From 45f381d4a26f90ca3a27df36a58165d0761175fa Mon Sep 17 00:00:00 2001
From: Johannes Rudolph <jrudolph@meshcloud.io>
Date: Fri, 31 Jul 2026 10:02:07 +0200
Subject: [PATCH 1/7] feat: render architecture diagrams from Graphviz DOT
 instead of Mermaid

Mermaid gives no control over layout. There is no way to say "keep these three
nodes on one row" and no way to say "this edge must not affect ranking", so any
diagram with two related hierarchies comes out as diagonal spaghetti and every
attempt to fix it fights the engine.

Switch reference architecture diagrams to Graphviz DOT committed next to the
markdown, with the rendered SVG committed alongside:

- tools/diagrams/render-diagrams.mjs renders every *.dot to a sibling *.svg.
  Graphviz runs as a WASM npm package, so no system `dot` install is needed.
  --check re-renders in memory and diffs against what is committed.
- task diagrams / task diagrams:check wrap it; a Diagrams Check workflow runs
  --check on PRs so a .dot edit without a re-render fails instead of shipping a
  stale picture.
- Convert azure-kubernetes and stackit-kubernetes from Mermaid to DOT, using
  rank=same for rows, constraint=false for cross-cutting edges, splines=ortho
  for right-angle connectors and xlabel for labels that survive ortho routing.

Inline HTML/SVG is not an option for these diagrams: the website renders the
markdown through marked into Angular's [innerHTML], which strips <style>,
style attributes and inline SVG, and GitHub's pipeline does the same. So the
markdown references the SVG as a plain relative image, which renders on GitHub,
and index.ts rewrites relative image links to absolute raw URLs pinned to the
built commit so the same link works on the website.

While here, teach getGitHubRemoteUrl to normalize scp-style SSH remotes. It only
handled https, so every generated link was malformed when the script ran in an
SSH clone.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .gitattributes                                |   1 +
 .github/workflows/diagrams-check.yml          |  36 +++
 AGENTS.md                                     |  56 ++++-
 Taskfile.yml                                  |  10 +
 index.ts                                      |  26 ++-
 package-lock.json                             |  10 +-
 package.json                                  |   1 +
 reference-architectures/azure-kubernetes.dot  |  67 ++++++
 reference-architectures/azure-kubernetes.md   |  29 +--
 reference-architectures/azure-kubernetes.svg  | 135 +++++++++++
 .../stackit-kubernetes.dot                    |  87 +++++++
 reference-architectures/stackit-kubernetes.md |  43 +---
 .../stackit-kubernetes.svg                    | 217 ++++++++++++++++++
 tools/diagrams/render-diagrams.mjs            | 105 +++++++++
 yarn.lock                                     |   5 +
 15 files changed, 754 insertions(+), 74 deletions(-)
 create mode 100644 .gitattributes
 create mode 100644 .github/workflows/diagrams-check.yml
 create mode 100644 reference-architectures/azure-kubernetes.dot
 create mode 100644 reference-architectures/azure-kubernetes.svg
 create mode 100644 reference-architectures/stackit-kubernetes.dot
 create mode 100644 reference-architectures/stackit-kubernetes.svg
 create mode 100644 tools/diagrams/render-diagrams.mjs

diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 00000000..a0d7feb7
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+reference-architectures/*.svg linguist-generated=true
diff --git a/.github/workflows/diagrams-check.yml b/.github/workflows/diagrams-check.yml
new file mode 100644
index 00000000..b6a726c0
--- /dev/null
+++ b/.github/workflows/diagrams-check.yml
@@ -0,0 +1,36 @@
+name: Diagrams Check
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+    paths:
+      - "**.dot"
+      - "**.svg"
+      - "tools/diagrams/**"
+      - "package.json"
+      - "package-lock.json"
+      - ".github/workflows/diagrams-check.yml"
+
+concurrency:
+  group: diagrams-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  diagrams:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Verify committed SVGs match their .dot sources
+        run: node tools/diagrams/render-diagrams.mjs --check
diff --git a/AGENTS.md b/AGENTS.md
index 02196203..eb454f0e 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -310,7 +310,8 @@ getting-started steps, and shared responsibility matrix.
 
 - File name: `<cloud>-<capability>.md` (e.g. `azure-kubernetes.md`, `stackit-kubernetes.md`).
 - `buildingBlocks[].path` must match a module path under `modules/` (e.g. `azure/aks`).
-- The Markdown body should include a **Mermaid diagram** showing how blocks relate.
+- The Markdown body should include an **architecture diagram** showing how blocks relate — see
+  [Diagrams](#diagrams) for the format.
 - Include a **shared responsibility matrix** (platform team vs. application team) with ✅ / ❌ emojis.
 - Include **Getting Started** steps with prerequisites and deployment order.
 
@@ -321,10 +322,63 @@ getting-started steps, and shared responsibility matrix.
 - [ ] Every `buildingBlocks[].path` references an existing module in `modules/`
 - [ ] Every `buildingBlocks[].role` has a one-sentence description
 - [ ] Body includes: overview, architecture diagram, how-it-works, getting started, shared responsibilities
+- [ ] Diagram committed as `<name>.dot` + generated `<name>.svg`, referenced with `![...](<name>.svg)`
+- [ ] `task diagrams` run and the regenerated SVG committed
 - [ ] No trailing whitespace
 
 ---
 
+## Diagrams
+
+Architecture diagrams are **Graphviz DOT** source committed next to the Markdown that uses them,
+with the rendered SVG committed alongside:
+
+```
+reference-architectures/
+├── azure-kubernetes.md     # references the SVG: ![...](azure-kubernetes.svg)
+├── azure-kubernetes.dot    # the source you edit
+└── azure-kubernetes.svg    # generated — never hand-edit
+```
+
+```sh
+task diagrams        # re-render every *.dot in the repo to a sibling *.svg
+task diagrams:check  # verify the committed SVGs match their sources (what CI runs)
+```
+
+Graphviz runs from a WASM npm package, so no system `dot` install is needed. CI fails when a `.dot`
+is edited without committing the re-rendered SVG.
+
+### Why not Mermaid
+
+Mermaid renders inline in Markdown, which is convenient, but it offers no way to constrain layout:
+there is no "keep these three nodes on one row" and no "this edge must not affect ranking". Diagrams
+with two related hierarchies come out as diagonal spaghetti. DOT has both escape hatches, which is
+worth the render step:
+
+- `{ rank=same; A B C }` pins nodes to one row.
+- `constraint=false` draws an edge without letting it influence ranking — use it for cross-cutting
+  relationships that would otherwise distort the layout.
+- `splines=ortho` gives right-angle connectors. Under `ortho`, use `xlabel` (with `forcelabels=true`)
+  rather than `label` for edge labels — plain labels get placed far from their edge.
+- Avoid `ordering=out`: it fights rank ordering and silently mirrors rows.
+- Set `bgcolor="white"` explicitly. A transparent background renders dark-on-dark for anyone reading
+  the diagram in GitHub's dark theme.
+
+### Diagrams in Markdown
+
+Reference the SVG with a plain relative image link:
+
+```markdown
+![Azure Kubernetes reference architecture](azure-kubernetes.svg)
+```
+
+Do **not** inline HTML or `<svg>` in the Markdown body. The hub website renders these files through
+`marked` into Angular's `[innerHTML]`, which strips `<style>` blocks, `style` attributes and inline
+SVG; GitHub's Markdown pipeline does the same. `index.ts` rewrites relative image links to absolute
+`raw` URLs pinned to the built commit, so the same relative link works on GitHub and on the website.
+
+---
+
 <!-- scorecard-checks: e2e_tests, e2e_tftest -->
 ## End-to-End Testing
 
diff --git a/Taskfile.yml b/Taskfile.yml
index fda4f116..e35fe995 100644
--- a/Taskfile.yml
+++ b/Taskfile.yml
@@ -4,6 +4,16 @@ vars:
   BASE_REF: origin/main
 
 tasks:
+  diagrams:
+    desc: Render every *.dot diagram to a sibling *.svg
+    cmds:
+      - node tools/diagrams/render-diagrams.mjs {{.CLI_ARGS}}
+
+  diagrams:check:
+    desc: Fail if any committed diagram SVG is stale or missing
+    cmds:
+      - node tools/diagrams/render-diagrams.mjs --check
+
   scorecard:pr:
     desc: "Run scorecard on modules changed vs BASE_REF (default: origin/main). Usage: task scorecard:pr BASE_REF=origin/my-branch"
     cmds:
diff --git a/index.ts b/index.ts
index bb701cc5..67106f43 100644
--- a/index.ts
+++ b/index.ts
@@ -23,7 +23,10 @@ function getGitHubRemoteUrl() {
     const remoteUrl = execSync("git config --get remote.origin.url")
       .toString()
       .trim()
-      .replace(/https?:\/\/.*?@github\.com\//, "https://github.com/");
+      .replace(/https?:\/\/.*?@github\.com\//, "https://github.com/")
+      // scp-style SSH remotes (git@github.com:owner/repo) would otherwise leak into every
+      // generated link, which breaks local runs of this script in an SSH clone.
+      .replace(/^(?:ssh:\/\/)?git@github\.com[:/]/, "https://github.com/");
     return remoteUrl.replace(/\.git$/, "");
   } catch (error) {
     console.error("Error getting GitHub remote URL:", error.message);
@@ -245,12 +248,31 @@ export interface ReferenceArchitecture {
   modulePath: string | null;
 }
 
+// Rewrites relative markdown image links to absolute `raw` URLs pinned to the built commit.
+// Diagrams are committed next to their markdown so a relative link renders on GitHub, but the
+// website serves this body from its own origin where a repo-relative path resolves to nothing.
+function absolutizeImageLinks(body: string, markdownDir: string): string {
+  const remoteUrl = getGitHubRemoteUrl();
+  if (!remoteUrl) return body;
+
+  const dirInRepo = path
+    .relative(path.resolve(__dirname), markdownDir)
+    .replace(/\\/g, "/");
+
+  return body.replace(
+    /(!\[[^\]]*\]\()(?!https?:\/\/|\/|#)([^)\s]+)(\))/g,
+    (_match, prefix, target, suffix) =>
+      `${prefix}${remoteUrl}/raw/${hubRef}/${dirInRepo}/${target.replace(/^\.\//, "")}${suffix}`
+  );
+}
+
 // Parses a reference architecture from its front-matter/body markdown file.
 // `codeDir`, when set, is the directory checked for a `meshstack_integration.tf` that makes
 // this reference architecture importable, the same way a building block is imported.
 function parseReferenceArchitecture(filePath: string, id: string, codeDir: string | null): ReferenceArchitecture {
   const raw = fs.readFileSync(filePath, "utf-8");
-  const { data, content: body } = matter(raw);
+  const { data, content } = matter(raw);
+  const body = absolutizeImageLinks(content, path.dirname(filePath));
 
   if (!data.name) {
     throw new Error(`Reference architecture ${id} is missing "name" in front-matter.`);
diff --git a/package-lock.json b/package-lock.json
index 2dad6e04..0a2b2fab 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,5 +1,5 @@
 {
-  "name": "meshstack-hub",
+  "name": "hub-graphviz",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
@@ -9,9 +9,17 @@
         "gray-matter": "^4.0.3"
       },
       "devDependencies": {
+        "@hpcc-js/wasm-graphviz": "^1.15.0",
         "@types/node": "^25.2.0"
       }
     },
+    "node_modules/@hpcc-js/wasm-graphviz": {
+      "version": "1.28.0",
+      "resolved": "https://registry.npmjs.org/@hpcc-js/wasm-graphviz/-/wasm-graphviz-1.28.0.tgz",
+      "integrity": "sha512-KqvPy7ckxPc1xv8Kt7H3bo9cj8U4gfOXxQ8grLZvDZxyQQjnXsKxrweJLLJtEoWWtQqAk4biUB0g2qsjkTiMVA==",
+      "dev": true,
+      "license": "Apache-2.0"
+    },
     "node_modules/@types/node": {
       "version": "25.2.0",
       "resolved": "https://registry.npmjs.org/@types/node/-/node-25.2.0.tgz",
diff --git a/package.json b/package.json
index 41a610a3..de28479c 100644
--- a/package.json
+++ b/package.json
@@ -4,6 +4,7 @@
     "gray-matter": "^4.0.3"
   },
   "devDependencies": {
+    "@hpcc-js/wasm-graphviz": "^1.15.0",
     "@types/node": "^25.2.0"
   }
 }
diff --git a/reference-architectures/azure-kubernetes.dot b/reference-architectures/azure-kubernetes.dot
new file mode 100644
index 00000000..d4d37703
--- /dev/null
+++ b/reference-architectures/azure-kubernetes.dot
@@ -0,0 +1,67 @@
+/*
+ * Azure Kubernetes reference architecture.
+ * Render with: task diagrams
+ */
+digraph azure_kubernetes {
+  rankdir=TB
+  splines=ortho
+  forcelabels=true
+  bgcolor="white"
+  nodesep=0.60
+  ranksep=0.95
+
+  node [shape=box style="rounded,filled" fontname="Helvetica" fontsize=11 fillcolor="#ffffff" color="#a2abb8" penwidth=1.1 margin="0.20,0.11"]
+  edge [fontname="Helvetica" fontsize=9 fontcolor="#697180" color="#8b95a3" arrowsize=0.7]
+
+  subgraph cluster_catalog {
+    label="  Self-Service Catalog"
+    labeljust=l
+    fontname="Helvetica" fontsize=12 fontcolor="#697180"
+    style="rounded" color="#d5dae0"
+    margin=18
+
+    STARTER [label="aks/starterkit\ndeveloper onboarding" fillcolor="#ecedfb" color="#9aa2e6"]
+  }
+
+  subgraph cluster_team {
+    label="  Per Application Team"
+    labeljust=l
+    fontname="Helvetica" fontsize=12 fontcolor="#697180"
+    style="rounded" color="#d5dae0"
+    margin=18
+
+    REPO [label="github/repository\nGitHub repo" fillcolor="#e5f2ea" color="#85bfa0"]
+    DEV  [label="aks/github-connector\ndev namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
+    PROD [label="aks/github-connector\nprod namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
+
+    { rank=same; DEV -> PROD [style=invis] }
+  }
+
+  subgraph cluster_infra {
+    label="  Existing Infrastructure"
+    labeljust=l
+    fontname="Helvetica" fontsize=12 fontcolor="#697180"
+    style="rounded" color="#d5dae0"
+    margin=18
+
+    AKS [label="AKS cluster\nmanaged by platform team"]
+    ACR [label="Azure Container Registry"]
+
+    { rank=same; AKS -> ACR [style=invis] }
+  }
+
+  STARTER -> REPO [xlabel="creates"]
+  STARTER -> DEV  [xlabel="creates dev env"]
+  STARTER -> PROD [xlabel="creates prod env"]
+
+  REPO -> DEV  [xlabel="repo output"]
+  REPO -> PROD
+
+  DEV  -> ACR [xlabel="push images"]
+  PROD -> ACR
+  DEV  -> AKS [xlabel="deploys to"]
+  PROD -> AKS
+
+  AKS -> ACR [xlabel="pulls" style=dashed constraint=false]
+}
+
diff --git a/reference-architectures/azure-kubernetes.md b/reference-architectures/azure-kubernetes.md
index 992a2b88..8e739be8 100644
--- a/reference-architectures/azure-kubernetes.md
+++ b/reference-architectures/azure-kubernetes.md
@@ -36,34 +36,7 @@ layers developer self-service on top of those clusters.
 
