<?xml version="1.0" encoding="UTF-8"?>
<mxfile host="app.diagrams.net" agent="KubeDaily Enterprise Threat Model &amp; Security Architecture" pages="4"><diagram id="overview" name="01 · Master threat register and cluster overview">
    <mxGraphModel dx="1550" dy="980" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="3200" pageHeight="1950" math="0" shadow="0" background="#FFFFFF">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="overview_r1" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EFF5FB;strokeColor=#EFF5FB;strokeWidth=0;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="0" y="0" width="3200" height="89" as="geometry" />
        </mxCell>
        <mxCell id="overview_r2" value="KUBERNETES  |  COMPONENT-LEVEL THREAT MODEL" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#173C65;fontSize=30;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="30" y="13" width="2180" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r3" value="Threat IDs + attack paths • Updated layers on pages 03–04: API pipeline, CNI, supply chain, telemetry, runtime enforcement" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#59718B;fontSize=15;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="31" y="55" width="2100" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r4" value="REFERENCE MODEL • NOT A LIVE SCAN" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EAF2FE;strokeColor=#9BB9DE;strokeWidth=1;fontColor=#24527E;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2817" y="25" width="345" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r5" value="Threat Actors (TA)" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="110" width="513" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r6" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="154" width="513" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r7" value="TA01" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=13.3;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="154" width="67" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r8" value="External attacker — internet-origin adversary" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=13.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="99" y="155" width="437" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r9" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="188" width="513" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r10" value="TA02" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=13.3;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="188" width="67" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r11" value="Internal attacker — authorized or compromised insider" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=13.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="99" y="189" width="437" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r12" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="222" width="513" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r13" value="TA03" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=13.3;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="222" width="67" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r14" value="Compromised workload / untrusted tenant" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=13.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="99" y="223" width="437" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r15" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="256" width="513" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r16" value="TA04" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=13.3;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="256" width="67" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r17" value="Supply-chain adversary — image, package, CI" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=13.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="99" y="257" width="437" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r18" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="290" width="513" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r19" value="TA05" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=13.3;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="290" width="67" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r20" value="Cloud or infrastructure operator" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=13.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="99" y="291" width="437" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r21" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="324" width="513" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r22" value="TA06" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=13.3;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="324" width="67" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r23" value="Compromised administrator / CI identity" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=13.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="99" y="325" width="437" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r24" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="358" width="513" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r25" value="TA07" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=13.3;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="358" width="67" height="34" as="geometry" />
        </mxCell>
        <mxCell id="overview_r26" value="Adjacent cluster or network attacker" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=13.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="99" y="359" width="437" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r27" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F0F5FB;strokeColor=#C9D9E7;strokeWidth=1;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="403" width="513" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r28" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DDEDFC;strokeColor=#7DA6CD;strokeWidth=1;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="38" y="411" width="35" height="14" as="geometry" />
        </mxCell>
        <mxCell id="overview_r29" value="In-scope elements" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#304B6B;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="81" y="406" width="170" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r30" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#707D8D;strokeWidth=1;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="273" y="411" width="35" height="14" as="geometry" />
        </mxCell>
        <mxCell id="overview_r31" value="External dependencies" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#304B6B;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="314" y="406" width="197" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r32" value="Threat Objects (TO)" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="452" width="513" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r33" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="496" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r34" value="TO01" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="496" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r35" value="Cluster CA private key and trust roots" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="497" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r36" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="518" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r37" value="TO02" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="518" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r38" value="API server TLS serving key / certificate" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="519" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r39" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="540" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r40" value="TO03" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="540" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r41" value="API client certificate / admin kubeconfig" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="541" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r42" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="562" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r43" value="TO04" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="562" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r44" value="Service-account signing and verification keys" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="563" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r45" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="584" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r46" value="TO05" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="584" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r47" value="Admin kubeconfig / privileged bearer token" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="585" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r48" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="606" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r49" value="TO06" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="606" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r50" value="Controller-manager kubeconfig / credentials" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="607" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r51" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="628" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r52" value="TO07" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="628" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r53" value="Scheduler kubeconfig / credentials" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="629" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r54" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="650" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r55" value="TO08" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="650" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r56" value="kube-apiserver static Pod manifest" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="651" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r57" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="672" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r58" value="TO09" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="672" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r59" value="kube-controller-manager static Pod manifest" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="673" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r60" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="694" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r61" value="TO10" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="694" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r62" value="kube-scheduler static Pod manifest" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="695" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r63" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="716" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r64" value="TO11" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="716" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r65" value="Cluster audit policy and audit log stream" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="717" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r66" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="738" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r67" value="TO12" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="738" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r68" value="etcd client/server certificates and keys" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="739" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r69" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="760" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r70" value="TO13" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="760" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r71" value="etcd database: Secrets, ConfigMaps, RBAC" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="761" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r72" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="782" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r73" value="TO14" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="782" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r74" value="Container image / package artifact" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="783" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r75" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="804" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r76" value="TO15" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="804" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r77" value="Admission webhook certificates / policy" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="805" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r78" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="826" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r79" value="TO16" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="826" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r80" value="Application Secrets / environment variables" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="827" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r81" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="848" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r82" value="TO17" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="848" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r83" value="Pod projected service-account JWT" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="849" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r84" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="870" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r85" value="TO18" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="870" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r86" value="Container runtime socket / CRI interface" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="871" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r87" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="892" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r88" value="TO19" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="892" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r89" value="Kubelet authentication / serving credential" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="893" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r90" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="914" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r91" value="TO20" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="914" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r92" value="Kubelet bootstrap token / config" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="915" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r93" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="936" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r94" value="TO21" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="936" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r95" value="Node OS and host file system" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="937" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r96" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="958" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r97" value="TO22" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="958" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r98" value="Admission controller configuration" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="959" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r99" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="980" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r100" value="TO23" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="980" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r101" value="NetworkPolicy and CNI policy" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="981" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r102" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1002" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r103" value="TO24" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1002" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r104" value="Ingress and load balancer configuration" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1003" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r105" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1024" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r106" value="TO25" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1024" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r107" value="Service mesh identity / mTLS material" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1025" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r108" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1046" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r109" value="TO26" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1046" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r110" value="Service-account RBAC role binding" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1047" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r111" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1068" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r112" value="TO27" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1068" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r113" value="Metrics, logs, traces and observability" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1069" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r114" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1090" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r115" value="TO28" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1090" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r116" value="Privileged / hostPath / hostNetwork Pod spec" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1091" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r117" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1112" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r118" value="TO29" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1112" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r119" value="DNS and service-discovery configuration" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1113" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r120" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1134" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r121" value="TO30" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1134" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r122" value="ClusterRole / ClusterRoleBinding definitions" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1135" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r123" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1156" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r124" value="TO31" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1156" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r125" value="CRDs, operators and custom controllers" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1157" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r126" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1178" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r127" value="TO32" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1178" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r128" value="Controller service-account tokens" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1179" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r129" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1200" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r130" value="TO33" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1200" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r131" value="Node identity and instance metadata" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1201" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r132" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1222" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r133" value="TO34" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1222" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r134" value="Artifact registry credentials and signing key" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1223" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r135" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1244" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r136" value="TO35" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1244" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r137" value="CI/CD credentials and workflow definitions" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1245" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r138" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1266" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r139" value="TO36" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1266" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r140" value="OIDC / IAM federation and JWKS keys" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1267" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r141" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1288" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r142" value="TO37" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1288" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r143" value="Encryption provider config and KMS key" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1289" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r144" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1310" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r145" value="TO38" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1310" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r146" value="ResourceQuota and LimitRange policy" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1311" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r147" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1332" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r148" value="TO39" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1332" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r149" value="PodSecurity admission policy labels" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1333" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r150" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1354" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r151" value="TO40" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1354" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r152" value="Security profile: seccomp / AppArmor / SELinux" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1355" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r153" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1376" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r154" value="TO41" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0C4;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1376" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r155" value="CNI plugin binaries / configuration" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1377" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r156" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1398" width="513" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r157" value="TO42" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF9EC;strokeColor=#D9B76B;strokeWidth=0.45;fontColor=#AD7D27;fontSize=11.4;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1398" width="61" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_r158" value="Cloud-provider IAM and CSI / CCM credentials" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.6;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="93" y="1399" width="443" height="20" as="geometry" />
        </mxCell>
        <mxCell id="overview_r159" value="Assumptions (AS)" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E1EFFD;strokeColor=#96B7DC;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1437" width="513" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r160" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1481" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r161" value="AS01" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E1EFFD;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1481" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r162" value="Model assumes a modern, supported Kubernetes release" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1482" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r163" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1508" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r164" value="AS02" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1508" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r165" value="One logical cluster; assess multi-cluster separately" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1509" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r166" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1535" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r167" value="AS03" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E1EFFD;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1535" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r168" value="Trust boundaries include identities, networks, nodes" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1536" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r169" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1562" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r170" value="AS04" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1562" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r171" value="Relevant control plane is in scope for review" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1563" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r172" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1589" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r173" value="AS05" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E1EFFD;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1589" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r174" value="Cloud provider and hypervisor are external dependencies" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1590" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r175" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1616" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r176" value="AS06" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1616" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r177" value="Workloads run in isolated namespaces where feasible" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1617" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r178" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1643" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r179" value="AS07" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E1EFFD;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1643" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r180" value="Admission policies may not cover every namespace" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1644" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r181" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1670" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r182" value="AS08" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1670" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r183" value="CNI implements NetworkPolicy if policies are used" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1671" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r184" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1697" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r185" value="AS09" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E1EFFD;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1697" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r186" value="TLS is expected for Kubernetes control-plane traffic" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1698" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r187" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1724" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r188" value="AS10" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1724" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r189" value="Node compromise can affect resident workloads" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1725" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r190" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1751" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r191" value="AS11" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E1EFFD;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1751" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r192" value="Secrets encryption at rest may require configuration" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1752" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r193" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1778" width="513" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r194" value="AS12" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F4F9FE;strokeColor=#96B7DC;strokeWidth=0.45;fontColor=#376CA3;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1778" width="62" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r195" value="Attack edges indicate possibility, not guaranteed success" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=11.