<mxfile host="app.diagrams.net" agent="architecture-diagram" version="24.0.0">
  <diagram name="Identity — Who Proves What, To Whom, In What Order" id="24-identity-and-access">
    <mxGraphModel dx="1400" dy="900" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1720" pageHeight="780" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="n.pod" value="&lt;b&gt;Workload pod&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="60" y="80" width="180" height="580" as="geometry" />
        </mxCell>
        <mxCell id="_ico1" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAACpUlEQVRoge3YTYhNYRzH8Y+3iLzkbZoSdhJZkI1YUWzYWbCxJCU1ZShlpVhQKIoFG28pKxaKDUnyUtTQZJCExZSJEYMMFs+cXMe5955z7jn3jppf/evWfc7/+f6e5/+8nMOIWqsxJeWdhA3YhMUYQG9JfRWqZTiJfvyKxRPsxuyW0VXRHAGsx7/QSfED17ER41rACyYMAVwZAkoDnhTvhRlb2izwWiXSaJRWYvOxDy9yQOWZnW+4jPUaKLFGS+QBdmIGFuGgsAuVXmLTcUS+EnmDA1hQJff4oUG5mnNQ7mNdLfjJeJQx6QDOY61sZ0o7dqErY38/saVa0r0ZEt3BVkzLAF1Ny3EcfSn77sOUpEQ36zz4FkexpADoJI0XFu4lfK/DsjopwdOEhgO4INReWdeOJEUl9iSB6Rc2Rw1H10n0CS/RjcEySKuoF8/wOstDSTMQxaA/x//YIkljahcOs1c1WP6agbQG4mvhIOYWBD0aa6Sr/UIMRFF5KcuzPqYJh93zjP0WZqAyeoSpn5UCPLpPfWmgv8INRPEV57Aqljsa7ax9DDbbQGV0oQOn8Tnjs++wHwtbaSBP3Pb3i87EegbK3BLT6oOwAx0TDq5MaqWBhziFs8KCzqVmG+jHRZzA4yISNtPAGewQFnRhqncXKlLdCoanuQZK0YiBVuu/NzAcDrJqasOeeo0qDXwsjyWT2tCJbcJVIkkfoh+VJXSrRKg0asNh4RW2Q3X4r7iX9Mds4R20rItaZx3wtDfWvbVGYR6uNclAVvA+bMeoWgYirRC+i5ZhYKbwTp0WvH+ofa6PaCtxoyADh2Qf8X2Ymgc8rjJmpJQRb6WRUsHLNNJU8LgaMdJS8LiyGBlW4HHVMjKsweNaKXyW78Zd4atdIdvhiEZUsH4D+zfN9JHFLwAAAAAASUVORK5CYII=;" vertex="1" parent="n.pod">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.pi" value="&lt;b&gt;EKS Pod Identity&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="260" y="80" width="180" height="580" as="geometry" />
        </mxCell>
        <mxCell id="_ico2" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.pi">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.sts" value="&lt;b&gt;AWS STS&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="470" y="80" width="180" height="580" as="geometry" />
        </mxCell>
        <mxCell id="_ico3" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAAAXNSR0IArs4c6QAAAERlWElmTU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAA6ABAAMAAAABAAEAAKACAAQAAAABAAAAMKADAAQAAAABAAAAMAAAAADbN2wMAAAFMElEQVRoBe2Yf0idVRjHz3m7IjqmEyMQV1CDfmEWiyCottZYq40wvNcJDo1bIa1i63fEioSg/Sij1j81Sk1Isemawha0lbEZK+ufvDNrBpFNqj9kSeOaOe/p87z3vte71/fqHem6g/fA4znnOed5nu/z45zzXpXymx8BPwJ+BPwI+BHwI/D/RUA7pk0weFAZs8GZZ3Wv9SHd1bVRMFpJoBcLeAGcgjWQdCAx0Pv3J7PiXsuGuamsNKk4ZjKQyr2IxrMyMBd2U1WVx/o6UngjVKK0/lPFYifph1RnZ7/W+pzozKVrodYycsDU1RWrM2deVNPT9RjOTxo3CbzSh0IRLoIdyrI+0vv2TSf3LPJgXgeI+mrAd4LjUkgQHyfin9OP0heRieug26Eb4LWRkS3I3IcT48wXvc3pABHdAKADoMiBDgP4Sa6vQTcq09AQUJFIHU40QHcgcxQn1uPE7+69Cz1Pe4hNdfXVGGsHUA5l0ajKy+/xAi+AdEPDWdaaVG7uLTj5AzLllNuHbrAE5Cmow9TWXpa6Bu8B6AA2V6TyMxmndUBNTb0BkAIAtevOzmcAGZtPoW5v/wNn17DvFHQXoIKOjAmFXkVfI7RJRaO9jhPseQxeC1SBzS/O14nkne/cr/IOkP6bieC3gB9XS5as0K2tY/BKKY31AFoGyD7Ko98B5+4BVQ+gd+H/io5W+iuZ19CfZT7C+CrGQ4yPMZaLQc7WMCRZPwX/A3q45lPwHLXHiT+pOIXlnQFj4pEzptkGHwzej0NDKHwfamT8NSAFoHcrLm4GxM8sXs7+7VAcvGVV4/yt8E9Acvjj4C3rcQK1EhkBuzwhs515L3a2wUvbvDMQDPah5DYUrFN5eYNqYkLqugAtH0O/QA9BSwHzIOXVzHhWI2PX42gFOizIQEecrJmamiI1OVmL0FL4X6HjM1Fg6uvz1dhYHcNiqBSbj9ALxjc5g09LGbsz4H0LGVOKEHdPzk+Av9sGr3U3B7VS2ESlH14bFGLq6QBgv2dNaFbTbW2nYe5xL+i9e6Pw3nH4gO3DwWbsPKEGBuQRFYfOad4lpFSuvSsQmESBRF6aHMx4M2Y0MSp0WIvSd3W1o/eYrVvrm7xseGdAqd/YXMKtIPXYZwsaEyby3zAfYf66zYvXrD10/0m8DdeoQCBZpu49885DoTD21hLEcfSEvfanc+A7Nq/EgTXcArsBvgdFW6GWpBKth1VBwY7k3D2IRHrYfy863CvnN9d6CgeCuqNjyEvQ2wHL6ubKDCMY5jA2Us/buMel7qugZfD7VGHhLt3U9JeXUmp3lQ1e63/oT3rtyYin9d9cFLuwbx9yLxlvB8rKDvJpMIzxa6FHEXybm0Je1lmvq1sppWMh+wpysrSTDL7s3rOQc89DLJ8GRPlZ2xD3PtFfm4lRG/zAwHuAX4X8CNHbmYncf9nj6YAoJOLdANgNmBzoE87BVsrpknTGzObNy4m83Bpy2KLIhkn9RLr9C8X3LiFHe1nZC+oEj2Ys9hyst+i3kI0WotvLfBSQRTxW8qKu5r14GF4ua6fhbwT8cUfNYvZzOpD4gHueyH8J0NcAKmdipiymU363aC0fex3QS4CX75oL0uZ0wEEAoB7q+5AaHJTfBxXwy6ESaByHfqSXK66Fl/qCAcee3TJyQHbaB1upHoZCWdPSHuKsQTgPkFkZ4LaRA5q9zflHQgLhjAPxHxpXUNN3Zi/6BDLBmmgzDsgPimhU/rOQ/S0/P5L9IH2EfgT8CPgR8CPgRyCDCPwLxlAjIreKRFYAAAAASUVORK5CYII=;" vertex="1" parent="n.sts">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.gw" value="&lt;b&gt;Gateway&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#ffe6cc;strokeColor=#d79b00;fontColor=#4a3200;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="670" y="80" width="180" height="580" as="geometry" />
