Zero-Trust Architecture

{
  "nodes": [
    { "id":"u",  "type":"ellipse","label":"User device","x":40,"y":160,"fill":"#dcfce7" },
    { "id":"id", "type":"rect",   "label":"Identity Provider","x":220,"y":40,"fill":"#dbeafe" },
    { "id":"dev","type":"rect",   "label":"Device posture","x":220,"y":120,"fill":"#dbeafe" },
    { "id":"pol","type":"diamond","label":"Policy engine","x":420,"y":140,"fill":"#fef3c7" },
    { "id":"px", "type":"rect",   "label":"Reverse proxy / PEP","x":620,"y":160,"fill":"#ede9fe" },
    { "id":"app","type":"rect",   "label":"App / API","x":820,"y":80,"fill":"#dbeafe" },
    { "id":"db", "type":"rect",   "label":"Database","x":820,"y":260,"fill":"#fce7f3" },
    { "id":"log","type":"note",   "label":"All decisions logged + continuously re-evaluated","x":420,"y":300,"fill":"#fef9c3" }
  ],
  "edges": [
    { "id":"e1","source":"u",  "target":"px","label":"request" },
    { "id":"e2","source":"id", "target":"pol" },
    { "id":"e3","source":"dev","target":"pol" },
    { "id":"e4","source":"px", "target":"pol","label":"allow?" },
    { "id":"e5","source":"pol","target":"px", "label":"yes/no" },
    { "id":"e6","source":"px", "target":"app" },
    { "id":"e7","source":"app","target":"db"  }
  ]
}