<mxfile host="app.diagrams.net" agent="architecture-diagram" version="24.0.0">
  <diagram name="Identity and Tenant Isolation — proving who is asking" id="22-identity-and-tenant-isolation">
    <mxGraphModel dx="1400" dy="900" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1740" pageHeight="900" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="n.app" value="&lt;b&gt;Client App&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#f5f5f5;strokeColor=#8c8c8c;fontColor=#333333;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="60" y="80" width="210" height="700" as="geometry" />
        </mxCell>
        <mxCell id="_ico1" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.app">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.kc" value="&lt;b&gt;Keycloak&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="290" y="80" width="210" height="700" as="geometry" />
        </mxCell>
        <mxCell id="_ico2" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.kc">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.envoy" value="&lt;b&gt;Envoy Gateway&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#ffe6cc;strokeColor=#d79b00;fontColor=#4a3200;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="530" y="80" width="210" height="700" as="geometry" />
        </mxCell>
        <mxCell id="_ico3" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.envoy">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.lim" value="&lt;b&gt;limiterd&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="770" y="80" width="210" height="700" as="geometry" />
        </mxCell>
        <mxCell id="_ico4" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.lim">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.gw" value="&lt;b&gt;llm-gateway&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1000" y="80" width="210" height="700" as="geometry" />
        </mxCell>
        <mxCell id="_ico5" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAACpUlEQVRoge3YTYhNYRzH8Y+3iLzkbZoSdhJZkI1YUWzYWbCxJCU1ZShlpVhQKIoFG28pKxaKDUnyUtTQZJCExZSJEYMMFs+cXMe5955z7jn3jppf/evWfc7/+f6e5/+8nMOIWqsxJeWdhA3YhMUYQG9JfRWqZTiJfvyKxRPsxuyW0VXRHAGsx7/QSfED17ER41rACyYMAVwZAkoDnhTvhRlb2izwWiXSaJRWYvOxDy9yQOWZnW+4jPUaKLFGS+QBdmIGFuGgsAuVXmLTcUS+EnmDA1hQJff4oUG5mnNQ7mNdLfjJeJQx6QDOY61sZ0o7dqErY38/saVa0r0ZEt3BVkzLAF1Ny3EcfSn77sOUpEQ36zz4FkexpADoJI0XFu4lfK/DsjopwdOEhgO4INReWdeOJEUl9iSB6Rc2Rw1H10n0CS/RjcEySKuoF8/wOstDSTMQxaA/x//YIkljahcOs1c1WP6agbQG4mvhIOYWBD0aa6Sr/UIMRFF5KcuzPqYJh93zjP0WZqAyeoSpn5UCPLpPfWmgv8INRPEV57Aqljsa7ax9DDbbQGV0oQOn8Tnjs++wHwtbaSBP3Pb3i87EegbK3BLT6oOwAx0TDq5MaqWBhziFs8KCzqVmG+jHRZzA4yISNtPAGewQFnRhqncXKlLdCoanuQZK0YiBVuu/NzAcDrJqasOeeo0qDXwsjyWT2tCJbcJVIkkfoh+VJXSrRKg0asNh4RW2Q3X4r7iX9Mds4R20rItaZx3wtDfWvbVGYR6uNclAVvA+bMeoWgYirRC+i5ZhYKbwTp0WvH+ofa6PaCtxoyADh2Qf8X2Ymgc8rjJmpJQRb6WRUsHLNNJU8LgaMdJS8LiyGBlW4HHVMjKsweNaKXyW78Zd4atdIdvhiEZUsH4D+zfN9JHFLwAAAAAASUVORK5CYII=;" vertex="1" parent="n.gw">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.vault" value="&lt;b&gt;Vault&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1240" y="80" width="210" height="700" as="geometry" />
        </mxCell>
        <mxCell id="_ico6" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.vault">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.prov" value="&lt;b&gt;Provider&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#f5f5f5;strokeColor=#8c8c8c;fontColor=#333333;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1470" y="80" width="210" height="700" as="geometry" />
        </mxCell>
        <mxCell id="_ico7" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.prov">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_m8" value="1. client_credentials, tenant realm" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.1314;exitDx=0;exitDy=0;entryX=0.5;entryY=0.1314;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.app" target="n.kc">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m9" value="2. JWT: org, team, sub, tier" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.1886;exitDx=0;exitDy=0;entryX=0.5;entryY=0.1886;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.kc" target="n.app">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m10" value="3. request + Bearer token" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.2457;exitDx=0;exitDy=0;entryX=0.5;entryY=0.2457;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.app" target="n.envoy">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m11" value="4. verify signature, cached JWKS" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.3029;exitDx=0;exitDy=0;entryX=0.5;entryY=0.3371;entryDx=0;entryDy=0;align=left;spacingLeft=6;" edge="1" parent="1" source="n.envoy" target="n.envoy">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="710" y="290" />
