<mxfile host="app.diagrams.net" agent="architecture-diagram" version="24.0.0">
  <diagram name="Security — Trust Zones and What Crosses Them" id="29-security-trust-zones">
    <mxGraphModel dx="1400" dy="900" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1600" pageHeight="480" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="_box1" value="Outside the mesh" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#b85450;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=34;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#b85450;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="90" width="280" height="220" as="geometry" />
        </mxCell>
        <mxCell id="_ico2" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="_box1">
          <mxGeometry x="9" y="7" width="20" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.z-ext" value="&lt;b&gt;External APIs&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;declared hosts&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#f5f5f5;strokeColor=#8c8c8c;fontColor=#333333;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="60" y="120" width="240" height="70" as="geometry" />
        </mxCell>
        <mxCell id="_ico3" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAAD+0lEQVRoge2ZW4hNURjHf2fGjNvMmBm3mSmXmDy4y4Q8eEIkFEIuIXkXmkQoJC9SiPLAA2Uik/Ag5oFcktymJEqNhuR+mZGZMcz2sNae/Z199mXtfc6Z8TD/Wp2z9vqv7/t/e639rbXXhh50L3KzbL8c+Av8ybKftDHUVV8AvAIsoB04DZSK9n5AUddI80cBsBV4BiwR19eh7rrlKk9wgsgBbgI1wMyukesgD9gGfNLCrom2iUAbqeLtclFwp+EEegOYnG3hAFVAvUvUVN2WAB74CJdFjlatuN4OHAR6Z0v8auCXS8x90b7IQLyFmnI5us8cj/ZHwPBMi9/nI2a94Nw2DMAC5us+CeClR/tbYEymxO/3EdEGFGpOJdARIYAaYX+vD+ettpsWNgaIqBO83RHEW0ALKosBzAjgvQAGxBVfBbQGGN8iuPciBmABC3XfHOBjAO9SHPF5pGYbd5miuSWolTZqAEeFvwsh3DVRA6gOMdgK5GvuvBjiLeCx8Lc9hPsRKDYV35/gIbWAh4K/I2YAv4E+2sZcA/5uL7G9PK5VoZb5INwR/5tQUyAOBgNvULk/zEYFKu1aMX31ICtIuOrLgOUG/XahVtAC4FQa/uuAk/p/NWr6BsEC1qKeH0+cx+wBnKT5wwz5fuWM8H3OsM8U0adzU2Uj7A7YaNa/hYGscMj+zb6sZEyVFRlALjDC0Eh3BjBKVmQAxaSOiB+6MwD5apok2HTT9Ae1EoOzIYuLOAGUyIoMoM3QQK7o127Yxw8ym+T7spLRIisygK+GBhKo7QaY3zU/yP6m0zFJpwygBfhpaMQ+EslkAKbT8bOsuB/aekMjtrNMBmB6TvRUVtwBPMQM9nB3xxSS2/CUrcQAYKCBkXeoTJQDjDR07IUmnClRhjqxC4IFNKTh7/+DewRA5dkSj+sS8s4NxclKURF1JBsweB+YTviG6qrgHzHg+5UKbWOcAfeuQYCduB5i7J3gbogp/r2wscaAPztKABNRq2SQwXLNnRAzgCvC3+EQ7uUo4m0cCDG6WPMSwIcYAWwWvoLOlZpQ7x2RkQfcCjB8QnDPxghgrO5biv+5Ugdmb4i+KAMafYw3Ct7SiOJfiL6rAnj70hFvoxJ19OHlwP4o0Rv4EiGAHcK+36vk4UyItzEaeO7h5JjgHDIU34qTPgehNpHuabMX7zUqLRSiPhFJZz9w9jDlpH4A8SrHhU33EeZ3kr/gZAUrUTncK5vsCRBuoVbvMs3tA7wWbbU4I5N1FKHm8SfgGzBEX89DfXbyEv8Xde5kY6e+XgfM6hLVHugLrCA51ZWSGsRvYJPg9Ecd1o5PV0DGHxSNXNQJ2izUKJ0mOXX2oAf/C/4Bt1R3sMQzHWwAAAAASUVORK5CYII=;" vertex="1" parent="n.z-ext">
          <mxGeometry x="9" y="23" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.z-legacy" value="&lt;b&gt;Legacy VM job&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;no identity&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#5c1a17;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="60" y="220" width="240" height="70" as="geometry" />
        </mxCell>
        <mxCell id="_ico4" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAAB9ElEQVRoge3YvY9MURjH8Q8hhMR62YKIAoleIUS8lBIv0UhEolJS+Q/0uo1oKLQUOlsQ3SZIJBIFEhReG5FBkJVdRnHmrmP23N2bDffMcL7Jk9x5Zs69z++ec555zkOh8H+zKOFbi9VtB9KAH3iF73U/GME4ugNsH3CiTsDYAATYxCaxqQp6cSRgT52yAWMZdlYfYgHL249FB2dwFLcj/xUcwjlMJcYlY32k/eVwKnr+SrzHXb8nl9TSPll9Gc9ADp5F11/wFs+FICueNr1Zjhm4hqW95x8QUmQH23q+ETxIjJuZgdwCunghLJvpyPcVE3hXMyYp4FYmAQuxfSkBh4UpzB3cfHYPS6qg+0uJvcI/3WhKYWam8RAX8DlzLIUZ+pfQbhzHhgyxzMeUkFIvCllqFgcNxya+I9rEMcOURvdXQcelxMaUqhZ4g/vCgaViUkiXnZoxyXI6B9exGTtwRBDxEduxC1uF1FlLbgFjfpXL43iMG3jS83Vwea4b5BawJbpegfV9PsIs1JLczS1yXqhGX+Is1vXsEq4KJ6/TTW+WKlsH1Y5VQcdLaKKp0sx8EzLULNbgpvxvdy77pO8skGpsjWJV4/fRHl28lj7kDy+ltdiyldbiIFBai3/SSmsxprQWF2iltVhRWot/mdJaLBT+RX4CFqUhUb2gGVAAAAAASUVORK5CYII=;" vertex="1" parent="n.z-legacy">
