<mxfile host="app.diagrams.net" agent="architecture-diagram" version="24.0.0">
  <diagram name="Certificate Issuance and Rotation — Attested, Never Asserted" id="16-certificate-issuance-and-rotation">
    <mxGraphModel dx="1400" dy="900" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1500" pageHeight="820" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="n.q-envoy" value="&lt;b&gt;Envoy sidecar&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#ffe6cc;strokeColor=#d79b00;fontColor=#4a3200;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="60" y="80" width="210" height="620" as="geometry" />
        </mxCell>
        <mxCell id="_ico1" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAAIAAAACACAYAAADDPmHLAAAABmJLR0QA/wD/AP+gvaeTAAANhElEQVR4nO2de7RXRRXHP1zuvSCogESA+ABRIdJF4iPTFJcC1RJ6YGqrlvbQrFylaZqVtTJLs+zl6qFWhlmKYpiPTMtMfJCKCLLwAaaigiQmD8F7VS733v7Y9+Tx3PPYM3Mev9/vznetDSx+Z2b2nNlnz549e/aAh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHR6OhX9UMNAh2Bz4JvAPoBhYBfwDWV8mUR/GYCswHtiEDH6YtwFeA5sq48ygEA4ATgUfoPehxtAx4TyWceuSKUcB5wEvoBj5MXcBVwPCymfZwx/7I4G3FfOCj9CKiPbztVeNoBY4FFuI+6HG0ADEYPWoMI4FzgNUUM/Bh2gpcBAwspWceqZgCXA68RvEDH6V/AzOK76JHFP2BWcAdlD/ocTQPeHuhPfYAYARwLrCGYgYyziegpQ3AZ4Gmwnrfh/EuRM23UczAPwmcDgzt+XuLQ12LgQOKeQ19C028qea7yH/QO3vqnkXvpd0Y4E8OdXcAlwA75PUy+hKGIF/hKor52jcj2mSSgpdZwHMOba0BPmr3Gvoe9ka+mlcpZuCfQpaJwwz5GoQs+Toc2r4F2M2w3T6BJmAa8oKKUPPdwH2IY6i/I6+Tgfsd+GhDBNBvMAE7AqcAT1DMoG9B1Pw7c+a7H+IOftmBt0eAg3Pmq24wGvg5blZ2Gj0NnIlY80X3Y64Dn53ALxB7p89gMrCRYgb+H8CHKH8NPgOxLWz5Xgt8rGSeK8MD5DvoryM7ffuW2YkYDES2ml/Hvi93ARNL5rtUDCe/gV+LvPBa25/fE/g79v16DenXgJL5LgXjcB/4u4FjcLfmi0Q/JL7QJvAkoMeRcLWGwq7Yq/l5wLvLZ9kJwxCfRif2gtBQG0wjMev8fxB1OKICXvPEocBy7IVgA+IVrfsNpqHoOrwKOB5oqYbNQtACfA23jax7yN+nUSoGoevo/KoYLAHjgL9gLwRbgfOpbRsoES3oOnlLpNxeiHXdSDgGt3iGG6nTKUFjEP0tUmYBsjz6No21PNoB+Bn2AShnlM+yOzSOkrsiZcIhXyuBI8titiRMAR7CXABWVcGsCSYjFnAYm8nu2MJImb9Gfu9Czu01zPIImdO/CGzCTAhMt7ULRzSC59zI75odtEWRMjclPLeRBlkehTAKcW1rBWDXatjsjWHA2fSO4Dk/8txasju1LFLm+oznF1L9XkDe0ArB+KqlP4jgWQ38EBgb+T26lu9Q1Gla5hBgCY0Vf7dJ+VxrFQIQjuBZAZwGDE54Nmq1b1XU32pRprmHjydojPg7TZ+hZAHYAYngeRSZ42eSfUjSZjCjZTRaI8AYZMqo9/i7mhKAvZEInheQECuTQ5E2GiBa5keIL8AEMxFB/TL1GX+nFoCiGOiHqPl5uJ2U+X2k3gcVZTYk8HQssM6Ch3qMvzsXXd+OKKLxicDDSgay6NpI3fcqyrSl8DYcuALz6OF6i787C12/3pd3w83Iadc8Bn8t8OlI/Xcqymnm/MOAxyx5qof4u9PQ9WdW3g0fpmw4jR4EPkH8/HSbsg6NbdMKfANot+DxdmC8oo2q8Hl0/Zidd8MfVjYcpa3ANWRH7SR59aJkknRhD/SCFaZ24JsUaEg54DPo+pC7NpupbDigdciRKa1LMsurF5CNQ2cW8Lwh/93IqeBpFu0ViRPQ8X5i3g1PVza8BPEJbGdY/9XK+m2jfYcgHkGblUstxd8dj47nk/NueKqi0ahhZ4I5ivq7gZ0d2gA4CBFSUyF4mdrwJGqn4lPzdgRpHBDPO9Sv9eq5xgMuQoTgTOSksRbDEU1wnGP7rtC+p9w9gW9oGnWov0wP1zbgp0gOgBsNyvUDfkK1QamVuYJtfPV51+/aRhSrgY8g5wa12msM1W4xlyIAY4ALeGseXFMB2B44yqDNKn3cNyPa4MeIdsjCqAJ40EL7nlpsBOAQxEW7CnGkvM2w4fDg9Ed2Bq9CZ0FXvcnRhrhZNYZelf6B3DVAkDr1X0gETfjgRXiu0xgf4RfTgcyZJyABm1khWmrjRvmcLdYonqnSBlAby1kCEKROfQaxbuPSnoc7amoEhhkdioQ5p51gqVoDBCja1nGFswbYH9m7fxbx1I1Jq8Sw4agAdEV+PxRYijhkopFCXgB0sBKAVuDjyGbMYsRTp/GpuwgAxKurFmRHaxlvDcjQaJi4NvJG0ctdV2jf04BmZM49A7neZLRFY+EpwDZmL+nEzvie37aFntWgFjRAXfgBmoHvILtaeaAL+aLTOm8a59fKm0EetWIENtQU8DmLBrqQrdmjgMsMG4++mFORmzSSYKph4trIGw0lACbHg15B3Jx7IRsO/7RoPPpi5iGBopfS2yCMPl9PAlAPU0BLEzq1+hSSoGAsYis8k/JsVn1xL2YTogkORAzQpOdrZQqwOaBSJjqJ/5iiaG0i3WJcCHwACe3+AboTJ1kWaNoR7SWIr+Fs3pz3w89rrduiDz12ku0Orvooumql0kS6upiDxL91GzScpX6yvoxtSCz/BCTduo0GOI/ir2mz0XRlQuWVzRIAG1WaJQDaL+MFxP38eOj/tijLBu7lRykuitfU1ikbKkM1awooQgBM6+wM/XsF+mkAZEduLpI1JO80MQ0jAHlrgKwBcnkxW4ArLcrNQFKt5RnF6wXAsmHXF3MWYiyaYiDwXcS9fIQjD+Bu6xSNhhWAV5EDKL/GzDgNMBHxX1yJWxLJhtEAtW4DxKEd8WAehhh6pgjy8a4ATsLuLt9aFYDtgS8AuyiezdQANmqszBezENgPOcZtEr0bYCfgt8ih030My9baFDAO2bp/DvgVugsvWrIEwMaZkdcyMAnRAyXbkNiBfYFbLes8FLErLkIykmpQKxrgSCRqObjQaieDsq2Qft7ucguGsk7v2KjsMJYi17okHW2ejVsWzVXA0Qo+FmTUc49pxwwwCLlh1CWJdDc93sx5KQ/MsWAu6/TOeuQWT1uEk0RcQ3z0rWsWzW7EC5kWCZV1scMD9l1MxG6IS369QT/S6CWAP6Y8cLUFk5cpGu5AdhW3t6g/miRiI2IQxoW3TUFO+di+oM1IoGpccuUJyGoiqezDFn1LwuGIQLoIdBz9jp4/kh643oLZbxkwEBy6MEFSkoiFxOcfss2iGR3MA2PqDlzOcalnlhv2K4qByDHvpQ58p9FKepbBaV/sTRaMT8L8lotbgN2V9QebU3F0cUq5nYHrDPkK0zYk2VVcmphhiL0U7vdKZX+iCA7cuFwZk0YvIomz/x9we0nKw7dZduJsC8bagK+SvXy6OaWOSxS8vR8xIm1f4FqSD38egngau0mPmUgqey2yuihi4Bcj+QB6rcIuTil0p2EnwpiNXNtiyuhyeieJDiNtlXGpkrftkK/sDQv+wh/HHjF1NyPuas0UMAAZFJts3xrqQLRe2vvkgpQK7lV0Ig1DgV9iPiV0Ab8hfk07GEkrG3cR8xWG/E1CbhKzfcHtSEo20zX/aCQY90WHttPov8CF6LyBnJdSUV5LGVtrfD3i+Ilz1e6LHFULP3+VBW/BXb4uc642TUxw4OY1h7bSaAWyatE6swD4ekqFNrtuSWjuYU6T8z9KScfFohcxz3Xgz/Wati5EAKMbTC1IYMsdlvVmUSdiRE/Dbk+DM1Mq70DUbVIyZxvsCvw5pc0kegP4HvF5hYLAjxty4O9w7HIIBvQykgZnJLIkfsGhrjTagNhvY107fJKisWeRDGB54oPIxoVpx58i2Q08LifeXHIIhr/MIgb+MSQPYG4f5Xj0Hqb5KA0LJQYjAaBxBl0WXYd7MqgRSLj7ycSrT9scgnlToOanJ/DpjHMMmElzj9piMnC/AQ8BbUK8fKa8HIQkog5fQnUfyWldjkN3W0ne9Aqyp1HKtXezMZuvHgYOyLH9JkS1bTTgIaCHEAs7DQMRgzFtNbIV2WyJU69DEE9g3v74OHoS+BIV3GAyGNkT13ayE1nW7JgjDyMRa9omo3ccLzsjS12TZd4aktPA7Icubb0N3YesGCq/2fMAzFK+BzH8eWI6dpnHA16mIasNly/2BuJtnv7YL2mjtAVxlk20f1XFIOjkK+g7cyv5WeIgavt8dBdGFkWbEJshDmOQbVqbep9BluCa0K1KMRqzu+jaEZWrdY8GKnp1Srk9yQ7AyJs2o7/i5mh6X3mXRIGar7uraI5GpFb7ArM2daYiy8qoil5GfDKqIJK3qG3SgFYiKwtTA2wQYj/FbTC1I2HsdX8/YdBJ7ZZldFNnAPApsoMcAoMu7pTvcCSS19RIzOLzduQktGv21F0Q38JcJNrqdIo9pFoJ9kF3f09A65A7d0wvbVqHRNzEOT/eiwSYugx8YIBNcH8lfQ/9EDdyXgGKafT9BB5akM2sNsP6nkYSY9XLJVA1jZ0QdZ2nSu5Gppl5ZAQz9GAcsgLJqrNuDbB6wBHI1auuA78OOcRp4+c/lt6GahsioKYnfzwsMADZArUJeFiCGIiuJ4daEGE8BYk4LjpdjEcMtLto4WAGjwbELMTBEx34TUj0ze7VseYBBe0tR7AjEiFzMOL0uRs50tVeQtseHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHn0O/wORhuCGcER3MgAAAABJRU5ErkJggg==;" vertex="1" parent="n.q-envoy">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.q-agent" value="&lt;b&gt;SPIRE agent&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="290" y="80" width="210" height="620" as="geometry" />
        </mxCell>
        <mxCell id="_ico2" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.q-agent">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.q-kubelet" value="&lt;b&gt;kubelet&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="530" y="80" width="210" height="620" as="geometry" />
        </mxCell>
        <mxCell id="_ico3" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.q-kubelet">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.q-server" value="&lt;b&gt;SPIRE server&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="760" y="80" width="210" height="620" as="geometry" />
        </mxCell>
