<mxfile host="Electron" agent="tepp-omega-visual" version="29.3.0">
  <diagram name="Where TEPP is enforced: the loci" id="14-loci">
    <mxGraphModel dx="1600" dy="900" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1860" pageHeight="1080" background="#ffffff" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="14-2" value='&lt;font style="font-size:30px"&gt;&lt;b&gt;Where TEPP is enforced: the loci&lt;/b&gt;&lt;/font&gt;' style="text;html=1;align=left;verticalAlign=middle;fontColor=#1f2933;fontFamily=Helvetica;" vertex="1" parent="1"><mxGeometry x="40" y="24" width="1780" height="44" as="geometry" /></mxCell>
        <mxCell id="14-3" value='&lt;font style="font-size:17px" color="#52606d"&gt;Enforcement is the union of what the TEPP-compliant loci enforce — a signer and a client, each running the full construct — bounded by the spaces the subject inhabits.&lt;/font&gt;' style="text;html=1;align=left;verticalAlign=middle;fontFamily=Helvetica;" vertex="1" parent="1"><mxGeometry x="40" y="68" width="1780" height="30" as="geometry" /></mxCell>
        <mxCell id="14-4" value='&lt;font style="font-size:16px"&gt;&lt;b&gt;TEPP signer + any client&lt;/b&gt;&lt;/font&gt;' style="swimlane;html=1;startSize=34;fillColor=#b0e3e6;strokeColor=#0e8088;strokeWidth=1.5;swimlaneFillColor=#ffffff;rounded=1;arcSize=8;absoluteArcSize=1;fontFamily=Helvetica;fontColor=#1f2933;align=center;verticalAlign=middle;collapsible=0;" vertex="1" parent="1"><mxGeometry x="40" y="130" width="430" height="260" as="geometry" /></mxCell>
        <mxCell id="14-5" value="" style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="14-4"><mxGeometry x="10" y="40" width="410" height="214" as="geometry" /></mxCell>
        <mxCell id="14-6" value="&lt;b&gt;any client&lt;/b&gt;" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#4d4d4d;strokeWidth=1.5;fontSize=14;align=center;verticalAlign=middle;fontFamily=Helvetica;fontColor=#1f2933;spacing=8;arcSize=8;absoluteArcSize=1;" vertex="1" parent="1"><mxGeometry x="64" y="186" width="140" height="70" as="geometry" /></mxCell>
        <mxCell id="14-7" value="&lt;b&gt;TEPP signer&lt;/b&gt;" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#b0e3e6;strokeColor=#0e8088;strokeWidth=1.5;fontSize=14;align=center;verticalAlign=middle;fontFamily=Helvetica;fontColor=#1f2933;spacing=8;arcSize=8;absoluteArcSize=1;" vertex="1" parent="1"><mxGeometry x="306" y="186" width="140" height="70" as="geometry" /></mxCell>
        <mxCell id="14-8" value="" style="edgeStyle=orthogonalEdgeStyle;rounded=1;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#4d4d4d;strokeWidth=2;fontSize=13;fontFamily=Helvetica;fontColor=#1f2933;labelBackgroundColor=#ffffff;endArrow=block;endFill=1;endSize=7;startArrow=block;startFill=1;startSize=7;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="14-6" target="14-7"><mxGeometry relative="1" as="geometry"></mxGeometry></mxCell>
        <mxCell id="14-9" value='&lt;font style="font-size:12px" color="#52606d"&gt;sign · encrypt · decrypt&lt;/font&gt;' style="text;html=1;whiteSpace=wrap;align=center;verticalAlign=top;fontSize=12;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="1"><mxGeometry x="204" y="226" width="102" height="40" as="geometry" /></mxCell>
        <mxCell id="14-10" value="The home of output. Every client use of the key passes one of three policed oracles, so swapping clients evades nothing. It never sees plain input: add a TEPP client for the feed." style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="1"><mxGeometry x="58" y="276" width="394" height="110" as="geometry" /></mxCell>
        <mxCell id="14-11" value='&lt;font style="font-size:16px"&gt;&lt;b&gt;TEPP client, key loaded&lt;/b&gt;&lt;/font&gt;' style="swimlane;html=1;startSize=34;fillColor=#dae8fc;strokeColor=#6c8ebf;strokeWidth=1.5;swimlaneFillColor=#ffffff;rounded=1;arcSize=8;absoluteArcSize=1;fontFamily=Helvetica;fontColor=#1f2933;align=center;verticalAlign=middle;collapsible=0;" vertex="1" parent="1"><mxGeometry x="490" y="130" width="430" height="260" as="geometry" /></mxCell>
        <mxCell id="14-12" value="" style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="14-11"><mxGeometry x="10" y="40" width="410" height="214" as="geometry" /></mxCell>
        <mxCell id="14-13" value="&lt;b&gt;TEPP client + nsec&lt;/b&gt;" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;strokeWidth=1.5;fontSize=14;align=center;verticalAlign=middle;fontFamily=Helvetica;fontColor=#1f2933;spacing=8;arcSize=8;absoluteArcSize=1;" vertex="1" parent="1"><mxGeometry x="595.0" y="190" width="220" height="70" as="geometry" /></mxCell>
        <mxCell id="14-14" value="Holds the key in-process and runs the full construct in both directions: what may reach the subject, and what the subject may sign." style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="1"><mxGeometry x="508" y="276" width="394" height="110" as="geometry" /></mxCell>