 ## Architecture Diagram
 
-```mermaid
-flowchart TD
-    subgraph Existing Infrastructure
-        B[AKS Cluster<br/>managed by platform team]
-        ACR["Azure Container Registry"]
-    end
-
-    subgraph Self-Service Catalog
-        C[aks/starterkit<br/>Developer Onboarding]
-    end
-
-    subgraph Per Application Team
-        D[github/repository<br/>GitHub Repo]
-        E_dev[aks/github-connector<br/>Dev Namespace CI/CD]
-        E_prod[aks/github-connector<br/>Prod Namespace CI/CD]
-    end
-
-    C -->|creates| D
-    C -->|creates dev project +<br/>namespace + connector| E_dev
-    C -->|creates prod project +<br/>namespace + connector| E_prod
-    D -->|repo output| E_dev
-    D -->|repo output| E_prod
-    E_dev -->|build & push images| ACR
-    E_prod -->|build & push images| ACR
-    B -->|pull access| ACR
-    E_dev -->|deploys to| B
-    E_prod -->|deploys to| B
-```
+![Azure Kubernetes reference architecture](azure-kubernetes.svg)
 
 ## How It Works
 
diff --git a/reference-architectures/azure-kubernetes.svg b/reference-architectures/azure-kubernetes.svg
new file mode 100644
index 00000000..961650fb
--- /dev/null
+++ b/reference-architectures/azure-kubernetes.svg
@@ -0,0 +1,135 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
+ "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg width="415pt" height="455pt"
+ viewBox="0.00 0.00 415.00 455.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 451.36)">
+<title>azure_kubernetes</title>
+<polygon fill="white" stroke="none" points="-4,4 -4,-451.36 411,-451.36 411,4 -4,4"/>
+<g id="clust1" class="cluster">
+<title>cluster_catalog</title>
+<path fill="white" stroke="#d5dae0" d="M151,-338.72C151,-338.72 299,-338.72 299,-338.72 305,-338.72 311,-344.72 311,-350.72 311,-350.72 311,-427.36 311,-427.36 311,-433.36 305,-439.36 299,-439.36 299,-439.36 151,-439.36 151,-439.36 145,-439.36 139,-433.36 139,-427.36 139,-427.36 139,-350.72 139,-350.72 139,-344.72 145,-338.72 151,-338.72"/>
+<text xml:space="preserve" text-anchor="middle" x="205.03" y="-424.56" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Self&#45;Service Catalog</text>
+</g>
+<g id="clust2" class="cluster">
+<title>cluster_team</title>
+<path fill="white" stroke="#d5dae0" d="M37,-118.24C37,-118.24 376,-118.24 376,-118.24 382,-118.24 388,-124.24 388,-130.24 388,-130.24 388,-317.12 388,-317.12 388,-323.12 382,-329.12 376,-329.12 376,-329.12 37,-329.12 37,-329.12 31,-329.12 25,-323.12 25,-317.12 25,-317.12 25,-130.24 25,-130.24 25,-124.24 31,-118.24 37,-118.24"/>
+<text xml:space="preserve" text-anchor="middle" x="93.69" y="-314.32" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Per Application Team</text>
+</g>
+<g id="clust4" class="cluster">
+<title>cluster_infra</title>
+<path fill="white" stroke="#d5dae0" d="M20,-8C20,-8 387,-8 387,-8 393,-8 399,-14 399,-20 399,-20 399,-96.64 399,-96.64 399,-102.64 393,-108.64 387,-108.64 387,-108.64 20,-108.64 20,-108.64 14,-108.64 8,-102.64 8,-96.64 8,-96.64 8,-20 8,-20 8,-14 14,-8 20,-8"/>
+<text xml:space="preserve" text-anchor="middle" x="77.36" y="-93.84" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Existing Infrastructure</text>
+</g>
+<!-- STARTER -->
+<g id="node1" class="node">
+<title>STARTER</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M280.61,-398.96C280.61,-398.96 169.39,-398.96 169.39,-398.96 163.39,-398.96 157.39,-392.96 157.39,-386.96 157.39,-386.96 157.39,-368.72 157.39,-368.72 157.39,-362.72 163.39,-356.72 169.39,-356.72 169.39,-356.72 280.61,-356.72 280.61,-356.72 286.61,-356.72 292.61,-362.72 292.61,-368.72 292.61,-368.72 292.61,-386.96 292.61,-386.96 292.61,-392.96 286.61,-398.96 280.61,-398.96"/>
+<text xml:space="preserve" text-anchor="middle" x="225" y="-381.14" font-family="Helvetica,sans-Serif" font-size="11.00">aks/starterkit</text>
+<text xml:space="preserve" text-anchor="middle" x="225" y="-367.94" font-family="Helvetica,sans-Serif" font-size="11.00">developer onboarding</text>
+</g>
+<!-- REPO -->
+<g id="node2" class="node">
+<title>REPO</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M148.06,-288.72C148.06,-288.72 61.94,-288.72 61.94,-288.72 55.94,-288.72 49.94,-282.72 49.94,-276.72 49.94,-276.72 49.94,-258.48 49.94,-258.48 49.94,-252.48 55.94,-246.48 61.94,-246.48 61.94,-246.48 148.06,-246.48 148.06,-246.48 154.06,-246.48 160.06,-252.48 160.06,-258.48 160.06,-258.48 160.06,-276.72 160.06,-276.72 160.06,-282.72 154.06,-288.72 148.06,-288.72"/>
+<text xml:space="preserve" text-anchor="middle" x="105" y="-270.9" font-family="Helvetica,sans-Serif" font-size="11.00">github/repository</text>
+<text xml:space="preserve" text-anchor="middle" x="105" y="-257.7" font-family="Helvetica,sans-Serif" font-size="11.00">GitHub repo</text>
+</g>
+<!-- STARTER&#45;&gt;REPO -->
+<g id="edge3" class="edge">
+<title>STARTER&#45;&gt;REPO</title>
+<path fill="none" stroke="#8b95a3" d="M167.62,-356.53C167.62,-326.41 167.62,-275 167.62,-275 167.62,-275 166.9,-275 166.9,-275"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="168.95,-272.55 161.95,-275 168.95,-277.45 168.95,-272.55"/>
+<text xml:space="preserve" text-anchor="middle" x="182.37" y="-318.11" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
+</g>
+<!-- DEV -->
+<g id="node3" class="node">
+<title>DEV</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M170.73,-178.48C170.73,-178.48 55.27,-178.48 55.27,-178.48 49.27,-178.48 43.27,-172.48 43.27,-166.48 43.27,-166.48 43.27,-148.24 43.27,-148.24 43.27,-142.24 49.27,-136.24 55.27,-136.24 55.27,-136.24 170.73,-136.24 170.73,-136.24 176.73,-136.24 182.73,-142.24 182.73,-148.24 182.73,-148.24 182.73,-166.48 182.73,-166.48 182.73,-172.48 176.73,-178.48 170.73,-178.48"/>
+<text xml:space="preserve" text-anchor="middle" x="113" y="-160.66" font-family="Helvetica,sans-Serif" font-size="11.00">aks/github&#45;connector</text>
+<text xml:space="preserve" text-anchor="middle" x="113" y="-147.46" font-family="Helvetica,sans-Serif" font-size="11.00">dev namespace CI/CD</text>
+</g>
+<!-- STARTER&#45;&gt;DEV -->
+<g id="edge4" class="edge">
+<title>STARTER&#45;&gt;DEV</title>
+<path fill="none" stroke="#8b95a3" d="M175.17,-356.3C175.17,-356.3 175.17,-187.5 175.17,-187.5"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="177.62,-187.5 175.17,-180.5 172.72,-187.5 177.62,-187.5"/>
+<text xml:space="preserve" text-anchor="middle" x="206.94" y="-274.6" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates dev env</text>
+</g>
+<!-- PROD -->
+<g id="node4" class="node">
+<title>PROD</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M357.87,-178.48C357.87,-178.48 238.13,-178.48 238.13,-178.48 232.13,-178.48 226.13,-172.48 226.13,-166.48 226.13,-166.48 226.13,-148.24 226.13,-148.24 226.13,-142.24 232.13,-136.24 238.13,-136.24 238.13,-136.24 357.87,-136.24 357.87,-136.24 363.87,-136.24 369.87,-142.24 369.87,-148.24 369.87,-148.24 369.87,-166.48 369.87,-166.48 369.87,-172.48 363.87,-178.48 357.87,-178.48"/>
+<text xml:space="preserve" text-anchor="middle" x="298" y="-160.66" font-family="Helvetica,sans-Serif" font-size="11.00">aks/github&#45;connector</text>
+<text xml:space="preserve" text-anchor="middle" x="298" y="-147.46" font-family="Helvetica,sans-Serif" font-size="11.00">prod namespace CI/CD</text>
+</g>
+<!-- STARTER&#45;&gt;PROD -->
+<g id="edge5" class="edge">
+<title>STARTER&#45;&gt;PROD</title>
+<path fill="none" stroke="#8b95a3" d="M270.45,-356.3C270.45,-356.3 270.45,-187.5 270.45,-187.5"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="272.9,-187.5 270.45,-180.5 268,-187.5 272.9,-187.5"/>
+<text xml:space="preserve" text-anchor="middle" x="236.93" y="-263.8" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates prod env</text>
+</g>
+<!-- REPO&#45;&gt;DEV -->
+<g id="edge6" class="edge">
+<title>REPO&#45;&gt;DEV</title>
+<path fill="none" stroke="#8b95a3" d="M105,-246.08C105,-246.08 105,-187.34 105,-187.34"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="107.45,-187.34 105,-180.34 102.55,-187.34 107.45,-187.34"/>
+<text xml:space="preserve" text-anchor="middle" x="82.23" y="-219.41" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">repo output</text>
+</g>
+<!-- REPO&#45;&gt;PROD -->
+<g id="edge7" class="edge">
+<title>REPO&#45;&gt;PROD</title>
+<path fill="none" stroke="#8b95a3" d="M160.4,-261C200.72,-261 248.29,-261 248.29,-261 248.29,-261 248.29,-187.35 248.29,-187.35"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="250.74,-187.35 248.29,-180.35 245.84,-187.35 250.74,-187.35"/>
+</g>
+<!-- DEV&#45;&gt;PROD -->
+<!-- AKS -->
+<g id="node5" class="node">
+<title>AKS</title>
+<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M173.82,-68.24C173.82,-68.24 38.18,-68.24 38.18,-68.24 32.18,-68.24 26.18,-62.24 26.18,-56.24 26.18,-56.24 26.18,-38 26.18,-38 26.18,-32 32.18,-26 38.18,-26 38.18,-26 173.82,-26 173.82,-26 179.82,-26 185.82,-32 185.82,-38 185.82,-38 185.82,-56.24 185.82,-56.24 185.82,-62.24 179.82,-68.24 173.82,-68.24"/>
+<text xml:space="preserve" text-anchor="middle" x="106" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">AKS cluster</text>
+<text xml:space="preserve" text-anchor="middle" x="106" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">managed by platform team</text>
+</g>
+<!-- DEV&#45;&gt;AKS -->
+<g id="edge10" class="edge">
+<title>DEV&#45;&gt;AKS</title>
+<path fill="none" stroke="#8b95a3" d="M113,-135.84C113,-135.84 113,-77.1 113,-77.1"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="115.45,-77.1 113,-70.1 110.55,-77.1 115.45,-77.1"/>
+<text xml:space="preserve" text-anchor="middle" x="92.49" y="-109.17" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">deploys to</text>
+</g>
+<!-- ACR -->
+<g id="node6" class="node">
+<title>ACR</title>
+<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M368.84,-65.12C368.84,-65.12 241.16,-65.12 241.16,-65.12 235.16,-65.12 229.16,-59.12 229.16,-53.12 229.16,-53.12 229.16,-41.12 229.16,-41.12 229.16,-35.12 235.16,-29.12 241.16,-29.12 241.16,-29.12 368.84,-29.12 368.84,-29.12 374.84,-29.12 380.84,-35.12 380.84,-41.12 380.84,-41.12 380.84,-53.12 380.84,-53.12 380.84,-59.12 374.84,-65.12 368.84,-65.12"/>
+<text xml:space="preserve" text-anchor="middle" x="305" y="-43.82" font-family="Helvetica,sans-Serif" font-size="11.00">Azure Container Registry</text>
+</g>
+<!-- DEV&#45;&gt;ACR -->
+<g id="edge8" class="edge">
+<title>DEV&#45;&gt;ACR</title>
+<path fill="none" stroke="#8b95a3" d="M183.05,-147C199.68,-147 212.69,-147 212.69,-147 212.69,-147 212.69,-51 212.69,-51 212.69,-51 220.26,-51 220.26,-51"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="220.26,-53.45 227.26,-51 220.26,-48.55 220.26,-53.45"/>
+<text xml:space="preserve" text-anchor="middle" x="187.18" y="-112.74" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">push images</text>
+</g>
+<!-- PROD&#45;&gt;AKS -->
+<g id="edge11" class="edge">
+<title>PROD&#45;&gt;AKS</title>
+<path fill="none" stroke="#8b95a3" d="M225.72,-168C210.66,-168 199.26,-168 199.26,-168 199.26,-168 199.26,-58 199.26,-58 199.26,-58 194.8,-58 194.8,-58"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="194.8,-55.55 187.8,-58 194.8,-60.45 194.8,-55.55"/>
+</g>
+<!-- PROD&#45;&gt;ACR -->
+<g id="edge9" class="edge">
+<title>PROD&#45;&gt;ACR</title>
+<path fill="none" stroke="#8b95a3" d="M299.51,-135.84C299.51,-135.84 299.51,-74.17 299.51,-74.17"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="301.96,-74.17 299.51,-67.17 297.06,-74.17 301.96,-74.17"/>
+</g>
+<!-- AKS&#45;&gt;ACR -->
+<!-- AKS&#45;&gt;ACR -->
+<g id="edge12" class="edge">
+<title>AKS&#45;&gt;ACR</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M186.37,-44C186.37,-44 220.33,-44 220.33,-44"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="220.33,-46.45 227.33,-44 220.33,-41.55 220.33,-46.45"/>
+<text xml:space="preserve" text-anchor="middle" x="212.6" y="-46.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pulls</text>
+</g>
+</g>
+</svg>
diff --git a/reference-architectures/stackit-kubernetes.dot b/reference-architectures/stackit-kubernetes.dot
new file mode 100644
index 00000000..f6bfff2d
--- /dev/null
+++ b/reference-architectures/stackit-kubernetes.dot
@@ -0,0 +1,87 @@
+/*
+ * STACKIT Kubernetes (SKE) reference architecture.
+ * Render with: task diagrams
+ */
+digraph stackit_kubernetes {
+  rankdir=TB
+  splines=ortho
+  forcelabels=true
+  bgcolor="white"
+  nodesep=0.55
+  ranksep=0.85
+
+  node [shape=box style="rounded,filled" fontname="Helvetica" fontsize=11 fillcolor="#ffffff" color="#a2abb8" penwidth=1.1 margin="0.20,0.11"]
+  edge [fontname="Helvetica" fontsize=9 fontcolor="#697180" color="#8b95a3" arrowsize=0.7]
+
+  subgraph cluster_catalog {
+    label="  Self-Service Catalog"
+    labeljust=l
+    fontname="Helvetica" fontsize=12 fontcolor="#697180"
+    style="rounded" color="#d5dae0"
+    margin=18
+
+    STARTER [label="ske/ske-starterkit\ndeveloper onboarding" fillcolor="#ecedfb" color="#9aa2e6"]
+  }
+
+  subgraph cluster_team {
+    label="  Per Application Team"
+    labeljust=l
+    fontname="Helvetica" fontsize=12 fontcolor="#697180"
+    style="rounded" color="#d5dae0"
+    margin=18
+
+    REPO   [label="stackit/git-repository\nForgejo repo" fillcolor="#e5f2ea" color="#85bfa0"]
+    P_DEV  [label="dev project\n+ SKE tenant" fillcolor="#e5f2ea" color="#85bfa0"]
+    P_PROD [label="prod project\n+ SKE tenant" fillcolor="#e5f2ea" color="#85bfa0"]
+    D_DEV  [label="ske/forgejo-connector\ndev namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
+    D_PROD [label="ske/forgejo-connector\nprod namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
+
+    { rank=same; P_PROD -> P_DEV -> REPO [style=invis] }
+    { rank=same; D_PROD -> D_DEV [style=invis] }
+  }
+
+  subgraph cluster_platform {
+    label="  Platform Team"
+    labeljust=l
+    fontname="Helvetica" fontsize=12 fontcolor="#697180"
+    style="rounded" color="#d5dae0"
+    margin=18
+
+    SKE [label="SKE cluster\nmanaged by STACKIT"]
+  }
+
+  subgraph cluster_stackit {
+    label="  STACKIT Global Services"
+    labeljust=l
+    fontname="Helvetica" fontsize=12 fontcolor="#697180"
+    style="rounded" color="#d5dae0"
+    margin=18
+
+    GIT    [label="STACKIT Git\nForgejo instance"]
+    HARBOR [label="STACKIT Harbor\nregistry shared across customers"]
+    MODEL  [label="STACKIT Model Serving\nplatform-provided API"]
+
+    { rank=same; GIT -> HARBOR -> MODEL [style=invis] }
+  }
+
+  STARTER -> REPO   [xlabel="creates"]
+  STARTER -> P_DEV  [xlabel="creates"]
+  STARTER -> P_PROD
+  STARTER -> D_DEV  [xlabel="creates connector"]
+  STARTER -> D_PROD
+
+  P_DEV  -> D_DEV  [xlabel="namespace"]
+  P_PROD -> D_PROD
+  REPO   -> D_DEV  [xlabel="repo output"]
+  REPO   -> D_PROD
+
+  D_DEV  -> SKE [xlabel="deploys to"]
+  D_PROD -> SKE
+
+  REPO   -> GIT    [xlabel="hosted on" style=dashed]
+  D_DEV  -> HARBOR [xlabel="push images" style=dashed]
+  D_PROD -> HARBOR [style=dashed]
+  D_DEV  -> MODEL  [xlabel="model API secret" style=dashed]
+  D_PROD -> MODEL  [style=dashed]
+  HARBOR -> SKE    [xlabel="pulls" style=dashed constraint=false]
+}
diff --git a/reference-architectures/stackit-kubernetes.md b/reference-architectures/stackit-kubernetes.md
index 64d2b18a..db3bbd8a 100644
--- a/reference-architectures/stackit-kubernetes.md
+++ b/reference-architectures/stackit-kubernetes.md
@@ -36,48 +36,7 @@ a sovereign LLM API, ensuring even AI capabilities remain under full data contro
 
 ## Architecture Diagram
 
-```mermaid
-flowchart TD
-    subgraph STACKIT["STACKIT Global Services"]
-        Git["STACKIT Git<br/>(Forgejo Instance)"]
-        Harbor["STACKIT Harbor<br/>(Global Registry<br/>Shared Across Customers)"]
-        ModelServing["STACKIT Model Serving<br/>(Platform-provided API)"]
-    end
-
-    subgraph Platform Team
-        SKE[SKE Cluster<br/>Managed by STACKIT]
-    end
-
-    subgraph Self-Service Catalog
-        B[ske/ske-starterkit<br/>Developer Onboarding]
-    end
-
-    subgraph Per Application Team
-        C[stackit/git-repository<br/>Forgejo Repo]
-        D_dev[ske/forgejo-connector<br/>Dev Namespace CI/CD]
-        D_prod[ske/forgejo-connector<br/>Prod Namespace CI/CD]
-        P_dev[Dev Project + SKE Tenant]
-        P_prod[Prod Project + SKE Tenant]
-    end
-
-    B -->|creates| C
-    B -->|creates| P_dev
-    B -->|creates| P_prod
-    B -->|creates dev connector| D_dev
-    B -->|creates prod connector| D_prod
-    P_dev -->|namespace| D_dev
-    P_prod -->|namespace| D_prod
-    C -->|hosted on| Git
-    C -->|repo output| D_dev
-    C -->|repo output| D_prod
-    D_dev -->|push images to| Harbor
-    D_prod -->|push images to| Harbor
-    D_dev -->|wires Model API secret| ModelServing
-    D_prod -->|wires Model API secret| ModelServing
-    D_dev -->|deploys to| SKE
-    D_prod -->|deploys to| SKE
-    Harbor -->|pull from| SKE
-```
+![STACKIT Kubernetes reference architecture](stackit-kubernetes.svg)
 