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="94" y="1779" width="442" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r196" value="Attack Vectors (AV)" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="110" width="516" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r197" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="154" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r198" value="AV01" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="154" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r199" value="Public endpoint vulnerability / SSRF / RCE" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="155" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r200" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="184" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r201" value="AV02" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="184" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r202" value="Stolen or leaked kubeconfig / client cert" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="185" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r203" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="214" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r204" value="AV03" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="214" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r205" value="Leaked projected service-account token" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="215" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r206" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="244" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r207" value="AV04" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="244" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r208" value="Malicious or tampered container image" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="245" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r209" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="274" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r210" value="AV05" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="274" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r211" value="Vulnerable Kubernetes workload / container" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="275" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r212" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="304" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r213" value="AV06" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="304" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r214" value="Third-party or Helm dependency compromise" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="305" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r215" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="334" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r216" value="AV07" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="334" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r217" value="API server vulnerability / insecure endpoint" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="335" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r218" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="364" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r219" value="AV08" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="364" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r220" value="API server authentication misconfiguration" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="365" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r221" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="394" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r222" value="AV09" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="394" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r223" value="Excessive RBAC / impersonation / escalation" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="395" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r224" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="424" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r225" value="AV10" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="424" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r226" value="Exposed or weak etcd authentication" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="425" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r227" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="454" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r228" value="AV11" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="454" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r229" value="Compromised node / kubelet credential" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="455" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r230" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="484" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r231" value="AV12" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="484" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r232" value="Misconfigured container runtime / CRI" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="485" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r233" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="514" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r234" value="AV13" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="514" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r235" value="Misconfigured OIDC or identity federation" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="515" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r236" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="544" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r237" value="AV14" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="544" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r238" value="Host exploit / kernel or kubelet vulnerability" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="545" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r239" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="574" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r240" value="AV15" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="574" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r241" value="Overprivileged hostPath or hostPID Pod" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="575" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r242" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="604" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r243" value="AV16" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="604" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r244" value="Legitimately obtained privileged credentials" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="605" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r245" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="634" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r246" value="AV17" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="634" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r247" value="Malicious registry dependency / image update" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="635" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r248" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="664" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r249" value="AV18" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="664" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r250" value="Lateral movement over unrestricted network" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="665" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r251" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="694" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r252" value="AV19" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="694" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r253" value="Unauthenticated kubelet / exposed endpoint" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="695" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r254" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="724" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r255" value="AV20" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="724" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r256" value="Insecure admission webhook / bypass" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="725" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r257" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="754" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r258" value="AV21" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="754" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r259" value="Compromised cloud or metadata credential" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="755" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r260" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="784" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r261" value="AV22" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="784" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r262" value="DNS or service discovery poisoning" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="785" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r263" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="814" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r264" value="AV23" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="814" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r265" value="kube-proxy / CNI exploit or traffic hijack" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="815" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r266" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="844" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r267" value="AV24" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="844" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r268" value="Resource exhaustion / control-plane DoS" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="845" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r269" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="874" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r270" value="AV25" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="874" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r271" value="Unpatched cluster component / CVE" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="875" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r272" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="904" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r273" value="AV26" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="904" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r274" value="Secret exposure through environment / files" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="905" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r275" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="934" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r276" value="AV27" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8DFE1;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="934" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r277" value="Leaky logs / telemetry / error messages" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="935" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r278" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="964" width="516" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r279" value="AV28" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FEF1F2;strokeColor=#D88D93;strokeWidth=0.45;fontColor=#B84A55;fontSize=12.100000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="964" width="61" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r280" value="Compromised CI/CD pipeline or GitOps repo" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="965" width="446" height="28" as="geometry" />
        </mxCell>
        <mxCell id="overview_r281" value="Security Controls (C)" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1020" width="516" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r282" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1064" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r283" value="C01" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1064" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r284" value="Cluster CA and certificate lifecycle management" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1065" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r285" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1095" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r286" value="C02" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1095" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r287" value="Strong admin authentication / short-lived creds" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1096" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r288" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1126" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r289" value="C03" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1126" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r290" value="Least-privilege RBAC / prevent escalation" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1127" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r291" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1157" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r292" value="C04" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1157" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r293" value="Protect API access with network restrictions" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1158" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r294" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1188" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r295" value="C05" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1188" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r296" value="etcd mTLS, access control and network isolation" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1189" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r297" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1219" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r298" value="C06" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1219" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r299" value="Encryption at rest with KMS for Secrets" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1220" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r300" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1250" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r301" value="C07" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1250" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r302" value="Audit logs, retention and alerting" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1251" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r303" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1281" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r304" value="C08" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1281" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r305" value="Pod Security Admission / Restricted baseline" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1282" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r306" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1312" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r307" value="C09" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1312" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r308" value="Default-deny NetworkPolicy / microsegmentation" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1313" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r309" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1343" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r310" value="C10" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1343" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r311" value="Kubelet authorization, authentication and TLS" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1344" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r312" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1374" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r313" value="C11" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1374" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r314" value="Runtime security monitoring and response" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1375" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r315" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1405" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r316" value="C12" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1405" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r317" value="Admission validation / policy as code" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1406" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r318" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1436" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r319" value="C13" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1436" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r320" value="Image signing, provenance and verification" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1437" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r321" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1467" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r322" value="C14" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1467" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r323" value="Pinned digests / scanning / supply-chain checks" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1468" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r324" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1498" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r325" value="C15" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1498" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r326" value="Service-account token minimization and rotation" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1499" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r327" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1529" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r328" value="C16" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1529" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r329" value="Restrict privileged, hostPath, hostPID, hostNetwork" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1530" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r330" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1560" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r331" value="C17" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1560" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r332" value="Seccomp / AppArmor / SELinux / non-root" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1561" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r333" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1591" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r334" value="C18" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1591" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r335" value="Control cloud IAM / metadata access" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1592" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r336" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1622" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r337" value="C19" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1622" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r338" value="Continuous patching of components and nodes" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1623" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r339" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1653" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r340" value="C20" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1653" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r341" value="Quotas, rate limiting and DoS protection" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1654" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r342" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1684" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r343" value="C21" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1684" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r344" value="CI/CD credential and runner hardening" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1685" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r345" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1715" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r346" value="C22" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1715" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r347" value="Network / service-mesh workload authentication" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1716" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r348" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1746" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r349" value="C23" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DFF2DE;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1746" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r350" value="Limit secrets in env, logs and traces" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1747" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r351" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.65;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1777" width="516" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r352" value="C24" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F1FAF0;strokeColor=#8FC69D;strokeWidth=0.45;fontColor=#387A4C;fontSize=12.200000000000001;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="565" y="1777" width="61" height="31" as="geometry" />
        </mxCell>
        <mxCell id="overview_r353" value="Backup, recovery, key rotation and IR readiness" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#21334B;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="630" y="1778" width="446" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r354" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCFEFF;strokeColor=#E4ECF4;strokeWidth=1;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1103" y="109" width="1703" height="1322" as="geometry" />
        </mxCell>
        <mxCell id="overview_r355" value="KUBERNETES CLUSTER / REFERENCE DATA FLOW" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E5EFFA;strokeColor=#B5CBE0;strokeWidth=1.2;fontColor=#1F4C77;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1126" y="124" width="1650" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r356" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#DE4B55;strokeWidth=2.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;dashed=1;dashPattern=8 5;" vertex="1" parent="1">
          <mxGeometry x="1309" y="180" width="1283" height="1194" as="geometry" />
        </mxCell>
        <mxCell id="overview_r357" value="ClusterNetwork (CN)  |  Cluster trust boundary" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#FFFFFF;strokeWidth=0;fontColor=#DE4B55;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1323" y="166" width="478.2" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r358" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#DE4B55;strokeWidth=2.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;dashed=1;dashPattern=8 5;" vertex="1" parent="1">
          <mxGeometry x="1385" y="237" width="1167" height="451" as="geometry" />
        </mxCell>
        <mxCell id="overview_r359" value="ClusterControlPlane (CP)  |  high-trust services" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#FFFFFF;strokeWidth=0;fontColor=#DE4B55;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1399" y="223" width="497.6" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r360" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#DE4B55;strokeWidth=2.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;dashed=1;dashPattern=8 5;" vertex="1" parent="1">
          <mxGeometry x="1357" y="713" width="1206" height="500" as="geometry" />
        </mxCell>
        <mxCell id="overview_r361" value="ClusterDataPlane (DP)  |  worker nodes" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#FFFFFF;strokeWidth=0;fontColor=#DE4B55;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1371" y="699" width="400.6" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r362" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#DE4B55;strokeWidth=2.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;dashed=1;dashPattern=8 5;" vertex="1" parent="1">
          <mxGeometry x="1480" y="268" width="1049" height="130" as="geometry" />
        </mxCell>
        <mxCell id="overview_r363" value="ClusterControlPlaneData (CPD)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#FFFFFF;strokeWidth=0;fontColor=#DE4B55;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1494" y="254" width="313.3" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r364" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EAF0FD;strokeColor=#9FADE6;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2060" y="290" width="258" height="88" as="geometry" />
        </mxCell>
        <mxCell id="overview_r365" value="etcd" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#40498B;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2070" y="301" width="238" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r366" value="2379/2380 • mTLS&lt;br&gt;TO12  TO13  C05 C06" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2067" y="333" width="244" height="38" as="geometry" />
        </mxCell>
        <mxCell id="overview_r367" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DCEAFE;strokeColor=#7DB2E7;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1700" y="427" width="310" height="122" as="geometry" />
        </mxCell>
        <mxCell id="overview_r368" value="kube-apiserver" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#1C558F;fontSize=20;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1710" y="438" width="290" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r369" value="6443/TCP • TLS&lt;br&gt;AuthN • RBAC • Admission • Audit" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1707" y="470" width="296" height="72" as="geometry" />
        </mxCell>
        <mxCell id="overview_r370" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E9F3FE;strokeColor=#91AFD7;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1397" y="581" width="260" height="83" as="geometry" />
        </mxCell>
        <mxCell id="overview_r371" value="kube-controller-manager" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#1E537D;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1407" y="592" width="240" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r372" value="10257/TCP • TLS" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1404" y="624" width="246" height="33" as="geometry" />
        </mxCell>
        <mxCell id="overview_r373" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E9F3FE;strokeColor=#91AFD7;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1673" y="581" width="250" height="83" as="geometry" />
        </mxCell>
        <mxCell id="overview_r374" value="kube-scheduler" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#1E537D;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1683" y="592" width="230" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r375" value="10259/TCP • TLS" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1680" y="624" width="236" height="33" as="geometry" />
        </mxCell>
        <mxCell id="overview_r376" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E8F1FD;strokeColor=#91AFD7;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1939" y="581" width="264" height="83" as="geometry" />
        </mxCell>
        <mxCell id="overview_r377" value="cloud-controller-manager" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#1E537D;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1949" y="592" width="244" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r378" value="Cloud-provider integration" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1946" y="624" width="250" height="33" as="geometry" />
        </mxCell>
        <mxCell id="overview_r379" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E9F3FE;strokeColor=#91AFD7;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2222" y="427" width="277" height="114" as="geometry" />
        </mxCell>
        <mxCell id="overview_r380" value="Admission webhooks" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#1E537D;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2232" y="438" width="257" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r381" value="TLS • policy validation&lt;br&gt;TO15 • C12" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2229" y="470" width="263" height="64" as="geometry" />
        </mxCell>
        <mxCell id="overview_r382" value="TO01 CA" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF4D8;strokeColor=#D9B96E;strokeWidth=1;fontColor=#8C6320;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1489" y="286" width="90" height="24" as="geometry" />
        </mxCell>
        <mxCell id="overview_r383" value="TO02 TLS" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF4D8;strokeColor=#D9B96E;strokeWidth=1;fontColor=#8C6320;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1489" y="315" width="90" height="24" as="geometry" />
        </mxCell>
        <mxCell id="overview_r384" value="C01 C02 C03" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E3F5E4;strokeColor=#9EC9A0;strokeWidth=1;fontColor=#397448;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1489" y="344" width="132" height="24" as="geometry" />
        </mxCell>
        <mxCell id="overview_r385" value="TO13 STATE" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF4D8;strokeColor=#D9B96E;strokeWidth=1;fontColor=#8C6320;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2325" y="301" width="120" height="24" as="geometry" />
        </mxCell>
        <mxCell id="overview_r386" value="C05 C06" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E3F5E4;strokeColor=#9EC9A0;strokeWidth=1;fontColor=#397448;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2325" y="330" width="105" height="24" as="geometry" />
