From 5f09d9c5958c3f0287808086d64f43ec3d4249fd Mon Sep 17 00:00:00 2001
From: thesabear <thesabear@zohomail.eu>
Date: Sun, 23 Aug 2026 09:51:48 +0300
Subject: [PATCH] TEMP: test with ~half the real diagram (no Monitoring/SecMon
 fan-in)

Diagnostic bisection - if gap reappears here, it's a size/complexity
threshold. If not, the trigger is specifically in the observability
fan-in portion I removed for this test.
---
 README.md | 22 ++++++++++++++++++++--
 1 file changed, 20 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index ff0e1ba..b75aa12 100644
--- a/README.md
+++ b/README.md
@@ -78,8 +78,26 @@ This repo is a sanitized showcase of the systems behind that platform — the ac
 
 ```mermaid
 flowchart LR
-    A["Test A"] --> B["Test B"]
-    B --> C["Test C"]
+    Internet(["Internet"]) --> Edge["Edge Firewall"]
+    Edge --> LAN["LAN"]
+
+    LAN --> DNS["Internal DNS<br/>two zones"]
+    LAN --> Vault["Vault<br/>PKI + secrets"]
+    DNS --> Vault
+
+    Vault --> Apps["App Host<br/>41 stacks"]
+    Vault --> Automation["Automation VM<br/>Git + orchestration"]
+    LAN --> FileServer["File Server"]
+    DNS --> FileServer
+    LAN --> Automation
+
+    Apps --> InternalProxy["Internal Proxy Zone"]
+    Apps --> SSO["SSO"]
+
+    Vault --> EdgeProxy["User-Facing Proxy<br/>mTLS"]
+    DNS --> EdgeProxy
+    Apps -.proxied.-> EdgeProxy
+    SSO -.auth.-> EdgeProxy
 ```
 Solid arrows are real dependencies; dotted arrows are asynchronous telemetry reporting, not a blocking dependency. Full breakdown of all 8 traffic laws (ingress, east-west, secrets, DNS, observability, notifications, CI/CD, management) with the actual trust-boundary reasoning: [docs/architecture-overview.md](docs/architecture-overview.md).