 ## How It Works
 
diff --git a/reference-architectures/stackit-kubernetes.svg b/reference-architectures/stackit-kubernetes.svg
new file mode 100644
index 00000000..85e38d81
--- /dev/null
+++ b/reference-architectures/stackit-kubernetes.svg
@@ -0,0 +1,217 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
+ "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg width="771pt" height="445pt"
+ viewBox="0.00 0.00 771.00 445.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 441.16)">
+<title>stackit_kubernetes</title>
+<polygon fill="white" stroke="none" points="-4,4 -4,-441.16 767,-441.16 767,4 -4,4"/>
+<g id="clust1" class="cluster">
+<title>cluster_catalog</title>
+<path fill="white" stroke="#d5dae0" d="M185,-328.52C185,-328.52 333,-328.52 333,-328.52 339,-328.52 345,-334.52 345,-340.52 345,-340.52 345,-417.16 345,-417.16 345,-423.16 339,-429.16 333,-429.16 333,-429.16 185,-429.16 185,-429.16 179,-429.16 173,-423.16 173,-417.16 173,-417.16 173,-340.52 173,-340.52 173,-334.52 179,-328.52 185,-328.52"/>
+<text xml:space="preserve" text-anchor="middle" x="239.03" y="-414.36" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Self&#45;Service Catalog</text>
+</g>
+<g id="clust2" class="cluster">
+<title>cluster_team</title>
+<path fill="white" stroke="#d5dae0" d="M206,-116.64C206,-116.64 612,-116.64 612,-116.64 618,-116.64 624,-122.64 624,-128.64 624,-128.64 624,-308.52 624,-308.52 624,-314.52 618,-320.52 612,-320.52 612,-320.52 206,-320.52 206,-320.52 200,-320.52 194,-314.52 194,-308.52 194,-308.52 194,-128.64 194,-128.64 194,-122.64 200,-116.64 206,-116.64"/>
+<text xml:space="preserve" text-anchor="middle" x="262.69" y="-305.72" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Per Application Team</text>
+</g>
+<g id="clust5" class="cluster">
+<title>cluster_platform</title>
+<path fill="white" stroke="#d5dae0" d="M20,-8C20,-8 170,-8 170,-8 176,-8 182,-14 182,-20 182,-20 182,-96.64 182,-96.64 182,-102.64 176,-108.64 170,-108.64 170,-108.64 20,-108.64 20,-108.64 14,-108.64 8,-102.64 8,-96.64 8,-96.64 8,-20 8,-20 8,-14 14,-8 20,-8"/>
+<text xml:space="preserve" text-anchor="middle" x="58.68" y="-93.84" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Platform Team</text>
+</g>
+<g id="clust6" class="cluster">
+<title>cluster_stackit</title>
+<path fill="white" stroke="#d5dae0" d="M202,-8C202,-8 743,-8 743,-8 749,-8 755,-14 755,-20 755,-20 755,-96.64 755,-96.64 755,-102.64 749,-108.64 743,-108.64 743,-108.64 202,-108.64 202,-108.64 196,-108.64 190,-102.64 190,-96.64 190,-96.64 190,-20 190,-20 190,-14 196,-8 202,-8"/>
+<text xml:space="preserve" text-anchor="middle" x="270.35" y="-93.84" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;STACKIT Global Services</text>
+</g>
+<!-- STARTER -->
+<g id="node1" class="node">
+<title>STARTER</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M314.61,-388.76C314.61,-388.76 203.39,-388.76 203.39,-388.76 197.39,-388.76 191.39,-382.76 191.39,-376.76 191.39,-376.76 191.39,-358.52 191.39,-358.52 191.39,-352.52 197.39,-346.52 203.39,-346.52 203.39,-346.52 314.61,-346.52 314.61,-346.52 320.61,-346.52 326.61,-352.52 326.61,-358.52 326.61,-358.52 326.61,-376.76 326.61,-376.76 326.61,-382.76 320.61,-388.76 314.61,-388.76"/>
+<text xml:space="preserve" text-anchor="middle" x="259" y="-370.94" font-family="Helvetica,sans-Serif" font-size="11.00">ske/ske&#45;starterkit</text>
+<text xml:space="preserve" text-anchor="middle" x="259" y="-357.74" font-family="Helvetica,sans-Serif" font-size="11.00">developer onboarding</text>
+</g>
+<!-- REPO -->
+<g id="node2" class="node">
+<title>REPO</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M594.3,-280.12C594.3,-280.12 491.7,-280.12 491.7,-280.12 485.7,-280.12 479.7,-274.12 479.7,-268.12 479.7,-268.12 479.7,-249.88 479.7,-249.88 479.7,-243.88 485.7,-237.88 491.7,-237.88 491.7,-237.88 594.3,-237.88 594.3,-237.88 600.3,-237.88 606.3,-243.88 606.3,-249.88 606.3,-249.88 606.3,-268.12 606.3,-268.12 606.3,-274.12 600.3,-280.12 594.3,-280.12"/>
+<text xml:space="preserve" text-anchor="middle" x="543" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">stackit/git&#45;repository</text>
+<text xml:space="preserve" text-anchor="middle" x="543" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">Forgejo repo</text>
+</g>
+<!-- STARTER&#45;&gt;REPO -->
+<g id="edge6" class="edge">
+<title>STARTER&#45;&gt;REPO</title>
+<path fill="none" stroke="#8b95a3" d="M327.03,-375C411.04,-375 543,-375 543,-375 543,-375 543,-289.06 543,-289.06"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="545.45,-289.06 543,-282.06 540.55,-289.06 545.45,-289.06"/>
+<text xml:space="preserve" text-anchor="middle" x="463.23" y="-377.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
+</g>
+<!-- P_DEV -->
+<g id="node3" class="node">
+<title>P_DEV</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M293.96,-280.12C293.96,-280.12 224.04,-280.12 224.04,-280.12 218.04,-280.12 212.04,-274.12 212.04,-268.12 212.04,-268.12 212.04,-249.88 212.04,-249.88 212.04,-243.88 218.04,-237.88 224.04,-237.88 224.04,-237.88 293.96,-237.88 293.96,-237.88 299.96,-237.88 305.96,-243.88 305.96,-249.88 305.96,-249.88 305.96,-268.12 305.96,-268.12 305.96,-274.12 299.96,-280.12 293.96,-280.12"/>
+<text xml:space="preserve" text-anchor="middle" x="259" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">dev project</text>
+<text xml:space="preserve" text-anchor="middle" x="259" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">+ SKE tenant</text>
+</g>
+<!-- STARTER&#45;&gt;P_DEV -->
+<g id="edge7" class="edge">
+<title>STARTER&#45;&gt;P_DEV</title>
+<path fill="none" stroke="#8b95a3" d="M259,-346.18C259,-346.18 259,-288.93 259,-288.93"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="261.45,-288.93 259,-281.93 256.55,-288.93 261.45,-288.93"/>
+<text xml:space="preserve" text-anchor="middle" x="244.24" y="-320.25" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
+</g>
+<!-- P_PROD -->
+<g id="node4" class="node">
+<title>P_PROD</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M427.96,-280.12C427.96,-280.12 358.04,-280.12 358.04,-280.12 352.04,-280.12 346.04,-274.12 346.04,-268.12 346.04,-268.12 346.04,-249.88 346.04,-249.88 346.04,-243.88 352.04,-237.88 358.04,-237.88 358.04,-237.88 427.96,-237.88 427.96,-237.88 433.96,-237.88 439.96,-243.88 439.96,-249.88 439.96,-249.88 439.96,-268.12 439.96,-268.12 439.96,-274.12 433.96,-280.12 427.96,-280.12"/>
+<text xml:space="preserve" text-anchor="middle" x="393" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">prod project</text>
+<text xml:space="preserve" text-anchor="middle" x="393" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">+ SKE tenant</text>
+</g>
+<!-- STARTER&#45;&gt;P_PROD -->
+<g id="edge8" class="edge">
+<title>STARTER&#45;&gt;P_PROD</title>
+<path fill="none" stroke="#8b95a3" d="M319.73,-346.08C319.73,-316.25 319.73,-266 319.73,-266 319.73,-266 337.25,-266 337.25,-266"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="337.25,-268.45 344.25,-266 337.25,-263.55 337.25,-268.45"/>
+</g>
+<!-- D_DEV -->
+<g id="node5" class="node">
+<title>D_DEV</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M339.73,-176.88C339.73,-176.88 224.27,-176.88 224.27,-176.88 218.27,-176.88 212.27,-170.88 212.27,-164.88 212.27,-164.88 212.27,-146.64 212.27,-146.64 212.27,-140.64 218.27,-134.64 224.27,-134.64 224.27,-134.64 339.73,-134.64 339.73,-134.64 345.73,-134.64 351.73,-140.64 351.73,-146.64 351.73,-146.64 351.73,-164.88 351.73,-164.88 351.73,-170.88 345.73,-176.88 339.73,-176.88"/>
+<text xml:space="preserve" text-anchor="middle" x="282" y="-159.06" font-family="Helvetica,sans-Serif" font-size="11.00">ske/forgejo&#45;connector</text>
+<text xml:space="preserve" text-anchor="middle" x="282" y="-145.86" font-family="Helvetica,sans-Serif" font-size="11.00">dev namespace CI/CD</text>
+</g>
+<!-- STARTER&#45;&gt;D_DEV -->
+<g id="edge9" class="edge">
+<title>STARTER&#45;&gt;D_DEV</title>
+<path fill="none" stroke="#8b95a3" d="M312.85,-346.16C312.85,-346.16 312.85,-185.81 312.85,-185.81"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="315.3,-185.81 312.85,-178.81 310.4,-185.81 315.3,-185.81"/>
+<text xml:space="preserve" text-anchor="middle" x="348.62" y="-268.69" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates connector</text>
+</g>
+<!-- D_PROD -->
+<g id="node6" class="node">
+<title>D_PROD</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M523.87,-176.88C523.87,-176.88 404.13,-176.88 404.13,-176.88 398.13,-176.88 392.13,-170.88 392.13,-164.88 392.13,-164.88 392.13,-146.64 392.13,-146.64 392.13,-140.64 398.13,-134.64 404.13,-134.64 404.13,-134.64 523.87,-134.64 523.87,-134.64 529.87,-134.64 535.87,-140.64 535.87,-146.64 535.87,-146.64 535.87,-164.88 535.87,-164.88 535.87,-170.88 529.87,-176.88 523.87,-176.88"/>
+<text xml:space="preserve" text-anchor="middle" x="464" y="-159.06" font-family="Helvetica,sans-Serif" font-size="11.00">ske/forgejo&#45;connector</text>
+<text xml:space="preserve" text-anchor="middle" x="464" y="-145.86" font-family="Helvetica,sans-Serif" font-size="11.00">prod namespace CI/CD</text>
+</g>
+<!-- STARTER&#45;&gt;D_PROD -->
+<g id="edge10" class="edge">
+<title>STARTER&#45;&gt;D_PROD</title>
+<path fill="none" stroke="#8b95a3" d="M326.99,-361C385.25,-361 459.83,-361 459.83,-361 459.83,-361 459.83,-185.85 459.83,-185.85"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="462.28,-185.85 459.83,-178.85 457.38,-185.85 462.28,-185.85"/>
+</g>
+<!-- REPO&#45;&gt;D_DEV -->
+<g id="edge13" class="edge">
+<title>REPO&#45;&gt;D_DEV</title>
+<path fill="none" stroke="#8b95a3" d="M507.78,-237.66C507.78,-219.73 507.78,-197 507.78,-197 507.78,-197 336.32,-197 336.32,-197 336.32,-197 336.32,-185.86 336.32,-185.86"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="338.77,-185.86 336.32,-178.86 333.87,-185.86 338.77,-185.86"/>
+<text xml:space="preserve" text-anchor="middle" x="414.05" y="-199.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">repo output</text>
+</g>
+<!-- REPO&#45;&gt;D_PROD -->
+<g id="edge14" class="edge">
+<title>REPO&#45;&gt;D_PROD</title>
+<path fill="none" stroke="#8b95a3" d="M521.83,-237.61C521.83,-237.61 521.83,-185.64 521.83,-185.64"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="524.28,-185.64 521.83,-178.64 519.38,-185.64 524.28,-185.64"/>
+</g>
+<!-- GIT -->
+<g id="node8" class="node">
+<title>GIT</title>
+<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M725.06,-68.24C725.06,-68.24 638.94,-68.24 638.94,-68.24 632.94,-68.24 626.94,-62.24 626.94,-56.24 626.94,-56.24 626.94,-38 626.94,-38 626.94,-32 632.94,-26 638.94,-26 638.94,-26 725.06,-26 725.06,-26 731.06,-26 737.06,-32 737.06,-38 737.06,-38 737.06,-56.24 737.06,-56.24 737.06,-62.24 731.06,-68.24 725.06,-68.24"/>
+<text xml:space="preserve" text-anchor="middle" x="682" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">STACKIT Git</text>
+<text xml:space="preserve" text-anchor="middle" x="682" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">Forgejo instance</text>
+</g>
+<!-- REPO&#45;&gt;GIT -->
+<g id="edge17" class="edge">
+<title>REPO&#45;&gt;GIT</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M596.85,-237.45C596.85,-184.82 596.85,-54 596.85,-54 596.85,-54 618.12,-54 618.12,-54"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="618.12,-56.45 625.12,-54 618.12,-51.55 618.12,-56.45"/>
+<text xml:space="preserve" text-anchor="middle" x="577.08" y="-137.79" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">hosted on</text>
+</g>
+<!-- P_DEV&#45;&gt;REPO -->
+<!-- P_DEV&#45;&gt;D_DEV -->
+<g id="edge11" class="edge">
+<title>P_DEV&#45;&gt;D_DEV</title>
+<path fill="none" stroke="#8b95a3" d="M243.5,-237.61C243.5,-237.61 243.5,-185.64 243.5,-185.64"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="245.95,-185.64 243.5,-178.64 241.05,-185.64 245.95,-185.64"/>
+<text xml:space="preserve" text-anchor="middle" x="220.24" y="-214.32" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">namespace</text>
+</g>
+<!-- P_PROD&#45;&gt;P_DEV -->
+<!-- P_PROD&#45;&gt;D_PROD -->
+<g id="edge12" class="edge">
+<title>P_PROD&#45;&gt;D_PROD</title>
+<path fill="none" stroke="#8b95a3" d="M416.05,-237.61C416.05,-237.61 416.05,-185.64 416.05,-185.64"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="418.5,-185.64 416.05,-178.64 413.6,-185.64 418.5,-185.64"/>
+</g>
+<!-- SKE -->
+<g id="node7" class="node">
+<title>SKE</title>
+<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M152.42,-68.24C152.42,-68.24 37.58,-68.24 37.58,-68.24 31.58,-68.24 25.58,-62.24 25.58,-56.24 25.58,-56.24 25.58,-38 25.58,-38 25.58,-32 31.58,-26 37.58,-26 37.58,-26 152.42,-26 152.42,-26 158.42,-26 164.42,-32 164.42,-38 164.42,-38 164.42,-56.24 164.42,-56.24 164.42,-62.24 158.42,-68.24 152.42,-68.24"/>
+<text xml:space="preserve" text-anchor="middle" x="95" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">SKE cluster</text>
+<text xml:space="preserve" text-anchor="middle" x="95" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">managed by STACKIT</text>
+</g>
+<!-- D_DEV&#45;&gt;SKE -->
+<g id="edge15" class="edge">
+<title>D_DEV&#45;&gt;SKE</title>
+<path fill="none" stroke="#8b95a3" d="M211.73,-156C150.64,-156 71.86,-156 71.86,-156 71.86,-156 71.86,-77.14 71.86,-77.14"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="74.31,-77.14 71.86,-70.14 69.41,-77.14 74.31,-77.14"/>
+<text xml:space="preserve" text-anchor="middle" x="81.85" y="-158.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">deploys to</text>
+</g>
+<!-- HARBOR -->
+<g id="node9" class="node">
+<title>HARBOR</title>
+<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M575.4,-68.24C575.4,-68.24 408.6,-68.24 408.6,-68.24 402.6,-68.24 396.6,-62.24 396.6,-56.24 396.6,-56.24 396.6,-38 396.6,-38 396.6,-32 402.6,-26 408.6,-26 408.6,-26 575.4,-26 575.4,-26 581.4,-26 587.4,-32 587.4,-38 587.4,-38 587.4,-56.24 587.4,-56.24 587.4,-62.24 581.4,-68.24 575.4,-68.24"/>
+<text xml:space="preserve" text-anchor="middle" x="492" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">STACKIT Harbor</text>
+<text xml:space="preserve" text-anchor="middle" x="492" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">registry shared across customers</text>
+</g>
+<!-- D_DEV&#45;&gt;HARBOR -->
+<g id="edge18" class="edge">
+<title>D_DEV&#45;&gt;HARBOR</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M352.03,-145C361.61,-145 368.25,-145 368.25,-145 368.25,-145 368.25,-58 368.25,-58 368.25,-58 387.82,-58 387.82,-58"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="387.82,-60.45 394.82,-58 387.82,-55.55 387.82,-60.45"/>
+<text xml:space="preserve" text-anchor="middle" x="393.76" y="-102.53" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">push images</text>
+</g>
+<!-- MODEL -->
+<g id="node10" class="node">
+<title>MODEL</title>
+<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M344.31,-68.24C344.31,-68.24 219.69,-68.24 219.69,-68.24 213.69,-68.24 207.69,-62.24 207.69,-56.24 207.69,-56.24 207.69,-38 207.69,-38 207.69,-32 213.69,-26 219.69,-26 219.69,-26 344.31,-26 344.31,-26 350.31,-26 356.31,-32 356.31,-38 356.31,-38 356.31,-56.24 356.31,-56.24 356.31,-62.24 350.31,-68.24 344.31,-68.24"/>
+<text xml:space="preserve" text-anchor="middle" x="282" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">STACKIT Model Serving</text>
+<text xml:space="preserve" text-anchor="middle" x="282" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">platform&#45;provided API</text>
+</g>
+<!-- D_DEV&#45;&gt;MODEL -->
+<g id="edge20" class="edge">
+<title>D_DEV&#45;&gt;MODEL</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M282,-134.3C282,-134.3 282,-77.05 282,-77.05"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="284.45,-77.05 282,-70.05 279.55,-77.05 284.45,-77.05"/>
+<text xml:space="preserve" text-anchor="middle" x="247.74" y="-108.37" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">model API secret</text>
+</g>
+<!-- D_PROD&#45;&gt;D_DEV -->
+<!-- D_PROD&#45;&gt;SKE -->
+<g id="edge16" class="edge">
+<title>D_PROD&#45;&gt;SKE</title>
+<path fill="none" stroke="#8b95a3" d="M443.02,-134.12C443.02,-118.81 443.02,-101 443.02,-101 443.02,-101 118.14,-101 118.14,-101 118.14,-101 118.14,-77.24 118.14,-77.24"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="120.59,-77.24 118.14,-70.24 115.69,-77.24 120.59,-77.24"/>
+</g>
+<!-- D_PROD&#45;&gt;HARBOR -->
+<g id="edge19" class="edge">
+<title>D_PROD&#45;&gt;HARBOR</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M489.45,-134.3C489.45,-134.3 489.45,-77.05 489.45,-77.05"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="491.9,-77.05 489.45,-70.05 487,-77.05 491.9,-77.05"/>
+</g>
+<!-- D_PROD&#45;&gt;MODEL -->
+<g id="edge21" class="edge">
+<title>D_PROD&#45;&gt;MODEL</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M391.84,-166C384.79,-166 380.19,-166 380.19,-166 380.19,-166 380.19,-47 380.19,-47 380.19,-47 364.93,-47 364.93,-47"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="364.93,-44.55 357.93,-47 364.93,-49.45 364.93,-44.55"/>
+</g>
+<!-- GIT&#45;&gt;HARBOR -->
+<!-- HARBOR&#45;&gt;SKE -->
+<g id="edge22" class="edge">
+<title>HARBOR&#45;&gt;SKE</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M492,-25.73C492,-16.6 492,-8 492,-8 492,-8 95,-8 95,-8 95,-8 95,-17.22 95,-17.22"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="92.55,-17.22 95,-24.22 97.45,-17.22 92.55,-17.22"/>
+<text xml:space="preserve" text-anchor="middle" x="288.5" y="-10.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pulls</text>
+</g>
+<!-- HARBOR&#45;&gt;MODEL -->
+</g>
+</svg>
diff --git a/tools/diagrams/render-diagrams.mjs b/tools/diagrams/render-diagrams.mjs
new file mode 100644
index 00000000..02ab8f43
--- /dev/null
+++ b/tools/diagrams/render-diagrams.mjs
@@ -0,0 +1,105 @@
+#!/usr/bin/env node
+/**
+ * Renders every `*.dot` diagram in the repo to a sibling `*.svg`.
+ *
+ *   node tools/diagrams/render-diagrams.mjs            # write the SVGs
+ *   node tools/diagrams/render-diagrams.mjs --check    # fail if any SVG is stale
+ *
+ * Graphviz runs as a WASM module from node_modules, so no system `dot` install
+ * is required. The `--check` mode is what CI runs: it re-renders in memory and
+ * compares against what is committed, so a `.dot` edit without a re-render fails
+ * the build instead of silently shipping a stale picture.
+ */
+
+import { readFileSync, writeFileSync, readdirSync, statSync } from "node:fs";
+import { join, relative, dirname, basename } from "node:path";
+import { fileURLToPath } from "node:url";
+import { Graphviz } from "@hpcc-js/wasm-graphviz";
+
+const repoRoot = join(dirname(fileURLToPath(import.meta.url)), "..", "..");
+
+const SKIP_DIRS = new Set([
+  ".git",
+  ".terraform",
+  "node_modules",
+  "dist",
+  ".go",
+]);
+
+function findDotFiles(dir) {
+  return readdirSync(dir, { withFileTypes: true }).flatMap(entry => {
+    if (entry.isDirectory()) {
+      if (SKIP_DIRS.has(entry.name)) return [];
+      return findDotFiles(join(dir, entry.name));
+    }
+    return entry.isFile() && entry.name.endsWith(".dot")
+      ? [join(dir, entry.name)]
+      : [];
+  });
+}
+
+/**
+ * Drops the generator comment so the committed SVG does not churn on every
+ * Graphviz version bump, and keeps a trailing newline for well-behaved diffs.
+ */
+function normalize(svg) {
+  return svg
+    .replace(/<!--\s*Generated by graphviz[\s\S]*?-->\s*/g, "")
+    .replace(/<!--\s*Title:[\s\S]*?-->\s*/g, "")
+    .replace(/\s*$/, "\n");
+}
+
+const check = process.argv.includes("--check");
+const graphviz = await Graphviz.load();
+const dotFiles = findDotFiles(repoRoot).sort();
+
+if (dotFiles.length === 0) {
+  console.log("No .dot diagrams found.");
+  process.exit(0);
+}
+
+const stale = [];
+
+for (const dotPath of dotFiles) {
+  const svgPath = join(dirname(dotPath), `${basename(dotPath, ".dot")}.svg`);
+  const rel = relative(repoRoot, svgPath);
+
+  let rendered;
+  try {
+    rendered = normalize(graphviz.layout(readFileSync(dotPath, "utf8"), "svg", "dot"));
+  } catch (err) {
+    console.error(`❌ ${relative(repoRoot, dotPath)}: ${err.message}`);
+    process.exit(1);
+  }
+
+  const current = existsAsFile(svgPath) ? readFileSync(svgPath, "utf8") : null;
+
+  if (current === rendered) {
+    console.log(`✅ ${rel} up to date`);
+    continue;
+  }
+
+  if (check) {
+    stale.push(rel);
+    console.error(`❌ ${rel} is ${current === null ? "missing" : "stale"}`);
+    continue;
+  }
+
+  writeFileSync(svgPath, rendered);
+  console.log(`✏️  ${rel} ${current === null ? "created" : "updated"}`);
+}
+
+function existsAsFile(p) {
+  try {
+    return statSync(p).isFile();
+  } catch {
+    return false;
+  }
+}
+
+if (stale.length > 0) {
+  console.error(
+    `\n${stale.length} diagram(s) out of date. Run \`task diagrams\` and commit the result.`
+  );
+  process.exit(1);
+}
diff --git a/yarn.lock b/yarn.lock
index 6327f193..2bf4cd66 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2,6 +2,11 @@
 # yarn lockfile v1
 
