<?xml version="1.0" encoding="UTF-8"?>
<mxfile host="app.diagrams.net" agent="KubeDaily Packet &amp; Flow Analysis"><diagram id="flowsanalysis" name="04 · Packet and identity flow analysis">
    <mxGraphModel dx="1750" dy="1000" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="3300" pageHeight="2080" math="0" shadow="0" background="#FFFFFF">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="flowsanalysis_v1" value="PACKET AND IDENTITY FLOW ANALYSIS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#FFFFFF;fontSize=33;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="36" y="20" width="3228" height="50" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v2" value="Security checkpoints, conditional attack paths and observability: request processing, ingress, east-west, egress, supply chain, runtime" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#AFC4D8;fontSize=16;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="37" y="74" width="3226" height="22" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v3" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#264765;strokeColor=#365D7D;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2715" y="27" width="546" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v4" value="EDITABLE DRAW.IO  •  REFERENCE ARCHITECTURE" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D7E8FA;fontSize=13;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2723" y="27" width="530" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v5" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#C8D6E4;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="25" y="131" width="3250" height="60" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v6" value="HOW TO READ" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="47" y="145" width="150" height="31" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v7" value="" vertex="1" parent="1" style="rounded=1;arcSize=4;whiteSpace=wrap;html=1;fillColor=#387CC5;strokeColor=#387CC5;strokeWidth=0;fontColor=#14243A;">
          <mxGeometry x="222" y="150" width="34" height="11" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v8" value="Legitimate / authenticated" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="268" y="140" width="640" height="36" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v9" value="" vertex="1" parent="1" style="rounded=1;arcSize=4;whiteSpace=wrap;html=1;fillColor=#D34E5B;strokeColor=#D34E5B;strokeWidth=0;fontColor=#14243A;">
          <mxGeometry x="948" y="150" width="34" height="11" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v10" value="Attack / bypass attempt" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="994" y="140" width="640" height="36" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v11" value="" vertex="1" parent="1" style="rounded=1;arcSize=4;whiteSpace=wrap;html=1;fillColor=#22806E;strokeColor=#22806E;strokeWidth=0;fontColor=#14243A;">
          <mxGeometry x="1674" y="150" width="34" height="11" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v12" value="Policy checkpoint" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1720" y="140" width="640" height="36" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v13" value="" vertex="1" parent="1" style="rounded=1;arcSize=4;whiteSpace=wrap;html=1;fillColor=#B37B27;strokeColor=#B37B27;strokeWidth=0;fontColor=#14243A;">
          <mxGeometry x="2400" y="150" width="34" height="11" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v14" value="Artifact + evidence" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2446" y="140" width="640" height="36" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v15" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="33" y="247" width="2260" height="330" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v16" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="49" y="230" width="672" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v17" value="CONTROL-PLANE API REQUEST  ·  AuthN -&gt; AuthZ -&gt; admission -&gt; persistence" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="57" y="230" width="656" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v18" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F0F5FA;strokeColor=#B7C7D9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="68" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v19" value="01 Client identity" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="83" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v20" value="OIDC / cert / SA token" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="77" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v21" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="435" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v22" value="02 API TLS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="450" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v23" value="6443 / apiserver" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="444" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v24" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="406" y="383" as="sourcePoint" />
            <mxPoint x="435" y="383" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v25" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="802" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v26" value="03 AuthN" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="817" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v27" value="Token / certificate" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="811" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v28" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="773" y="383" as="sourcePoint" />
            <mxPoint x="802" y="383" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v29" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1169" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v30" value="04 AuthZ" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1184" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v31" value="RBAC / webhook" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1178" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v32" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1140" y="383" as="sourcePoint" />
            <mxPoint x="1169" y="383" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v33" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1536" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v34" value="05 Admission" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1551" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v35" value="PSA / policies" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1545" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v36" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1507" y="383" as="sourcePoint" />
            <mxPoint x="1536" y="383" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v37" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F2EEFA;strokeColor=#B3A3D1;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1903" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v38" value="06 Storage" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#7D63B0;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1918" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v39" value="etcd / API objects" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1912" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v40" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1874" y="383" as="sourcePoint" />
            <mxPoint x="1903" y="383" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v41" value="" vertex="1" parent="1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="72" y="458" width="2166" height="96" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v42" value="Threats" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="85" y="468" width="2140" height="25" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v43" value="AV02: credential theft  •  AV09: over-broad RBAC  •  AV20: admission webhook abuse" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="87" y="499" width="2136" height="52" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v44" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="33" y="627" width="2260" height="292" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v45" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="49" y="610" width="582" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v46" value="INGRESS PATH  ·  Internet -&gt; Gateway/Ingress -&gt; Service -&gt; Pod" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="57" y="610" width="566" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v47" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F0F5FA;strokeColor=#B7C7D9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="68" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v48" value="Internet / DNS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="83" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v49" value="HTTPS / external name" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="77" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v50" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="435" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v51" value="Edge LB" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="450" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v52" value="TCP load balancer" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="444" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v53" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="406" y="758" as="sourcePoint" />
            <mxPoint x="435" y="758" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v54" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="802" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v55" value="Gateway / Ingress" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="817" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v56" value="Host/path/TLS routing" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="811" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v57" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="773" y="758" as="sourcePoint" />
            <mxPoint x="802" y="758" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v58" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1169" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v59" value="Service + EndpointSlice" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1184" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v60" value="ClusterIP -&gt; healthy backend" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1178" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v61" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1140" y="758" as="sourcePoint" />