        <mxCell id="14-15" value='&lt;font style="font-size:16px"&gt;&lt;b&gt;keyless TEPP client + a signer&lt;/b&gt;&lt;/font&gt;' style="swimlane;html=1;startSize=34;fillColor=#dae8fc;strokeColor=#6c8ebf;strokeWidth=1.5;swimlaneFillColor=#ffffff;rounded=1;arcSize=8;absoluteArcSize=1;fontFamily=Helvetica;fontColor=#1f2933;align=center;verticalAlign=middle;collapsible=0;" vertex="1" parent="1"><mxGeometry x="940" y="130" width="430" height="260" as="geometry" /></mxCell>
        <mxCell id="14-16" value="" style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="14-15"><mxGeometry x="10" y="40" width="410" height="214" as="geometry" /></mxCell>
        <mxCell id="14-17" value="&lt;b&gt;keyless TEPP client&lt;/b&gt;" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;strokeWidth=1.5;fontSize=14;align=center;verticalAlign=middle;fontFamily=Helvetica;fontColor=#1f2933;spacing=8;arcSize=8;absoluteArcSize=1;" vertex="1" parent="1"><mxGeometry x="964" y="186" width="140" height="70" as="geometry" /></mxCell>
        <mxCell id="14-18" value="&lt;b&gt;plain signer&lt;/b&gt;" style="rounded=1;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#4d4d4d;strokeWidth=1.5;fontSize=14;align=center;verticalAlign=middle;fontFamily=Helvetica;fontColor=#1f2933;spacing=8;arcSize=8;absoluteArcSize=1;" vertex="1" parent="1"><mxGeometry x="1206" y="186" width="140" height="70" as="geometry" /></mxCell>
        <mxCell id="14-19" value="" style="edgeStyle=orthogonalEdgeStyle;rounded=1;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#4d4d4d;strokeWidth=2;fontSize=13;fontFamily=Helvetica;fontColor=#1f2933;labelBackgroundColor=#ffffff;endArrow=block;endFill=1;endSize=7;startArrow=block;startFill=1;startSize=7;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" edge="1" parent="1" source="14-17" target="14-18"><mxGeometry relative="1" as="geometry"></mxGeometry></mxCell>
        <mxCell id="14-20" value='&lt;font style="font-size:12px" color="#52606d"&gt;sign · encrypt · decrypt&lt;/font&gt;' style="text;html=1;whiteSpace=wrap;align=center;verticalAlign=top;fontSize=12;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="1"><mxGeometry x="1104" y="226" width="102" height="40" as="geometry" /></mxCell>
        <mxCell id="14-21" value="Runs and enforces the full construct itself. It reads the sealed policy through the signer's decrypt oracle. Another client on that same plain signer is not policed." style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="1"><mxGeometry x="958" y="276" width="394" height="110" as="geometry" /></mxCell>
        <mxCell id="14-22" value='&lt;font style="font-size:16px"&gt;&lt;b&gt;relays and spaces&lt;/b&gt;&lt;/font&gt;' style="swimlane;html=1;startSize=34;fillColor=#f5f5f5;strokeColor=#666666;strokeWidth=1.5;swimlaneFillColor=#ffffff;rounded=1;arcSize=8;absoluteArcSize=1;fontFamily=Helvetica;fontColor=#1f2933;align=center;verticalAlign=middle;collapsible=0;" vertex="1" parent="1"><mxGeometry x="1390" y="130" width="430" height="260" as="geometry" /></mxCell>
        <mxCell id="14-23" value="" style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="14-22"><mxGeometry x="10" y="40" width="410" height="214" as="geometry" /></mxCell>
        <mxCell id="14-24" value="&lt;b&gt;relay&lt;/b&gt;" style="shape=cylinder3;whiteSpace=wrap;html=1;boundedLbl=1;backgroundOutline=1;size=10;fillColor=#f5f5f5;strokeColor=#666666;strokeWidth=1.5;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;" vertex="1" parent="1"><mxGeometry x="1535.0" y="180" width="140" height="90" as="geometry" /></mxCell>
        <mxCell id="14-25" value="A relay never enforces a subject's regime. It may run the engine for a regime of its own — a space — deciding what it accepts and serves, published as open general carriers anyone can adopt." style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="1"><mxGeometry x="1408" y="276" width="394" height="110" as="geometry" /></mxCell>
        <mxCell id="14-26" value='&lt;font style="font-size:19px"&gt;&lt;b&gt;Axis by locus&lt;/b&gt;&lt;/font&gt;' style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=15;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="1"><mxGeometry x="40" y="420" width="1100" height="32" as="geometry" /></mxCell>
        <mxCell id="14-27" value="axis" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#b0e3e6;strokeColor=#0e8088;fontSize=14;fontStyle=1;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;" vertex="1" parent="1"><mxGeometry x="40" y="462" width="300" height="38" as="geometry" /></mxCell>