 
+"@hpcc-js/wasm-graphviz@^1.15.0":
+  version "1.28.0"
+  resolved "https://registry.npmjs.org/@hpcc-js/wasm-graphviz/-/wasm-graphviz-1.28.0.tgz"
+  integrity sha512-KqvPy7ckxPc1xv8Kt7H3bo9cj8U4gfOXxQ8grLZvDZxyQQjnXsKxrweJLLJtEoWWtQqAk4biUB0g2qsjkTiMVA==
+
 "@types/node@^25.2.0":
   version "25.2.0"
   resolved "https://registry.npmjs.org/@types/node/-/node-25.2.0.tgz"

From 8efa384d4bfccfcd383f700b4bf9ce3d57a453ee Mon Sep 17 00:00:00 2001
From: Johannes Rudolph <jrudolph@meshcloud.io>
Date: Fri, 31 Jul 2026 10:20:12 +0200
Subject: [PATCH 2/7] docs: capture diagram conventions and apply them to both
 diagrams
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The DOT diagrams were correct but plain. What made the earlier HTML mockup
read better was not the tool: it was a consistent emoji vocabulary and a
palette where colour meant something. Those are conventions, so write them
down and apply them.

Add .agents/references/diagrams.md, following the existing reference-file
pattern, and reduce the AGENTS.md section to a pointer. It captures:

- Composition. One top-level cluster per system, with the relationships as
  dotted constraint=false edges across the boundary; a lifecycle split only
  when the story is who-does-what rather than how two systems map onto each
  other. Single-node clusters read as noise.
- A five-role palette (definition / instance / provider / structure / muted)
  where colour encodes what kind of thing a box is, never decoration.
- A shared emoji vocabulary, so the same concept gets the same icon across
  diagrams and a reader can match boxes between them.
- A canonical preamble, so spacing, type and stroke weight match everywhere.
- Layout control and its traps, including two found the hard way here.

Restyle both diagrams accordingly: emoji on every node, palette applied by
role (the starterkit BBD reads as a meshStack definition, per-team objects as
instances, cloud services as provider-managed), and the single-node catalog
cluster dropped in favour of a free-standing node.

Two corrections to what the previous commit assumed:

- Emoji need the U+FE0F variation selector to render in colour. ☸ ⚙ 🗄 🗂 🛰
  default to text presentation and came out as small monochrome symbols. The
  earlier note said to omit the selector, which was backwards.
- style=invis edges in a rank=same block only hint at left-to-right order. A
  constraint=false edge between two same-rank nodes is itself a flat edge and
  outranks them, which is what pulled SKE out of its declared position.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .agents/references/diagrams.md                | 223 +++++++++++++++++
 AGENTS.md                                     |  55 +---
 reference-architectures/azure-kubernetes.dot  |  37 ++-
 reference-architectures/azure-kubernetes.svg  | 112 ++++-----
 .../stackit-kubernetes.dot                    |  51 ++--
 .../stackit-kubernetes.svg                    | 236 +++++++++---------
 6 files changed, 431 insertions(+), 283 deletions(-)
 create mode 100644 .agents/references/diagrams.md

diff --git a/.agents/references/diagrams.md b/.agents/references/diagrams.md
new file mode 100644
index 00000000..61261931
--- /dev/null
+++ b/.agents/references/diagrams.md
@@ -0,0 +1,223 @@
+---
+description: Architecture diagram conventions for meshstack-hub. Graphviz DOT sources with committed SVGs, the shared colour palette and emoji vocabulary that keep diagrams looking like one family, layout-control attributes (rank=same, constraint=false, splines=ortho), label discipline, and why Mermaid was dropped.
+---
+
+# Architecture Diagrams
+
+Diagrams are **Graphviz DOT** source committed next to the Markdown that uses them, with the rendered
+SVG committed alongside:
+
+```
+reference-architectures/
+├── azure-kubernetes.md     # references the SVG: ![...](azure-kubernetes.svg)
+├── azure-kubernetes.dot    # the source you edit
+└── azure-kubernetes.svg    # generated — never hand-edit
+```
+
+```sh
+task diagrams        # re-render every *.dot in the repo to a sibling *.svg
+task diagrams:check  # verify committed SVGs match their sources (what CI runs)
+```
+
+Graphviz runs from a WASM npm package, so no system `dot` install is needed. CI fails when a `.dot`
+is edited without committing the re-rendered SVG.
+
+---
+
+## Composition
+
+**Separate the systems into top-level clusters.** The single most effective structural choice is one
+box per system — the cloud provider's resource hierarchy in one, meshStack's constructs in the other —
+with the relationships drawn as dotted edges across the boundary. The reader sees two worlds they
+already understand and one set of lines explaining how they connect, instead of one undifferentiated
+graph.
+
+```dot
+subgraph cluster_stackit { label="  STACKIT" /* org, folders, projects */ }
+subgraph cluster_mesh    { label="  meshStack" /* platform, landing zones, BBDs */ }
+
+FOUND -> PLAT [style=dotted constraint=false xlabel="authenticates"]
+```
+
+Use a **lifecycle split** instead (catalog / per application team / existing infrastructure) when the
+diagram's story is *who does what and when* rather than *how two systems map onto each other*. Do not
+mix both splits in one diagram — pick the one that matches the story and let colour carry the rest.
+
+**Give each cluster its own depth.** A cluster holding one node reads as noise; either merge it into
+a neighbouring cluster or let the node stand alone at the top level. Where a system has layers, show
+them (platform → landing zone → building block definition).
+
+---
+
+## Palette
+
+Colour encodes **what kind of thing a box is**, never decoration. Never introduce a new colour to
+distinguish two boxes of the same kind.
+
+| Role | Fill | Border | Use for |
+|------|------|--------|---------|
+| `definition` | `#ecedfb` | `#9aa2e6` | meshStack constructs: platform, landing zone, building block definition |
+| `instance` | `#e5f2ea` | `#85bfa0` | what a tenant ends up with: project, network, namespace, repo |
+| `provider` | `#eef2f6` | `#93a7bb` | services the cloud provider runs: managed cluster, registry, model API |
+| `structure` | `#ffffff` | `#a2abb8` | containers and grouping objects: organization, folder |
+| `muted` | `#f0f1f3` | `#cdd2d8` | shown for context only, not managed by this architecture |
+
+`muted` nodes also take `style="rounded,filled,dashed"` and `fontcolor="#99a1ac"` so they read as
+out-of-scope even in greyscale.
+
+Supporting greys: cluster border `#d5dae0`, cluster label `#697180`, edge `#8b95a3`, edge label
+`#697180`.
+
+---
+
+## Emoji vocabulary
+
+Every node label opens with an emoji, and the **same concept always gets the same emoji** across
+diagrams. This is what makes separate diagrams read as one family, and it lets a reader match a box
+in one diagram to a box in another without reading the label.
+
+| Emoji | Concept |
+|-------|---------|
+| 🏢 | organization / tenant root |
+| 📁 | folder / resource group |
+| 🗂️ | project / subscription |
+| 🔑 | service account, credentials |
+| 🌐 | network area, address plan |
+| 🔌 | network, subnet |
+| ☸️ | Kubernetes cluster |
+| 🗄️ | container registry |
+| ⚙️ | CI/CD wiring |
+| 🔀 | git repository |
+| 🧠 | model serving / AI API |
+| 🛰️ | meshStack platform |
+| 🛬 | landing zone |
+| 📦 | building block definition |
+
+Extend the table when a diagram needs a concept it does not cover — do not invent a second emoji for
+a concept already listed.
+
+Copy the emoji straight from this table — several of them carry a **U+FE0F variation selector** that
+is invisible in the source but decides whether the glyph renders in colour. `☸ ⚙ 🗄 🗂 🛰` default to
+*text* presentation and come out as small monochrome symbols without it; `🏢 📁 🔑 🌐 🔌 🔀 🧠 🛬 📦`
+are colour by default. If an icon renders monochrome in the SVG, it is missing the selector.
+
+The **same emoji with a different fill** is deliberate and useful: a green `🔀` repo inside the
+application-team box and a provider-coloured `🔀` in the STACKIT box say "same concept, different
+owner" in a way two different icons never could. Emoji carries the concept, colour carries the kind.
+
+---
+
+## Preamble
+
+Start every diagram from this block so spacing, type and stroke weight match across the repo:
+
+```dot
+digraph <name> {
+  rankdir=TB
+  splines=ortho
+  forcelabels=true
+  bgcolor="white"
+  nodesep=0.55
+  ranksep=0.85
+
+  node [shape=box style="rounded,filled" fontname="Helvetica" fontsize=11
+        fillcolor="#ffffff" color="#a2abb8" penwidth=1.1 margin="0.20,0.11"]
+  edge [fontname="Helvetica" fontsize=9 fontcolor="#697180" color="#8b95a3" arrowsize=0.7]
+}
+```
+
+Cluster styling, with two leading spaces in the label so it clears the rounded corner:
+
+```dot
+subgraph cluster_team {
+  label="  Per Application Team"
+  labeljust=l
+  fontname="Helvetica" fontsize=12 fontcolor="#697180"
+  style="rounded" color="#d5dae0"
+  margin=18
+}
+```
+
+`bgcolor="white"` is not optional. A transparent background renders dark-on-dark for anyone reading
+the diagram in GitHub's dark theme.
+
+---
+
+## Layout control
+
+These are the attributes Mermaid lacks, and the reason for the render step:
+
+- **`{ rank=same; A B C }`** pins nodes to one row. This is how sibling folders end up at the same
+  height instead of staggered down a diagonal.
+- **`constraint=false`** draws an edge without letting it influence ranking. Use it for every
+  cross-cutting relationship — a mapping between two clusters, or a link back up a hierarchy — that
+  would otherwise distort the layout it is describing.
+- **`style=invis`** edges inside a `rank=same` block nudge left-to-right order:
+  `{ rank=same; DEV -> PROD [style=invis] }`. Treat it as a hint, not a guarantee — always confirm the
+  rendered order.
+- **`splines=ortho`** gives right-angle connectors, which read as a wiring diagram rather than a mind
+  map.
+
+Traps, each of which cost a debugging round:
+
+- Under `splines=ortho`, use **`xlabel`** (with `forcelabels=true`) for edge labels. Plain `label`
+  gets placed far from its edge, sometimes in open space.
+- **Never set `ordering=out`.** It fights rank ordering and silently mirrors rows — a `rank=same`
+  chain of `dev -> prod` came out as `prod`, `dev`, and reversing the chain changed nothing.
+- **Avoid `newrank=true`** unless a `rank=same` must span clusters. It makes cluster boxes overlap.
+- A **`constraint=false` edge between two nodes on the same rank is itself a flat edge** and outranks
+  your invisible ordering chain. `HARBOR -> SKE [constraint=false]` silently pulled `SKE` out of the
+  declared `SKE -> MODEL -> HARBOR` order. Declare the chain in the direction the real edge implies
+  instead of fighting it.
+- `splines=polyline` is not a substitute for `ortho` — it produces diagonals and more crossings.
+
+---
+
+## Labels
+
+- Label the **relationship**, not the objects: `provisioned by`, `target folder of`, `deploys to`.
+- On parallel edges that mean the same thing (a dev and a prod edge into the same registry), label
+  **one** of the pair. Repeating it doubles the text for no information and the labels collide.
+- Keep labels to three or four words. Push detail into the node's second line, which is quieter:
+  `label="🔌 Routed Network ×N\nspoke subnet"`.
+- Use `×N` / `×1` to show cardinality rather than drawing several identical boxes.
+
+---
+
+## Diagrams in Markdown
+
+Reference the SVG with a plain relative image link:
+
+```markdown
+![Azure Kubernetes reference architecture](azure-kubernetes.svg)
+```
+
+Do **not** inline HTML or `<svg>` in a Markdown body. The hub website renders these files through
+`marked` into Angular's `[innerHTML]`, which strips `<style>` blocks, `style` attributes and inline
+SVG; GitHub's Markdown pipeline does the same. `index.ts` rewrites relative image links to absolute
+`raw` URLs pinned to the built commit, so one relative link works on GitHub and on the website.
+
+---
+
+## Why not Mermaid
+
+Mermaid renders inline in Markdown with no build step, which is genuinely convenient. It was dropped
+because it offers no way to constrain layout: there is no "keep these three nodes on one row" and no
+"this edge must not affect ranking". Any diagram with two related hierarchies comes out as diagonal
+spaghetti, cross-cluster edges render as unconnected stubs when a subgraph declares its own
+`direction`, and each attempted fix fights the engine instead of the diagram.
+
+---
+
+## Checklist
+
+- [ ] `<name>.dot` committed next to the Markdown, `<name>.svg` regenerated with `task diagrams`
+- [ ] Markdown references the SVG with a relative `![...](<name>.svg)` link
+- [ ] Preamble matches the block above, including `bgcolor="white"`
+- [ ] Top-level clusters separate systems (or lifecycle stages) — not both in one diagram
+- [ ] Every node label opens with an emoji from the vocabulary
+- [ ] Every fill/border pair comes from the palette, and colour encodes kind
+- [ ] Sibling nodes that belong on one row are pinned with `rank=same`
+- [ ] Cross-cutting edges use `constraint=false`
+- [ ] Edge labels use `xlabel`, name the relationship, and are not repeated on parallel edges
+- [ ] `task diagrams:check` passes
diff --git a/AGENTS.md b/AGENTS.md
index eb454f0e..350e3ad4 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -330,52 +330,15 @@ getting-started steps, and shared responsibility matrix.
 
