8W6doD90HUKgHOEQlSHYu2GnUfItAGcIOBtsoSYDPgHwIxylKnrxhpfJT05eBOUMVUkgBzRWKGY8R4wHrlLWVDaDKcbahRlgB7onlfKfe1HzTWmrIlPBmmAb8z1mqeAD8QCVEtYR4r0htTFOID1czKJAGOFIl4nIl1dBaYga4yKaYszBeqtZWkBFCuWh3tH5sgqCqTWnxApHsn3EpoFQnwkq+oT4kE/DggMCFQVSa180iR/isr0O6dAFuj2bkaAd4YGBhf3CHQ24lLcFvM1lBUM0cnwO2ixm8KjYonrOr/fHm+qB+nVqC9ZwK8BVd0aN2waiplWQHsy/+h2Q5XVll5JcAA8JCo4Y/FRqUHThbp7cXbRP1R1Vl6JcAJokYtqms7oar3ZieuRbeM/XWh7q4JMBOdibNVdW07PivS60vViV3ljKZrAlwmatCyunYsdqS6ufNkPE7UP9Wpoo4JoDJxXoPOKWShQG8MVf6+qlNFHRPgTkFD67EvgGxhf8ryHb5U1M9ZAq0TEkBl4vwsmsLKEn2HVwKvEfQV7Hc2xyXAIPCwcQMtnmEZhTEo1Xf4G6L+Wtc2jCsLP9PwwWP5G2xP97RQuu/wOwR9BttTRaMJoAzmAfYxAMr3HX4ETeJbnioaTYDrBAFYDywQBACc77DiQIo1Txf1P7XCeVwCqIK5Et3pnvsFehVUDX6t6jNGAL4r6vxlgo4DvFukV8WrNWEwOVU0MojmPQXwT9FzFaeGlBgSPbc1ZkvBAMDuaCp9VVu+AD8U6FXwX8AWgv4PAD810Dc6CPyCKAA3CjoPrjz9JZFmS54l6r/VdbujCbAp7sy6dQCUZV83CvRa8g/Y+C+0w/K63XELQWcZPbSdqurZzXDjjNwfdDceLOq35XW74xJAua6uKv0+V6Q3lXeL+rsDtju1a9sbUO2sqQ5/TEd3TD2Wq3FrKwpYb3tPSADQ3el7oU0MJuAgkd5YXiHq5zsFWjsmgKogRHkA9F6B3hiq3E2m4cyfKkkAsB1ojKXqGtSdKWNv4CRR/z4s0ts1ASynGmO5DjfOUOBqgd4QqtxNlOYRXRMA7BYb2rkIzW1lSsNKn8R+m6BPAF8U6p40AayWGzvx5Ph4TIrTRXp7cVjUH7WB1KQJALqjYc/gilCsMQj8WqB3MioHt2oLuZ4JADBP1PjnwuPhhX2ptkpY5W5yRAXavRJga9J89rtxDbBLaFQ8sUCgtxOXoFngqspG1isBAC4QCfhmSFQC8GqqMYh4v0j/+RVoD0qAIeDPIhHvCQhMCFTH21pUbXKprOQ7cV2IsKNEIh5Fs206E3e5okKzcpv7NpHm5AQAnU3cR0KFeOJ4kd4vifSqZl1mCaAyilQ6hlibXNRJq3kCgM4qVmW++GZsv1XninSqDDnME0C1Nq00X7QyulK5mygNOcwTAHR28aqRtZXVncrd5DMG2ipNAOWFEUfFiuqBVLPL74h0qeovpAkAOmNj5epa7FqG8sqYuyI1ZU8A0BkbX5AqrAti1zKuEunJ7W6SnAAqY2PlDlvoqaJ+djdJTgBwV6opxA1biOuAvQj71lneXTwWKkOO5bjXqC+ToTJoVFXZhJotKU73qk5ircANKivHqYFCfWldZxdzicQq3IEMS6jOYl5srNMbA+iMjS0rbedEaphnqEF1GnsZGa+PB52xsVWt/ba4wWWMBstVSlWZl8qlNAiqixosTtsMJ2qwWKU8LFFDN6p8ioOxHfHfssmYet7OakPo8AQNqjIv5YWbUYh9z/biPZF6LMvbFxNv+fIJIw3tnB+pR4YZuNPAis7GnLmfbawh5pCrqswr27SvFz6AJgFCXTcUdweuJtz1/FZjDS3OCdQxAcqBw0+AAwXPXYDbO/fBbmh2FxfhPygcwl2RY30cbiluSrnK+LlmeD31MHKqK2f7fxT5cDP5A9WPLGba1wub47zycgesn2g67VO5hLawCvcaOETczlTCfHRl6RJMx43ec39z+oHm0z6FUUM7RoDzKmhnKuBK3KZPLaFyJZ8qzL7bl4q6XPJQKmeFh7w8XEv+QNaRtZn29cImlH3RU4ksbrcvFWeQP6h14nBUlAuG8n7CfqOyPD4rqjZyqiuTd/tKRlVGTnXlUmo+7euFqoyc6sq+mPb1wqXkD3SJ7JtpXy8ojZzqyrX02bSvF44jf9BL4ry0cIahhJ+ZAeAGYJvcQgrBeTjX8wYNGjRo0KBBgwYNGjQQ4P+ISLRNHaY4qQAAAABJRU5ErkJggg==;" vertex="1" parent="n.u-entra">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.u-apim" value="&lt;b&gt;Kong&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#ffe6cc;strokeColor=#d79b00;fontColor=#4a3200;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="670" y="80" width="180" height="790" as="geometry" />
        </mxCell>
        <mxCell id="_ico5" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.u-apim">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.u-api" value="&lt;b&gt;Experience API&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="870" y="80" width="180" height="790" as="geometry" />
        </mxCell>
        <mxCell id="_ico6" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.u-api">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.u-tool" value="&lt;b&gt;MCP tool plane&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#ffe6cc;strokeColor=#d79b00;fontColor=#4a3200;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1080" y="80" width="180" height="790" as="geometry" />
        </mxCell>
        <mxCell id="_ico7" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.u-tool">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.u-sem" value="&lt;b&gt;Semantic model&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#d5e8d4;strokeColor=#82b366;fontColor=#1e3a1e;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1280" y="80" width="180" height="790" as="geometry" />
        </mxCell>