              <mxPoint x="710" y="320" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_m12" value="5. ext_authz Check over mTLS" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.3771;exitDx=0;exitDy=0;entryX=0.5;entryY=0.3771;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.envoy" target="n.lim">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m13" value="6. scope keys from claims, never from body" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.4343;exitDx=0;exitDy=0;entryX=0.5;entryY=0.4686;entryDx=0;entryDy=0;align=left;spacingLeft=6;" edge="1" parent="1" source="n.lim" target="n.lim">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="950" y="390" />
              <mxPoint x="950" y="410" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_m14" value="7. ALLOW + request_id" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.5086;exitDx=0;exitDy=0;entryX=0.5;entryY=0.5086;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.lim" target="n.envoy">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m15" value="8. forward, claims in headers" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.5657;exitDx=0;exitDy=0;entryX=0.5;entryY=0.5657;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.envoy" target="n.gw">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m16" value="9. lease provider key for this tenant" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.6229;exitDx=0;exitDy=0;entryX=0.5;entryY=0.6229;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.gw" target="n.vault">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m17" value="10. credential, TTL 15 min" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.6800;exitDx=0;exitDy=0;entryX=0.5;entryY=0.6800;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.vault" target="n.gw">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m18" value="11. upstream call" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.7371;exitDx=0;exitDy=0;entryX=0.5;entryY=0.7371;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.gw" target="n.prov">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m19" value="12. completion + usage" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.7943;exitDx=0;exitDy=0;entryX=0.5;entryY=0.7943;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.prov" target="n.gw">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m20" value="13. response, prompt not persisted" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.8514;exitDx=0;exitDy=0;entryX=0.5;entryY=0.8514;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.gw" target="n.app">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m21" value="14. 401 on tenant mismatch" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;dashed=1;strokeColor=#b85450;fontColor=#b85450;exitX=0.5;exitY=0.9086;exitDx=0;exitDy=0;entryX=0.5;entryY=0.9086;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.envoy" target="n.app">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="title" value="Identity and Tenant Isolation — proving who is asking" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=20;fontStyle=1;fontColor=#16202c;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="20" width="1650" height="30" as="geometry" />
        </mxCell>
        <mxCell id="rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#c9d3de;" vertex="1" parent="1">
          <mxGeometry x="40" y="50" width="1650" height="10" as="geometry" />
        </mxCell>
        <mxCell id="note" value="A tenant cannot spend another tenant's quota because the scope key is derived from signed claims, not from any field the caller supplies in the request body." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="830" width="1650" height="20" as="geometry" />
        </mxCell>
        <mxCell id="foot-rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#e3e9ef;" vertex="1" parent="1">
          <mxGeometry x="40" y="850" width="1650" height="10" as="geometry" />
        </mxCell>
        <mxCell id="foot" value="v 1.0   ·   owner Data &amp; AI Global Practice" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=9;fontColor=#9aa7b4;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="860" width="1650" height="10" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