 ## Diagrams
 
-Architecture diagrams are **Graphviz DOT** source committed next to the Markdown that uses them,
-with the rendered SVG committed alongside:
-
-```
-reference-architectures/
-├── azure-kubernetes.md     # references the SVG: ![...](azure-kubernetes.svg)
-├── azure-kubernetes.dot    # the source you edit
-└── azure-kubernetes.svg    # generated — never hand-edit
-```
-
-```sh
-task diagrams        # re-render every *.dot in the repo to a sibling *.svg
-task diagrams:check  # verify the committed SVGs match their sources (what CI runs)
-```
-
-Graphviz runs from a WASM npm package, so no system `dot` install is needed. CI fails when a `.dot`
-is edited without committing the re-rendered SVG.
-
-### Why not Mermaid
-
-Mermaid renders inline in Markdown, which is convenient, but it offers no way to constrain layout:
-there is no "keep these three nodes on one row" and no "this edge must not affect ranking". Diagrams
-with two related hierarchies come out as diagonal spaghetti. DOT has both escape hatches, which is
-worth the render step:
-
-- `{ rank=same; A B C }` pins nodes to one row.
-- `constraint=false` draws an edge without letting it influence ranking — use it for cross-cutting
-  relationships that would otherwise distort the layout.
-- `splines=ortho` gives right-angle connectors. Under `ortho`, use `xlabel` (with `forcelabels=true`)
-  rather than `label` for edge labels — plain labels get placed far from their edge.
-- Avoid `ordering=out`: it fights rank ordering and silently mirrors rows.
-- Set `bgcolor="white"` explicitly. A transparent background renders dark-on-dark for anyone reading
-  the diagram in GitHub's dark theme.
-
-### Diagrams in Markdown
-
-Reference the SVG with a plain relative image link:
-
-```markdown
-![Azure Kubernetes reference architecture](azure-kubernetes.svg)
-```
-
-Do **not** inline HTML or `<svg>` in the Markdown body. The hub website renders these files through
-`marked` into Angular's `[innerHTML]`, which strips `<style>` blocks, `style` attributes and inline
-SVG; GitHub's Markdown pipeline does the same. `index.ts` rewrites relative image links to absolute
-`raw` URLs pinned to the built commit, so the same relative link works on GitHub and on the website.
+Architecture diagrams are **Graphviz DOT** source committed next to the Markdown that uses them, with
+the rendered SVG committed alongside (`<name>.dot` + `<name>.svg`, referenced as `![...](<name>.svg)`).
+Run `task diagrams` to re-render and `task diagrams:check` to verify; CI fails on a stale SVG.
+
+See [.agents/references/diagrams.md](.agents/references/diagrams.md) for the full conventions: the
+shared colour palette and emoji vocabulary that keep diagrams looking like one family, the standard
+preamble, composition (separate systems into top-level clusters), layout control (`rank=same`,
+`constraint=false`, `splines=ortho`) with its traps, label discipline, why Mermaid was dropped, and
+the diagram checklist.
 
 ---
 
diff --git a/reference-architectures/azure-kubernetes.dot b/reference-architectures/azure-kubernetes.dot
index d4d37703..68553e40 100644
--- a/reference-architectures/azure-kubernetes.dot
+++ b/reference-architectures/azure-kubernetes.dot
@@ -1,27 +1,21 @@
 /*
  * Azure Kubernetes reference architecture.
- * Render with: task diagrams
+ * Conventions: .agents/references/diagrams.md — render with: task diagrams
  */
 digraph azure_kubernetes {
   rankdir=TB
   splines=ortho
   forcelabels=true
   bgcolor="white"
-  nodesep=0.60
-  ranksep=0.95
+  nodesep=0.55
+  ranksep=0.85
 
-  node [shape=box style="rounded,filled" fontname="Helvetica" fontsize=11 fillcolor="#ffffff" color="#a2abb8" penwidth=1.1 margin="0.20,0.11"]
+  node [shape=box style="rounded,filled" fontname="Helvetica" fontsize=11
+        fillcolor="#ffffff" color="#a2abb8" penwidth=1.1 margin="0.20,0.11"]
   edge [fontname="Helvetica" fontsize=9 fontcolor="#697180" color="#8b95a3" arrowsize=0.7]
 
-  subgraph cluster_catalog {
-    label="  Self-Service Catalog"
-    labeljust=l
-    fontname="Helvetica" fontsize=12 fontcolor="#697180"
-    style="rounded" color="#d5dae0"
-    margin=18
-
-    STARTER [label="aks/starterkit\ndeveloper onboarding" fillcolor="#ecedfb" color="#9aa2e6"]
-  }
+  // meshStack definition the application team orders from the catalog
+  STARTER [label="📦 aks/starterkit\nself-service catalog" fillcolor="#ecedfb" color="#9aa2e6"]
 
   subgraph cluster_team {
     label="  Per Application Team"
@@ -30,22 +24,22 @@ digraph azure_kubernetes {
     style="rounded" color="#d5dae0"
     margin=18
 
-    REPO [label="github/repository\nGitHub repo" fillcolor="#e5f2ea" color="#85bfa0"]
-    DEV  [label="aks/github-connector\ndev namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
-    PROD [label="aks/github-connector\nprod namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
+    REPO [label="🔀 github/repository\nGitHub repo" fillcolor="#e5f2ea" color="#85bfa0"]
+    DEV  [label="⚙️ aks/github-connector\ndev namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
+    PROD [label="⚙️ aks/github-connector\nprod namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
 
     { rank=same; DEV -> PROD [style=invis] }
   }
 
-  subgraph cluster_infra {
-    label="  Existing Infrastructure"
+  subgraph cluster_azure {
+    label="  Azure — managed by the platform team"
     labeljust=l
     fontname="Helvetica" fontsize=12 fontcolor="#697180"
     style="rounded" color="#d5dae0"
     margin=18
 
-    AKS [label="AKS cluster\nmanaged by platform team"]
-    ACR [label="Azure Container Registry"]
+    AKS [label="☸️ AKS cluster" fillcolor="#eef2f6" color="#93a7bb"]
+    ACR [label="🗄️ Azure Container Registry" fillcolor="#eef2f6" color="#93a7bb"]
 
     { rank=same; AKS -> ACR [style=invis] }
   }
@@ -54,7 +48,7 @@ digraph azure_kubernetes {
   STARTER -> DEV  [xlabel="creates dev env"]
   STARTER -> PROD [xlabel="creates prod env"]
 
-  REPO -> DEV  [xlabel="repo output"]
+  REPO -> DEV [xlabel="repo output"]
   REPO -> PROD
 