        </mxCell>
        <mxCell id="overview_r387" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#2D8EAC;strokeWidth=2.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;dashed=1;dashPattern=8 5;" vertex="1" parent="1">
          <mxGeometry x="1376" y="764" width="548" height="405" as="geometry" />
        </mxCell>
        <mxCell id="overview_r388" value="Worker Node A • workload namespace" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#FFFFFF;strokeWidth=0;fontColor=#2D8EAC;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1390" y="750" width="361.8" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r389" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#2D8EAC;strokeWidth=2.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;dashed=1;dashPattern=8 5;" vertex="1" parent="1">
          <mxGeometry x="1975" y="764" width="546" height="405" as="geometry" />
        </mxCell>
        <mxCell id="overview_r390" value="Worker Node B • isolated namespace" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#FFFFFF;strokeWidth=0;fontColor=#2D8EAC;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1989" y="750" width="361.8" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r391" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E5F0FF;strokeColor=#9DAFE3;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1396" y="800" width="234" height="94" as="geometry" />
        </mxCell>
        <mxCell id="overview_r392" value="kubelet" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#345C96;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1406" y="811" width="214" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r393" value="10250/TCP • TLS&lt;br&gt;TO19 C10 C19" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1403" y="843" width="220" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r394" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E5F0FF;strokeColor=#9DAFE3;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1653" y="800" width="245" height="94" as="geometry" />
        </mxCell>
        <mxCell id="overview_r395" value="kube-proxy" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#345C96;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1663" y="811" width="225" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r396" value="C09 C19 • node networking" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1660" y="843" width="231" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r397" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E5F0FF;strokeColor=#9DAFE3;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1995" y="800" width="235" height="94" as="geometry" />
        </mxCell>
        <mxCell id="overview_r398" value="kubelet" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#345C96;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2005" y="811" width="215" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r399" value="10250/TCP • TLS&lt;br&gt;TO19 C10 C19" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2002" y="843" width="221" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r400" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E5F0FF;strokeColor=#9DAFE3;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2252" y="800" width="242" height="94" as="geometry" />
        </mxCell>
        <mxCell id="overview_r401" value="kube-proxy" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#345C96;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2262" y="811" width="222" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r402" value="C09 C19 • node networking" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2259" y="843" width="228" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r403" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EDF6FC;strokeColor=#9FBACB;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1396" y="915" width="228" height="91" as="geometry" />
        </mxCell>
        <mxCell id="overview_r404" value="container runtime" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#355B74;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1406" y="926" width="208" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r405" value="CRI socket  •  TO18&lt;br&gt;C11 C16 C17" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1403" y="958" width="214" height="41" as="geometry" />
        </mxCell>
        <mxCell id="overview_r406" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E4F7EE;strokeColor=#8BBEAA;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1652" y="915" width="245" height="91" as="geometry" />
        </mxCell>
        <mxCell id="overview_r407" value="Pod A: public app" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#246F53;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1662" y="926" width="225" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r408" value="ServiceAccount JWT • TO17&lt;br&gt;C08 C09 C15" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1659" y="958" width="231" height="41" as="geometry" />
        </mxCell>
        <mxCell id="overview_r409" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EDF6FC;strokeColor=#9FBACB;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1995" y="915" width="230" height="91" as="geometry" />
        </mxCell>
        <mxCell id="overview_r410" value="container runtime" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#355B74;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2005" y="926" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r411" value="CRI socket  •  TO18&lt;br&gt;C11 C16 C17" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2002" y="958" width="216" height="41" as="geometry" />
        </mxCell>
        <mxCell id="overview_r412" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E4F7EE;strokeColor=#8BBEAA;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2253" y="915" width="241" height="91" as="geometry" />
        </mxCell>
        <mxCell id="overview_r413" value="Pod B: internal API" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#246F53;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2263" y="926" width="221" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r414" value="NetworkPolicy • C09&lt;br&gt;Workload auth • C22" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2260" y="958" width="227" height="41" as="geometry" />
        </mxCell>
        <mxCell id="overview_r415" value="Host OS / Linux Kernel   |   container escape boundary&lt;br&gt;TO21 · TO28 · C16 · C17 · C19" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F3F6FB;strokeColor=#A7B8CC;strokeWidth=1.3;fontColor=#435D7D;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1395" y="1033" width="500" height="103" as="geometry" />
        </mxCell>
        <mxCell id="overview_r416" value="Host OS / Linux Kernel   |   node isolation&lt;br&gt;TO21 · TO33 · C18 · C19" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F3F6FB;strokeColor=#A7B8CC;strokeWidth=1.3;fontColor=#435D7D;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1995" y="1033" width="500" height="103" as="geometry" />
        </mxCell>
        <mxCell id="overview_r417" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#DE4B55;strokeWidth=2.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;dashed=1;dashPattern=8 5;" vertex="1" parent="1">
          <mxGeometry x="1360" y="1259" width="1191" height="95" as="geometry" />
        </mxCell>
        <mxCell id="overview_r418" value="Ingress and workload entry points" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#FFFFFF;strokeWidth=0;fontColor=#DE4B55;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1374" y="1245" width="352.1" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r419" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EAF5EB;strokeColor=#9EC8A1;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1376" y="1280" width="264" height="63" as="geometry" />
        </mxCell>
        <mxCell id="overview_r420" value="Ingress / LoadBalancer" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#39764C;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1386" y="1291" width="244" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r421" value="TO24 · C04" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1383" y="1323" width="250" height="13" as="geometry" />
        </mxCell>
        <mxCell id="overview_r422" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EAF5EB;strokeColor=#9EC8A1;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1672" y="1280" width="240" height="63" as="geometry" />
        </mxCell>
        <mxCell id="overview_r423" value="ClusterIP / Service" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#39764C;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1682" y="1291" width="220" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r424" value="TO29 · C09" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1679" y="1323" width="226" height="13" as="geometry" />
        </mxCell>
        <mxCell id="overview_r425" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EAF5EB;strokeColor=#9EC8A1;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1944" y="1280" width="253" height="63" as="geometry" />
        </mxCell>
        <mxCell id="overview_r426" value="Application endpoint" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#39764C;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1954" y="1291" width="233" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r427" value="TO25 · C17" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1951" y="1323" width="239" height="13" as="geometry" />
        </mxCell>
        <mxCell id="overview_r428" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EAF5EB;strokeColor=#9EC8A1;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2229" y="1280" width="308" height="63" as="geometry" />
        </mxCell>
        <mxCell id="overview_r429" value="Service mesh / policy" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#39764C;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2239" y="1291" width="288" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r430" value="mTLS • TO25 • C22" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2236" y="1323" width="294" height="13" as="geometry" />
        </mxCell>
        <mxCell id="overview_r431" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE9EB;strokeColor=#E9A0A7;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1126" y="211" width="159" height="89" as="geometry" />
        </mxCell>
        <mxCell id="overview_r432" value="TA01 External" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#9A3544;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1136" y="222" width="139" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r433" value="Attacker / internet" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1133" y="254" width="145" height="39" as="geometry" />
        </mxCell>
        <mxCell id="overview_r434" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE9EB;strokeColor=#E9A0A7;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1126" y="356" width="159" height="89" as="geometry" />
        </mxCell>
        <mxCell id="overview_r435" value="TA02 Insider" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#9A3544;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1136" y="367" width="139" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r436" value="User / admin access" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1133" y="399" width="145" height="39" as="geometry" />
        </mxCell>
        <mxCell id="overview_r437" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE9EB;strokeColor=#E9A0A7;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1126" y="502" width="159" height="89" as="geometry" />
        </mxCell>
        <mxCell id="overview_r438" value="TA04 Supply chain" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#9A3544;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1136" y="513" width="139" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r439" value="CI / artifacts" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1133" y="545" width="145" height="39" as="geometry" />
        </mxCell>
        <mxCell id="overview_r440" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE9EB;strokeColor=#E9A0A7;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1126" y="655" width="159" height="89" as="geometry" />
        </mxCell>
        <mxCell id="overview_r441" value="TA06 CI identity" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#9A3544;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1136" y="666" width="139" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r442" value="Stolen kubeconfig" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1133" y="698" width="145" height="39" as="geometry" />
        </mxCell>
        <mxCell id="overview_r443" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EEF5FE;strokeColor=#94B5DC;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1126" y="874" width="159" height="90" as="geometry" />
        </mxCell>
        <mxCell id="overview_r444" value="Public registry" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#385C83;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1136" y="885" width="139" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r445" value="TO14 · image digest" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1133" y="917" width="145" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r446" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EEF5FE;strokeColor=#94B5DC;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1126" y="1029" width="159" height="91" as="geometry" />
        </mxCell>
        <mxCell id="overview_r447" value="Cloud metadata" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#385C83;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1136" y="1040" width="139" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r448" value="IAM / TO33 · C18" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1133" y="1072" width="145" height="41" as="geometry" />
        </mxCell>
        <mxCell id="overview_r449" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EEF5FE;strokeColor=#94B5DC;strokeWidth=1.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1126" y="1200" width="159" height="88" as="geometry" />
        </mxCell>
        <mxCell id="overview_r450" value="Internet client" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#385C83;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1136" y="1211" width="139" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r451" value="Untrusted request" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#426483;fontSize=12.5;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1133" y="1243" width="145" height="38" as="geometry" />
        </mxCell>
        <mxCell id="overview_r452" value="RISK / VECTOR TAGS" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#AF3C4A;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2608" y="218" width="175" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r453" value="AV10 etcd" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="255" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r454" value="AV07 API RCE" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="290" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r455" value="AV09 RBAC" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="325" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r456" value="AV13 OIDC" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="360" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r457" value="AV25 unpatched" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="455" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r458" value="AV24 DoS" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="492" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r459" value="AV08 AuthN" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="529" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r460" value="AV20 webhook" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="574" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r461" value="AV19 kubelet" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="803" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r462" value="AV14 host RCE" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="848" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r463" value="AV23 CNI" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="893" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r464" value="AV18 lateral" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="938" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r465" value="AV26 Secrets" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="1018" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_r466" value="AV21 IAM" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11.5;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2607" y="1085" width="168" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_e467" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.3;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1700" y="487" as="sourcePoint" />
            <mxPoint x="1527" y="581" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1650" y="487" />
              <mxPoint x="1650" y="560" />
              <mxPoint x="1527" y="560" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e468" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.3;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1830" y="549" as="sourcePoint" />
            <mxPoint x="1830" y="581" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e469" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.3;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1990" y="549" as="sourcePoint" />
            <mxPoint x="2071" y="581" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2071" y="549" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e470" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.4;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2010" y="456" as="sourcePoint" />
            <mxPoint x="2189" y="378" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2090" y="456" />
              <mxPoint x="2090" y="398" />
              <mxPoint x="2189" y="398" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r471" value="2379 mTLS" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#C5D8E8;strokeWidth=0.6;fontColor=#4B627D;fontSize=11;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2065" y="383" width="75" height="23" as="geometry" />
        </mxCell>
        <mxCell id="overview_e472" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.2;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2010" y="487" as="sourcePoint" />
            <mxPoint x="2222" y="487" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e473" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.4;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1740" y="549" as="sourcePoint" />
            <mxPoint x="1515" y="800" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1740" y="735" />
              <mxPoint x="1515" y="735" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r474" value="10250 TLS" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#C5D8E8;strokeWidth=0.6;fontColor=#4B627D;fontSize=11;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1490" y="720" width="75" height="23" as="geometry" />
        </mxCell>
        <mxCell id="overview_e475" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.4;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1920" y="549" as="sourcePoint" />
            <mxPoint x="2105" y="800" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1920" y="747" />
              <mxPoint x="2105" y="747" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e476" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.3;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1514" y="894" as="sourcePoint" />
            <mxPoint x="1514" y="915" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e477" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.3;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2112" y="894" as="sourcePoint" />
            <mxPoint x="2112" y="915" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e478" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.0;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1630" y="852" as="sourcePoint" />
            <mxPoint x="1653" y="852" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e479" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.0;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2230" y="852" as="sourcePoint" />
            <mxPoint x="2252" y="852" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e480" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=1.8;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1510" y="1006" as="sourcePoint" />
            <mxPoint x="1510" y="1033" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e481" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=1.8;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2112" y="1006" as="sourcePoint" />
            <mxPoint x="2112" y="1033" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e482" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.3;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1640" y="1312" as="sourcePoint" />
            <mxPoint x="1672" y="1312" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e483" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.3;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1912" y="1312" as="sourcePoint" />
            <mxPoint x="1944" y="1312" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e484" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.3;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2197" y="1312" as="sourcePoint" />
            <mxPoint x="2229" y="1312" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e485" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.2;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2070" y="1280" as="sourcePoint" />
            <mxPoint x="1775" y="1006" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2070" y="1226" />
              <mxPoint x="1775" y="1226" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r486" value="443 / HTTP" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#C5D8E8;strokeWidth=0.6;fontColor=#4B627D;fontSize=11;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1750" y="1211" width="75" height="23" as="geometry" />
        </mxCell>
        <mxCell id="overview_e487" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#2C77C5;strokeWidth=2.2;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2380" y="1280" as="sourcePoint" />
            <mxPoint x="2380" y="1006" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2380" y="1196" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e488" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=3.2;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1285" y="255" as="sourcePoint" />
            <mxPoint x="1376" y="1309" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1323" y="255" />
              <mxPoint x="1323" y="1309" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r489" value="AV01" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1307" y="1177" width="62" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_e490" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=3.0;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1285" y="399" as="sourcePoint" />
            <mxPoint x="1700" y="455" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1347" y="399" />
              <mxPoint x="1347" y="455" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r491" value="AV02" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1346" y="417" width="62" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_e492" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=3.0;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1285" y="544" as="sourcePoint" />
            <mxPoint x="1396" y="948" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1321" y="544" />
              <mxPoint x="1321" y="911" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r493" value="AV28" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1319" y="842" width="62" height="25" as="geometry" />
        </mxCell>
        <mxCell id="overview_e494" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=2.5;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1285" y="696" as="sourcePoint" />
            <mxPoint x="1700" y="470" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1341" y="696" />
              <mxPoint x="1341" y="470" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r495" value="AV16" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1344" y="669" width="60" height="23" as="geometry" />
        </mxCell>
        <mxCell id="overview_e496" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=2.9;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1285" y="921" as="sourcePoint" />
            <mxPoint x="1396" y="975" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1328" y="921" />
              <mxPoint x="1328" y="975" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r497" value="AV04" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1324" y="953" width="58" height="23" as="geometry" />
        </mxCell>
        <mxCell id="overview_e498" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=2.4;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1285" y="1075" as="sourcePoint" />
            <mxPoint x="1395" y="1101" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1304" y="1075" />
              <mxPoint x="1304" y="1101" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e499" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=3.2;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1775" y="915" as="sourcePoint" />
            <mxPoint x="1928" y="549" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1775" y="711" />
              <mxPoint x="1928" y="711" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r500" value="AV03 AV09" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1781" y="692" width="120" height="23" as="geometry" />
        </mxCell>
        <mxCell id="overview_e501" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=2.8;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1897" y="953" as="sourcePoint" />
            <mxPoint x="2253" y="972" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1937" y="953" />
              <mxPoint x="1937" y="972" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r502" value="AV18" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1940" y="925" width="60" height="23" as="geometry" />
        </mxCell>
        <mxCell id="overview_e503" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=2.6;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1755" y="1006" as="sourcePoint" />
            <mxPoint x="1755" y="1033" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r504" value="AV15" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FCE5E8;strokeColor=#D7777E;strokeWidth=1;fontColor=#9F3340;fontSize=11;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1763" y="1014" width="62" height="22" as="geometry" />
        </mxCell>
        <mxCell id="overview_e505" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=1.8;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2607" y="267" as="sourcePoint" />
            <mxPoint x="2318" y="336" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2577" y="267" />
              <mxPoint x="2577" y="336" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e506" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=1.8;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2607" y="303" as="sourcePoint" />
            <mxPoint x="2010" y="463" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2540" y="303" />
              <mxPoint x="2540" y="463" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e507" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=1.8;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2607" y="809" as="sourcePoint" />
            <mxPoint x="2494" y="843" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2559" y="809" />
              <mxPoint x="2559" y="843" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_e508" value="" style="edgeStyle=none;html=1;rounded=1;orthogonalLoop=1;strokeColor=#DE4B55;strokeWidth=1.8;endArrow=block;endFill=1;" edge="1" parent="1">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2607" y="949" as="sourcePoint" />
            <mxPoint x="2494" y="952" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2572" y="949" />
