<mxfile host="app.diagrams.net" version="24.7.17" type="device">
  <diagram id="01-responsibility-boundary" name="Shared-responsibility boundary map">
    <mxGraphModel dx="1200" dy="850" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1200" pageHeight="850" background="#F7F4EC">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="title" value="Shared-responsibility boundary map" style="text;html=0;align=left;verticalAlign=middle;whiteSpace=wrap;strokeColor=none;fillColor=none;fontFamily=Helvetica;fontColor=#142B49;fontSize=28;fontStyle=1;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="45" y="22" width="1110" height="45" />
        </mxCell>
        <mxCell id="subtitle" value="Managed mechanisms do not replace tenant authority or business correctness." style="text;html=0;align=left;verticalAlign=middle;whiteSpace=wrap;strokeColor=none;fillColor=none;fontFamily=Helvetica;fontColor=#142B49;fontSize=16;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="45" y="70" width="1110" height="32" />
        </mxCell>
        <mxCell id="footer" value="Conceptual control allocation. Verify capabilities per target and Region; application controls remain mandatory." style="text;html=0;align=left;verticalAlign=middle;whiteSpace=wrap;strokeColor=none;fillColor=none;fontFamily=Helvetica;fontColor=#142B49;fontSize=13;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="45" y="787" width="1110" height="40" />
        </mxCell>
        <mxCell id="panel0" value="" style="rounded=0;fillColor=none;strokeColor=#CBD1D6;strokeWidth=1;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="45" y="135" width="340" height="510" />
        </mxCell>
        <mxCell id="paneltitle0" value="GATEWAY · DOCUMENTED MECHANISMS" style="text;html=0;align=left;verticalAlign=middle;whiteSpace=wrap;strokeColor=none;fillColor=none;fontFamily=Helvetica;fontColor=#142B49;fontSize=13;fontStyle=1;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="60" y="143" width="310" height="28" />
        </mxCell>
        <mxCell id="panel1" value="" style="rounded=0;fillColor=none;strokeColor=#CBD1D6;strokeWidth=1;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="430" y="135" width="340" height="510" />
        </mxCell>
        <mxCell id="paneltitle1" value="JOINT · VALIDATION GATES" style="text;html=0;align=left;verticalAlign=middle;whiteSpace=wrap;strokeColor=none;fillColor=none;fontFamily=Helvetica;fontColor=#142B49;fontSize=13;fontStyle=1;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="445" y="143" width="310" height="28" />
        </mxCell>
        <mxCell id="panel2" value="" style="rounded=0;fillColor=none;strokeColor=#CBD1D6;strokeWidth=1;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="815" y="135" width="340" height="510" />
        </mxCell>
        <mxCell id="paneltitle2" value="APPLICATION · REQUIRED CONTROLS" style="text;html=0;align=left;verticalAlign=middle;whiteSpace=wrap;strokeColor=none;fillColor=none;fontFamily=Helvetica;fontColor=#142B49;fontSize=13;fontStyle=1;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="830" y="143" width="310" height="28" />
        </mxCell>
        <mxCell id="g1" value="Inbound / outbound auth&#10;Eligible Cedar tool policy" style="rounded=0;whiteSpace=wrap;html=0;fillColor=#142B49;strokeColor=#142B49;strokeWidth=2;fontColor=#F7F4EC;fontFamily=Helvetica;fontSize=15;align=center;verticalAlign=middle;spacing=10;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="65" y="190" width="300" height="100" />
        </mxCell>
        <mxCell id="g2" value="Tool discovery / search&#10;Consumption rate limits" style="rounded=0;whiteSpace=wrap;html=0;fillColor=#142B49;strokeColor=#142B49;strokeWidth=2;fontColor=#F7F4EC;fontFamily=Helvetica;fontSize=15;align=center;verticalAlign=middle;spacing=10;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="65" y="335" width="300" height="100" />
        </mxCell>
        <mxCell id="g3" value="Session mechanisms&#10;Service metrics / traces" style="rounded=0;whiteSpace=wrap;html=0;fillColor=#142B49;strokeColor=#142B49;strokeWidth=2;fontColor=#F7F4EC;fontFamily=Helvetica;fontSize=15;align=center;verticalAlign=middle;spacing=10;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="65" y="480" width="300" height="100" />
        </mxCell>
        <mxCell id="v1" value="Target + credential fit&#10;Protocol / policy coverage" style="rounded=0;whiteSpace=wrap;html=0;fillColor=#E4A83A;strokeColor=#142B49;strokeWidth=2;fontColor=#142B49;fontFamily=Helvetica;fontSize=15;align=center;verticalAlign=middle;spacing=10;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="450" y="190" width="300" height="100" />
        </mxCell>
        <mxCell id="v2" value="Private ingress ≠ egress&#10;Prove no bypass" style="rounded=0;whiteSpace=wrap;html=0;fillColor=#E4A83A;strokeColor=#142B49;strokeWidth=2;fontColor=#142B49;fontFamily=Helvetica;fontSize=15;align=center;verticalAlign=middle;spacing=10;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="450" y="335" width="300" height="100" />
        </mxCell>
        <mxCell id="v3" value="Regional / quota checks&#10;Retention / trace validation" style="rounded=0;whiteSpace=wrap;html=0;fillColor=#E4A83A;strokeColor=#142B49;strokeWidth=2;fontColor=#142B49;fontFamily=Helvetica;fontSize=15;align=center;verticalAlign=middle;spacing=10;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="450" y="480" width="300" height="100" />
        </mxCell>
        <mxCell id="a1" value="Trusted tenant context&#10;Business entitlements" style="rounded=0;whiteSpace=wrap;html=0;fillColor=#F7F4EC;strokeColor=#142B49;strokeWidth=2;fontColor=#142B49;fontFamily=Helvetica;fontSize=15;align=center;verticalAlign=middle;spacing=10;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="835" y="190" width="300" height="100" />
        </mxCell>
        <mxCell id="a2" value="Tenant-scoped data&#10;Human approval" style="rounded=0;whiteSpace=wrap;html=0;fillColor=#F7F4EC;strokeColor=#142B49;strokeWidth=2;fontColor=#142B49;fontFamily=Helvetica;fontSize=15;align=center;verticalAlign=middle;spacing=10;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="835" y="335" width="300" height="100" />
        </mxCell>
        <mxCell id="a3" value="Idempotency / reconciliation&#10;Business outcome evidence" style="rounded=0;whiteSpace=wrap;html=0;fillColor=#F7F4EC;strokeColor=#142B49;strokeWidth=2;fontColor=#142B49;fontFamily=Helvetica;fontSize=15;align=center;verticalAlign=middle;spacing=10;" vertex="1" parent="1">
          <mxGeometry as="geometry" x="835" y="480" width="300" height="100" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