   DEV  -> ACR [xlabel="push images"]
@@ -64,4 +58,3 @@ digraph azure_kubernetes {
 
   AKS -> ACR [xlabel="pulls" style=dashed constraint=false]
 }
-
diff --git a/reference-architectures/azure-kubernetes.svg b/reference-architectures/azure-kubernetes.svg
index 961650fb..ba427b61 100644
--- a/reference-architectures/azure-kubernetes.svg
+++ b/reference-architectures/azure-kubernetes.svg
@@ -1,135 +1,129 @@
 <?xml version="1.0" encoding="UTF-8" standalone="no"?>
 <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
  "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg width="415pt" height="455pt"
- viewBox="0.00 0.00 415.00 455.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 451.36)">
+<svg width="411pt" height="385pt"
+ viewBox="0.00 0.00 411.00 385.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 381.12)">
 <title>azure_kubernetes</title>
-<polygon fill="white" stroke="none" points="-4,4 -4,-451.36 411,-451.36 411,4 -4,4"/>
+<polygon fill="white" stroke="none" points="-4,4 -4,-381.12 407,-381.12 407,4 -4,4"/>
 <g id="clust1" class="cluster">
-<title>cluster_catalog</title>
-<path fill="white" stroke="#d5dae0" d="M151,-338.72C151,-338.72 299,-338.72 299,-338.72 305,-338.72 311,-344.72 311,-350.72 311,-350.72 311,-427.36 311,-427.36 311,-433.36 305,-439.36 299,-439.36 299,-439.36 151,-439.36 151,-439.36 145,-439.36 139,-433.36 139,-427.36 139,-427.36 139,-350.72 139,-350.72 139,-344.72 145,-338.72 151,-338.72"/>
-<text xml:space="preserve" text-anchor="middle" x="205.03" y="-424.56" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Self&#45;Service Catalog</text>
-</g>
-<g id="clust2" class="cluster">
 <title>cluster_team</title>
-<path fill="white" stroke="#d5dae0" d="M37,-118.24C37,-118.24 376,-118.24 376,-118.24 382,-118.24 388,-124.24 388,-130.24 388,-130.24 388,-317.12 388,-317.12 388,-323.12 382,-329.12 376,-329.12 376,-329.12 37,-329.12 37,-329.12 31,-329.12 25,-323.12 25,-317.12 25,-317.12 25,-130.24 25,-130.24 25,-124.24 31,-118.24 37,-118.24"/>
-<text xml:space="preserve" text-anchor="middle" x="93.69" y="-314.32" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Per Application Team</text>
+<path fill="white" stroke="#d5dae0" d="M20,-110.4C20,-110.4 376,-110.4 376,-110.4 382,-110.4 388,-116.4 388,-122.4 388,-122.4 388,-302.28 388,-302.28 388,-308.28 382,-314.28 376,-314.28 376,-314.28 20,-314.28 20,-314.28 14,-314.28 8,-308.28 8,-302.28 8,-302.28 8,-122.4 8,-122.4 8,-116.4 14,-110.4 20,-110.4"/>
+<text xml:space="preserve" text-anchor="middle" x="76.69" y="-299.48" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Per Application Team</text>
 </g>
-<g id="clust4" class="cluster">
-<title>cluster_infra</title>
-<path fill="white" stroke="#d5dae0" d="M20,-8C20,-8 387,-8 387,-8 393,-8 399,-14 399,-20 399,-20 399,-96.64 399,-96.64 399,-102.64 393,-108.64 387,-108.64 387,-108.64 20,-108.64 20,-108.64 14,-108.64 8,-102.64 8,-96.64 8,-96.64 8,-20 8,-20 8,-14 14,-8 20,-8"/>
-<text xml:space="preserve" text-anchor="middle" x="77.36" y="-93.84" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Existing Infrastructure</text>
+<g id="clust3" class="cluster">
+<title>cluster_azure</title>
+<path fill="white" stroke="#d5dae0" d="M47,-8C47,-8 383,-8 383,-8 389,-8 395,-14 395,-20 395,-20 395,-90.4 395,-90.4 395,-96.4 389,-102.4 383,-102.4 383,-102.4 47,-102.4 47,-102.4 41,-102.4 35,-96.4 35,-90.4 35,-90.4 35,-20 35,-20 35,-14 41,-8 47,-8"/>
+<text xml:space="preserve" text-anchor="middle" x="151.72" y="-87.6" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Azure — managed by the platform team</text>
 </g>
 <!-- STARTER -->
 <g id="node1" class="node">
 <title>STARTER</title>
-<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M280.61,-398.96C280.61,-398.96 169.39,-398.96 169.39,-398.96 163.39,-398.96 157.39,-392.96 157.39,-386.96 157.39,-386.96 157.39,-368.72 157.39,-368.72 157.39,-362.72 163.39,-356.72 169.39,-356.72 169.39,-356.72 280.61,-356.72 280.61,-356.72 286.61,-356.72 292.61,-362.72 292.61,-368.72 292.61,-368.72 292.61,-386.96 292.61,-386.96 292.61,-392.96 286.61,-398.96 280.61,-398.96"/>
-<text xml:space="preserve" text-anchor="middle" x="225" y="-381.14" font-family="Helvetica,sans-Serif" font-size="11.00">aks/starterkit</text>
-<text xml:space="preserve" text-anchor="middle" x="225" y="-367.94" font-family="Helvetica,sans-Serif" font-size="11.00">developer onboarding</text>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M268.47,-377.12C268.47,-377.12 169.53,-377.12 169.53,-377.12 163.53,-377.12 157.53,-371.12 157.53,-365.12 157.53,-365.12 157.53,-346.88 157.53,-346.88 157.53,-340.88 163.53,-334.88 169.53,-334.88 169.53,-334.88 268.47,-334.88 268.47,-334.88 274.47,-334.88 280.47,-340.88 280.47,-346.88 280.47,-346.88 280.47,-365.12 280.47,-365.12 280.47,-371.12 274.47,-377.12 268.47,-377.12"/>
+<text xml:space="preserve" text-anchor="middle" x="219" y="-359.3" font-family="Helvetica,sans-Serif" font-size="11.00">📦 aks/starterkit</text>
+<text xml:space="preserve" text-anchor="middle" x="219" y="-346.1" font-family="Helvetica,sans-Serif" font-size="11.00">self&#45;service catalog</text>
 </g>
 <!-- REPO -->
 <g id="node2" class="node">
 <title>REPO</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M148.06,-288.72C148.06,-288.72 61.94,-288.72 61.94,-288.72 55.94,-288.72 49.94,-282.72 49.94,-276.72 49.94,-276.72 49.94,-258.48 49.94,-258.48 49.94,-252.48 55.94,-246.48 61.94,-246.48 61.94,-246.48 148.06,-246.48 148.06,-246.48 154.06,-246.48 160.06,-252.48 160.06,-258.48 160.06,-258.48 160.06,-276.72 160.06,-276.72 160.06,-282.72 154.06,-288.72 148.06,-288.72"/>
-<text xml:space="preserve" text-anchor="middle" x="105" y="-270.9" font-family="Helvetica,sans-Serif" font-size="11.00">github/repository</text>
-<text xml:space="preserve" text-anchor="middle" x="105" y="-257.7" font-family="Helvetica,sans-Serif" font-size="11.00">GitHub repo</text>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M145.7,-273.88C145.7,-273.88 44.3,-273.88 44.3,-273.88 38.3,-273.88 32.3,-267.88 32.3,-261.88 32.3,-261.88 32.3,-243.64 32.3,-243.64 32.3,-237.64 38.3,-231.64 44.3,-231.64 44.3,-231.64 145.7,-231.64 145.7,-231.64 151.7,-231.64 157.7,-237.64 157.7,-243.64 157.7,-243.64 157.7,-261.88 157.7,-261.88 157.7,-267.88 151.7,-273.88 145.7,-273.88"/>
+<text xml:space="preserve" text-anchor="middle" x="95" y="-256.06" font-family="Helvetica,sans-Serif" font-size="11.00">🔀 github/repository</text>
+<text xml:space="preserve" text-anchor="middle" x="95" y="-242.86" font-family="Helvetica,sans-Serif" font-size="11.00">GitHub repo</text>
 </g>
 <!-- STARTER&#45;&gt;REPO -->
 <g id="edge3" class="edge">
 <title>STARTER&#45;&gt;REPO</title>
-<path fill="none" stroke="#8b95a3" d="M167.62,-356.53C167.62,-326.41 167.62,-275 167.62,-275 167.62,-275 166.9,-275 166.9,-275"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="168.95,-272.55 161.95,-275 168.95,-277.45 168.95,-272.55"/>
-<text xml:space="preserve" text-anchor="middle" x="182.37" y="-318.11" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
+<path fill="none" stroke="#8b95a3" d="M164.52,-334.69C164.52,-306.41 164.52,-260 164.52,-260 164.52,-260 163.88,-260 163.88,-260"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="166.62,-257.55 159.62,-260 166.62,-262.45 166.62,-257.55"/>
+<text xml:space="preserve" text-anchor="middle" x="179.28" y="-299.73" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
 </g>
 <!-- DEV -->
 <g id="node3" class="node">
 <title>DEV</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M170.73,-178.48C170.73,-178.48 55.27,-178.48 55.27,-178.48 49.27,-178.48 43.27,-172.48 43.27,-166.48 43.27,-166.48 43.27,-148.24 43.27,-148.24 43.27,-142.24 49.27,-136.24 55.27,-136.24 55.27,-136.24 170.73,-136.24 170.73,-136.24 176.73,-136.24 182.73,-142.24 182.73,-148.24 182.73,-148.24 182.73,-166.48 182.73,-166.48 182.73,-172.48 176.73,-178.48 170.73,-178.48"/>
-<text xml:space="preserve" text-anchor="middle" x="113" y="-160.66" font-family="Helvetica,sans-Serif" font-size="11.00">aks/github&#45;connector</text>
-<text xml:space="preserve" text-anchor="middle" x="113" y="-147.46" font-family="Helvetica,sans-Serif" font-size="11.00">dev namespace CI/CD</text>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M166.15,-170.64C166.15,-170.64 37.85,-170.64 37.85,-170.64 31.85,-170.64 25.85,-164.64 25.85,-158.64 25.85,-158.64 25.85,-140.4 25.85,-140.4 25.85,-134.4 31.85,-128.4 37.85,-128.4 37.85,-128.4 166.15,-128.4 166.15,-128.4 172.15,-128.4 178.15,-134.4 178.15,-140.4 178.15,-140.4 178.15,-158.64 178.15,-158.64 178.15,-164.64 172.15,-170.64 166.15,-170.64"/>
+<text xml:space="preserve" text-anchor="middle" x="102" y="-152.82" font-family="Helvetica,sans-Serif" font-size="11.00">⚙️ aks/github&#45;connector</text>
+<text xml:space="preserve" text-anchor="middle" x="102" y="-139.62" font-family="Helvetica,sans-Serif" font-size="11.00">dev namespace CI/CD</text>
 </g>
 <!-- STARTER&#45;&gt;DEV -->
 <g id="edge4" class="edge">
 <title>STARTER&#45;&gt;DEV</title>
-<path fill="none" stroke="#8b95a3" d="M175.17,-356.3C175.17,-356.3 175.17,-187.5 175.17,-187.5"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="177.62,-187.5 175.17,-180.5 172.72,-187.5 177.62,-187.5"/>
-<text xml:space="preserve" text-anchor="middle" x="206.94" y="-274.6" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates dev env</text>
+<path fill="none" stroke="#8b95a3" d="M171.34,-334.68C171.34,-334.68 171.34,-179.55 171.34,-179.55"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="173.79,-179.55 171.34,-172.55 168.89,-179.55 173.79,-179.55"/>
+<text xml:space="preserve" text-anchor="middle" x="203.1" y="-259.81" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates dev env</text>
 </g>
 <!-- PROD -->
 <g id="node4" class="node">
 <title>PROD</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M357.87,-178.48C357.87,-178.48 238.13,-178.48 238.13,-178.48 232.13,-178.48 226.13,-172.48 226.13,-166.48 226.13,-166.48 226.13,-148.24 226.13,-148.24 226.13,-142.24 232.13,-136.24 238.13,-136.24 238.13,-136.24 357.87,-136.24 357.87,-136.24 363.87,-136.24 369.87,-142.24 369.87,-148.24 369.87,-148.24 369.87,-166.48 369.87,-166.48 369.87,-172.48 363.87,-178.48 357.87,-178.48"/>
-<text xml:space="preserve" text-anchor="middle" x="298" y="-160.66" font-family="Helvetica,sans-Serif" font-size="11.00">aks/github&#45;connector</text>
-<text xml:space="preserve" text-anchor="middle" x="298" y="-147.46" font-family="Helvetica,sans-Serif" font-size="11.00">prod namespace CI/CD</text>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M358.15,-170.64C358.15,-170.64 229.85,-170.64 229.85,-170.64 223.85,-170.64 217.85,-164.64 217.85,-158.64 217.85,-158.64 217.85,-140.4 217.85,-140.4 217.85,-134.4 223.85,-128.4 229.85,-128.4 229.85,-128.4 358.15,-128.4 358.15,-128.4 364.15,-128.4 370.15,-134.4 370.15,-140.4 370.15,-140.4 370.15,-158.64 370.15,-158.64 370.15,-164.64 364.15,-170.64 358.15,-170.64"/>
+<text xml:space="preserve" text-anchor="middle" x="294" y="-152.82" font-family="Helvetica,sans-Serif" font-size="11.00">⚙️ aks/github&#45;connector</text>
+<text xml:space="preserve" text-anchor="middle" x="294" y="-139.62" font-family="Helvetica,sans-Serif" font-size="11.00">prod namespace CI/CD</text>
 </g>
 <!-- STARTER&#45;&gt;PROD -->
 <g id="edge5" class="edge">
 <title>STARTER&#45;&gt;PROD</title>
-<path fill="none" stroke="#8b95a3" d="M270.45,-356.3C270.45,-356.3 270.45,-187.5 270.45,-187.5"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="272.9,-187.5 270.45,-180.5 268,-187.5 272.9,-187.5"/>
-<text xml:space="preserve" text-anchor="middle" x="236.93" y="-263.8" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates prod env</text>
+<path fill="none" stroke="#8b95a3" d="M259.6,-334.68C259.6,-334.68 259.6,-179.55 259.6,-179.55"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="262.05,-179.55 259.6,-172.55 257.15,-179.55 262.05,-179.55"/>
+<text xml:space="preserve" text-anchor="middle" x="226.08" y="-249.01" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates prod env</text>
 </g>
 <!-- REPO&#45;&gt;DEV -->
 <g id="edge6" class="edge">
 <title>REPO&#45;&gt;DEV</title>
-<path fill="none" stroke="#8b95a3" d="M105,-246.08C105,-246.08 105,-187.34 105,-187.34"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="107.45,-187.34 105,-180.34 102.55,-187.34 107.45,-187.34"/>
-<text xml:space="preserve" text-anchor="middle" x="82.23" y="-219.41" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">repo output</text>
+<path fill="none" stroke="#8b95a3" d="M95,-231.37C95,-231.37 95,-179.4 95,-179.4"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="97.45,-179.4 95,-172.4 92.55,-179.4 97.45,-179.4"/>
+<text xml:space="preserve" text-anchor="middle" x="72.23" y="-208.08" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">repo output</text>
 </g>
 <!-- REPO&#45;&gt;PROD -->
 <g id="edge7" class="edge">
 <title>REPO&#45;&gt;PROD</title>
-<path fill="none" stroke="#8b95a3" d="M160.4,-261C200.72,-261 248.29,-261 248.29,-261 248.29,-261 248.29,-187.35 248.29,-187.35"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="250.74,-187.35 248.29,-180.35 245.84,-187.35 250.74,-187.35"/>
+<path fill="none" stroke="#8b95a3" d="M158.04,-246C196.66,-246 238.72,-246 238.72,-246 238.72,-246 238.72,-179.45 238.72,-179.45"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="241.17,-179.45 238.72,-172.45 236.27,-179.45 241.17,-179.45"/>
 </g>
 <!-- DEV&#45;&gt;PROD -->
 <!-- AKS -->
 <g id="node5" class="node">
 <title>AKS</title>
-<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M173.82,-68.24C173.82,-68.24 38.18,-68.24 38.18,-68.24 32.18,-68.24 26.18,-62.24 26.18,-56.24 26.18,-56.24 26.18,-38 26.18,-38 26.18,-32 32.18,-26 38.18,-26 38.18,-26 173.82,-26 173.82,-26 179.82,-26 185.82,-32 185.82,-38 185.82,-38 185.82,-56.24 185.82,-56.24 185.82,-62.24 179.82,-68.24 173.82,-68.24"/>
-<text xml:space="preserve" text-anchor="middle" x="106" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">AKS cluster</text>
-<text xml:space="preserve" text-anchor="middle" x="106" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">managed by platform team</text>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M148.83,-62C148.83,-62 65.17,-62 65.17,-62 59.17,-62 53.17,-56 53.17,-50 53.17,-50 53.17,-38 53.17,-38 53.17,-32 59.17,-26 65.17,-26 65.17,-26 148.83,-26 148.83,-26 154.83,-26 160.83,-32 160.83,-38 160.83,-38 160.83,-50 160.83,-50 160.83,-56 154.83,-62 148.83,-62"/>
+<text xml:space="preserve" text-anchor="middle" x="107" y="-40.7" font-family="Helvetica,sans-Serif" font-size="11.00">☸️ AKS cluster</text>
 </g>
 <!-- DEV&#45;&gt;AKS -->
 <g id="edge10" class="edge">
 <title>DEV&#45;&gt;AKS</title>
-<path fill="none" stroke="#8b95a3" d="M113,-135.84C113,-135.84 113,-77.1 113,-77.1"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="115.45,-77.1 113,-70.1 110.55,-77.1 115.45,-77.1"/>
-<text xml:space="preserve" text-anchor="middle" x="92.49" y="-109.17" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">deploys to</text>
+<path fill="none" stroke="#8b95a3" d="M107,-127.91C107,-127.91 107,-70.92 107,-70.92"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="109.45,-70.92 107,-63.92 104.55,-70.92 109.45,-70.92"/>
+<text xml:space="preserve" text-anchor="middle" x="86.49" y="-102.12" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">deploys to</text>
 </g>
 <!-- ACR -->
 <g id="node6" class="node">
 <title>ACR</title>
-<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M368.84,-65.12C368.84,-65.12 241.16,-65.12 241.16,-65.12 235.16,-65.12 229.16,-59.12 229.16,-53.12 229.16,-53.12 229.16,-41.12 229.16,-41.12 229.16,-35.12 235.16,-29.12 241.16,-29.12 241.16,-29.12 368.84,-29.12 368.84,-29.12 374.84,-29.12 380.84,-35.12 380.84,-41.12 380.84,-41.12 380.84,-53.12 380.84,-53.12 380.84,-59.12 374.84,-65.12 368.84,-65.12"/>
-<text xml:space="preserve" text-anchor="middle" x="305" y="-43.82" font-family="Helvetica,sans-Serif" font-size="11.00">Azure Container Registry</text>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M365.07,-62C365.07,-62 212.93,-62 212.93,-62 206.93,-62 200.93,-56 200.93,-50 200.93,-50 200.93,-38 200.93,-38 200.93,-32 206.93,-26 212.93,-26 212.93,-26 365.07,-26 365.07,-26 371.07,-26 377.07,-32 377.07,-38 377.07,-38 377.07,-50 377.07,-50 377.07,-56 371.07,-62 365.07,-62"/>
+<text xml:space="preserve" text-anchor="middle" x="289" y="-40.7" font-family="Helvetica,sans-Serif" font-size="11.00">🗄️ Azure Container Registry</text>
 </g>
 <!-- DEV&#45;&gt;ACR -->
 <g id="edge8" class="edge">
 <title>DEV&#45;&gt;ACR</title>
-<path fill="none" stroke="#8b95a3" d="M183.05,-147C199.68,-147 212.69,-147 212.69,-147 212.69,-147 212.69,-51 212.69,-51 212.69,-51 220.26,-51 220.26,-51"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="220.26,-53.45 227.26,-51 220.26,-48.55 220.26,-53.45"/>
-<text xml:space="preserve" text-anchor="middle" x="187.18" y="-112.74" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">push images</text>
+<path fill="none" stroke="#8b95a3" d="M169.49,-127.99C169.49,-98.19 169.49,-48 169.49,-48 169.49,-48 192.07,-48 192.07,-48"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="192.07,-50.45 199.07,-48 192.07,-45.55 192.07,-50.45"/>
+<text xml:space="preserve" text-anchor="middle" x="143.98" y="-68.61" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">push images</text>
 </g>
 <!-- PROD&#45;&gt;AKS -->
 <g id="edge11" class="edge">
 <title>PROD&#45;&gt;AKS</title>
-<path fill="none" stroke="#8b95a3" d="M225.72,-168C210.66,-168 199.26,-168 199.26,-168 199.26,-168 199.26,-58 199.26,-58 199.26,-58 194.8,-58 194.8,-58"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="194.8,-55.55 187.8,-58 194.8,-60.45 194.8,-55.55"/>
+<path fill="none" stroke="#8b95a3" d="M217.54,-142C201.61,-142 189.54,-142 189.54,-142 189.54,-142 189.54,-55 189.54,-55 189.54,-55 169.65,-55 169.65,-55"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="169.65,-52.55 162.65,-55 169.65,-57.45 169.65,-52.55"/>
 </g>
 <!-- PROD&#45;&gt;ACR -->
 <g id="edge9" class="edge">
 <title>PROD&#45;&gt;ACR</title>
-<path fill="none" stroke="#8b95a3" d="M299.51,-135.84C299.51,-135.84 299.51,-74.17 299.51,-74.17"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="301.96,-74.17 299.51,-67.17 297.06,-74.17 301.96,-74.17"/>
+<path fill="none" stroke="#8b95a3" d="M294,-127.91C294,-127.91 294,-70.92 294,-70.92"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="296.45,-70.92 294,-63.92 291.55,-70.92 296.45,-70.92"/>
 </g>
 <!-- AKS&#45;&gt;ACR -->
 <!-- AKS&#45;&gt;ACR -->
 <g id="edge12" class="edge">
 <title>AKS&#45;&gt;ACR</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M186.37,-44C186.37,-44 220.33,-44 220.33,-44"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="220.33,-46.45 227.33,-44 220.33,-41.55 220.33,-46.45"/>
-<text xml:space="preserve" text-anchor="middle" x="212.6" y="-46.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pulls</text>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M161.11,-40C161.11,-40 192.15,-40 192.15,-40"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="192.15,-42.45 199.15,-40 192.15,-37.55 192.15,-42.45"/>
+<text xml:space="preserve" text-anchor="middle" x="185.89" y="-42.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pulls</text>
 </g>
 </g>
 </svg>
diff --git a/reference-architectures/stackit-kubernetes.dot b/reference-architectures/stackit-kubernetes.dot
index f6bfff2d..389f2678 100644
--- a/reference-architectures/stackit-kubernetes.dot
+++ b/reference-architectures/stackit-kubernetes.dot
@@ -1,6 +1,6 @@
 /*
  * STACKIT Kubernetes (SKE) reference architecture.
- * Render with: task diagrams
+ * Conventions: .agents/references/diagrams.md — render with: task diagrams
  */
 digraph stackit_kubernetes {
   rankdir=TB
@@ -10,18 +10,12 @@ digraph stackit_kubernetes {
   nodesep=0.55
   ranksep=0.85
 
-  node [shape=box style="rounded,filled" fontname="Helvetica" fontsize=11 fillcolor="#ffffff" color="#a2abb8" penwidth=1.1 margin="0.20,0.11"]
+  node [shape=box style="rounded,filled" fontname="Helvetica" fontsize=11
+        fillcolor="#ffffff" color="#a2abb8" penwidth=1.1 margin="0.20,0.11"]
   edge [fontname="Helvetica" fontsize=9 fontcolor="#697180" color="#8b95a3" arrowsize=0.7]
 
-  subgraph cluster_catalog {
-    label="  Self-Service Catalog"
-    labeljust=l
-    fontname="Helvetica" fontsize=12 fontcolor="#697180"
-    style="rounded" color="#d5dae0"
-    margin=18
-
-    STARTER [label="ske/ske-starterkit\ndeveloper onboarding" fillcolor="#ecedfb" color="#9aa2e6"]
-  }
+  // meshStack definition the application team orders from the catalog
+  STARTER [label="📦 ske/ske-starterkit\nself-service catalog" fillcolor="#ecedfb" color="#9aa2e6"]
 
   subgraph cluster_team {
     label="  Per Application Team"
@@ -30,38 +24,29 @@ digraph stackit_kubernetes {
     style="rounded" color="#d5dae0"
     margin=18
 
-    REPO   [label="stackit/git-repository\nForgejo repo" fillcolor="#e5f2ea" color="#85bfa0"]
-    P_DEV  [label="dev project\n+ SKE tenant" fillcolor="#e5f2ea" color="#85bfa0"]
-    P_PROD [label="prod project\n+ SKE tenant" fillcolor="#e5f2ea" color="#85bfa0"]
-    D_DEV  [label="ske/forgejo-connector\ndev namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
-    D_PROD [label="ske/forgejo-connector\nprod namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
+    REPO   [label="🔀 stackit/git-repository\nForgejo repo" fillcolor="#e5f2ea" color="#85bfa0"]
+    P_DEV  [label="🗂️ dev project\n+ SKE tenant" fillcolor="#e5f2ea" color="#85bfa0"]
+    P_PROD [label="🗂️ prod project\n+ SKE tenant" fillcolor="#e5f2ea" color="#85bfa0"]
+    D_DEV  [label="⚙️ ske/forgejo-connector\ndev namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
+    D_PROD [label="⚙️ ske/forgejo-connector\nprod namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
 
     { rank=same; P_PROD -> P_DEV -> REPO [style=invis] }
     { rank=same; D_PROD -> D_DEV [style=invis] }
   }
 
-  subgraph cluster_platform {
-    label="  Platform Team"
-    labeljust=l
-    fontname="Helvetica" fontsize=12 fontcolor="#697180"
-    style="rounded" color="#d5dae0"
-    margin=18
-
-    SKE [label="SKE cluster\nmanaged by STACKIT"]
-  }
-
   subgraph cluster_stackit {
-    label="  STACKIT Global Services"
+    label="  STACKIT — provider-managed services"
     labeljust=l
     fontname="Helvetica" fontsize=12 fontcolor="#697180"
     style="rounded" color="#d5dae0"
     margin=18
 
-    GIT    [label="STACKIT Git\nForgejo instance"]
-    HARBOR [label="STACKIT Harbor\nregistry shared across customers"]
-    MODEL  [label="STACKIT Model Serving\nplatform-provided API"]
+    SKE    [label="☸️ SKE cluster\nprovisioned by the platform team" fillcolor="#eef2f6" color="#93a7bb"]
+    MODEL  [label="🧠 STACKIT Model Serving" fillcolor="#eef2f6" color="#93a7bb"]
+    HARBOR [label="🗄️ STACKIT Harbor\nregistry shared across customers" fillcolor="#eef2f6" color="#93a7bb"]
+    GIT    [label="🔀 STACKIT Git\nForgejo instance" fillcolor="#eef2f6" color="#93a7bb"]
 
-    { rank=same; GIT -> HARBOR -> MODEL [style=invis] }
+    { rank=same; MODEL -> HARBOR -> SKE -> GIT [style=invis] }
   }
 
