Nested

Trust zones, outside in

Trust zones, outside in Four regions enclose one another. The public internet is the outermost scope; it contains the DMZ, which contains the internal network, which contains the secure store. The secure store is focal and holds two content nodes, a key vault and a ledger database, joined by one sealed read connector. No stroke crosses an enclosure wall; every wall is drawn with a plain solid stroke because no boundary in this brief is permeable. Public internet DMZ Internal network Secure store sealed read Key vault Ledger database