        <mxCell id="14-28" value="TEPP signer" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#b0e3e6;strokeColor=#0e8088;fontSize=14;fontStyle=1;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;" vertex="1" parent="1"><mxGeometry x="340" y="462" width="400" height="38" as="geometry" /></mxCell>
        <mxCell id="14-29" value="TEPP client, key loaded" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#b0e3e6;strokeColor=#0e8088;fontSize=14;fontStyle=1;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;" vertex="1" parent="1"><mxGeometry x="740" y="462" width="400" height="38" as="geometry" /></mxCell>
        <mxCell id="14-30" value="keyless TEPP client" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#b0e3e6;strokeColor=#0e8088;fontSize=14;fontStyle=1;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;" vertex="1" parent="1"><mxGeometry x="1140" y="462" width="680" height="38" as="geometry" /></mxCell>
        <mxCell id="14-31" value="deny gates, by value" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;fontStyle=1;" vertex="1" parent="1"><mxGeometry x="40" y="500" width="300" height="40" as="geometry" /></mxCell>
        <mxCell id="14-32" value="full" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="340" y="500" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-33" value="full" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="740" y="500" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-34" value="full — its gates assembled through policy reads" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="1140" y="500" width="680" height="40" as="geometry" /></mxCell>
        <mxCell id="14-35" value="global set and kinds" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;fontStyle=1;" vertex="1" parent="1"><mxGeometry x="40" y="540" width="300" height="40" as="geometry" /></mxCell>
        <mxCell id="14-36" value="full, every recovered layer" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="340" y="540" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-37" value="full, every recovered layer" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="740" y="540" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-38" value="full, every recovered layer" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="1140" y="540" width="680" height="40" as="geometry" /></mxCell>
        <mxCell id="14-39" value="weekday and time of day" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;fontStyle=1;" vertex="1" parent="1"><mxGeometry x="40" y="580" width="300" height="40" as="geometry" /></mxCell>
        <mxCell id="14-40" value="full" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="340" y="580" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-41" value="full" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="740" y="580" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-42" value="full" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="1140" y="580" width="680" height="40" as="geometry" /></mxCell>
        <mxCell id="14-43" value="arrival relay (input)" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;fontStyle=1;" vertex="1" parent="1"><mxGeometry x="40" y="620" width="300" height="40" as="geometry" /></mxCell>
        <mxCell id="14-44" value="only when a decrypt request carries it" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="340" y="620" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-45" value="full where it can vouch; else omitted" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="740" y="620" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-46" value="full where it can vouch; else omitted" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="1140" y="620" width="680" height="40" as="geometry" /></mxCell>
        <mxCell id="14-47" value="opacity restriction" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;fontStyle=1;" vertex="1" parent="1"><mxGeometry x="40" y="660" width="300" height="40" as="geometry" /></mxCell>
        <mxCell id="14-48" value="everywhere" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="340" y="660" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-49" value="everywhere" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="740" y="660" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-50" value="everywhere" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="1140" y="660" width="680" height="40" as="geometry" /></mxCell>
        <mxCell id="14-51" value="reduction, admission of opaque material" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;fontStyle=1;" vertex="1" parent="1"><mxGeometry x="40" y="700" width="300" height="40" as="geometry" /></mxCell>
        <mxCell id="14-52" value="yes" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="340" y="700" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-53" value="yes" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="740" y="700" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-54" value="yes, through its signer's decrypt oracle" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#f7f9fb;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="1140" y="700" width="680" height="40" as="geometry" /></mxCell>