   STARTER -> REPO   [xlabel="creates"]
@@ -70,9 +55,9 @@ digraph stackit_kubernetes {
   STARTER -> D_DEV  [xlabel="creates connector"]
   STARTER -> D_PROD
 
-  P_DEV  -> D_DEV  [xlabel="namespace"]
+  P_DEV  -> D_DEV [xlabel="namespace"]
   P_PROD -> D_PROD
-  REPO   -> D_DEV  [xlabel="repo output"]
+  REPO   -> D_DEV [xlabel="repo output"]
   REPO   -> D_PROD
 
   D_DEV  -> SKE [xlabel="deploys to"]
diff --git a/reference-architectures/stackit-kubernetes.svg b/reference-architectures/stackit-kubernetes.svg
index 85e38d81..f09a3e83 100644
--- a/reference-architectures/stackit-kubernetes.svg
+++ b/reference-architectures/stackit-kubernetes.svg
@@ -1,217 +1,207 @@
 <?xml version="1.0" encoding="UTF-8" standalone="no"?>
 <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
  "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg width="771pt" height="445pt"
- viewBox="0.00 0.00 771.00 445.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 441.16)">
+<svg width="833pt" height="391pt"
+ viewBox="0.00 0.00 833.00 391.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 387.36)">
 <title>stackit_kubernetes</title>
-<polygon fill="white" stroke="none" points="-4,4 -4,-441.16 767,-441.16 767,4 -4,4"/>
+<polygon fill="white" stroke="none" points="-4,4 -4,-387.36 829,-387.36 829,4 -4,4"/>
 <g id="clust1" class="cluster">
-<title>cluster_catalog</title>
-<path fill="white" stroke="#d5dae0" d="M185,-328.52C185,-328.52 333,-328.52 333,-328.52 339,-328.52 345,-334.52 345,-340.52 345,-340.52 345,-417.16 345,-417.16 345,-423.16 339,-429.16 333,-429.16 333,-429.16 185,-429.16 185,-429.16 179,-429.16 173,-423.16 173,-417.16 173,-417.16 173,-340.52 173,-340.52 173,-334.52 179,-328.52 185,-328.52"/>
-<text xml:space="preserve" text-anchor="middle" x="239.03" y="-414.36" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Self&#45;Service Catalog</text>
-</g>
-<g id="clust2" class="cluster">
 <title>cluster_team</title>
-<path fill="white" stroke="#d5dae0" d="M206,-116.64C206,-116.64 612,-116.64 612,-116.64 618,-116.64 624,-122.64 624,-128.64 624,-128.64 624,-308.52 624,-308.52 624,-314.52 618,-320.52 612,-320.52 612,-320.52 206,-320.52 206,-320.52 200,-320.52 194,-314.52 194,-308.52 194,-308.52 194,-128.64 194,-128.64 194,-122.64 200,-116.64 206,-116.64"/>
-<text xml:space="preserve" text-anchor="middle" x="262.69" y="-305.72" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Per Application Team</text>
-</g>
-<g id="clust5" class="cluster">
-<title>cluster_platform</title>
-<path fill="white" stroke="#d5dae0" d="M20,-8C20,-8 170,-8 170,-8 176,-8 182,-14 182,-20 182,-20 182,-96.64 182,-96.64 182,-102.64 176,-108.64 170,-108.64 170,-108.64 20,-108.64 20,-108.64 14,-108.64 8,-102.64 8,-96.64 8,-96.64 8,-20 8,-20 8,-14 14,-8 20,-8"/>
-<text xml:space="preserve" text-anchor="middle" x="58.68" y="-93.84" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Platform Team</text>
+<path fill="white" stroke="#d5dae0" d="M267,-116.64C267,-116.64 720,-116.64 720,-116.64 726,-116.64 732,-122.64 732,-128.64 732,-128.64 732,-308.52 732,-308.52 732,-314.52 726,-320.52 720,-320.52 720,-320.52 267,-320.52 267,-320.52 261,-320.52 255,-314.52 255,-308.52 255,-308.52 255,-128.64 255,-128.64 255,-122.64 261,-116.64 267,-116.64"/>
+<text xml:space="preserve" text-anchor="middle" x="323.69" y="-305.72" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Per Application Team</text>
 </g>
-<g id="clust6" class="cluster">
+<g id="clust4" class="cluster">
 <title>cluster_stackit</title>
-<path fill="white" stroke="#d5dae0" d="M202,-8C202,-8 743,-8 743,-8 749,-8 755,-14 755,-20 755,-20 755,-96.64 755,-96.64 755,-102.64 749,-108.64 743,-108.64 743,-108.64 202,-108.64 202,-108.64 196,-108.64 190,-102.64 190,-96.64 190,-96.64 190,-20 190,-20 190,-14 196,-8 202,-8"/>
-<text xml:space="preserve" text-anchor="middle" x="270.35" y="-93.84" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;STACKIT Global Services</text>
+<path fill="white" stroke="#d5dae0" d="M20,-8C20,-8 805,-8 805,-8 811,-8 817,-14 817,-20 817,-20 817,-96.64 817,-96.64 817,-102.64 811,-108.64 805,-108.64 805,-108.64 20,-108.64 20,-108.64 14,-108.64 8,-102.64 8,-96.64 8,-96.64 8,-20 8,-20 8,-14 14,-8 20,-8"/>
+<text xml:space="preserve" text-anchor="middle" x="125.37" y="-93.84" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;STACKIT — provider&#45;managed services</text>
 </g>
 <!-- STARTER -->
 <g id="node1" class="node">
 <title>STARTER</title>
-<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M314.61,-388.76C314.61,-388.76 203.39,-388.76 203.39,-388.76 197.39,-388.76 191.39,-382.76 191.39,-376.76 191.39,-376.76 191.39,-358.52 191.39,-358.52 191.39,-352.52 197.39,-346.52 203.39,-346.52 203.39,-346.52 314.61,-346.52 314.61,-346.52 320.61,-346.52 326.61,-352.52 326.61,-358.52 326.61,-358.52 326.61,-376.76 326.61,-376.76 326.61,-382.76 320.61,-388.76 314.61,-388.76"/>
-<text xml:space="preserve" text-anchor="middle" x="259" y="-370.94" font-family="Helvetica,sans-Serif" font-size="11.00">ske/ske&#45;starterkit</text>
-<text xml:space="preserve" text-anchor="middle" x="259" y="-357.74" font-family="Helvetica,sans-Serif" font-size="11.00">developer onboarding</text>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M378.6,-383.36C378.6,-383.36 275.4,-383.36 275.4,-383.36 269.4,-383.36 263.4,-377.36 263.4,-371.36 263.4,-371.36 263.4,-353.12 263.4,-353.12 263.4,-347.12 269.4,-341.12 275.4,-341.12 275.4,-341.12 378.6,-341.12 378.6,-341.12 384.6,-341.12 390.6,-347.12 390.6,-353.12 390.6,-353.12 390.6,-371.36 390.6,-371.36 390.6,-377.36 384.6,-383.36 378.6,-383.36"/>
+<text xml:space="preserve" text-anchor="middle" x="327" y="-365.54" font-family="Helvetica,sans-Serif" font-size="11.00">📦 ske/ske&#45;starterkit</text>
+<text xml:space="preserve" text-anchor="middle" x="327" y="-352.34" font-family="Helvetica,sans-Serif" font-size="11.00">self&#45;service catalog</text>
 </g>
 <!-- REPO -->
 <g id="node2" class="node">
 <title>REPO</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M594.3,-280.12C594.3,-280.12 491.7,-280.12 491.7,-280.12 485.7,-280.12 479.7,-274.12 479.7,-268.12 479.7,-268.12 479.7,-249.88 479.7,-249.88 479.7,-243.88 485.7,-237.88 491.7,-237.88 491.7,-237.88 594.3,-237.88 594.3,-237.88 600.3,-237.88 606.3,-243.88 606.3,-249.88 606.3,-249.88 606.3,-268.12 606.3,-268.12 606.3,-274.12 600.3,-280.12 594.3,-280.12"/>
-<text xml:space="preserve" text-anchor="middle" x="543" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">stackit/git&#45;repository</text>
-<text xml:space="preserve" text-anchor="middle" x="543" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">Forgejo repo</text>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M701.94,-280.12C701.94,-280.12 584.06,-280.12 584.06,-280.12 578.06,-280.12 572.06,-274.12 572.06,-268.12 572.06,-268.12 572.06,-249.88 572.06,-249.88 572.06,-243.88 578.06,-237.88 584.06,-237.88 584.06,-237.88 701.94,-237.88 701.94,-237.88 707.94,-237.88 713.94,-243.88 713.94,-249.88 713.94,-249.88 713.94,-268.12 713.94,-268.12 713.94,-274.12 707.94,-280.12 701.94,-280.12"/>
+<text xml:space="preserve" text-anchor="middle" x="643" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">🔀 stackit/git&#45;repository</text>
+<text xml:space="preserve" text-anchor="middle" x="643" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">Forgejo repo</text>
 </g>
 <!-- STARTER&#45;&gt;REPO -->
-<g id="edge6" class="edge">
+<g id="edge7" class="edge">
 <title>STARTER&#45;&gt;REPO</title>
-<path fill="none" stroke="#8b95a3" d="M327.03,-375C411.04,-375 543,-375 543,-375 543,-375 543,-289.06 543,-289.06"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="545.45,-289.06 543,-282.06 540.55,-289.06 545.45,-289.06"/>
-<text xml:space="preserve" text-anchor="middle" x="463.23" y="-377.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
+<path fill="none" stroke="#8b95a3" d="M390.95,-369C483.28,-369 643,-369 643,-369 643,-369 643,-288.98 643,-288.98"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="645.45,-288.98 643,-281.98 640.55,-288.98 645.45,-288.98"/>
+<text xml:space="preserve" text-anchor="middle" x="542.22" y="-371.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
 </g>
 <!-- P_DEV -->
 <g id="node3" class="node">
 <title>P_DEV</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M293.96,-280.12C293.96,-280.12 224.04,-280.12 224.04,-280.12 218.04,-280.12 212.04,-274.12 212.04,-268.12 212.04,-268.12 212.04,-249.88 212.04,-249.88 212.04,-243.88 218.04,-237.88 224.04,-237.88 224.04,-237.88 293.96,-237.88 293.96,-237.88 299.96,-237.88 305.96,-243.88 305.96,-249.88 305.96,-249.88 305.96,-268.12 305.96,-268.12 305.96,-274.12 299.96,-280.12 293.96,-280.12"/>
-<text xml:space="preserve" text-anchor="middle" x="259" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">dev project</text>
-<text xml:space="preserve" text-anchor="middle" x="259" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">+ SKE tenant</text>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M368.53,-280.12C368.53,-280.12 285.47,-280.12 285.47,-280.12 279.47,-280.12 273.47,-274.12 273.47,-268.12 273.47,-268.12 273.47,-249.88 273.47,-249.88 273.47,-243.88 279.47,-237.88 285.47,-237.88 285.47,-237.88 368.53,-237.88 368.53,-237.88 374.53,-237.88 380.53,-243.88 380.53,-249.88 380.53,-249.88 380.53,-268.12 380.53,-268.12 380.53,-274.12 374.53,-280.12 368.53,-280.12"/>
+<text xml:space="preserve" text-anchor="middle" x="327" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">🗂️ dev project</text>
+<text xml:space="preserve" text-anchor="middle" x="327" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">+ SKE tenant</text>
 </g>
 <!-- STARTER&#45;&gt;P_DEV -->
-<g id="edge7" class="edge">
+<g id="edge8" class="edge">
 <title>STARTER&#45;&gt;P_DEV</title>
-<path fill="none" stroke="#8b95a3" d="M259,-346.18C259,-346.18 259,-288.93 259,-288.93"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="261.45,-288.93 259,-281.93 256.55,-288.93 261.45,-288.93"/>
-<text xml:space="preserve" text-anchor="middle" x="244.24" y="-320.25" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
+<path fill="none" stroke="#8b95a3" d="M327,-340.85C327,-340.85 327,-288.88 327,-288.88"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="329.45,-288.88 327,-281.88 324.55,-288.88 329.45,-288.88"/>
+<text xml:space="preserve" text-anchor="middle" x="312.24" y="-317.56" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
 </g>
 <!-- P_PROD -->
 <g id="node4" class="node">
 <title>P_PROD</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M427.96,-280.12C427.96,-280.12 358.04,-280.12 358.04,-280.12 352.04,-280.12 346.04,-274.12 346.04,-268.12 346.04,-268.12 346.04,-249.88 346.04,-249.88 346.04,-243.88 352.04,-237.88 358.04,-237.88 358.04,-237.88 427.96,-237.88 427.96,-237.88 433.96,-237.88 439.96,-243.88 439.96,-249.88 439.96,-249.88 439.96,-268.12 439.96,-268.12 439.96,-274.12 433.96,-280.12 427.96,-280.12"/>
-<text xml:space="preserve" text-anchor="middle" x="393" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">prod project</text>
-<text xml:space="preserve" text-anchor="middle" x="393" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">+ SKE tenant</text>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M519.67,-280.12C519.67,-280.12 432.33,-280.12 432.33,-280.12 426.33,-280.12 420.33,-274.12 420.33,-268.12 420.33,-268.12 420.33,-249.88 420.33,-249.88 420.33,-243.88 426.33,-237.88 432.33,-237.88 432.33,-237.88 519.67,-237.88 519.67,-237.88 525.67,-237.88 531.67,-243.88 531.67,-249.88 531.67,-249.88 531.67,-268.12 531.67,-268.12 531.67,-274.12 525.67,-280.12 519.67,-280.12"/>
+<text xml:space="preserve" text-anchor="middle" x="476" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">🗂️ prod project</text>
+<text xml:space="preserve" text-anchor="middle" x="476" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">+ SKE tenant</text>
 </g>
 <!-- STARTER&#45;&gt;P_PROD -->
-<g id="edge8" class="edge">
+<g id="edge9" class="edge">
 <title>STARTER&#45;&gt;P_PROD</title>
-<path fill="none" stroke="#8b95a3" d="M319.73,-346.08C319.73,-316.25 319.73,-266 319.73,-266 319.73,-266 337.25,-266 337.25,-266"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="337.25,-268.45 344.25,-266 337.25,-263.55 337.25,-268.45"/>
+<path fill="none" stroke="#8b95a3" d="M387.25,-340.88C387.25,-312.53 387.25,-266 387.25,-266 387.25,-266 411.28,-266 411.28,-266"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="411.28,-268.45 418.28,-266 411.28,-263.55 411.28,-268.45"/>
 </g>
 <!-- D_DEV -->
 <g id="node5" class="node">
 <title>D_DEV</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M339.73,-176.88C339.73,-176.88 224.27,-176.88 224.27,-176.88 218.27,-176.88 212.27,-170.88 212.27,-164.88 212.27,-164.88 212.27,-146.64 212.27,-146.64 212.27,-140.64 218.27,-134.64 224.27,-134.64 224.27,-134.64 339.73,-134.64 339.73,-134.64 345.73,-134.64 351.73,-140.64 351.73,-146.64 351.73,-146.64 351.73,-164.88 351.73,-164.88 351.73,-170.88 345.73,-176.88 339.73,-176.88"/>
-<text xml:space="preserve" text-anchor="middle" x="282" y="-159.06" font-family="Helvetica,sans-Serif" font-size="11.00">ske/forgejo&#45;connector</text>
-<text xml:space="preserve" text-anchor="middle" x="282" y="-145.86" font-family="Helvetica,sans-Serif" font-size="11.00">dev namespace CI/CD</text>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M416.99,-176.88C416.99,-176.88 285.01,-176.88 285.01,-176.88 279.01,-176.88 273.01,-170.88 273.01,-164.88 273.01,-164.88 273.01,-146.64 273.01,-146.64 273.01,-140.64 279.01,-134.64 285.01,-134.64 285.01,-134.64 416.99,-134.64 416.99,-134.64 422.99,-134.64 428.99,-140.64 428.99,-146.64 428.99,-146.64 428.99,-164.88 428.99,-164.88 428.99,-170.88 422.99,-176.88 416.99,-176.88"/>
+<text xml:space="preserve" text-anchor="middle" x="351" y="-159.06" font-family="Helvetica,sans-Serif" font-size="11.00">⚙️ ske/forgejo&#45;connector</text>
+<text xml:space="preserve" text-anchor="middle" x="351" y="-145.86" font-family="Helvetica,sans-Serif" font-size="11.00">dev namespace CI/CD</text>
 </g>
 <!-- STARTER&#45;&gt;D_DEV -->
-<g id="edge9" class="edge">
+<g id="edge10" class="edge">
 <title>STARTER&#45;&gt;D_DEV</title>
-<path fill="none" stroke="#8b95a3" d="M312.85,-346.16C312.85,-346.16 312.85,-185.81 312.85,-185.81"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="315.3,-185.81 312.85,-178.81 310.4,-185.81 315.3,-185.81"/>
-<text xml:space="preserve" text-anchor="middle" x="348.62" y="-268.69" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates connector</text>
+<path fill="none" stroke="#8b95a3" d="M383.89,-340.92C383.89,-340.92 383.89,-185.79 383.89,-185.79"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="386.34,-185.79 383.89,-178.79 381.44,-185.79 386.34,-185.79"/>
+<text xml:space="preserve" text-anchor="middle" x="383.89" y="-255.25" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates connector</text>
 </g>
 <!-- D_PROD -->
 <g id="node6" class="node">
 <title>D_PROD</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M523.87,-176.88C523.87,-176.88 404.13,-176.88 404.13,-176.88 398.13,-176.88 392.13,-170.88 392.13,-164.88 392.13,-164.88 392.13,-146.64 392.13,-146.64 392.13,-140.64 398.13,-134.64 404.13,-134.64 404.13,-134.64 523.87,-134.64 523.87,-134.64 529.87,-134.64 535.87,-140.64 535.87,-146.64 535.87,-146.64 535.87,-164.88 535.87,-164.88 535.87,-170.88 529.87,-176.88 523.87,-176.88"/>
-<text xml:space="preserve" text-anchor="middle" x="464" y="-159.06" font-family="Helvetica,sans-Serif" font-size="11.00">ske/forgejo&#45;connector</text>