        <mxCell id="_ico4" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAACTUlEQVRoge3Zv29PURjH8RdaaTFQkTQGSyNSSaeS+DHZ0MQgYTFJJDYD8T9YzBKJv0AQwcJEYsKCNH7EgMHQ+lHSFFE1nJJv2rrn3HvP/X5Lvu/kTvc5z3k+9/x4nnMuXTrLikS7UZzBCNY0Fw6YwB2cx6ccDg/jO+ba/LzAplhwsRFYh9cYSNNqAl8iNpvRl+jvEk4k2i7JmPQvdhWrEnxuwVSiz/cxZysj76ND2MJjzCbYvRVGKoUB9BQZFL6UvsjhNHrxOWI3iqESfsvEsIjj2r94Fz69RQHGptCypyug03QFdJp/XkAsD9ThmVDP9GEnNjTY11+pkgceCAG30ouTQp2UNQ/kFnAP/QX+dmB6uQqYEQq1GGdzCsi5iG/iTYLdReF8kYWcAh4l2k3hVa5OcwqYK2GbUnYnkVPASKLdWuXK6UJyCjgk7QB0TPFOlZWy2+g1xR9lCJMlfbY1D8zhlqW30zG8q+CvUEATpcRBvBSS2rgw5/dguIG+onSPlE2TYwr9FLLwZTzHDxzALgzim3A5dhsPsRG7hQurrRn6LyQ2hSaxr6LvHpyL+G90F5rF3jrO57lQ0EejAq7UcdzCAL4W9NPYIr5bo20rH/CkauM6AqZqtF3Ix6oN6whIuYlOpfJuWEfAEayu0f432yw+QydTJw/sF/b3cSEXVKFfuK1O/eGxiLqJbHD+6Rj/fCnx3wvIdntQkVmR83NMQOUEk4mnqm8Qf7ihc2eBo3WDh/W43ubAp3EqJbgyfwCHsV3zC38G99UoL7q0k1+Wk5ES1qN1DgAAAABJRU5ErkJggg==;" vertex="1" parent="n.q-server">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.q-bao" value="&lt;b&gt;OpenBao PKI&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1000" y="80" width="210" height="620" as="geometry" />
        </mxCell>
        <mxCell id="_ico5" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.q-bao">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.q-peer" value="&lt;b&gt;Peer proxy&lt;/b&gt;" style="shape=umlLifeline;perimeter=lifelinePerimeter;whiteSpace=wrap;html=1;container=0;collapsible=0;recursiveResize=0;outlineConnect=0;size=58;rounded=1;arcSize=8;fillColor=#ffe6cc;strokeColor=#d79b00;fontColor=#4a3200;fontSize=12;fontFamily=Segoe UI;verticalAlign=top;spacingTop=9;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1230" y="80" width="210" height="620" as="geometry" />
        </mxCell>
        <mxCell id="_ico6" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.q-peer">
          <mxGeometry x="9" y="17" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_m7" value="1. SDS: fetch SVID (Workload API)" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.1484;exitDx=0;exitDy=0;entryX=0.5;entryY=0.1484;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.q-envoy" target="n.q-agent">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m8" value="2. which pod owns this PID?" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.2129;exitDx=0;exitDy=0;entryX=0.5;entryY=0.2129;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.q-agent" target="n.q-kubelet">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m9" value="3. namespace · service account · labels" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.2774;exitDx=0;exitDy=0;entryX=0.5;entryY=0.2774;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.q-kubelet" target="n.q-agent">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m10" value="4. CSR for attested selectors" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.3419;exitDx=0;exitDy=0;entryX=0.5;entryY=0.3419;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.q-agent" target="n.q-server">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m11" value="5. match entry · write issuance record" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.4065;exitDx=0;exitDy=0;entryX=0.5;entryY=0.4452;entryDx=0;entryDy=0;align=left;spacingLeft=6;" edge="1" parent="1" source="n.q-server" target="n.q-server">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="950" y="330" />