              <mxPoint x="2572" y="952" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="overview_r509" value="Red solid: potential attacker entry   •   Red dashed: conditional escalation or lateral movement   •   Blue: legitimate component communication   •   Dashed frames: trust boundaries" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF7F7;strokeColor=#E1BAC0;strokeWidth=0.8;fontColor=#8A4955;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1140" y="1394" width="1610" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r510" value="STRIDE Threat Matrix (Examples)" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FAE7E9;strokeColor=#D6B0B6;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1103" y="1450" width="510" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r511" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1103" y="1494" width="510" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r512" value="Spoofing" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#7B3340;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1114" y="1499" width="184" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r513" value="AV02/03/13" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#33465E;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1300" y="1499" width="155" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r514" value="C01/02/15" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#277655;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1460" y="1499" width="148" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r515" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF7F8;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1103" y="1545" width="510" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r516" value="Tampering" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#7B3340;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1114" y="1550" width="184" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r517" value="AV04/06/28" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#33465E;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1300" y="1550" width="155" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r518" value="C12/13/14" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#277655;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1460" y="1550" width="148" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r519" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1103" y="1596" width="510" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r520" value="Repudiation" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#7B3340;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1114" y="1601" width="184" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r521" value="AV09/16" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#33465E;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1300" y="1601" width="155" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r522" value="C07" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#277655;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1460" y="1601" width="148" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r523" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF7F8;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1103" y="1647" width="510" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r524" value="Info disclosure" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#7B3340;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1114" y="1652" width="184" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r525" value="AV10/26/27" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#33465E;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1300" y="1652" width="155" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r526" value="C05/06/23" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#277655;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1460" y="1652" width="148" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r527" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1103" y="1698" width="510" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r528" value="Denial of service" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#7B3340;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1114" y="1703" width="184" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r529" value="AV24/25" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#33465E;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1300" y="1703" width="155" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r530" value="C19/20" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#277655;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1460" y="1703" width="148" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r531" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF7F8;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1103" y="1749" width="510" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r532" value="Elevation of privilege" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#7B3340;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1114" y="1754" width="184" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r533" value="AV09/14/15" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#33465E;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1300" y="1754" width="155" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r534" value="C03/08/17" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#277655;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1460" y="1754" width="148" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r535" value="Example Attack Paths (Conditional)" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FAE7E9;strokeColor=#D6B0B6;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1634" y="1450" width="653" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r536" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1634" y="1494" width="653" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r537" value="P1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFE5E7;strokeColor=#D8B1B6;strokeWidth=1;fontColor=#99404C;fontSize=12;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1644" y="1505" width="48" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r538" value="Stolen kubeconfig" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#223C59;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1699" y="1498" width="168" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r539" value="TA02 → AV02 → API → RBAC abuse" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#445975;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1869" y="1498" width="300" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r540" value="C02 C03 C07" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#287151;fontSize=11.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2168" y="1498" width="118" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r541" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF7F8;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1634" y="1545" width="653" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r542" value="P2" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFE5E7;strokeColor=#D8B1B6;strokeWidth=1;fontColor=#99404C;fontSize=12;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1644" y="1556" width="48" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r543" value="Public app exploit" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#223C59;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1699" y="1549" width="168" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r544" value="TA01 → AV01 → Pod A → AV03 → API" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#445975;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1869" y="1549" width="300" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r545" value="C08 C15 C03" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#287151;fontSize=11.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2168" y="1549" width="118" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r546" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1634" y="1596" width="653" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r547" value="P3" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFE5E7;strokeColor=#D8B1B6;strokeWidth=1;fontColor=#99404C;fontSize=12;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1644" y="1607" width="48" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r548" value="Image compromise" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#223C59;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1699" y="1600" width="168" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r549" value="TA04 → AV28 → Registry → Pod A" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#445975;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1869" y="1600" width="300" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r550" value="C13 C14 C21" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#287151;fontSize=11.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2168" y="1600" width="118" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r551" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF7F8;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1634" y="1647" width="653" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r552" value="P4" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFE5E7;strokeColor=#D8B1B6;strokeWidth=1;fontColor=#99404C;fontSize=12;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1644" y="1658" width="48" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r553" value="Lateral movement" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#223C59;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1699" y="1651" width="168" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r554" value="Pod A → AV18 → Pod B" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#445975;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1869" y="1651" width="300" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r555" value="C09 C22 C11" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#287151;fontSize=11.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2168" y="1651" width="118" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r556" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1634" y="1698" width="653" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r557" value="P5" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFE5E7;strokeColor=#D8B1B6;strokeWidth=1;fontColor=#99404C;fontSize=12;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1644" y="1709" width="48" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r558" value="Host escape risk" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#223C59;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1699" y="1702" width="168" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r559" value="Pod A → AV15/14 → Node host" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#445975;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1869" y="1702" width="300" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r560" value="C16 C17 C19" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#287151;fontSize=11.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2168" y="1702" width="118" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r561" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF7F8;strokeColor=#E0C6CB;strokeWidth=0.7;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1634" y="1749" width="653" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r562" value="P6" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFE5E7;strokeColor=#D8B1B6;strokeWidth=1;fontColor=#99404C;fontSize=12;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1644" y="1760" width="48" height="26" as="geometry" />
        </mxCell>
        <mxCell id="overview_r563" value="Secrets extraction" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#223C59;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1699" y="1753" width="168" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r564" value="API/etcd access → AV10/26 → data" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#445975;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1869" y="1753" width="300" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r565" value="C05 C06 C23" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#287151;fontSize=11.5;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2168" y="1753" width="118" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r566" value="Hardening / Detection Checklist" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E2F3E2;strokeColor=#A1CBAA;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2308" y="1450" width="499" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r567" value="☑ Enforce RBAC least privilege (C03)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#316F46;fontSize=12.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2317" y="1495.0" width="481" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r568" value="☑ Restrict API and etcd networks (C04/05)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#316F46;fontSize=12.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2317" y="1525.4" width="481" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r569" value="☑ Enable etcd encryption / KMS (C06)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#316F46;fontSize=12.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2317" y="1555.8" width="481" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r570" value="☑ Protect service-account tokens (C15)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#316F46;fontSize=12.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2317" y="1586.2" width="481" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r571" value="☑ Enforce Pod Security Admission (C08)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#316F46;fontSize=12.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2317" y="1616.6" width="481" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r572" value="☑ Default-deny network isolation (C09)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#316F46;fontSize=12.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2317" y="1647.0" width="481" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r573" value="☑ Admission image verification (C13)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#316F46;fontSize=12.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2317" y="1677.4" width="481" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r574" value="☑ Centralize audit and runtime logs (C07/11)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#316F46;fontSize=12.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2317" y="1707.8" width="481" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r575" value="☑ Harden kubelet and worker hosts (C10/17)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#316F46;fontSize=12.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2317" y="1738.2" width="481" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r576" value="☑ Continuously patch and validate (C19)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#316F46;fontSize=12.7;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2317" y="1768.6" width="481" height="29" as="geometry" />
        </mxCell>
        <mxCell id="overview_r577" value="Diagram Legend" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E4F0FF;strokeColor=#94B6DB;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="110" width="351" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r578" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="158" width="351" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r579" value="Red dashed frame" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#203E61;fontSize=12.2;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2834" y="161" width="141" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r580" value="Trust boundary" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C637C;fontSize=12.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2985" y="161" width="184" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r581" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8FBFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="209" width="351" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r582" value="Blue solid line" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#203E61;fontSize=12.2;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2834" y="212" width="141" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r583" value="Legitimate component traffic" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C637C;fontSize=12.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2985" y="212" width="184" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r584" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="260" width="351" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r585" value="Red solid line" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#203E61;fontSize=12.2;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2834" y="263" width="141" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r586" value="Candidate attack entry path" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C637C;fontSize=12.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2985" y="263" width="184" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r587" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8FBFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="311" width="351" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r588" value="Red dashed line" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#203E61;fontSize=12.2;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2834" y="314" width="141" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r589" value="Conditional attacker escalation" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C637C;fontSize=12.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2985" y="314" width="184" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r590" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="362" width="351" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r591" value="Yellow badge TO" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#203E61;fontSize=12.2;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2834" y="365" width="141" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r592" value="Threat object" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C637C;fontSize=12.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2985" y="365" width="184" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r593" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8FBFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="413" width="351" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r594" value="Pink badge AV" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#203E61;fontSize=12.2;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2834" y="416" width="141" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r595" value="Attack vector" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C637C;fontSize=12.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2985" y="416" width="184" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r596" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="464" width="351" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r597" value="Green badge C" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#203E61;fontSize=12.2;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2834" y="467" width="141" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r598" value="Security control" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C637C;fontSize=12.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2985" y="467" width="184" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r599" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F8FBFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="515" width="351" height="50" as="geometry" />
        </mxCell>
        <mxCell id="overview_r600" value="TA / AS / P" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#203E61;fontSize=12.2;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2834" y="518" width="141" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r601" value="Actor / assumption / attack chain" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C637C;fontSize=12.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2985" y="518" width="184" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r602" value="Cluster Components (In Scope)" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E4F0FF;strokeColor=#94B6DB;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="596" width="351" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r603" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="644" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r604" value="kube-apiserver" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="646" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r605" value="6443/TCP" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="646" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r606" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F2F7FD;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="682" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r607" value="etcd" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="684" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r608" value="2379, 2380" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="684" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r609" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="720" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r610" value="kube-scheduler" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="722" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r611" value="10259/TCP" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="722" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r612" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F2F7FD;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="758" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r613" value="controller-manager" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="760" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r614" value="10257/TCP" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="760" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r615" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="796" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r616" value="cloud-controller-manager" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="798" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r617" value="provider-specific" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="798" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r618" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F2F7FD;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="834" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r619" value="kubelet" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="836" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r620" value="10250/TCP" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="836" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r621" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="872" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r622" value="kube-proxy" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="874" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r623" value="10256 / metrics" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="874" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r624" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F2F7FD;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="910" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r625" value="container runtime" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="912" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r626" value="CRI local socket" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="912" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r627" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="948" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r628" value="Ingress / L.B." style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="950" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r629" value="80 / 443 (typical)" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="950" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r630" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F2F7FD;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="986" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r631" value="Services and Pods" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="988" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r632" value="app-dependent" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="988" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r633" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="1024" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r634" value="DNS / CoreDNS" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="1026" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r635" value="53 UDP/TCP" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="1026" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r636" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F2F7FD;strokeColor=#CFDDEB;strokeWidth=0.6;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="1062" width="351" height="37" as="geometry" />
        </mxCell>
        <mxCell id="overview_r637" value="KMS provider" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#253E5A;fontSize=12.4;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2835" y="1064" width="210" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r638" value="plugin / external" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#4C6785;fontSize=11.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3047" y="1064" width="125" height="32" as="geometry" />
        </mxCell>
        <mxCell id="overview_r639" value="Risk Scoring Example" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFE4E4;strokeColor=#E4B4B9;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="1122" width="351" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r640" value="Likelihood ↓" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#475A72;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2840" y="1170" width="120" height="27" as="geometry" />
        </mxCell>
        <mxCell id="overview_r641" value="Low impact" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#44566A;fontSize=10.2;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2941" y="1172" width="77" height="24" as="geometry" />
        </mxCell>
        <mxCell id="overview_r642" value="Medium" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#44566A;fontSize=10.2;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3018" y="1172" width="77" height="24" as="geometry" />
        </mxCell>
        <mxCell id="overview_r643" value="High" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#44566A;fontSize=10.2;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3095" y="1172" width="77" height="24" as="geometry" />
        </mxCell>
        <mxCell id="overview_r644" value="High" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#304459;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2836" y="1215" width="100" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r645" value="M" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0BC;strokeColor=#D6BFC0;strokeWidth=0.7;fontColor=#613E39;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2942" y="1206" width="76" height="60" as="geometry" />
        </mxCell>
        <mxCell id="overview_r646" value="H" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFD4AA;strokeColor=#D6BFC0;strokeWidth=0.7;fontColor=#613E39;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3019" y="1206" width="76" height="60" as="geometry" />
        </mxCell>
        <mxCell id="overview_r647" value="Critical" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F7AEB2;strokeColor=#D6BFC0;strokeWidth=0.7;fontColor=#613E39;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3096" y="1206" width="76" height="60" as="geometry" />
        </mxCell>
        <mxCell id="overview_r648" value="Medium" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#304459;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2836" y="1277" width="100" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r649" value="L" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DDF5DF;strokeColor=#D6BFC0;strokeWidth=0.7;fontColor=#613E39;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2942" y="1268" width="76" height="60" as="geometry" />
        </mxCell>
        <mxCell id="overview_r650" value="M" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0BC;strokeColor=#D6BFC0;strokeWidth=0.7;fontColor=#613E39;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3019" y="1268" width="76" height="60" as="geometry" />
        </mxCell>
        <mxCell id="overview_r651" value="H" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFD4AA;strokeColor=#D6BFC0;strokeWidth=0.7;fontColor=#613E39;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3096" y="1268" width="76" height="60" as="geometry" />
        </mxCell>
        <mxCell id="overview_r652" value="Low" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#304459;fontSize=13;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2836" y="1339" width="100" height="40" as="geometry" />
        </mxCell>
        <mxCell id="overview_r653" value="L" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DDF5DF;strokeColor=#D6BFC0;strokeWidth=0.7;fontColor=#613E39;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2942" y="1330" width="76" height="60" as="geometry" />
        </mxCell>
        <mxCell id="overview_r654" value="L" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#DDF5DF;strokeColor=#D6BFC0;strokeWidth=0.7;fontColor=#613E39;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3019" y="1330" width="76" height="60" as="geometry" />
        </mxCell>
        <mxCell id="overview_r655" value="M" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF0BC;strokeColor=#D6BFC0;strokeWidth=0.7;fontColor=#613E39;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="3096" y="1330" width="76" height="60" as="geometry" />
        </mxCell>
        <mxCell id="overview_r656" value="Risk = impact × likelihood.&lt;br&gt;Qualitative scores are illustrative.&lt;br&gt;Validate exposure, privileges,&lt;br&gt;network paths and exploitability&lt;br&gt;before assigning severity." style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF8EF;strokeColor=#E4D2AD;strokeWidth=1;fontColor=#745B35;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="1416" width="351" height="153" as="geometry" />
        </mxCell>
        <mxCell id="overview_r657" value="Model Usage Notes" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E4F0FF;strokeColor=#94B6DB;strokeWidth=1.3;fontColor=#1D2939;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2825" y="1591" width="351" height="44" as="geometry" />
        </mxCell>