        </mxCell>
        <mxCell id="_ico4" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.gw">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.eng" value="&lt;b&gt;Engineer&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#08427b;strokeColor=#073b6f;fontColor=#ffffff;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="870" y="80" width="180" height="580" as="geometry" />
        </mxCell>
        <mxCell id="_plate5" value="" style="rounded=1;arcSize=22;html=1;fillColor=#ffffff;strokeColor=none;movable=0;resizable=0;connectable=0;" vertex="1" parent="n.eng">
          <mxGeometry x="5" y="13" width="32" height="32" as="geometry" />
        </mxCell>
        <mxCell id="_ico6" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAACWklEQVRoge3Zz4tNYRzH8dfIrwmJGcZMIgpJEjZsiA1pLGhK2VDEcpLFWCkrG3tr/8GQHRNWipRhocxmombIaESNjDFj8XTrNHPunXueOfec2zTv+m7Ovd9z3p/uvec8z/eyRLm05Hy+lTiBbuzEFvzGKF6hH0M5XzMXVuAaRjAzTz3BwXI002nHc/OLJ2sKfSW4zqELw7LJJ+te4cYJWoXvdax8pa4WLV7hdp2C89UEthbsrh0/FyierPvF6nM9J/FK/cKqGJFlkQHORvZVYy2OxzTGBtgX2Zf7OWMDdET21aIzpik2wHRkXy3+xTTFBhiN7KvFSExTbIB3kX21eN+Ac1blknxvo9+xvMgA6zGWY4BS1kQ3ImVn1zjaCnZH+MifZpSdXdO4ULR4ko3Cjy9W/lbxynNZh0eyyU/gYhmytTiPD2qLT+EBtuV10bw39XAIZ7BLWHL8wWe8xmPhlrnEoiH2K7RfGI10YgMm8RBv6uhtRY+wfJ7CV3zCC/zIKpIlwBr04oowtErjozD3GRSmFePCTqsNe3EUJ4U712z+4hnuCmOaXOlW39Aqr+oXnjG5cFNYqxclX6kh7Fmo/OUSxJM1jM2x8oeFe3iZAWYwEBtgoAnkK3Uuq/yxJpBO1ttqotW2lD1ZEzeYA9id9kK1AKcb5xLNqbSDaQFasL2xLlHsSDuYFqBN+Kuo2ehKO5gWYHWDRWJJ9YqdCzUNizLAZOEW9ZHqlRZgTGNmnwtlMMube5X/9E3WN2zKEqAFdzTHYm5IWFhWFa1FB44o77nwBS+FrecSTcl/+F0YjmstwYwAAAAASUVORK5CYII=;" vertex="1" parent="n.eng">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.idc" value="&lt;b&gt;IAM Identity Center&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1080" y="80" width="180" height="580" as="geometry" />
        </mxCell>
        <mxCell id="_ico7" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.idc">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.qf" value="&lt;b&gt;Query frontend&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1280" y="80" width="180" height="580" as="geometry" />
        </mxCell>
        <mxCell id="_ico8" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.qf">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.audit" value="&lt;b&gt;Query audit&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#d5e8d4;strokeColor=#82b366;fontColor=#1e3a1e;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1490" y="80" width="180" height="580" as="geometry" />
        </mxCell>
        <mxCell id="_ico9" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.audit">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_m10" value="1. credentials for this service account" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.1586;exitDx=0;exitDy=0;entryX=0.5;entryY=0.1586;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.pod" target="n.pi">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m11" value="2. assume the workload role" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.2276;exitDx=0;exitDy=0;entryX=0.5;entryY=0.2276;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.pi" target="n.sts">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m12" value="3. short-lived credentials" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.2966;exitDx=0;exitDy=0;entryX=0.5;entryY=0.2966;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.sts" target="n.pod">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m13" value="4. OTLP, SigV4 