            <mxPoint x="1169" y="758" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v62" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1536" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v63" value="CNI policy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1551" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v64" value="Ingress allowlist" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1545" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v65" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1507" y="758" as="sourcePoint" />
            <mxPoint x="1536" y="758" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v66" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1903" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v67" value="Pod workload" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1918" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v68" value="App listener + identity" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1912" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v69" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1874" y="758" as="sourcePoint" />
            <mxPoint x="1903" y="758" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v70" value="CHECK: L7 route ≠ L3/L4 isolation. Kubernetes NetworkPolicy enforcement requires compatible CNI implementation." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=15;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="70" y="840" width="2160" height="34" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v71" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="33" y="969" width="2260" height="294" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v72" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="49" y="952" width="618" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v73" value="EAST-WEST AND EGRESS  ·  NetworkPolicy / DNS / SNAT / external API" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="57" y="952" width="602" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v74" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="68" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v75" value="Pod A" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="83" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v76" value="Service identity / request" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="77" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v77" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="435" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v78" value="Egress policy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="450" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v79" value="Allowed CIDR / port; DNS exceptions" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="444" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v80" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="406" y="1098" as="sourcePoint" />
            <mxPoint x="435" y="1098" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v81" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="802" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v82" value="CNI datapath" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="817" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v83" value="Pod IP + routing + overlay" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="811" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v84" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="773" y="1098" as="sourcePoint" />
            <mxPoint x="802" y="1098" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v85" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1169" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v86" value="Gateway / NAT" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1184" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v87" value="SNAT / approved egress" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1178" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v88" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1140" y="1098" as="sourcePoint" />
            <mxPoint x="1169" y="1098" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v89" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F0F5FA;strokeColor=#B7C7D9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1536" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v90" value="External endpoint" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1551" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v91" value="Internet / SaaS / cloud API" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1545" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v92" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1507" y="1098" as="sourcePoint" />
            <mxPoint x="1536" y="1098" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v93" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1903" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v94" value="Flow telemetry" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1918" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v95" value="Observe + correlate denies" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1912" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v96" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1874" y="1098" as="sourcePoint" />
            <mxPoint x="1903" y="1098" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v97" value="EAST-WEST: Pod -&gt; egress policy -&gt; service/IP -&gt; destination ingress policy; optional mesh can add authentication and authorization." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="70" y="1181" width="2145" height="33" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v98" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#FFFDF9;strokeColor=#E1BB70;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="33" y="1313" width="2260" height="308" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v99" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFFDF9;strokeColor=#E1BB70;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="49" y="1296" width="438" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v100" value="SUPPLY CHAIN -&gt; ADMISSION -&gt; RUNTIME EXECUTION" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="57" y="1296" width="422" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v101" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="68" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v102" value="Git / packages" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="83" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v103" value="PR reviews / lockfiles" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="77" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v104" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="435" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v105" value="Build + SBOM" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="450" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v106" value="Build provenance" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="444" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v107" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="406" y="1445" as="sourcePoint" />
            <mxPoint x="435" y="1445" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v108" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="802" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v109" value="Scan + sign" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="817" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v110" value="Vulnerabilities / signature" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="811" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v111" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="773" y="1445" as="sourcePoint" />
            <mxPoint x="802" y="1445" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v112" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1169" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v113" value="Registry" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1184" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v114" value="Immutable image digest" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1178" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v115" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1140" y="1445" as="sourcePoint" />
            <mxPoint x="1169" y="1445" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v116" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1536" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v117" value="Admission" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1551" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v118" value="Verify signature / policy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1545" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v119" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1507" y="1445" as="sourcePoint" />
            <mxPoint x="1536" y="1445" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v120" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1903" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v121" value="Pod / runtime" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1918" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v122" value="CRI pull + process exec" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1912" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v123" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1874" y="1445" as="sourcePoint" />
            <mxPoint x="1903" y="1445" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v124" value="RISK: A signed image does not establish safety by itself; provenance, vulnerability assessment, least privilege and runtime monitoring are complementary." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="70" y="1530" width="2150" height="50" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v125" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#FFFBFB;strokeColor=#E7A6AD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="33" y="1670" width="2260" height="260" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v126" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFFBFB;strokeColor=#E7A6AD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="49" y="1653" width="690" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v127" value="RUNTIME + NODE ESCAPE BOUNDARY  ·  Compromised process, privileges, kernel" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="57" y="1653" width="674" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v128" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="68" y="1744" width="402" height="99" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v129" value="Compromised process" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="83" y="1751" width="372" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v130" value="AV01 / AV05 initial foothold" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="77" y="1788" width="384" height="49" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v131" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="509" y="1744" width="402" height="99" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v132" value="Pod security context" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="524" y="1751" width="372" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v133" value="capabilities, host mounts, root" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="518" y="1788" width="384" height="49" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v134" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="471" y="1792" as="sourcePoint" />