        <mxCell id="_ico8" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAACMUlEQVRoge2ZPU8UURSGnwVBwRBdNvKREFETrcSGZoOFFXQEEoyJNrQYK0pLO1tp/AVCawP8AhI10cJAYeFuCBhJKPiIDW5WLWYTZmfPgXsYZ+9sdp7kFvfsO7Pvycy5M/cMZPgld8ZvV4GXwBRQaI6dOipAGVgC1q0HF4BvwN+UjFfWBN6lwHR4VIGHruZ7gN8pMB0dbyWzHUKsH+hyzbaJDEvBS0JMK+w9YIXg6iTJbeBJnBOMIF/Cp7GtubMh/P97SSjdQhpH8X05c+gqtCSQSrIEfJMl4JssAd9YEriRmItGBl2F0quExhtgGvhjtmNjCBh3FVsSuAbMme0kTFvVQCpp+QQsNVABPgAntfkVoKic4xj4TLAVBMijF+ZPYCs0HwXuGnw1oO0HXgjaRUVbFLTSPvsXcD2i6wQ2BW3s/UBZiJUM2u9C7IDGd/8qsO1qquVroK0SuC/EHijascg8J8T+C5ZV6DXwnNNXiU7gpqJdBXZD8x6UtkhcLAnkgFuO2m7gjtnNBWirGkglLZ+ApQaircXLwDNgQNBuAWucFnwemK8dkziW1uK8or0naJcE3Y7iYVXQJtJa1FqAFm0sWr4GmpmA1LbXWvlnfburw1LEM8BH6p/Es4r2MbAcmvcCk4JuCHgEfI3EnDf1EloR+x7ORZz0F5iLciIFpQT20Zc3n3yxiGfxf8uERwnos2a8QLBn9W3+E/KDETh/uSoAEwQdCB/8IFj5qucJM3zxD8CNRvsBhSj3AAAAAElFTkSuQmCC;" vertex="1" parent="n.u-sem">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.u-srch" value="&lt;b&gt;OpenSearch&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#d5e8d4;strokeColor=#82b366;fontColor=#1e3a1e;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1490" y="80" width="180" height="790" as="geometry" />
        </mxCell>
        <mxCell id="_ico9" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.u-srch">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_m10" value="1. opens the brief" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.1165;exitDx=0;exitDy=0;entryX=0.5;entryY=0.1165;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-cxo" target="n.u-app">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m11" value="2. sign in" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.1671;exitDx=0;exitDy=0;entryX=0.5;entryY=0.1671;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-app" target="n.u-entra">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m12" value="3. MFA · device compliance · location" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.2177;exitDx=0;exitDy=0;entryX=0.5;entryY=0.2481;entryDx=0;entryDy=0;align=left;spacingLeft=6;" edge="1" parent="1" source="n.u-entra" target="n.u-entra">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="630" y="250" />
              <mxPoint x="630" y="280" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_m13" value="4. access token + roles + tenant" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.2835;exitDx=0;exitDy=0;entryX=0.5;entryY=0.2835;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-entra" target="n.u-app">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m14" value="5. bearer token" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.3342;exitDx=0;exitDy=0;entryX=0.5;entryY=0.3342;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-app" target="n.u-apim">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m15" value="6. validate · tenant quota" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.3848;exitDx=0;exitDy=0;entryX=0.5;entryY=0.4152;entryDx=0;entryDy=0;align=left;spacingLeft=6;" edge="1" parent="1" source="n.u-apim" target="n.u-apim">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="840" y="390" />
              <mxPoint x="840" y="410" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_m16" value="7. forwarded with claims" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.4506;exitDx=0;exitDy=0;entryX=0.5;entryY=0.4506;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-apim" target="n.u-api">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m17" value="8. RFC 8693 token exchange" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.5013;exitDx=0;exitDy=0;entryX=0.5;entryY=0.5013;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-api" target="n.u-entra">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m18" value="9. downstream