signed" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.3655;exitDx=0;exitDy=0;entryX=0.5;entryY=0.3655;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.pod" target="n.gw">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m14" value="5. identity from the role, not the payload" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.4345;exitDx=0;exitDy=0;entryX=0.5;entryY=0.4759;entryDx=0;entryDy=0;align=left;spacingLeft=6;" edge="1" parent="1" source="n.gw" target="n.gw">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="840" y="330" />
              <mxPoint x="840" y="360" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_m15" value="6. rejected: a team credential is not a workload" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;dashed=1;strokeColor=#b85450;fontColor=#b85450;exitX=0.5;exitY=0.5241;exitDx=0;exitDy=0;entryX=0.5;entryY=0.5241;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.gw" target="n.pod">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m16" value="7. SSO with MFA" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.5931;exitDx=0;exitDy=0;entryX=0.5;entryY=0.5931;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.eng" target="n.idc">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m17" value="8. assertion with group claims" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.6621;exitDx=0;exitDy=0;entryX=0.5;entryY=0.6621;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.idc" target="n.qf">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m18" value="9. authorise by team and data class" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.7310;exitDx=0;exitDy=0;entryX=0.5;entryY=0.7724;entryDx=0;entryDy=0;align=left;spacingLeft=6;" edge="1" parent="1" source="n.qf" target="n.qf">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="1450" y="510" />
              <mxPoint x="1450" y="530" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_m19" value="10. write the read before executing it" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.8207;exitDx=0;exitDy=0;entryX=0.5;entryY=0.8207;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.qf" target="n.audit">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m20" value="11. results, compliance class withheld" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.8897;exitDx=0;exitDy=0;entryX=0.5;entryY=0.8897;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.qf" target="n.eng">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="title" value="Identity — Who Proves What, To Whom, In What Order" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=20;fontStyle=1;fontColor=#16202c;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="20" width="1630" height="30" as="geometry" />
        </mxCell>
        <mxCell id="rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#c9d3de;" vertex="1" parent="1">
          <mxGeometry x="40" y="50" width="1630" height="10" as="geometry" />
        </mxCell>
        <mxCell id="note" value="Step 5 is the rule the platform cannot compromise on: resource identity comes from the credential the workload proved, never from a service name the payload asserts." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="710" width="1630" height="20" as="geometry" />
        </mxCell>
        <mxCell id="foot-rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#e3e9ef;" vertex="1" parent="1">
          <mxGeometry x="40" y="730" width="1630" height="10" as="geometry" />
        </mxCell>
        <mxCell id="foot" value="v 1.0   ·   owner Reliability Architecture   ·   date 2026-09" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=9;fontColor=#9aa7b4;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="740" width="1630" height="10" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