          <mxGeometry x="9" y="23" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_box5" value="Boundary" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#b85450;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=34;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#b85450;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="350" y="90" width="280" height="220" as="geometry" />
        </mxCell>
        <mxCell id="_ico6" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="_box5">
          <mxGeometry x="9" y="7" width="20" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.z-eg" value="&lt;b&gt;Egress gateway&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;TLS origination&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#ffe6cc;strokeColor=#d79b00;fontColor=#4a3200;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="370" y="120" width="240" height="70" as="geometry" />
        </mxCell>
        <mxCell id="_ico7" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.z-eg">
          <mxGeometry x="9" y="23" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_box8" value="Strict namespaces" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#b85450;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=34;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#b85450;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="660" y="90" width="280" height="220" as="geometry" />
        </mxCell>
        <mxCell id="_ico9" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAADDUlEQVRoge3azatVVRjH8Y+aebMX4Q6EQKQXaiBRDkS46TCLZgbpIMgKylHQC6HYX+BMmgS90BvhoJpEgmiFoNmk0sAyiKK07GVwzTJLUe9tsN1w2j37nL32XvvcBn5hDc5z1lrP73fWWnuvtThcZm6Z11O/a/EwVuIP7MJrONlTvixMYBMOYzYoZ/EW1syVwDpuwXZMi4VH5VNsxuI50Avm4y68h5lAYNPyG57DjeMSvhRb8X0H0VG5iPexAQv6EL4GO3EuUdi04ldOafMNnsFkV9GjFmWTsn+gn0OJbVsv+iuwDac6CB80MMidePOSuJR+DigeyY14IYPwOgMlS/EsjiX09TtuGyX+dt2eKk0NlCzAeuxtmPfdUQYezyi+iYFBbsUOwxf9qWqj+ZXP1yQkzM3XeArLFC+5r4I6/9FXNXA2v65kzuAlvBh891c1UDXwdx+KWnJdEBtpYDqziC673ehFdroaqBo40SFhxGyHtsuD2PFqoGrgxw4JI7qMwE1B7IdqIBqBMx2S5mIxVgTxY9VA1cAMvsgopO0UWoWFQfxwNVA1AJ+3TBrRdgqtrokfqgYiAwdbJs3JVBD7VYNFDB9ml5PG1bg7iH8QVY4M/IQvcypK5D7xlmZPVDkyAO9kk5POg0HsghoDdayQZzd6IFH8sktiq/3sqmtQNwJH8Uli8hxsEx/qX2/T2SbjHYEbxJcGJ3BlGwMT+HmMBl6p6WNLG/ElT47JwJR47p/Eki4GrlJs8Po0cK3iLihq/3QX8SUPdDDwUYP+X61p+y0W5TAwD/t6MrC5pt0M1uUQX3Kz4jSU08AG8byfxcs5xZc8mtHAPervWY/q8Xakbr6mGHhsiPjT4oNMNhbh45YGFuL5IXXP494+xZdM4kiigSl8NqTeBTw0DvEl1yuOnqMMHFG8YYfde57D/eMUXzIpbTpF5U+ZH5epTEhf2GX5Tv3Zd+w8ori/byr+DR33OH2wHG8bLvw4Ns6VwKasxW7/Fv4LnpBpbzNIX381oNh+3KGYWgf9P67uL5OdfwCdL2jqexBRtgAAAABJRU5ErkJggg==;" vertex="1" parent="_box8">
          <mxGeometry x="9" y="7" width="20" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.z-checkout" value="&lt;b&gt;checkout&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;default deny&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="680" y="120" width="240" height="70" as="geometry" />
        </mxCell>
        <mxCell id="_ico10" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.z-checkout">
          <mxGeometry x="9" y="23" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.z-ledger" value="&lt;b&gt;ledger&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;allow by identity&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="680" y="220" width="240" height="70" as="geometry" />
        </mxCell>
        <mxCell id="_ico11" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.z-ledger">
          <mxGeometry x="9" y="23" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_box12" value="Mesh control" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#b85450;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=34;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#b85450;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="970" y="90" width="280" height="220" as="geometry" />