              <mxPoint x="950" y="360" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_m12" value="6. SVID 24 h + trust bundle" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.4903;exitDx=0;exitDy=0;entryX=0.5;entryY=0.4903;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.q-server" target="n.q-agent">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m13" value="7. push SVID and bundle" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.5548;exitDx=0;exitDy=0;entryX=0.5;entryY=0.5548;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.q-agent" target="n.q-envoy">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m14" value="8. mTLS handshake" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.6194;exitDx=0;exitDy=0;entryX=0.5;entryY=0.6194;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.q-envoy" target="n.q-peer">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m15" value="9. t + 12 h: renew" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.6839;exitDx=0;exitDy=0;entryX=0.5;entryY=0.7226;entryDx=0;entryDy=0;align=left;spacingLeft=6;" edge="1" parent="1" source="n.q-agent" target="n.q-agent">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="480" y="510" />
              <mxPoint x="480" y="530" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_m16" value="10. rotated SVID · no restart" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#d79b00;exitX=0.5;exitY=0.7677;exitDx=0;exitDy=0;entryX=0.5;entryY=0.7677;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.q-agent" target="n.q-envoy">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m17" value="11. renew 7-day CA at half-life" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=block;endFill=1;strokeColor=#5a6570;exitX=0.5;exitY=0.8323;exitDx=0;exitDy=0;entryX=0.5;entryY=0.8323;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.q-server" target="n.q-bao">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_m18" value="12. CA signed by c07 intermediate" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;fontFamily=Segoe UI;verticalAlign=bottom;endArrow=open;endFill=0;dashed=1;strokeColor=#5a6570;exitX=0.5;exitY=0.8968;exitDx=0;exitDy=0;entryX=0.5;entryY=0.8968;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.q-bao" target="n.q-server">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="title" value="Certificate Issuance and Rotation — Attested, Never Asserted" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=20;fontStyle=1;fontColor=#16202c;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="20" width="1410" height="30" as="geometry" />
        </mxCell>
        <mxCell id="rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#c9d3de;" vertex="1" parent="1">
          <mxGeometry x="40" y="50" width="1410" height="10" as="geometry" />
        </mxCell>
        <mxCell id="note" value="The pod never names itself. Its identity comes from what the kubelet reports about the process on a node the server has already attested." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="750" width="1410" height="20" as="geometry" />
        </mxCell>
        <mxCell id="foot-rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#e3e9ef;" vertex="1" parent="1">
          <mxGeometry x="40" y="770" width="1410" height="10" as="geometry" />
        </mxCell>
        <mxCell id="foot" value="v 1.0   ·   owner Security Architecture   ·   date 2026-09" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=9;fontColor=#9aa7b4;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="780" width="1410" height="10" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