        <mxCell id="overview_r658" value="• Reference architecture, not an environment scan" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#496178;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2836" y="1639" width="331" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r659" value="• Many risk arrows require specific misconfigs" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#496178;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2836" y="1671" width="331" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r660" value="• Control plane may be managed by provider" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#496178;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2836" y="1703" width="331" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r661" value="• Ports vary; validate deployed configuration" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#496178;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2836" y="1735" width="331" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r662" value="• Some nodes shown for clarity, not exhaustively" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#496178;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2836" y="1767" width="331" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r663" value="• All diagram objects are editable in draw.io" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#496178;fontSize=12.3;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="2836" y="1799" width="331" height="30" as="geometry" />
        </mxCell>
        <mxCell id="overview_r664" value="Kubernetes security reference  •  Scope and attack paths are illustrative  •  TA / AV / TO / AS / C identifiers match the editable threat inventory on this page." style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#5B6F86;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="28" y="1902" width="3160" height="32" as="geometry" />
        </mxCell>
        <mxCell id="refnote_master" value="Extended security architecture on pages 03–04 • Authoritative KubeDaily Enterprise Architecture • Not a live cluster assessment" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#70869E;fontSize=12;fontFamily=Arial;align=left;verticalAlign=middle;">
          <mxGeometry x="1075" y="1857" width="1900" height="26" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
  <diagram id="attackpaths" name="02 · Attack chains and mitigation narratives">
    <mxGraphModel dx="1550" dy="980" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="2200" pageHeight="1650" math="0" shadow="0" background="#FFFFFF">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="attackpaths_r1" value="" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EFF5FB;strokeColor=#EFF5FB;strokeWidth=0;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="0" y="0" width="2200" height="100" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r2" value="KUBERNETES ATTACK CHAINS  |  SCENARIOS &amp; SECURITY CONTROLS" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#173C65;fontSize=31;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="34" y="15" width="2070" height="48" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r3" value="Reference attack narratives organized by prerequisite, trust boundary crossing, observable evidence and hardening action." style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#59718B;fontSize=15;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="35" y="66" width="2050" height="23" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r4" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#BDCEDD;strokeWidth=1.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="35" y="128" width="1050" height="464" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r5" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E8F1FC;strokeColor=#AAC6E0;strokeWidth=1.0;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="35" y="128" width="1050" height="65" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r6" value="P1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FBE3E5;strokeColor=#E4A0A6;strokeWidth=1;fontColor=#9C3640;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="49" y="145" width="67" height="31" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r7" value="Compromised kubeconfig / CI identity" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#174771;fontSize=20;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="135" y="140" width="935" height="44" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r8" value="Actor: TA02 / TA06   •   Vectors: AV02 AV16 AV28   •   Controls: C02 C03 C04 C07 C21" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#526B86;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="210" width="1014" height="30" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r9" value="Admin → API server → cluster objects" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EDF6FB;strokeColor=#B8CCDF;strokeWidth=1;fontColor=#24658C;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="255" width="1014" height="58" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r10" value="Prerequisites" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="333" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r11" value="Valid compromised credential with excessive Kubernetes permissions" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="242" y="333" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r12" value="Detection evidence" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="412" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r13" value="Unauthorized RBAC bindings; Secret reads; workload creates; clusterrole modifications" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="242" y="412" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r14" value="Hardening / mitigation" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="491" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r15" value="Enforce short-lived identities, approvals, permission reviews and immutable audit delivery." style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="242" y="491" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r16" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#BDCEDD;strokeWidth=1.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1125" y="128" width="1050" height="464" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r17" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E8F1FC;strokeColor=#AAC6E0;strokeWidth=1.0;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1125" y="128" width="1050" height="65" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r18" value="P2" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FBE3E5;strokeColor=#E4A0A6;strokeWidth=1;fontColor=#9C3640;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1139" y="145" width="67" height="31" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r19" value="Public app RCE → service-account abuse" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#174771;fontSize=20;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1225" y="140" width="935" height="44" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r20" value="Actor: TA01 / TA03   •   Vectors: AV01 AV03 AV09   •   Controls: C03 C08 C09 C11 C15" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#526B86;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="210" width="1014" height="30" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r21" value="Internet → Pod A → API server" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EDF6FB;strokeColor=#B8CCDF;strokeWidth=1;fontColor=#24658C;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="255" width="1014" height="58" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r22" value="Prerequisites" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="333" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r23" value="Exploitable app plus accessible token with useful RBAC privileges" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1332" y="333" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r24" value="Detection evidence" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="412" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r25" value="Pod shell anomalies; TokenReview; suspicious API calls; Secret/Pod reads" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1332" y="412" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r26" value="Hardening / mitigation" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="491" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r27" value="Disable automatic token mounting when unneeded; isolate namespace privileges." style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1332" y="491" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r28" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#BDCEDD;strokeWidth=1.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="35" y="617" width="1050" height="464" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r29" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E8F1FC;strokeColor=#AAC6E0;strokeWidth=1.0;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="35" y="617" width="1050" height="65" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r30" value="P3" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FBE3E5;strokeColor=#E4A0A6;strokeWidth=1;fontColor=#9C3640;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="49" y="634" width="67" height="31" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r31" value="Malicious image / build pipeline compromise" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#174771;fontSize=20;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="135" y="629" width="935" height="44" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r32" value="Actor: TA04 / TA06   •   Vectors: AV04 AV06 AV17 AV28   •   Controls: C11 C12 C13 C14 C21" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#526B86;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="699" width="1014" height="30" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r33" value="CI → Registry → runtime → Pod" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EDF6FB;strokeColor=#B8CCDF;strokeWidth=1;fontColor=#24658C;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="744" width="1014" height="58" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r34" value="Prerequisites" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="822" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r35" value="Attacker can change source, build outputs, dependencies or image pointer" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="242" y="822" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r36" value="Detection evidence" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="901" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r37" value="Unexpected image digests; admission denials; anomalous process or network activity" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="242" y="901" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r38" value="Hardening / mitigation" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="980" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r39" value="Verify provenance/signatures; pin digests; isolate CI runners; continuous scanning." style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="242" y="980" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r40" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#BDCEDD;strokeWidth=1.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1125" y="617" width="1050" height="464" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r41" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E8F1FC;strokeColor=#AAC6E0;strokeWidth=1.0;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1125" y="617" width="1050" height="65" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r42" value="P4" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FBE3E5;strokeColor=#E4A0A6;strokeWidth=1;fontColor=#9C3640;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1139" y="634" width="67" height="31" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r43" value="Pod-to-Pod lateral movement" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#174771;fontSize=20;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1225" y="629" width="935" height="44" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r44" value="Actor: TA03   •   Vectors: AV18 AV22 AV23   •   Controls: C09 C11 C22 C23" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#526B86;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="699" width="1014" height="30" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r45" value="Pod A → cluster Service → Pod B" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EDF6FB;strokeColor=#B8CCDF;strokeWidth=1;fontColor=#24658C;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="744" width="1014" height="58" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r46" value="Prerequisites" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="822" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r47" value="Network path exists; target accepts traffic; exploit or credential reuse possible" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1332" y="822" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r48" value="Detection evidence" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="901" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r49" value="Cross-namespace connections; auth failures; unusual Pod network flows" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1332" y="901" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r50" value="Hardening / mitigation" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="980" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r51" value="Default-deny policies and application identity are both needed for isolation." style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1332" y="980" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r52" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#BDCEDD;strokeWidth=1.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="35" y="1106" width="1050" height="464" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r53" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E8F1FC;strokeColor=#AAC6E0;strokeWidth=1.0;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="35" y="1106" width="1050" height="65" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r54" value="P5" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FBE3E5;strokeColor=#E4A0A6;strokeWidth=1;fontColor=#9C3640;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="49" y="1123" width="67" height="31" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r55" value="Privileged workload / container escape" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#174771;fontSize=20;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="135" y="1118" width="935" height="44" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r56" value="Actor: TA03   •   Vectors: AV12 AV14 AV15 AV19   •   Controls: C08 C10 C11 C16 C17 C19" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#526B86;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="1188" width="1014" height="30" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r57" value="Pod A → runtime / kubelet → host" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EDF6FB;strokeColor=#B8CCDF;strokeWidth=1;fontColor=#24658C;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="1233" width="1014" height="58" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r58" value="Prerequisites" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="1311" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r59" value="Dangerous Pod privileges, exposed runtime socket or a relevant unpatched escape flaw" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="242" y="1311" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r60" value="Detection evidence" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="1390" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r61" value="Privileged Pod admission, host mount use, abnormal processes, kubelet access" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="242" y="1390" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r62" value="Hardening / mitigation" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="53" y="1469" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r63" value="Restrict host namespaces, capabilities and privileged Pods; keep nodes patched." style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="242" y="1469" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r64" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#BDCEDD;strokeWidth=1.5;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1125" y="1106" width="1050" height="464" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r65" value="" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#E8F1FC;strokeColor=#AAC6E0;strokeWidth=1.0;fontColor=#14243A;fontSize=14;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1125" y="1106" width="1050" height="65" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r66" value="P6" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FBE3E5;strokeColor=#E4A0A6;strokeWidth=1;fontColor=#9C3640;fontSize=14;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1139" y="1123" width="67" height="31" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r67" value="Control-plane datastore / Secrets compromise" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#174771;fontSize=20;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1225" y="1118" width="935" height="44" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r68" value="Actor: TA02 / TA03   •   Vectors: AV07 AV09 AV10 AV26   •   Controls: C03 C04 C05 C06 C07 C23" style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#526B86;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="1188" width="1014" height="30" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r69" value="API / etcd → Secret objects → credentials" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EDF6FB;strokeColor=#B8CCDF;strokeWidth=1;fontColor=#24658C;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="1233" width="1014" height="58" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r70" value="Prerequisites" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="1311" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r71" value="Authorized or exploit-derived API/etcd access plus readable secrets" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1332" y="1311" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r72" value="Detection evidence" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="1390" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r73" value="Burst Secret list/get; direct etcd access; suspicious KMS and API audit events" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1332" y="1390" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r74" value="Hardening / mitigation" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#F5F8FB;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#38516D;fontSize=14;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1143" y="1469" width="180" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r75" value="Segment etcd; use mTLS, encryption at rest and tightly scoped secret access." style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D4E0E9;strokeWidth=1;fontColor=#304960;fontSize=13.2;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="1332" y="1469" width="825" height="60" as="geometry" />
        </mxCell>
        <mxCell id="attackpaths_r76" value="Attack chains are hypotheses to validate, not claims of proven exploitability. Apply STRIDE, MITRE ATT&amp;CK for Containers and evidence-driven risk assessment." style="rounded=0;arcSize=10;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;strokeWidth=0;fontColor=#566A80;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=5;" vertex="1" parent="1">
          <mxGeometry x="35" y="1605" width="2120" height="30" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
  <diagram id="securityarchitecture" name="03 · Layered security reference architecture">
    <mxGraphModel dx="1750" dy="1000" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="3500" pageHeight="2220" math="0" shadow="0" background="#FFFFFF">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="securityarchitecture_v1" value="LAYERED SECURITY REFERENCE ARCHITECTURE" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#FFFFFF;fontSize=33;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="36" y="20" width="3428" height="50" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v2" value="KubeDaily-inspired topology: API request chain  /  supply chain  /  node isolation  /  network datapath  /  detection &amp; controls" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#AFC4D8;fontSize=16;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="37" y="74" width="3426" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v3" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#264765;strokeColor=#365D7D;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2915" y="27" width="546" height="48" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v4" value="EDITABLE DRAW.IO  •  REFERENCE ARCHITECTURE" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D7E8FA;fontSize=13;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2923" y="27" width="530" height="48" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v5" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#CFDBE8;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="24" y="133" width="3452" height="74" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v6" value="" vertex="1" parent="1" style="rounded=1;arcSize=5;whiteSpace=wrap;html=1;fillColor=#387CC5;strokeColor=#387CC5;strokeWidth=0.1;fontColor=#14243A;">
          <mxGeometry x="45" y="152" width="17" height="33" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v7" value="IDENTITY &amp; API" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="151" width="590" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v8" value="" vertex="1" parent="1" style="rounded=1;arcSize=5;whiteSpace=wrap;html=1;fillColor=#22806E;strokeColor=#22806E;strokeWidth=0.1;fontColor=#14243A;">
          <mxGeometry x="731" y="152" width="17" height="33" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v9" value="TRUST &amp; WORKLOADS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="759" y="151" width="590" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v10" value="" vertex="1" parent="1" style="rounded=1;arcSize=5;whiteSpace=wrap;html=1;fillColor=#D34E5B;strokeColor=#D34E5B;strokeWidth=0.1;fontColor=#14243A;">
          <mxGeometry x="1417" y="152" width="17" height="33" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v11" value="ATTACK ENTRY" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1445" y="151" width="590" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v12" value="" vertex="1" parent="1" style="rounded=1;arcSize=5;whiteSpace=wrap;html=1;fillColor=#B37B27;strokeColor=#B37B27;strokeWidth=0.1;fontColor=#14243A;">
          <mxGeometry x="2103" y="152" width="17" height="33" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v13" value="ARTIFACT &amp; SUPPLY CHAIN" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2131" y="151" width="590" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v14" value="" vertex="1" parent="1" style="rounded=1;arcSize=5;whiteSpace=wrap;html=1;fillColor=#7D63B0;strokeColor=#7D63B0;strokeWidth=0.1;fontColor=#14243A;">
          <mxGeometry x="2789" y="152" width="17" height="33" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v15" value="DETECTION / RESPONSE" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2817" y="151" width="590" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v16" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#FAFCFE;strokeColor=#B9C9D7;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="24" y="255" width="573" height="1660" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v17" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FAFCFE;strokeColor=#B9C9D7;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="40" y="238" width="330" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v18" value="EXTERNAL SYSTEMS / ATTACK SURFACES" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#55718B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="48" y="238" width="314" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v19" value="Outside cluster trust boundary" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=13;fontFamily=Arial;fontStyle=0;align=right;verticalAlign=middle;spacing=0;">
          <mxGeometry x="102" y="268" width="475" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v20" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#FFFBFB;strokeColor=#E7A6AD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="630" y="255" width="2195" height="1660" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v21" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFFBFB;strokeColor=#E7A6AD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="646" y="238" width="200" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v22" value="KUBERNETES CLUSTER" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="654" y="238" width="184" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v23" value="Cluster security boundary" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=13;fontFamily=Arial;fontStyle=0;align=right;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2330" y="268" width="475" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v24" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="666" y="337" width="2120" height="617" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v25" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="682" y="320" width="294" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v26" value="CONTROL PLANE / API TRUST ZONE" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="690" y="320" width="278" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v27" value="Protect cluster administrative operations" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=13;fontFamily=Arial;fontStyle=0;align=right;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2291" y="350" width="475" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v28" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="666" y="982" width="2120" height="872" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v29" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="682" y="965" width="200" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v30" value="WORKER / DATA PLANE" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="690" y="965" width="184" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v31" value="Namespaces are organizational, not strong isolation" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=13;fontFamily=Arial;fontStyle=0;align=right;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2291" y="995" width="475" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v32" value="" vertex="1" parent="1" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#E6EEF7;strokeColor=#C6D5E5;strokeWidth=1;fontColor=#14243A;">
          <mxGeometry x="44" y="290" width="531" height="43" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v33" value="01  IDENTITY + ADMIN ACCESS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="58" y="290" width="503" height="43" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v34" label="" tags="Access.Operator Access.Cli" help="Administrator identity; restrict permissions and protect kubeconfig" slug="Operator">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F0F5FA;strokeColor=#B7C7D9;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="58" y="359" width="245" height="106" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v35" value="Platform operator" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="366" width="215" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v36" value="kubectl  •  short-lived cert / OIDC" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="67" y="403" width="227" height="56" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v37" label="" tags="Api.Authn Api.Authn.Identity" help="OIDC issuer validates identity, Kubernetes API checks presented token" slug="IdentityProvider">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="319" y="359" width="243" height="106" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v38" value="Identity provider (IdP)" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="334" y="366" width="213" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v39" value="OIDC / signed JWT / MFA" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="328" y="403" width="225" height="56" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v40" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="58" y="488" width="245" height="102" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v41" value="GitOps / CI identity" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="495" width="215" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v42" value="Service user  •  scoped token" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="67" y="532" width="227" height="52" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v43" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="319" y="488" width="243" height="102" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v44" value="External adversary" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="334" y="495" width="213" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v45" value="TA01 / TA06 · stolen token" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="328" y="532" width="225" height="52" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v46" value="" vertex="1" parent="1" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#E6EEF7;strokeColor=#C6D5E5;strokeWidth=1;fontColor=#14243A;">