        <mxCell id="14-55" value="sealed policy carriers" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;fontStyle=1;" vertex="1" parent="1"><mxGeometry x="40" y="740" width="300" height="40" as="geometry" /></mxCell>
        <mxCell id="14-56" value="computed address" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="340" y="740" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-57" value="computed address" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="740" y="740" width="400" height="40" as="geometry" /></mxCell>
        <mxCell id="14-58" value="learned once, by trial decryption" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#ffffff;strokeColor=#c9d1d9;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;align=left;spacingLeft=8;spacingRight=6;" vertex="1" parent="1"><mxGeometry x="1140" y="740" width="680" height="40" as="geometry" /></mxCell>
        <mxCell id="14-59" value='&lt;font style="font-size:12px" color="#52606d"&gt;There is no relay column: a relay is not an enforcing locus. Within a regime of its own, a space enforces the deny gates, kinds, times and opacity — never what needs the key.&lt;/font&gt;' style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="1"><mxGeometry x="40" y="788" width="1780" height="30" as="geometry" /></mxCell>
        <mxCell id="14-60" value='&lt;font style="font-size:16px"&gt;&lt;b&gt;What a locus supplies — and never guesses&lt;/b&gt;&lt;/font&gt;' style="swimlane;html=1;startSize=34;fillColor=#ffffff;strokeColor=#4d4d4d;strokeWidth=1.5;swimlaneFillColor=#ffffff;rounded=1;arcSize=8;absoluteArcSize=1;fontFamily=Helvetica;fontColor=#1f2933;align=center;verticalAlign=middle;collapsible=0;" vertex="1" parent="1"><mxGeometry x="40" y="850" width="880" height="170" as="geometry" /></mxCell>
        <mxCell id="14-61" value='The instant with its local weekday and minute (mandatory) · the arrival relay · the discovery relay set · the labelled destination set · timeouts · for encrypted material, the enclosing event and a disclosure.&lt;br&gt;An arrival relay, enclosing event or destination set it cannot supply is omitted, and the axis it feeds is reported as &lt;b&gt;unenforced&lt;/b&gt; — never guessed, never treated as satisfied.&lt;br&gt;&lt;font style="font-size:12px" color="#52606d"&gt;The arrival relay is a locus claim: the relay axis is exactly as sound as the locus that reports it.&lt;/font&gt;' style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="14-60"><mxGeometry x="10" y="40" width="860" height="124" as="geometry" /></mxCell>
        <mxCell id="14-62" value='&lt;font style="font-size:16px"&gt;&lt;b&gt;Several loci, one subject&lt;/b&gt;&lt;/font&gt;' style="swimlane;html=1;startSize=34;fillColor=#ffffff;strokeColor=#4d4d4d;strokeWidth=1.5;swimlaneFillColor=#ffffff;rounded=1;arcSize=8;absoluteArcSize=1;fontFamily=Helvetica;fontColor=#1f2933;align=center;verticalAlign=middle;collapsible=0;" vertex="1" parent="1"><mxGeometry x="940" y="850" width="880" height="170" as="geometry" /></mxCell>
        <mxCell id="14-63" value="A subject can run a TEPP signer and TEPP clients at once. Each keeps its own known world, refreshes on its own, and evaluates against its own snapshot.&lt;br&gt;Between a keyless client and its signer the inputs travel — never the assembled construct: each locus assembles for itself.&lt;br&gt;&lt;font style=&quot;font-size:12px&quot; color=&quot;#52606d&quot;&gt;Where either can act, a signer's enforcement cannot be bypassed by swapping clients; a client's can, on a plain signer.&lt;/font&gt;" style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=top;fontSize=14;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="14-62"><mxGeometry x="10" y="40" width="860" height="124" as="geometry" /></mxCell>
        <mxCell id="14-64" value="" style="endArrow=none;html=1;strokeColor=#d9dee4;strokeWidth=1;" edge="1" parent="1"><mxGeometry relative="1" as="geometry"><mxPoint x="40" y="1032" as="sourcePoint" /><mxPoint x="1820" y="1032" as="targetPoint" /></mxGeometry></mxCell>
        <mxCell id="14-65" value='&lt;font color="#52606d"&gt;TEPP Zeta · diagram 14 · statements: LOCI-001–LOCI-051, TERM-020, OPQ-057–OPQ-060, OPQ-104, OPQ-118, OPQ-125–OPQ-127, TOOL-043, NF-094–NF-099&lt;/font&gt;' style="text;html=1;whiteSpace=wrap;align=left;verticalAlign=middle;fontSize=12;fontFamily=Helvetica;fontColor=#1f2933;spacing=0;strokeColor=none;fillColor=none;" vertex="1" parent="1"><mxGeometry x="40" y="1040" width="1780" height="26" as="geometry" /></mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
