Zero-trust network

{
  "nodes": [
    { "id":"u","type":"ellipse","label":"User","x":40,"y":160,"fill":"#dbeafe","stroke":"#2563eb" },
    { "id":"dv","type":"rect","label":"Device posture","x":220,"y":160,"fill":"#fed7aa","stroke":"#c2410c" },
    { "id":"id","type":"rect","label":"Identity provider","x":420,"y":160,"fill":"#ede9fe","stroke":"#6d28d9" },
    { "id":"pe","type":"diamond","label":"Policy engine","x":620,"y":145,"fill":"#fef3c7","stroke":"#a16207" },
    { "id":"app","type":"rect","label":"App / API","x":820,"y":80,"fill":"#dcfce7","stroke":"#15803d" },
    { "id":"deny","type":"rect","label":"Deny + log","x":820,"y":240,"fill":"#fee2e2","stroke":"#b91c1c" },
    { "id":"log","type":"rect","label":"Audit log","x":1040,"y":240,"fill":"#fef3c7","stroke":"#a16207" }
  ],
  "edges": [
    { "id":"a","source":"u","target":"dv","label":"request" },
    { "id":"b","source":"dv","target":"id" },
    { "id":"c","source":"id","target":"pe","label":"context" },
    { "id":"d","source":"pe","target":"app","label":"allow" },
    { "id":"e","source":"pe","target":"deny","label":"deny" },
    { "id":"f","source":"deny","target":"log" }
  ]
}