          <mxGeometry x="44" y="645" width="531" height="43" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v47" value="02  SOFTWARE SUPPLY CHAIN" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=17;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="58" y="645" width="503" height="43" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v48" label="" tags="SupplyChain SupplyChain.Git" slug="SourceControl" help="Protected branches, reviews, secret scanning and pinned dependencies.">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="56" y="716" width="234" height="98" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v49" value="Source repository" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="71" y="723" width="204" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v50" value="Branch approvals / signed commits" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="65" y="760" width="216" height="48" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v51" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="317" y="716" width="243" height="98" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v52" value="CI image builder" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="332" y="723" width="213" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v53" value="Isolated build + dependency lockfile" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="326" y="760" width="225" height="48" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v54" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="56" y="852" width="234" height="98" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v55" value="Provenance + SBOM" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="71" y="859" width="204" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v56" value="SLSA-style attestations / scan" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="65" y="896" width="216" height="48" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v57" label="" tags="SupplyChain SupplyChain.Registry" slug="Registry" help="Image must be pinned by digest; verify signatures at admission.">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="317" y="852" width="243" height="98" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v58" value="Container registry" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="332" y="859" width="213" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v59" value="Immutable digest / signed image" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="326" y="896" width="225" height="48" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v60" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="290" y="762" as="sourcePoint" />
            <mxPoint x="317" y="762" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v61" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="438" y="814" as="sourcePoint" />
            <mxPoint x="172" y="852" as="targetPoint" />
            <Array as="points">
              <mxPoint x="438" y="836" />
              <mxPoint x="172" y="836" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v62" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="290" y="900" as="sourcePoint" />
            <mxPoint x="317" y="900" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v63" value="" vertex="1" parent="1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="58" y="983" width="500" height="139" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v64" value="Threats from this zone" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="71" y="993" width="474" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v65" value="•  AV04: malicious image / package" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="1026" width="470" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v66" value="•  AV28: compromised CI / GitOps" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="1051" width="470" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v67" value="•  AV17: forged artifact metadata" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="1076" width="470" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v68" value="" vertex="1" parent="1" style="rounded=1;arcSize=8;whiteSpace=wrap;html=1;fillColor=#E6EEF7;strokeColor=#C6D5E5;strokeWidth=1;fontColor=#14243A;">
          <mxGeometry x="44" y="1155" width="531" height="43" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v69" value="03  CLIENT &amp; NETWORK ENTRY" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="58" y="1155" width="503" height="43" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v70" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="58" y="1228" width="234" height="98" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v71" value="Internet client" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="1235" width="204" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v72" value="Untrusted request  •  TA01" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="67" y="1272" width="216" height="48" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v73" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F0F5FA;strokeColor=#B7C7D9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="317" y="1228" width="243" height="98" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v74" value="DNS / External LB" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="332" y="1235" width="213" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v75" value="TLS 443 / TCP load-balancing" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="326" y="1272" width="225" height="48" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v76" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="292" y="1278" as="sourcePoint" />
            <mxPoint x="317" y="1278" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v77" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F2EEFA;strokeColor=#B3A3D1;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="58" y="1370" width="234" height="96" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v78" value="Cloud IAM / KMS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#7D63B0;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="1377" width="204" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v79" value="Storage keys  •  workload identities" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="67" y="1414" width="216" height="46" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v80" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F2EEFA;strokeColor=#B3A3D1;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="317" y="1370" width="243" height="96" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v81" value="Secrets manager" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#7D63B0;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="332" y="1377" width="213" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v82" value="External secrets / CSI provider" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="326" y="1414" width="225" height="46" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v83" value="" vertex="1" parent="1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="58" y="1507" width="500" height="137" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v84" value="Key trust boundary rules" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="71" y="1517" width="474" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v85" value="•  TLS and client/server identity on control traffic" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="1550" width="470" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v86" value="•  Minimize credentials and secret projection" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="1575" width="470" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v87" value="•  Cloud permissions need separate scoping" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="1600" width="470" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v88" value="" vertex="1" parent="1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="58" y="1671" width="500" height="142" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v89" value="External attack vectors" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="71" y="1681" width="474" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v90" value="•  AV01: public workload exploit" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="1714" width="470" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v91" value="•  AV02: leaked kubeconfig / token" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="1739" width="470" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v92" value="•  AV22: DNS / service discovery poisoning" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="73" y="1764" width="470" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v93" value="" vertex="1" parent="1" style="rounded=1;arcSize=13;whiteSpace=wrap;html=1;fillColor=#F7FBFF;strokeColor=#9BBBDD;strokeWidth=2;fontColor=#14243A;">
          <mxGeometry x="696" y="381" width="1503" height="300" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v94" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="726" y="394" width="580" height="48" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v95" value="kube-apiserver  •  HTTPS TCP/6443" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=21;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="734" y="394" width="564" height="48" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v96" value="REQUEST HANDLING  •  SIMPLIFIED ORDER" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=15;fontFamily=Arial;fontStyle=1;align=right;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1370" y="406" width="790" height="29" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v97" label="" tags="Api" help="Entry / TLS — API HTTPS endpoint" slug="ApiStep1">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="725" y="469" width="262" height="116" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v98" value="Entry / TLS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="740" y="476" width="232" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v99" value="API HTTPS endpoint" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="734" y="513" width="244" height="66" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v100" label="" tags="Api Api.Authn" help="AuthN — OIDC / cert / token" slug="ApiStep2">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1014" y="469" width="262" height="116" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v101" value="AuthN" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1029" y="476" width="232" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v102" value="OIDC / cert / token" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1023" y="513" width="244" height="66" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v103" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="988" y="527" as="sourcePoint" />
            <mxPoint x="1014" y="527" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <object id="securityarchitecture_v104" label="" tags="Api Api.Authz Api.Rbac" help="AuthZ — RBAC / webhook" slug="ApiStep3">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1303" y="469" width="262" height="116" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v105" value="AuthZ" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1318" y="476" width="232" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v106" value="RBAC / webhook" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1312" y="513" width="244" height="66" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v107" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1277" y="527" as="sourcePoint" />
            <mxPoint x="1303" y="527" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <object id="securityarchitecture_v108" label="" tags="Api Api.Admission" help="Admission (writes) — PSA + policies" slug="ApiStep4">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1592" y="469" width="262" height="116" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v109" value="Admission (writes)" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1607" y="476" width="232" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v110" value="PSA + policies" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1601" y="513" width="244" height="66" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v111" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1566" y="527" as="sourcePoint" />
            <mxPoint x="1592" y="527" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <object id="securityarchitecture_v112" label="" tags="Api" help="Object storage — etcd persistence" slug="ApiStep5">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1881" y="469" width="262" height="116" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v113" value="Object storage" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1896" y="476" width="232" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v114" value="etcd persistence" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1890" y="513" width="244" height="66" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v115" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1855" y="527" as="sourcePoint" />
            <mxPoint x="1881" y="527" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v116" value="" vertex="1" parent="1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="732" y="594" width="1403" height="74" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v117" value="Enforcement points" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="745" y="604" width="1377" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v118" value="API Priority &amp; Fairness / rate protections  •  Authentication, authorization and admission  •  Audit record for eligible API requests" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="747" y="635" width="1373" height="30" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v119" label="" tags="ControlPlane.Etcd" help="Kubernetes API persists cluster state in etcd; encryption at rest is not automatic for all installations." slug="Etcd">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F2EEFA;strokeColor=#B3A3D1;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="2230" y="390" width="529" height="167" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v120" value="etcd datastore" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#7D63B0;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2245" y="397" width="499" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v121" value="TLS/2379 • peer TLS/2380&#10;Secrets need encryption-at-rest configuration" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2239" y="434" width="511" height="117" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v122" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2230" y="585" width="529" height="95" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v123" value="API audit stream" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2245" y="592" width="499" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v124" value="Request / actor / verb / object" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2239" y="629" width="511" height="45" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v125" label="" tags="ControlPlane Api.Controllers" help="kube-controller-manager interacts with the Kubernetes API with distinct identity and RBAC." slug="Controller0">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="705" y="727" width="390" height="144" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v126" value="kube-controller-manager" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="720" y="734" width="360" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v127" value="Control loops · secure metrics 10257" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="714" y="771" width="372" height="94" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v128" label="" tags="ControlPlane Api.Controllers" help="kube-scheduler interacts with the Kubernetes API with distinct identity and RBAC." slug="Controller1">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1117" y="727" width="390" height="144" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v129" value="kube-scheduler" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1132" y="734" width="360" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v130" value="Scheduling · secure metrics 10259" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1126" y="771" width="372" height="94" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v131" label="" tags="ControlPlane Api.Controllers" help="cloud-controller-manager interacts with the Kubernetes API with distinct identity and RBAC." slug="Controller2">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1529" y="727" width="390" height="144" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v132" value="cloud-controller-manager" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1544" y="734" width="360" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v133" value="Provider-specific control loop" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1538" y="771" width="372" height="94" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v134" label="" tags="ControlPlane Api.Controllers" help="Custom operator / CRDs interacts with the Kubernetes API with distinct identity and RBAC." slug="Controller3">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1941" y="727" width="390" height="144" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v135" value="Custom operator / CRDs" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1956" y="734" width="360" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v136" value="Crossplane / resource reconciliation" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1950" y="771" width="372" height="94" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v137" label="" tags="ControlPlane Api.Controllers" help="cert-manager interacts with the Kubernetes API with distinct identity and RBAC." slug="Controller4">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="2353" y="727" width="390" height="144" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v138" value="cert-manager" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2368" y="734" width="360" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v139" value="Certificate issuance and renewals" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2362" y="771" width="372" height="94" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v140" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="303" y="408" as="sourcePoint" />
            <mxPoint x="725" y="506" as="targetPoint" />
            <Array as="points">
              <mxPoint x="630" y="408" />
              <mxPoint x="630" y="506" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v141" value="" vertex="1" parent="1" style="rounded=1;arcSize=7;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D5DEE7;strokeWidth=1;fontColor=#14243A;">
          <mxGeometry x="470" y="447" width="139.5" height="28" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v142" value="kubectl / HTTPS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=12;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="478" y="447" width="123.5" height="28" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v143" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="441" y="465" as="sourcePoint" />
            <mxPoint x="1014" y="475" as="targetPoint" />
            <Array as="points">
              <mxPoint x="441" y="480" />
              <mxPoint x="630" y="480" />
              <mxPoint x="630" y="475" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v144" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="303" y="540" as="sourcePoint" />
            <mxPoint x="725" y="561" as="targetPoint" />
            <Array as="points">
              <mxPoint x="615" y="540" />
              <mxPoint x="615" y="561" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v145" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2133" y="513" as="sourcePoint" />
            <mxPoint x="2230" y="476" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2215" y="513" />
              <mxPoint x="2215" y="476" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v146" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#7D63B0;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2390" y="557" as="sourcePoint" />
            <mxPoint x="2390" y="585" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v147" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=1.6;startArrow=none;endArrow=none;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="900" y="727" as="sourcePoint" />
            <mxPoint x="1410" y="681" as="targetPoint" />
            <Array as="points">
              <mxPoint x="900" y="697" />
              <mxPoint x="1410" y="697" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v148" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=1.6;startArrow=none;endArrow=none;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1312" y="727" as="sourcePoint" />
            <mxPoint x="1410" y="681" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1312" y="697" />
              <mxPoint x="1410" y="697" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v149" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=1.6;startArrow=none;endArrow=none;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1724" y="727" as="sourcePoint" />
            <mxPoint x="1410" y="681" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1724" y="697" />
              <mxPoint x="1410" y="697" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v150" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=1.6;startArrow=none;endArrow=none;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2136" y="727" as="sourcePoint" />
            <mxPoint x="1410" y="681" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2136" y="697" />
              <mxPoint x="1410" y="697" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v151" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=1.6;startArrow=none;endArrow=none;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2548" y="727" as="sourcePoint" />
            <mxPoint x="1410" y="681" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2548" y="697" />
              <mxPoint x="1410" y="697" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v152" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="700" y="1058" width="1002" height="665" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v153" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="716" y="1041" width="267" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v154" value="WORKER NODE A / application" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="724" y="1041" width="251" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v155" value="Shared kernel + CNI" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=13;fontFamily=Arial;fontStyle=0;align=right;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1207" y="1071" width="475" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v156" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="1722" y="1058" width="1023" height="665" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v157" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="1738" y="1041" width="321" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v158" value="WORKER NODE B / internal services" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1746" y="1041" width="305" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v159" value="Shared kernel + CNI" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=13;fontFamily=Arial;fontStyle=0;align=right;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2250" y="1071" width="475" height="25" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v160" label="" tags="ControlPlane.Kubelet" help="Kubelet is node agent; privileged API access and 10250 need scoping." slug="Kubelet0">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="727" y="1110" width="294.3333333333333" height="100" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v161" value="kubelet" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="742" y="1117" width="264.3333333333333" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v162" value="API stream + CRI / kubelet HTTPS 10250" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="736" y="1154" width="276.3333333333333" height="50" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v163" label="" tags="Node.RuntimeSecurity" slug="Runtime0">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F0F5FA;strokeColor=#B7C7D9;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1054.3333333333333" y="1110" width="294.3333333333333" height="100" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v164" value="Container runtime" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1069.3333333333333" y="1117" width="264.3333333333333" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v165" value="containerd / CRI-O · CRI socket" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1063.3333333333333" y="1154" width="276.3333333333333" height="50" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v166" label="" tags="Network.Cni Network.Policy" slug="Cni0">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1381.6666666666665" y="1110" width="294.3333333333333" height="100" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v167" value="CNI data path" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1396.6666666666665" y="1117" width="264.3333333333333" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v168" value="Network policy / conntrack" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1390.6666666666665" y="1154" width="276.3333333333333" height="50" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v169" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="874.1666666666666" y="1210" as="sourcePoint" />
            <mxPoint x="874.1666666666666" y="1240" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v170" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#526C84;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1201.5" y="1210" as="sourcePoint" />
            <mxPoint x="1201.5" y="1240" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v171" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1528.8333333333333" y="1210" as="sourcePoint" />
            <mxPoint x="1528.8333333333333" y="1240" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <object id="securityarchitecture_v172" label="" tags="ControlPlane.Kubelet" help="Kubelet is node agent; privileged API access and 10250 need scoping." slug="Kubelet1">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1748" y="1110" width="301.6666666666667" height="100" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v173" value="kubelet" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1763" y="1117" width="271.6666666666667" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v174" value="API stream + CRI / kubelet HTTPS 10250" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1757" y="1154" width="283.6666666666667" height="50" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v175" label="" tags="Node.RuntimeSecurity" slug="Runtime1">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F0F5FA;strokeColor=#B7C7D9;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="2082.6666666666665" y="1110" width="301.6666666666667" height="100" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v176" value="Container runtime" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2097.6666666666665" y="1117" width="271.6666666666667" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v177" value="containerd / CRI-O · CRI socket" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2091.6666666666665" y="1154" width="283.6666666666667" height="50" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v178" label="" tags="Network.Cni Network.Policy" slug="Cni1">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="2417.3333333333335" y="1110" width="301.6666666666667" height="100" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v179" value="CNI data path" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2432.3333333333335" y="1117" width="271.6666666666667" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v180" value="Network policy / conntrack" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2426.3333333333335" y="1154" width="283.6666666666667" height="50" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v181" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1898.8333333333333" y="1210" as="sourcePoint" />
            <mxPoint x="1898.8333333333333" y="1240" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v182" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#526C84;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2233.5" y="1210" as="sourcePoint" />
            <mxPoint x="2233.5" y="1240" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v183" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2568.166666666667" y="1210" as="sourcePoint" />
