<mxfile host="app.diagrams.net" agent="architecture-diagram" version="24.0.0">
  <diagram name="Trust Hierarchy — Four Lifetimes, Each Shorter Than the One Above" id="09-trust-hierarchy">
    <mxGraphModel dx="1400" dy="900" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1160" pageHeight="470" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="_st1" value="Offline · 10 years" style="text;html=1;strokeColor=none;fillColor=none;align=center;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontStyle=1;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="60" width="170" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.t-root" value="&lt;b&gt;Mesh root&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;HSM · air-gapped&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="40" y="150" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico2" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.t-root">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_st3" value="Site OpenBao · 1 year" style="text;html=1;strokeColor=none;fillColor=none;align=center;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontStyle=1;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="260" y="60" width="180" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.t-i07" value="&lt;b&gt;Intermediate c07&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;name-constrained&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="260" y="90" width="180" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico4" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.t-i07">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.t-i12" value="&lt;b&gt;Intermediate c12&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;name-constrained&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="260" y="210" width="180" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico5" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.t-i12">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_st6" value="In cluster · 7 days" style="text;html=1;strokeColor=none;fillColor=none;align=center;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontStyle=1;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="490" y="60" width="170" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.t-s07" value="&lt;b&gt;SPIRE CA c07&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;renews at 3.5 d&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="490" y="90" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico7" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.t-s07">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.t-s12" value="&lt;b&gt;SPIRE CA c12&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;renews at 3.5 d&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="490" y="210" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico8" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.t-s12">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_st9" value="Per pod · 24 hours" style="text;html=1;strokeColor=none;fillColor=none;align=center;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontStyle=1;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="700" y="60" width="170" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.t-w07" value="&lt;b&gt;SVID checkout&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;rotated at 12 h&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="700" y="90" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico10" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.t-w07">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.t-w12" value="&lt;b&gt;SVID ledger&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;rotated at 12 h&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="700" y="210" width="170" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico11" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.t-w12">
          <mxGeometry x="9" y="33" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_st12" value="Every proxy" style="text;html=1;strokeColor=none;fillColor=none;align=center;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontStyle=1;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="920" y="60" width="200" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.t-bundle" value="&lt;b&gt;Trust bundle&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;roots only · sent ahead&lt;/font&gt;" style="shape=cylinder3;boundedLbl=1;backgroundOutline=1;size=11;whiteSpace=wrap;html=1;fillColor=#d5e8d4;strokeColor=#82b366;fontColor=#1e3a1e;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="920" y="150" width="200" height="90" as="geometry" />
        </mxCell>
        <mxCell id="_ico13" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.t-bundle">
          <mxGeometry x="12" y="39" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_e14" value="ceremony" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;dashed=1;dashPattern=1 4;endArrow=block;endFill=1;strokeColor=#9673a6;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.t-root" target="n.t-i07">
          <mxGeometry relative="1" x="-0.3" as="geometry" />
        </mxCell>
        <mxCell id="_e15" value="ceremony" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;dashed=1;dashPattern=1 4;endArrow=block;endFill=1;strokeColor=#9673a6;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.t-root" target="n.t-i12">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="130" y="330" />
              <mxPoint x="350" y="330" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_e16" value="signs" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.t-i07" target="n.t-s07">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_e17" value="signs" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.t-i12" target="n.t-s12">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_e18" value="signs" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.t-s07" target="n.t-w07">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_e19" value="signs" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.t-s12" target="n.t-w12">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_e20" value="verified against" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.t-w07" target="n.t-bundle">
          <mxGeometry relative="1" x="-0.3" as="geometry" />
        </mxCell>
        <mxCell id="title" value="Trust Hierarchy — Four Lifetimes, Each Shorter Than the One Above" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=20;fontStyle=1;fontColor=#16202c;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="20" width="1070" height="30" as="geometry" />
        </mxCell>
        <mxCell id="rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#c9d3de;" vertex="1" parent="1">
          <mxGeometry x="40" y="50" width="1070" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg21" value="" style="rounded=1;arcSize=30;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;" vertex="1" parent="1">
          <mxGeometry x="40" y="380" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg22" value="Security / platform" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="70" y="370" width="110" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg23" value="" style="rounded=1;arcSize=30;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
          <mxGeometry x="210" y="380" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg24" value="Application we own" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="240" y="370" width="110" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg25" value="" style="rounded=1;arcSize=30;html=1;fillColor=#d5e8d4;strokeColor=#82b366;" vertex="1" parent="1">
          <mxGeometry x="370" y="380" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg26" value="Data store" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="400" y="370" width="70" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg27" value="" style="html=1;endArrow=none;dashed=1;dashPattern=1 4;strokeColor=#9673a6;strokeWidth=1.4;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="480" y="380" as="sourcePoint" />
            <mxPoint x="510" y="380" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="_lg28" value="batch" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="510" y="370" width="40" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg29" value="" style="html=1;endArrow=none;strokeColor=#5a6570;strokeWidth=1.4;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="570" y="380" as="sourcePoint" />
            <mxPoint x="590" y="380" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="_lg30" value="synchronous" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="600" y="370" width="70" height="20" as="geometry" />
        </mxCell>
        <mxCell id="note" value="Intermediate c07 can sign only spiffe://c07.mesh.corp identities. A proxy trusts roots, never an intermediate." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="400" width="1070" height="20" as="geometry" />
        </mxCell>
        <mxCell id="foot-rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#e3e9ef;" vertex="1" parent="1">
          <mxGeometry x="40" y="420" width="1070" height="10" as="geometry" />
        </mxCell>
        <mxCell id="foot" value="v 1.0   ·   owner Security Architecture   ·   date 2026-09" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=9;fontColor=#9aa7b4;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="440" width="1070" height="10" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