token, user's scopes" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.5519;exitDx=0;exitDy=0;entryX=0.5;entryY=0.5519;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-entra" target="n.u-api">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m19" value="10. tool call + user assertion" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.6025;exitDx=0;exitDy=0;entryX=0.5;entryY=0.6025;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-api" target="n.u-tool">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m20" value="11. is this tool allowed for this role?" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.6532;exitDx=0;exitDy=0;entryX=0.5;entryY=0.6835;entryDx=0;entryDy=0;align=left;spacingLeft=6;" edge="1" parent="1" source="n.u-tool" target="n.u-tool">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="1250" y="600" />
              <mxPoint x="1250" y="620" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_m21" value="12. query as the user" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.7190;exitDx=0;exitDy=0;entryX=0.5;entryY=0.7190;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-tool" target="n.u-sem">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m22" value="13. rows the user may see (RLS)" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.7696;exitDx=0;exitDy=0;entryX=0.5;entryY=0.7696;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-sem" target="n.u-tool">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m23" value="14. query + group filter" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.8203;exitDx=0;exitDy=0;entryX=0.5;entryY=0.8203;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-tool" target="n.u-srch">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m24" value="15. documents the user may read" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.8709;exitDx=0;exitDy=0;entryX=0.5;entryY=0.8709;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-srch" target="n.u-tool">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m25" value="16. result + evidence id" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.9215;exitDx=0;exitDy=0;entryX=0.5;entryY=0.9215;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.u-tool" target="n.u-api">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="title" value="Identity — The Caller's Authority, Carried All the Way Down" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=20;fontStyle=1;fontColor=#16202c;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="20" width="1630" height="30" as="geometry" />
        </mxCell>
        <mxCell id="rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#c9d3de;" vertex="1" parent="1">
          <mxGeometry x="40" y="50" width="1630" height="10" as="geometry" />
        </mxCell>
        <mxCell id="note" value="There is no service account that can read everything. If the CXO cannot see a figure in the source system, no agent, cache or index can surface it to them here." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="920" width="1630" height="20" as="geometry" />
        </mxCell>
        <mxCell id="foot-rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#e3e9ef;" vertex="1" parent="1">
          <mxGeometry x="40" y="940" width="1630" height="10" as="geometry" />
        </mxCell>
        <mxCell id="foot" value="v 1.0   ·   owner Data &amp; AI Global Practice   ·   date 2026-09" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=9;fontColor=#9aa7b4;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="950" width="1630" height="10" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