            <mxPoint x="2568.166666666667" y="1240" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v184" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="740" y="1262" width="926" height="310" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v185" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="756" y="1245" width="200" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v186" value="NAMESPACE: app-prod" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="764" y="1245" width="184" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v187" value="RBAC scoped; policy via CNI" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=13;fontFamily=Arial;fontStyle=0;align=right;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1171" y="1275" width="475" height="25" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v188" label="" tags="Network.Service Network.Service.EndpointSlice" slug="ServiceEndpoints">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="763" y="1312" width="275" height="110" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v189" value="Service / EndpointSlice" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="778" y="1319" width="245" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v190" value="ClusterIP:443 -&gt; PodIP:8080" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="772" y="1356" width="257" height="60" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v191" label="" tags="Workload Namespace.Resources" slug="FrontendPod">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1061" y="1312" width="282" height="110" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v192" value="Pod: frontend" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1076" y="1319" width="252" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v193" value="App + projected ServiceAccount token" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1070" y="1356" width="264" height="60" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v194" label="" tags="ProcessSecurity ProcessSecurity.Seccomp" slug="ApiPod">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1367" y="1312" width="272" height="110" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v195" value="Pod: API" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1382" y="1319" width="242" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v196" value="seccomp / non-root / read-only FS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1376" y="1356" width="254" height="60" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v197" label="" tags="Network.Policy" slug="NetworkPolicy">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="763" y="1441" width="275" height="106" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v198" value="NetworkPolicy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="778" y="1448" width="245" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v199" value="Default deny; explicit L3 / L4 allow" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="772" y="1485" width="257" height="56" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v200" label="" tags="Workload.Volume" slug="SecretSources">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F2EEFA;strokeColor=#B3A3D1;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1061" y="1441" width="282" height="106" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v201" value="Secret / ConfigMap" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#7D63B0;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1076" y="1448" width="252" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v202" value="Volume / env / projected files" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1070" y="1485" width="264" height="56" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v203" label="" tags="Namespace.Psa" slug="PodSecurityAdmission">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1367" y="1441" width="272" height="106" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v204" value="Pod Security Admission" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1382" y="1448" width="242" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v205" value="Restricted profile where feasible" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1376" y="1485" width="254" height="56" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v206" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1038" y="1363" as="sourcePoint" />
            <mxPoint x="1061" y="1363" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v207" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1343" y="1363" as="sourcePoint" />
            <mxPoint x="1367" y="1363" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v208" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#7D63B0;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1202" y="1441" as="sourcePoint" />
            <mxPoint x="1202" y="1422" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <object id="securityarchitecture_v209" label="" tags="Workload" slug="NodeBComp0">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1764" y="1312" width="299" height="110" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v210" value="Pod: internal API" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1779" y="1319" width="269" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v211" value="Identity-checked service / mTLS optional" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1773" y="1356" width="281" height="60" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v212" label="" tags="Workload" slug="NodeBComp1">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F2EEFA;strokeColor=#B3A3D1;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="2088" y="1312" width="299" height="110" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v213" value="Pod: database" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#7D63B0;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2103" y="1319" width="269" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v214" value="PVC / CSI / scoped Secret" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2097" y="1356" width="281" height="60" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v215" label="" tags="Network.ServiceMesh" slug="NodeBComp2">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="2412" y="1312" width="299" height="110" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v216" value="Service mesh proxy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2427" y="1319" width="269" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v217" value="Optional east-west mTLS, authz" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2421" y="1356" width="281" height="60" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v218" label="" tags="Node.RuntimeSecurity Node.Observability" slug="RuntimeSensors">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="1764" y="1441" width="299" height="106" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v219" value="eBPF observability" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1779" y="1448" width="269" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v220" value="Falco / Tetragon / Hubble (optional)" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1773" y="1485" width="281" height="56" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v221" label="" tags="Workload.Volume" slug="StorageCsi">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F2EEFA;strokeColor=#B3A3D1;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="2088" y="1441" width="299" height="106" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v222" value="Storage / CSI" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#7D63B0;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2103" y="1448" width="269" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v223" value="PVC -&gt; volume plugin / provider" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2097" y="1485" width="281" height="56" as="geometry" />
        </mxCell>
        <object id="securityarchitecture_v224" label="" tags="Network.Egress Network.Egress.Gateway" slug="EgressGateway">
          <mxCell vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F0F5FA;strokeColor=#B7C7D9;strokeWidth=1.8;fontColor=#14243A;">
            <mxGeometry x="2412" y="1441" width="299" height="106" as="geometry" />
          </mxCell>
        </object>
        <mxCell id="securityarchitecture_v225" value="Egress gateway / NAT" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=18;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2427" y="1448" width="269" height="38" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v226" value="Policy -&gt; SNAT -&gt; external service" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2421" y="1485" width="281" height="56" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v227" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1639" y="1367" as="sourcePoint" />
            <mxPoint x="1764" y="1380" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1743" y="1367" />
              <mxPoint x="1743" y="1380" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v228" value="" vertex="1" parent="1" style="rounded=1;arcSize=7;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D5DEE7;strokeWidth=1;fontColor=#14243A;">
          <mxGeometry x="1570" y="1268" width="178.0" height="28" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v229" value="East-west: allowlist" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=12;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1578" y="1268" width="162.0" height="28" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v230" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#7D63B0;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2200" y="1422" as="sourcePoint" />
            <mxPoint x="2200" y="1441" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v231" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2570" y="1422" as="sourcePoint" />
            <mxPoint x="2570" y="1441" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v232" value="" vertex="1" parent="1" style="rounded=1;arcSize=7;whiteSpace=wrap;html=1;fillColor=#F8FAFC;strokeColor=#C4D3E2;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="735" y="1591" width="934" height="103" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v233" value="NODE A KERNEL / CONTAINER SECURITY" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="750" y="1596" width="900" height="27" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v234" value="Linux namespaces • cgroups • capabilities • SELinux/AppArmor • seccomp • user namespaces" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="752" y="1634" width="895" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v235" value="" vertex="1" parent="1" style="rounded=1;arcSize=7;whiteSpace=wrap;html=1;fillColor=#F8FAFC;strokeColor=#C4D3E2;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1750" y="1591" width="975" height="103" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v236" value="NODE B KERNEL / CONTAINER SECURITY" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1765" y="1596" width="925" height="27" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v237" value="Runtime socket protections • hostPath restrictions • hardening • node isolation" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1765" y="1634" width="925" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v238" value="" vertex="1" parent="1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="731" y="1749" width="1985" height="88" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v239" value="Important boundary caveat" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="744" y="1759" width="1959" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v240" value="•  Namespaces are NOT a hard multi-tenant security boundary." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="746" y="1792" width="1955" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v241" value="•  A privileged Pod or host socket can undermine isolation." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="746" y="1817" width="1955" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v242" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="560" y="1275" as="sourcePoint" />
            <mxPoint x="800" y="1312" as="targetPoint" />
            <Array as="points">
              <mxPoint x="610" y="1275" />
              <mxPoint x="610" y="1844" />
              <mxPoint x="800" y="1844" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v243" value="" vertex="1" parent="1" style="rounded=1;arcSize=7;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D5DEE7;strokeWidth=1;fontColor=#14243A;">
          <mxGeometry x="680" y="1814" width="147.2" height="28" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v244" value="Ingress: TLS 443" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=12;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="688" y="1814" width="131.2" height="28" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v245" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="560" y="900" as="sourcePoint" />
            <mxPoint x="1157" y="1110" as="targetPoint" />
            <Array as="points">
              <mxPoint x="616" y="900" />
              <mxPoint x="616" y="1040" />
              <mxPoint x="1157" y="1040" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v246" value="" vertex="1" parent="1" style="rounded=1;arcSize=7;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D5DEE7;strokeWidth=1;fontColor=#14243A;">
          <mxGeometry x="782" y="1008" width="101.0" height="28" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v247" value="Image pull" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=12;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="790" y="1008" width="85.0" height="28" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v248" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1225" y="1749" as="sourcePoint" />
            <mxPoint x="1225" y="1723" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v249" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2.5;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2462" y="1070" as="sourcePoint" />
            <mxPoint x="2160" y="955" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2462" y="1020" />
              <mxPoint x="2160" y="1020" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v250" value="" vertex="1" parent="1" style="rounded=1;arcSize=7;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#D5DEE7;strokeWidth=1;fontColor=#14243A;">
          <mxGeometry x="2140" y="990" width="178.0" height="28" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v251" value="kubelet API / status" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=12;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2148" y="990" width="162.0" height="28" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v252" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="2861" y="255" width="610" height="565" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v253" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2877" y="238" width="258" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v254" value="SECURITY POLICY &amp; CONTROLS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2885" y="238" width="242" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v255" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="301" width="560" height="68" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v256" value="IDENTITY  ·  C02 / C03" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="308" width="530" height="30.6" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v257" value="MFA, short-lived credentials, least privilege" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="345" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v258" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="378" width="560" height="68" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v259" value="API POLICY  ·  C08 / C12" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="385" width="530" height="30.6" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v260" value="PSA + validating / mutating webhooks" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="422" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v261" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="455" width="560" height="68" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v262" value="NETWORK  ·  C09 / C22" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="462" width="530" height="30.6" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v263" value="Default-deny policy, egress controls, mTLS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="499" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v264" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="532" width="560" height="68" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v265" value="RUNTIME  ·  C11 / C16 / C17" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="539" width="530" height="30.6" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v266" value="seccomp, MAC, no dangerous host access" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="576" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v267" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="609" width="560" height="68" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v268" value="SUPPLY  ·  C13 / C14" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="616" width="530" height="30.6" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v269" value="Artifact signing, digest pinning, SBOM" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="653" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v270" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="686" width="560" height="68" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v271" value="DATA  ·  C06 / C23" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="693" width="530" height="30.6" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v272" value="KMS etcd encryption, Secret access controls" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="730" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v273" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="2861" y="865" width="610" height="485" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v274" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2877" y="848" width="240" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v275" value="OBSERVABILITY / EVIDENCE" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2885" y="848" width="224" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v276" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="911" width="560" height="72" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v277" value="API audit events" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="918" width="530" height="32.4" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v278" value="Who / verb / object / response" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="955" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v279" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="994" width="560" height="72" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v280" value="CNI flow telemetry" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="1001" width="530" height="32.4" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v281" value="Source/destination + deny" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="1038" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v282" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="1077" width="560" height="72" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v283" value="Runtime detection" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="1084" width="530" height="32.4" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v284" value="Process, file, syscall, capabilities" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="1121" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v285" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="1160" width="560" height="72" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v286" value="Image / admission logs" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="1167" width="530" height="32.4" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v287" value="Signature, policy decisions" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="1204" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v288" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="1243" width="560" height="72" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v289" value="Central SIEM / triage" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="1250" width="530" height="32.4" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v290" value="Correlate by workload and identity" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="1287" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v291" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#FFFBFB;strokeColor=#E7A6AD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="2861" y="1395" width="610" height="430" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v292" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFFBFB;strokeColor=#E7A6AD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2877" y="1378" width="231" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v293" value="ATTACK-PATH ANNOTATIONS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2885" y="1378" width="215" height="35" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v294" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="1443" width="560" height="64" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v295" value="P1 · AV02 / AV28" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="1450" width="530" height="28.8" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v296" value="Stolen kubeconfig -&gt; API privilege" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="1487" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v297" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="1515" width="560" height="64" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v298" value="P2 · AV01 / AV03" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="1522" width="530" height="28.8" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v299" value="Public app -&gt; token abuse" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="1559" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v300" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="1587" width="560" height="64" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v301" value="P3 · AV04 / AV28" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="1594" width="530" height="28.8" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v302" value="Supply-chain tampering -&gt; Pod" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="1631" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v303" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="1659" width="560" height="64" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v304" value="P4 · AV18" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="1666" width="530" height="28.8" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v305" value="Allowed east-west route -&gt; pivot" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="1703" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v306" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2885" y="1731" width="560" height="64" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v307" value="P5 · AV14 / AV15" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=15;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2900" y="1738" width="530" height="28.8" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v308" value="Pod privilege -&gt; node compromise" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2894" y="1775" width="542" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v309" value="" vertex="1" parent="1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2868" y="1866" width="595" height="176" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v310" value="Diagram conventions" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2881" y="1876" width="569" height="25" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v311" value="•  Blue = authorized / expected data flow" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2883" y="1909" width="565" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v312" value="•  Red = threat or candidate exploit path" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2883" y="1934" width="565" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v313" value="•  Dashed boundary = distinct trust context" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2883" y="1959" width="565" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v314" value="•  KubeDaily-authored, independently editable" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2883" y="1984" width="565" height="22" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v315" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="562" y="531" as="sourcePoint" />
            <mxPoint x="711" y="610" as="targetPoint" />
            <Array as="points">
              <mxPoint x="630" y="531" />
              <mxPoint x="630" y="610" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v316" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1555" y="1422" as="sourcePoint" />
            <mxPoint x="1775" y="1312" as="targetPoint" />
            <Array as="points">
              <mxPoint x="1555" y="1276" />
              <mxPoint x="1775" y="1276" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v317" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=2;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="2660" y="1550" as="sourcePoint" />
            <mxPoint x="2861" y="1740" as="targetPoint" />
            <Array as="points">
              <mxPoint x="2740" y="1550" />
              <mxPoint x="2740" y="1740" />
            </Array>
          </mxGeometry>
        </mxCell>
        <mxCell id="securityarchitecture_v318" value="MODEL NOTES: External/cloud services are illustrative. Ports, components and enforcement depend on distribution, CNI and deployment; validate before use in production." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="35" y="2120" width="3300" height="26" as="geometry" />
        </mxCell>
        <mxCell id="securityarchitecture_v319" value="Reference concepts: kubernetesdaily.github.io (MIT-licensed repository)  •  This is an original topology derived from the prior threat-model pages, not a copied SVG." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="35" y="2150" width="3300" height="27" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
  <diagram id="flowsanalysis" name="04 · Packet and identity flow analysis">
    <mxGraphModel dx="1750" dy="1000" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="3300" pageHeight="2080" math="0" shadow="0" background="#FFFFFF">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="flowsanalysis_v1" value="PACKET AND IDENTITY FLOW ANALYSIS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#FFFFFF;fontSize=33;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="36" y="20" width="3228" height="50" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v2" value="Security checkpoints, conditional attack paths and observability: request processing, ingress, east-west, egress, supply chain, runtime" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#AFC4D8;fontSize=16;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="37" y="74" width="3226" height="22" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v3" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#264765;strokeColor=#365D7D;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2715" y="27" width="546" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v4" value="EDITABLE DRAW.IO  •  REFERENCE ARCHITECTURE" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D7E8FA;fontSize=13;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2723" y="27" width="530" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v5" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#C8D6E4;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="25" y="131" width="3250" height="60" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v6" value="HOW TO READ" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="47" y="145" width="150" height="31" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v7" value="" vertex="1" parent="1" style="rounded=1;arcSize=4;whiteSpace=wrap;html=1;fillColor=#387CC5;strokeColor=#387CC5;strokeWidth=0;fontColor=#14243A;">
          <mxGeometry x="222" y="150" width="34" height="11" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v8" value="Legitimate / authenticated" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="268" y="140" width="640" height="36" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v9" value="" vertex="1" parent="1" style="rounded=1;arcSize=4;whiteSpace=wrap;html=1;fillColor=#D34E5B;strokeColor=#D34E5B;strokeWidth=0;fontColor=#14243A;">
          <mxGeometry x="948" y="150" width="34" height="11" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v10" value="Attack / bypass attempt" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="994" y="140" width="640" height="36" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v11" value="" vertex="1" parent="1" style="rounded=1;arcSize=4;whiteSpace=wrap;html=1;fillColor=#22806E;strokeColor=#22806E;strokeWidth=0;fontColor=#14243A;">
          <mxGeometry x="1674" y="150" width="34" height="11" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v12" value="Policy checkpoint" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1720" y="140" width="640" height="36" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v13" value="" vertex="1" parent="1" style="rounded=1;arcSize=4;whiteSpace=wrap;html=1;fillColor=#B37B27;strokeColor=#B37B27;strokeWidth=0;fontColor=#14243A;">
          <mxGeometry x="2400" y="150" width="34" height="11" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v14" value="Artifact + evidence" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=15;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2446" y="140" width="640" height="36" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v15" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="33" y="247" width="2260" height="330" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v16" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="49" y="230" width="672" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v17" value="CONTROL-PLANE API REQUEST  ·  AuthN -&gt; AuthZ -&gt; admission -&gt; persistence" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="57" y="230" width="656" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v18" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F0F5FA;strokeColor=#B7C7D9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="68" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v19" value="01 Client identity" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="83" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v20" value="OIDC / cert / SA token" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="77" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v21" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="435" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v22" value="02 API TLS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="450" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v23" value="6443 / apiserver" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="444" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v24" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="406" y="383" as="sourcePoint" />