        </mxCell>
        <mxCell id="_ico13" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="_box12">
          <mxGeometry x="9" y="7" width="20" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.z-istiod" value="&lt;b&gt;istiod&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;config · no keys&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;fontColor=#1a2b45;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="990" y="120" width="240" height="70" as="geometry" />
        </mxCell>
        <mxCell id="_ico14" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.z-istiod">
          <mxGeometry x="9" y="23" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.z-spire" value="&lt;b&gt;SPIRE server&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;cluster CA&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="990" y="220" width="240" height="70" as="geometry" />
        </mxCell>
        <mxCell id="_ico15" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAACTUlEQVRoge3Zv29PURjH8RdaaTFQkTQGSyNSSaeS+DHZ0MQgYTFJJDYD8T9YzBKJv0AQwcJEYsKCNH7EgMHQ+lHSFFE1nJJv2rrn3HvP/X5Lvu/kTvc5z3k+9/x4nnMuXTrLikS7UZzBCNY0Fw6YwB2cx6ccDg/jO+ba/LzAplhwsRFYh9cYSNNqAl8iNpvRl+jvEk4k2i7JmPQvdhWrEnxuwVSiz/cxZysj76ND2MJjzCbYvRVGKoUB9BQZFL6UvsjhNHrxOWI3iqESfsvEsIjj2r94Fz69RQHGptCypyug03QFdJp/XkAsD9ThmVDP9GEnNjTY11+pkgceCAG30ouTQp2UNQ/kFnAP/QX+dmB6uQqYEQq1GGdzCsi5iG/iTYLdReF8kYWcAh4l2k3hVa5OcwqYK2GbUnYnkVPASKLdWuXK6UJyCjgk7QB0TPFOlZWy2+g1xR9lCJMlfbY1D8zhlqW30zG8q+CvUEATpcRBvBSS2rgw5/dguIG+onSPlE2TYwr9FLLwZTzHDxzALgzim3A5dhsPsRG7hQurrRn6LyQ2hSaxr6LvHpyL+G90F5rF3jrO57lQ0EejAq7UcdzCAL4W9NPYIr5bo20rH/CkauM6AqZqtF3Ix6oN6whIuYlOpfJuWEfAEayu0f432yw+QydTJw/sF/b3cSEXVKFfuK1O/eGxiLqJbHD+6Rj/fCnx3wvIdntQkVmR83NMQOUEk4mnqm8Qf7ihc2eBo3WDh/W43ubAp3EqJbgyfwCHsV3zC38G99UoL7q0k1+Wk5ES1qN1DgAAAABJRU5ErkJggg==;" vertex="1" parent="n.z-spire">
          <mxGeometry x="9" y="23" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_box16" value="Key custody" style="rounded=1;arcSize=3;whiteSpace=wrap;html=1;fillColor=none;strokeColor=#b85450;dashed=1;dashPattern=8 8;verticalAlign=top;align=left;spacingLeft=34;spacingTop=6;fontSize=11;fontStyle=2;fontColor=#b85450;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="1280" y="90" width="280" height="220" as="geometry" />
        </mxCell>
        <mxCell id="_ico17" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="_box16">
          <mxGeometry x="9" y="7" width="20" height="20" as="geometry" />
        </mxCell>
        <mxCell id="n.z-bao" value="&lt;b&gt;OpenBao PKI&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;intermediates&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1300" y="120" width="240" height="70" as="geometry" />
        </mxCell>
        <mxCell id="_ico18" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,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;" vertex="1" parent="n.z-bao">
          <mxGeometry x="9" y="23" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="n.z-root" value="&lt;b&gt;Offline root&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:10px;color:#5b6b7d&quot;&gt;HSM · ceremony&lt;/font&gt;" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;fontColor=#3a2b44;fontSize=12;fontFamily=Segoe UI;verticalAlign=middle;align=center;spacingLeft=38;" vertex="1" parent="1">
          <mxGeometry x="1300" y="220" width="240" height="70" as="geometry" />
        </mxCell>