            <mxPoint x="509" y="1792" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v135" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="950" y="1744" width="402" height="99" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v136" value="Host / CRI exposure" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="965" y="1751" width="372" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v137" value="AV14 / AV15 if exposed" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="959" y="1788" width="384" height="49" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v138" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="912" y="1792" as="sourcePoint" />
            <mxPoint x="950" y="1792" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v139" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1391" y="1744" width="402" height="99" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v140" value="Node privilege" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1406" y="1751" width="372" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v141" value="Kernel / kubelet / socket" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1400" y="1788" width="384" height="49" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v142" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1353" y="1792" as="sourcePoint" />
            <mxPoint x="1391" y="1792" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v143" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1832" y="1744" width="402" height="99" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v144" value="Blast radius" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1847" y="1751" width="372" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v145" value="Other Pods / API identity" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1841" y="1788" width="384" height="49" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v146" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1794" y="1792" as="sourcePoint" />
            <mxPoint x="1832" y="1792" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v147" value="CONDITIONAL PATH: Pod compromise alone is NOT a host escape. The elevated access step requires an additional vulnerability or unsafe configuration." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="65" y="1868" width="2152" height="36" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v148" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="2344" y="247" width="914" height="782" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v149" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2360" y="230" width="276" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v150" value="DEFENSE-IN-DEPTH CHECKPOINTS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2368" y="230" width="260" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v151" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="291" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v152" value="C02  Identity and MFA" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="298" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v153" value="Authenticate platform operators; avoid standing admin tokens." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="335" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v154" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="395" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v155" value="C03  RBAC / authorization" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="402" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v156" value="Review RoleBinding and ClusterRoleBinding grants." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="439" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v157" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="499" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v158" value="C08  Pod Security Admission" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="506" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v159" value="Reject privileged and risky Pod configuration." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="543" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v160" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="603" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v161" value="C09  NetworkPolicy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="610" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v162" value="Default-deny ingress &amp; egress; validate actual CNI." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="647" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v163" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="707" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v164" value="C14  Image policy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="714" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v165" value="Pin digest; verify provenance and signatures." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="751" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v166" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="811" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v167" value="C16 / C17  Runtime confinement" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="818" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v168" value="seccomp, non-root, MAC profiles, no host socket." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="855" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v169" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="915" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v170" value="C07 / C11  Audit / detection" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="922" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v171" value="Centralize audit, CNI flows and node runtime events." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="959" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v172" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="2344" y="1086" width="914" height="535" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v173" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2360" y="1069" width="294" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v174" value="MONITORING  ·  WHAT TO OBSERVE" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2368" y="1069" width="278" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v175" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="1136" width="863" height="98" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v176" value="API + auth events" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="1143" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v177" value="User, groups, verb, resource, object, code" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="1180" width="845" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v178" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="1249" width="863" height="98" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v179" value="Network / DNS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="1256" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v180" value="Flow, source Pod, destination, port, denial" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="1293" width="845" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v181" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="1362" width="863" height="98" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v182" value="Runtime / container" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="1369" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v183" value="Exec, privilege change, sensitive file access" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="1406" width="845" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v184" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="1475" width="863" height="98" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v185" value="Image / CI pipeline" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="1482" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v186" value="Digest, signer, SBOM, attestations, approval" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="1519" width="845" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v187" value="" vertex="1" parent="1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2361" y="1680" width="888" height="182" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v188" value="Deployment caveats" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2374" y="1690" width="862" height="25" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v189" value="•  Port allocations can be customized by distribution." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2376" y="1723" width="858" height="22" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v190" value="•  Service mesh and observability are optional." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2376" y="1748" width="858" height="22" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v191" value="•  Policies are ineffective unless enforced by the implementation." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2376" y="1773" width="858" height="22" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v192" value="•  Assessed risk depends on real configuration and privileges." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2376" y="1798" width="858" height="22" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v193" value="SOURCE: Kubernetes official security guidance + KubeDaily enterprise architecture model. This is a generic reference model, not evidence of compromise." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=15;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="42" y="2002" width="3160" height="34" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
  </mxfile>