            <mxPoint x="435" y="383" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v25" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="802" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v26" value="03 AuthN" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="817" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v27" value="Token / certificate" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="811" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v28" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="773" y="383" as="sourcePoint" />
            <mxPoint x="802" y="383" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v29" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1169" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v30" value="04 AuthZ" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1184" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v31" value="RBAC / webhook" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1178" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v32" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1140" y="383" as="sourcePoint" />
            <mxPoint x="1169" y="383" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v33" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1536" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v34" value="05 Admission" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1551" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v35" value="PSA / policies" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1545" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v36" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1507" y="383" as="sourcePoint" />
            <mxPoint x="1536" y="383" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v37" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F2EEFA;strokeColor=#B3A3D1;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1903" y="330" width="337" height="107" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v38" value="06 Storage" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#7D63B0;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1918" y="337" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v39" value="etcd / API objects" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1912" y="374" width="319" height="57" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v40" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1874" y="383" as="sourcePoint" />
            <mxPoint x="1903" y="383" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v41" value="" vertex="1" parent="1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="72" y="458" width="2166" height="96" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v42" value="Threats" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="85" y="468" width="2140" height="25" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v43" value="AV02: credential theft  •  AV09: over-broad RBAC  •  AV20: admission webhook abuse" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="87" y="499" width="2136" height="52" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v44" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="33" y="627" width="2260" height="292" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v45" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="49" y="610" width="582" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v46" value="INGRESS PATH  ·  Internet -&gt; Gateway/Ingress -&gt; Service -&gt; Pod" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="57" y="610" width="566" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v47" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F0F5FA;strokeColor=#B7C7D9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="68" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v48" value="Internet / DNS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="83" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v49" value="HTTPS / external name" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="77" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v50" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="435" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v51" value="Edge LB" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="450" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v52" value="TCP load balancer" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="444" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v53" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="406" y="758" as="sourcePoint" />
            <mxPoint x="435" y="758" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v54" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="802" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v55" value="Gateway / Ingress" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="817" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v56" value="Host/path/TLS routing" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="811" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v57" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="773" y="758" as="sourcePoint" />
            <mxPoint x="802" y="758" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v58" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1169" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v59" value="Service + EndpointSlice" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1184" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v60" value="ClusterIP -&gt; healthy backend" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1178" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v61" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1140" y="758" as="sourcePoint" />
            <mxPoint x="1169" y="758" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v62" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1536" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v63" value="CNI policy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1551" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v64" value="Ingress allowlist" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1545" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v65" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1507" y="758" as="sourcePoint" />
            <mxPoint x="1536" y="758" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v66" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1903" y="704" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v67" value="Pod workload" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1918" y="711" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v68" value="App listener + identity" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1912" y="748" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v69" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#387CC5;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1874" y="758" as="sourcePoint" />
            <mxPoint x="1903" y="758" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v70" value="CHECK: L7 route ≠ L3/L4 isolation. Kubernetes NetworkPolicy enforcement requires compatible CNI implementation." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=15;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="70" y="840" width="2160" height="34" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v71" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="33" y="969" width="2260" height="294" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v72" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F5FBF8;strokeColor=#7DBCA9;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="49" y="952" width="618" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v73" value="EAST-WEST AND EGRESS  ·  NetworkPolicy / DNS / SNAT / external API" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="57" y="952" width="602" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v74" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="68" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v75" value="Pod A" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="83" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v76" value="Service identity / request" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="77" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v77" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="435" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v78" value="Egress policy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="450" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v79" value="Allowed CIDR / port; DNS exceptions" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="444" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v80" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="406" y="1098" as="sourcePoint" />
            <mxPoint x="435" y="1098" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v81" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="802" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v82" value="CNI datapath" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="817" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v83" value="Pod IP + routing + overlay" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="811" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v84" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="773" y="1098" as="sourcePoint" />
            <mxPoint x="802" y="1098" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v85" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1169" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v86" value="Gateway / NAT" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1184" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v87" value="SNAT / approved egress" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1178" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v88" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1140" y="1098" as="sourcePoint" />
            <mxPoint x="1169" y="1098" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v89" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F0F5FA;strokeColor=#B7C7D9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1536" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v90" value="External endpoint" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#526C84;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1551" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v91" value="Internet / SaaS / cloud API" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1545" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v92" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1507" y="1098" as="sourcePoint" />
            <mxPoint x="1536" y="1098" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v93" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1903" y="1043" width="337" height="109" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v94" value="Flow telemetry" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1918" y="1050" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v95" value="Observe + correlate denies" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1912" y="1087" width="319" height="59" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v96" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#22806E;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1874" y="1098" as="sourcePoint" />
            <mxPoint x="1903" y="1098" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v97" value="EAST-WEST: Pod -&gt; egress policy -&gt; service/IP -&gt; destination ingress policy; optional mesh can add authentication and authorization." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="70" y="1181" width="2145" height="33" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v98" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#FFFDF9;strokeColor=#E1BB70;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="33" y="1313" width="2260" height="308" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v99" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFFDF9;strokeColor=#E1BB70;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="49" y="1296" width="438" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v100" value="SUPPLY CHAIN -&gt; ADMISSION -&gt; RUNTIME EXECUTION" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="57" y="1296" width="422" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v101" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="68" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v102" value="Git / packages" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="83" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v103" value="PR reviews / lockfiles" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="77" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v104" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="435" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v105" value="Build + SBOM" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="450" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v106" value="Build provenance" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="444" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v107" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="406" y="1445" as="sourcePoint" />
            <mxPoint x="435" y="1445" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v108" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="802" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v109" value="Scan + sign" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="817" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v110" value="Vulnerabilities / signature" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="811" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v111" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="773" y="1445" as="sourcePoint" />
            <mxPoint x="802" y="1445" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v112" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1169" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v113" value="Registry" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1184" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v114" value="Immutable image digest" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1178" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v115" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1140" y="1445" as="sourcePoint" />
            <mxPoint x="1169" y="1445" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v116" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1536" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v117" value="Admission" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1551" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v118" value="Verify signature / policy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1545" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v119" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1507" y="1445" as="sourcePoint" />
            <mxPoint x="1536" y="1445" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v120" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF8F4;strokeColor=#7DBCA9;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1903" y="1391" width="337" height="108" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v121" value="Pod / runtime" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#22806E;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1918" y="1398" width="307" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v122" value="CRI pull + process exec" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1912" y="1435" width="319" height="58" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v123" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#B37B27;strokeWidth=3;startArrow=none;endArrow=block;endFill=1;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1874" y="1445" as="sourcePoint" />
            <mxPoint x="1903" y="1445" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v124" value="RISK: A signed image does not establish safety by itself; provenance, vulnerability assessment, least privilege and runtime monitoring are complementary." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="70" y="1530" width="2150" height="50" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v125" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#FFFBFB;strokeColor=#E7A6AD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="33" y="1670" width="2260" height="260" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v126" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FFFBFB;strokeColor=#E7A6AD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="49" y="1653" width="690" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v127" value="RUNTIME + NODE ESCAPE BOUNDARY  ·  Compromised process, privileges, kernel" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="57" y="1653" width="674" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v128" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="68" y="1744" width="402" height="99" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v129" value="Compromised process" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="83" y="1751" width="372" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v130" value="AV01 / AV05 initial foothold" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="77" y="1788" width="384" height="49" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v131" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="509" y="1744" width="402" height="99" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v132" value="Pod security context" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="524" y="1751" width="372" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v133" value="capabilities, host mounts, root" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="518" y="1788" width="384" height="49" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v134" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="471" y="1792" as="sourcePoint" />
            <mxPoint x="509" y="1792" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v135" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="950" y="1744" width="402" height="99" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v136" value="Host / CRI exposure" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="965" y="1751" width="372" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v137" value="AV14 / AV15 if exposed" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="959" y="1788" width="384" height="49" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v138" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="912" y="1792" as="sourcePoint" />
            <mxPoint x="950" y="1792" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v139" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1391" y="1744" width="402" height="99" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v140" value="Node privilege" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1406" y="1751" width="372" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v141" value="Kernel / kubelet / socket" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1400" y="1788" width="384" height="49" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v142" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1353" y="1792" as="sourcePoint" />
            <mxPoint x="1391" y="1792" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v143" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#FDEEF0;strokeColor=#E7A6AD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="1832" y="1744" width="402" height="99" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v144" value="Blast radius" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1847" y="1751" width="372" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v145" value="Other Pods / API identity" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=12;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="1841" y="1788" width="384" height="49" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v146" value="" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#D34E5B;strokeWidth=2.8;startArrow=none;endArrow=block;endFill=1;dashed=1;dashPattern=8 5;">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="1794" y="1792" as="sourcePoint" />
            <mxPoint x="1832" y="1792" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="flowsanalysis_v147" value="CONDITIONAL PATH: Pod compromise alone is NOT a host escape. The elevated access step requires an additional vulnerability or unsafe configuration." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#D34E5B;fontSize=14;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="65" y="1868" width="2152" height="36" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v148" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="2344" y="247" width="914" height="782" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v149" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2360" y="230" width="276" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v150" value="DEFENSE-IN-DEPTH CHECKPOINTS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2368" y="230" width="260" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v151" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="291" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v152" value="C02  Identity and MFA" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="298" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v153" value="Authenticate platform operators; avoid standing admin tokens." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="335" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v154" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="395" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v155" value="C03  RBAC / authorization" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="402" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v156" value="Review RoleBinding and ClusterRoleBinding grants." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="439" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v157" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="499" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v158" value="C08  Pod Security Admission" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="506" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v159" value="Reject privileged and risky Pod configuration." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="543" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v160" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="603" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v161" value="C09  NetworkPolicy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="610" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v162" value="Default-deny ingress &amp; egress; validate actual CNI." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="647" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v163" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="707" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v164" value="C14  Image policy" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="714" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v165" value="Pin digest; verify provenance and signatures." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="751" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v166" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="811" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v167" value="C16 / C17  Runtime confinement" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="818" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v168" value="seccomp, non-root, MAC profiles, no host socket." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="855" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v169" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EEF9F0;strokeColor=#85C293;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="915" width="863" height="91" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v170" value="C07 / C11  Audit / detection" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#257850;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="922" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v171" value="Centralize audit, CNI flows and node runtime events." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="959" width="845" height="41" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v172" value="" vertex="1" parent="1" style="rounded=1;arcSize=15;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=2.6;dashed=1;dashPattern=7 5;fontColor=#14243A;">
          <mxGeometry x="2344" y="1086" width="914" height="535" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v173" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#F6FAFF;strokeColor=#83ADDD;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2360" y="1069" width="294" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v174" value="MONITORING  ·  WHAT TO OBSERVE" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=16;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2368" y="1069" width="278" height="35" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v175" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="1136" width="863" height="98" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v176" value="API + auth events" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="1143" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v177" value="User, groups, verb, resource, object, code" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="1180" width="845" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v178" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="1249" width="863" height="98" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v179" value="Network / DNS" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="1256" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v180" value="Flow, source Pod, destination, port, denial" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="1293" width="845" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v181" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="1362" width="863" height="98" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v182" value="Runtime / container" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="1369" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v183" value="Exec, privilege change, sensitive file access" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="1406" width="845" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v184" value="" vertex="1" parent="1" style="rounded=1;arcSize=11;whiteSpace=wrap;html=1;fillColor=#EAF3FF;strokeColor=#83ADDD;strokeWidth=1.8;fontColor=#14243A;">
          <mxGeometry x="2370" y="1475" width="863" height="98" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v185" value="Image / CI pipeline" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#387CC5;fontSize=17;fontFamily=Arial;fontStyle=1;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2385" y="1482" width="833" height="38" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v186" value="Digest, signer, SBOM, attestations, approval" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=center;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2379" y="1519" width="845" height="48" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v187" value="" vertex="1" parent="1" style="rounded=1;arcSize=10;whiteSpace=wrap;html=1;fillColor=#FFF5E4;strokeColor=#E1BB70;strokeWidth=1.5;fontColor=#14243A;">
          <mxGeometry x="2361" y="1680" width="888" height="182" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v188" value="Deployment caveats" vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#B37B27;fontSize=16;fontFamily=Arial;fontStyle=1;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2374" y="1690" width="862" height="25" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v189" value="•  Port allocations can be customized by distribution." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2376" y="1723" width="858" height="22" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v190" value="•  Service mesh and observability are optional." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2376" y="1748" width="858" height="22" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v191" value="•  Policies are ineffective unless enforced by the implementation." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2376" y="1773" width="858" height="22" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v192" value="•  Assessed risk depends on real configuration and privileges." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#263F59;fontSize=13;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="2376" y="1798" width="858" height="22" as="geometry" />
        </mxCell>
        <mxCell id="flowsanalysis_v193" value="SOURCE: Kubernetes official security guidance + KubeDaily enterprise architecture model. This is a generic reference model, not evidence of compromise." vertex="1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;fillColor=none;strokeColor=none;fontColor=#647A91;fontSize=15;fontFamily=Arial;fontStyle=0;align=left;verticalAlign=middle;spacing=0;">
          <mxGeometry x="42" y="2002" width="3160" height="34" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
  </mxfile>