        <mxCell id="_ico19" value="" style="shape=image;html=1;imageAspect=1;aspect=fixed;movable=0;resizable=0;rotatable=0;connectable=0;editable=0;deletable=0;noLabel=1;image=data:image/png,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAABmJLR0QA/wD/AP+gvaeTAAACkklEQVRoge3ZSchNYRzH8Q8ZIrEwZOGVsDGVDBlCio2FDZFhJ5ZWlJWtDQtlRzY2siApslAkG0NRMs/KsDAPZXjd1+I5J8/13ss51z333Df3W6fnOc/599zf79znef7nOYcO5dIvZ3x/bMJ6jMOAJun4iEvYjXtN6rMX/XAYPQUeH7CgKANrCxafHrflHxmZKPrux8f0rKL65zAwOkfsvzIma2AeA60k8xBqVwOZqbUMLsOk6PwEXrZGTi9WoCup9+Ao3sQBsYHlmIidwhqfclN5BrYKJlLm4AqO4fXvwTfVXhEWJdfP1LlexLEs+c1Tda5vTEXH/8B+TMFqjMxye0rgDB7ictoQG9iblHcxL2p/VbyuulzAp6T+Qxje9xvtrIwh9Ff6/DLa5w3UygOzVOeBs8qbB4sxNqlXcBqf6wXPwhphlrfrMrpHWCWHpaLjf+AQpmW4K2WyLSk3CE/HVQZO4gXmixy2GdcFjbfShtjAjqTchblR+7viddXlGgYm9Qq2CyYaopMHiqDPG6iVB7pUb+nu+PU80momY0RS7xHG//d6wV2YjRvaNw9sE/LVoFT078vojAx3pUz2JOU6HKHawEV8w1QMaa2uzDzEWzxNG2IDW5LyIJZG7V8Kl1Wfl4Jown5go2gzk5dOHiiCPm+gVh4YjlHR+XPlzYOxGJrUK3j8p+Dhwnuhq9o3D2zGhFh0PITO4QFm/sllyRzAI2FTg2oDz4Q19keLReXhs/BG7m3aEM+BlUl5HEui9u7iddXlk19iK1iF84121skDRfBfGfhWmIrefM0amMdAw5vpnHQLr/qbzni8V/wE3leE+JRFeFKQ8IqQqAbnEdTIB+VBWKi5n127hUeYx03ss0NL+AlV99RV7CRFIAAAAABJRU5ErkJggg==;" vertex="1" parent="n.z-root">
          <mxGeometry x="9" y="23" width="24" height="24" as="geometry" />
        </mxCell>
        <mxCell id="_e20" value="TLS · allowlist" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.z-eg" target="n.z-ext">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="490" y="210" />
              <mxPoint x="180" y="210" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_e21" value="declared host" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.z-checkout" target="n.z-eg">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="800" y="220" />
              <mxPoint x="490" y="220" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_e22" value="plaintext refused" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;dashed=1;endArrow=block;endFill=1;strokeColor=#b85450;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.z-legacy" target="n.z-ledger">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="_e23" value="xDS over mTLS" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;dashed=1;endArrow=open;endFill=0;strokeColor=#d79b00;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=0;exitY=0.5;exitDx=0;exitDy=0;entryX=1;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.z-istiod" target="n.z-ledger">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="960" y="160" />
              <mxPoint x="960" y="260" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="_e24" value="CA renewal" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;jettySize=auto;orthogonalLoop=1;endArrow=block;endFill=1;strokeColor=#5a6570;strokeWidth=1.4;fontSize=10;fontColor=#42536a;labelBackgroundColor=#ffffff;verticalAlign=bottom;fontFamily=Segoe UI;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="n.z-spire" target="n.z-bao">
          <mxGeometry relative="1" as="geometry">
            <Array as="points">
              <mxPoint x="1270" y="260" />
              <mxPoint x="1270" y="160" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="title" value="Security — Trust Zones and What Crosses Them" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=20;fontStyle=1;fontColor=#16202c;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="20" width="1510" height="30" as="geometry" />
        </mxCell>
        <mxCell id="rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#c9d3de;" vertex="1" parent="1">
          <mxGeometry x="40" y="50" width="1510" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg25" value="" style="rounded=1;arcSize=30;html=1;fillColor=#f5f5f5;strokeColor=#8c8c8c;" vertex="1" parent="1">
          <mxGeometry x="40" y="380" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg26" value="External / third party" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="70" y="380" width="130" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg27" value="" style="rounded=1;arcSize=30;html=1;fillColor=#f8cecc;strokeColor=#b85450;" vertex="1" parent="1">
          <mxGeometry x="230" y="380" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg28" value="Risk / gap" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="250" y="380" width="70" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg29" value="" style="rounded=1;arcSize=30;html=1;fillColor=#ffe6cc;strokeColor=#d79b00;" vertex="1" parent="1">
          <mxGeometry x="340" y="380" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg30" value="Interface / broker" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="370" y="380" width="110" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg31" value="" style="rounded=1;arcSize=30;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
          <mxGeometry x="500" y="380" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg32" value="Application we own" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="530" y="380" width="110" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg33" value="" style="rounded=1;arcSize=30;html=1;fillColor=#e1d5e7;strokeColor=#9673a6;" vertex="1" parent="1">
          <mxGeometry x="660" y="380" width="20" height="10" as="geometry" />
        </mxCell>
        <mxCell id="_lg34" value="Security / platform" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="690" y="380" width="110" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg35" value="" style="html=1;endArrow=none;strokeColor=#5a6570;strokeWidth=1.4;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="820" y="390" as="sourcePoint" />
            <mxPoint x="850" y="390" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="_lg36" value="synchronous" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="850" y="380" width="70" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg37" value="" style="html=1;endArrow=none;dashed=1;strokeColor=#b85450;strokeWidth=1.4;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="940" y="390" as="sourcePoint" />
            <mxPoint x="970" y="390" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="_lg38" value="failure / alternate" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="970" y="380" width="110" height="20" as="geometry" />
        </mxCell>
        <mxCell id="_lg39" value="" style="html=1;endArrow=none;dashed=1;strokeColor=#d79b00;strokeWidth=1.4;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1110" y="390" as="sourcePoint" />
            <mxPoint x="1130" y="390" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="_lg40" value="event / async" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#7b8794;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="1140" y="380" width="80" height="20" as="geometry" />
        </mxCell>
        <mxCell id="note" value="No proxy holds a key that proves any identity but its own. istiod holds no signing key at all; the only in-cluster CA lives 7 days." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=10;fontColor=#8a97a5;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="410" width="1510" height="20" as="geometry" />
        </mxCell>
        <mxCell id="foot-rule" value="" style="line;strokeWidth=1;html=1;strokeColor=#e3e9ef;" vertex="1" parent="1">
          <mxGeometry x="40" y="430" width="1510" height="10" as="geometry" />
        </mxCell>
        <mxCell id="foot" value="v 1.0   ·   owner Security Architecture   ·   date 2026-09" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=middle;whiteSpace=wrap;fontSize=9;fontColor=#9aa7b4;fontFamily=Segoe UI;" vertex="1" parent="1">
          <mxGeometry x="40" y="440" width="1510" height="10" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