-<text xml:space="preserve" text-anchor="middle" x="464" y="-145.86" font-family="Helvetica,sans-Serif" font-size="11.00">prod namespace CI/CD</text>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M612.99,-176.88C612.99,-176.88 481.01,-176.88 481.01,-176.88 475.01,-176.88 469.01,-170.88 469.01,-164.88 469.01,-164.88 469.01,-146.64 469.01,-146.64 469.01,-140.64 475.01,-134.64 481.01,-134.64 481.01,-134.64 612.99,-134.64 612.99,-134.64 618.99,-134.64 624.99,-140.64 624.99,-146.64 624.99,-146.64 624.99,-164.88 624.99,-164.88 624.99,-170.88 618.99,-176.88 612.99,-176.88"/>
+<text xml:space="preserve" text-anchor="middle" x="547" y="-159.06" font-family="Helvetica,sans-Serif" font-size="11.00">⚙️ ske/forgejo&#45;connector</text>
+<text xml:space="preserve" text-anchor="middle" x="547" y="-145.86" font-family="Helvetica,sans-Serif" font-size="11.00">prod namespace CI/CD</text>
 </g>
 <!-- STARTER&#45;&gt;D_PROD -->
-<g id="edge10" class="edge">
+<g id="edge11" class="edge">
 <title>STARTER&#45;&gt;D_PROD</title>
-<path fill="none" stroke="#8b95a3" d="M326.99,-361C385.25,-361 459.83,-361 459.83,-361 459.83,-361 459.83,-185.85 459.83,-185.85"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="462.28,-185.85 459.83,-178.85 457.38,-185.85 462.28,-185.85"/>
+<path fill="none" stroke="#8b95a3" d="M391.14,-355C457.6,-355 551.86,-355 551.86,-355 551.86,-355 551.86,-185.6 551.86,-185.6"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="554.31,-185.6 551.86,-178.6 549.41,-185.6 554.31,-185.6"/>
 </g>
 <!-- REPO&#45;&gt;D_DEV -->
-<g id="edge13" class="edge">
+<g id="edge14" class="edge">
 <title>REPO&#45;&gt;D_DEV</title>
-<path fill="none" stroke="#8b95a3" d="M507.78,-237.66C507.78,-219.73 507.78,-197 507.78,-197 507.78,-197 336.32,-197 336.32,-197 336.32,-197 336.32,-185.86 336.32,-185.86"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="338.77,-185.86 336.32,-178.86 333.87,-185.86 338.77,-185.86"/>
-<text xml:space="preserve" text-anchor="middle" x="414.05" y="-199.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">repo output</text>
+<path fill="none" stroke="#8b95a3" d="M598.52,-237.66C598.52,-219.73 598.52,-197 598.52,-197 598.52,-197 424.66,-197 424.66,-197 424.66,-197 424.66,-185.86 424.66,-185.86"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="427.11,-185.86 424.66,-178.86 422.21,-185.86 427.11,-185.86"/>
+<text xml:space="preserve" text-anchor="middle" x="503.58" y="-199.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">repo output</text>
 </g>
 <!-- REPO&#45;&gt;D_PROD -->
-<g id="edge14" class="edge">
+<g id="edge15" class="edge">
 <title>REPO&#45;&gt;D_PROD</title>
-<path fill="none" stroke="#8b95a3" d="M521.83,-237.61C521.83,-237.61 521.83,-185.64 521.83,-185.64"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="524.28,-185.64 521.83,-178.64 519.38,-185.64 524.28,-185.64"/>
+<path fill="none" stroke="#8b95a3" d="M611.75,-237.61C611.75,-237.61 611.75,-185.64 611.75,-185.64"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="614.2,-185.64 611.75,-178.64 609.3,-185.64 614.2,-185.64"/>
 </g>
 <!-- GIT -->
-<g id="node8" class="node">
+<g id="node10" class="node">
 <title>GIT</title>
-<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M725.06,-68.24C725.06,-68.24 638.94,-68.24 638.94,-68.24 632.94,-68.24 626.94,-62.24 626.94,-56.24 626.94,-56.24 626.94,-38 626.94,-38 626.94,-32 632.94,-26 638.94,-26 638.94,-26 725.06,-26 725.06,-26 731.06,-26 737.06,-32 737.06,-38 737.06,-38 737.06,-56.24 737.06,-56.24 737.06,-62.24 731.06,-68.24 725.06,-68.24"/>
-<text xml:space="preserve" text-anchor="middle" x="682" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">STACKIT Git</text>
-<text xml:space="preserve" text-anchor="middle" x="682" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">Forgejo instance</text>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M787.06,-68.24C787.06,-68.24 700.94,-68.24 700.94,-68.24 694.94,-68.24 688.94,-62.24 688.94,-56.24 688.94,-56.24 688.94,-38 688.94,-38 688.94,-32 694.94,-26 700.94,-26 700.94,-26 787.06,-26 787.06,-26 793.06,-26 799.06,-32 799.06,-38 799.06,-38 799.06,-56.24 799.06,-56.24 799.06,-62.24 793.06,-68.24 787.06,-68.24"/>
+<text xml:space="preserve" text-anchor="middle" x="744" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">🔀 STACKIT Git</text>
+<text xml:space="preserve" text-anchor="middle" x="744" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">Forgejo instance</text>
 </g>
 <!-- REPO&#45;&gt;GIT -->
-<g id="edge17" class="edge">
+<g id="edge18" class="edge">
 <title>REPO&#45;&gt;GIT</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M596.85,-237.45C596.85,-184.82 596.85,-54 596.85,-54 596.85,-54 618.12,-54 618.12,-54"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="618.12,-56.45 625.12,-54 618.12,-51.55 618.12,-56.45"/>
-<text xml:space="preserve" text-anchor="middle" x="577.08" y="-137.79" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">hosted on</text>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M705.61,-237.52C705.61,-237.52 705.61,-77.17 705.61,-77.17"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="708.06,-77.17 705.61,-70.17 703.16,-77.17 708.06,-77.17"/>
+<text xml:space="preserve" text-anchor="middle" x="685.84" y="-160.05" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">hosted on</text>
 </g>
 <!-- P_DEV&#45;&gt;REPO -->
 <!-- P_DEV&#45;&gt;D_DEV -->
-<g id="edge11" class="edge">
+<g id="edge12" class="edge">
 <title>P_DEV&#45;&gt;D_DEV</title>
-<path fill="none" stroke="#8b95a3" d="M243.5,-237.61C243.5,-237.61 243.5,-185.64 243.5,-185.64"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="245.95,-185.64 243.5,-178.64 241.05,-185.64 245.95,-185.64"/>
-<text xml:space="preserve" text-anchor="middle" x="220.24" y="-214.32" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">namespace</text>
+<path fill="none" stroke="#8b95a3" d="M309.16,-237.61C309.16,-237.61 309.16,-185.64 309.16,-185.64"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="311.61,-185.64 309.16,-178.64 306.71,-185.64 311.61,-185.64"/>
+<text xml:space="preserve" text-anchor="middle" x="285.89" y="-214.32" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">namespace</text>
 </g>
 <!-- P_PROD&#45;&gt;P_DEV -->
 <!-- P_PROD&#45;&gt;D_PROD -->
-<g id="edge12" class="edge">
+<g id="edge13" class="edge">
 <title>P_PROD&#45;&gt;D_PROD</title>
-<path fill="none" stroke="#8b95a3" d="M416.05,-237.61C416.05,-237.61 416.05,-185.64 416.05,-185.64"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="418.5,-185.64 416.05,-178.64 413.6,-185.64 418.5,-185.64"/>
+<path fill="none" stroke="#8b95a3" d="M500.34,-237.61C500.34,-237.61 500.34,-185.64 500.34,-185.64"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="502.79,-185.64 500.34,-178.64 497.89,-185.64 502.79,-185.64"/>
 </g>
 <!-- SKE -->
 <g id="node7" class="node">
 <title>SKE</title>
-<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M152.42,-68.24C152.42,-68.24 37.58,-68.24 37.58,-68.24 31.58,-68.24 25.58,-62.24 25.58,-56.24 25.58,-56.24 25.58,-38 25.58,-38 25.58,-32 31.58,-26 37.58,-26 37.58,-26 152.42,-26 152.42,-26 158.42,-26 164.42,-32 164.42,-38 164.42,-38 164.42,-56.24 164.42,-56.24 164.42,-62.24 158.42,-68.24 152.42,-68.24"/>
-<text xml:space="preserve" text-anchor="middle" x="95" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">SKE cluster</text>
-<text xml:space="preserve" text-anchor="middle" x="95" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">managed by STACKIT</text>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M433.19,-68.24C433.19,-68.24 268.81,-68.24 268.81,-68.24 262.81,-68.24 256.81,-62.24 256.81,-56.24 256.81,-56.24 256.81,-38 256.81,-38 256.81,-32 262.81,-26 268.81,-26 268.81,-26 433.19,-26 433.19,-26 439.19,-26 445.19,-32 445.19,-38 445.19,-38 445.19,-56.24 445.19,-56.24 445.19,-62.24 439.19,-68.24 433.19,-68.24"/>
+<text xml:space="preserve" text-anchor="middle" x="351" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">☸️ SKE cluster</text>
+<text xml:space="preserve" text-anchor="middle" x="351" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">provisioned by the platform team</text>
 </g>
 <!-- D_DEV&#45;&gt;SKE -->
-<g id="edge15" class="edge">
+<g id="edge16" class="edge">
 <title>D_DEV&#45;&gt;SKE</title>
-<path fill="none" stroke="#8b95a3" d="M211.73,-156C150.64,-156 71.86,-156 71.86,-156 71.86,-156 71.86,-77.14 71.86,-77.14"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="74.31,-77.14 71.86,-70.14 69.41,-77.14 74.31,-77.14"/>
-<text xml:space="preserve" text-anchor="middle" x="81.85" y="-158.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">deploys to</text>
+<path fill="none" stroke="#8b95a3" d="M351,-134.3C351,-134.3 351,-77.05 351,-77.05"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="353.45,-77.05 351,-70.05 348.55,-77.05 353.45,-77.05"/>
+<text xml:space="preserve" text-anchor="middle" x="330.49" y="-108.37" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">deploys to</text>
+</g>
+<!-- MODEL -->
+<g id="node8" class="node">
+<title>MODEL</title>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M636.95,-65.12C636.95,-65.12 497.05,-65.12 497.05,-65.12 491.05,-65.12 485.05,-59.12 485.05,-53.12 485.05,-53.12 485.05,-41.12 485.05,-41.12 485.05,-35.12 491.05,-29.12 497.05,-29.12 497.05,-29.12 636.95,-29.12 636.95,-29.12 642.95,-29.12 648.95,-35.12 648.95,-41.12 648.95,-41.12 648.95,-53.12 648.95,-53.12 648.95,-59.12 642.95,-65.12 636.95,-65.12"/>
+<text xml:space="preserve" text-anchor="middle" x="567" y="-43.82" font-family="Helvetica,sans-Serif" font-size="11.00">🧠 STACKIT Model Serving</text>
+</g>
+<!-- D_DEV&#45;&gt;MODEL -->
+<g id="edge21" class="edge">
+<title>D_DEV&#45;&gt;MODEL</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M429.5,-149C445.27,-149 457.1,-149 457.1,-149 457.1,-149 457.1,-53 457.1,-53 457.1,-53 476.04,-53 476.04,-53"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="476.04,-55.45 483.04,-53 476.04,-50.55 476.04,-55.45"/>
+<text xml:space="preserve" text-anchor="middle" x="422.84" y="-108.03" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">model API secret</text>
 </g>
 <!-- HARBOR -->
 <g id="node9" class="node">
 <title>HARBOR</title>
-<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M575.4,-68.24C575.4,-68.24 408.6,-68.24 408.6,-68.24 402.6,-68.24 396.6,-62.24 396.6,-56.24 396.6,-56.24 396.6,-38 396.6,-38 396.6,-32 402.6,-26 408.6,-26 408.6,-26 575.4,-26 575.4,-26 581.4,-26 587.4,-32 587.4,-38 587.4,-38 587.4,-56.24 587.4,-56.24 587.4,-62.24 581.4,-68.24 575.4,-68.24"/>
-<text xml:space="preserve" text-anchor="middle" x="492" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">STACKIT Harbor</text>
-<text xml:space="preserve" text-anchor="middle" x="492" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">registry shared across customers</text>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M204.4,-68.24C204.4,-68.24 37.6,-68.24 37.6,-68.24 31.6,-68.24 25.6,-62.24 25.6,-56.24 25.6,-56.24 25.6,-38 25.6,-38 25.6,-32 31.6,-26 37.6,-26 37.6,-26 204.4,-26 204.4,-26 210.4,-26 216.4,-32 216.4,-38 216.4,-38 216.4,-56.24 216.4,-56.24 216.4,-62.24 210.4,-68.24 204.4,-68.24"/>
+<text xml:space="preserve" text-anchor="middle" x="121" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">🗄️ STACKIT Harbor</text>
+<text xml:space="preserve" text-anchor="middle" x="121" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">registry shared across customers</text>
 </g>
 <!-- D_DEV&#45;&gt;HARBOR -->
-<g id="edge18" class="edge">
+<g id="edge19" class="edge">
 <title>D_DEV&#45;&gt;HARBOR</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M352.03,-145C361.61,-145 368.25,-145 368.25,-145 368.25,-145 368.25,-58 368.25,-58 368.25,-58 387.82,-58 387.82,-58"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="387.82,-60.45 394.82,-58 387.82,-55.55 387.82,-60.45"/>
-<text xml:space="preserve" text-anchor="middle" x="393.76" y="-102.53" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">push images</text>
-</g>
-<!-- MODEL -->
-<g id="node10" class="node">
-<title>MODEL</title>
-<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M344.31,-68.24C344.31,-68.24 219.69,-68.24 219.69,-68.24 213.69,-68.24 207.69,-62.24 207.69,-56.24 207.69,-56.24 207.69,-38 207.69,-38 207.69,-32 213.69,-26 219.69,-26 219.69,-26 344.31,-26 344.31,-26 350.31,-26 356.31,-32 356.31,-38 356.31,-38 356.31,-56.24 356.31,-56.24 356.31,-62.24 350.31,-68.24 344.31,-68.24"/>
-<text xml:space="preserve" text-anchor="middle" x="282" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">STACKIT Model Serving</text>
-<text xml:space="preserve" text-anchor="middle" x="282" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">platform&#45;provided API</text>
-</g>
-<!-- D_DEV&#45;&gt;MODEL -->
-<g id="edge20" class="edge">
-<title>D_DEV&#45;&gt;MODEL</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M282,-134.3C282,-134.3 282,-77.05 282,-77.05"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="284.45,-77.05 282,-70.05 279.55,-77.05 284.45,-77.05"/>
-<text xml:space="preserve" text-anchor="middle" x="247.74" y="-108.37" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">model API secret</text>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M272.81,-156C195.66,-156 89.2,-156 89.2,-156 89.2,-156 89.2,-77.14 89.2,-77.14"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="91.65,-77.14 89.2,-70.14 86.75,-77.14 91.65,-77.14"/>
+<text xml:space="preserve" text-anchor="middle" x="116.06" y="-158.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">push images</text>
 </g>
 <!-- D_PROD&#45;&gt;D_DEV -->
 <!-- D_PROD&#45;&gt;SKE -->
-<g id="edge16" class="edge">
+<g id="edge17" class="edge">
 <title>D_PROD&#45;&gt;SKE</title>
-<path fill="none" stroke="#8b95a3" d="M443.02,-134.12C443.02,-118.81 443.02,-101 443.02,-101 443.02,-101 118.14,-101 118.14,-101 118.14,-101 118.14,-77.24 118.14,-77.24"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="120.59,-77.24 118.14,-70.24 115.69,-77.24 120.59,-77.24"/>
-</g>
-<!-- D_PROD&#45;&gt;HARBOR -->
-<g id="edge19" class="edge">
-<title>D_PROD&#45;&gt;HARBOR</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M489.45,-134.3C489.45,-134.3 489.45,-77.05 489.45,-77.05"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="491.9,-77.05 489.45,-70.05 487,-77.05 491.9,-77.05"/>
+<path fill="none" stroke="#8b95a3" d="M479.71,-134.17C479.71,-100.93 479.71,-41 479.71,-41 479.71,-41 454.07,-41 454.07,-41"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="454.07,-38.55 447.07,-41 454.07,-43.45 454.07,-38.55"/>
 </g>
 <!-- D_PROD&#45;&gt;MODEL -->
-<g id="edge21" class="edge">
+<g id="edge22" class="edge">
 <title>D_PROD&#45;&gt;MODEL</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M391.84,-166C384.79,-166 380.19,-166 380.19,-166 380.19,-166 380.19,-47 380.19,-47 380.19,-47 364.93,-47 364.93,-47"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="364.93,-44.55 357.93,-47 364.93,-49.45 364.93,-44.55"/>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M555.02,-134.3C555.02,-134.3 555.02,-74.16 555.02,-74.16"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="557.47,-74.16 555.02,-67.16 552.57,-74.16 557.47,-74.16"/>
 </g>
-<!-- GIT&#45;&gt;HARBOR -->
+<!-- D_PROD&#45;&gt;HARBOR -->
+<g id="edge20" class="edge">
+<title>D_PROD&#45;&gt;HARBOR</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M474.36,-134.13C474.36,-123.52 474.36,-113 474.36,-113 474.36,-113 152.8,-113 152.8,-113 152.8,-113 152.8,-77.21 152.8,-77.21"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="155.25,-77.21 152.8,-70.21 150.35,-77.21 155.25,-77.21"/>
+</g>
+<!-- SKE&#45;&gt;GIT -->
+<!-- MODEL&#45;&gt;HARBOR -->
 <!-- HARBOR&#45;&gt;SKE -->
-<g id="edge22" class="edge">
+<!-- HARBOR&#45;&gt;SKE -->
+<g id="edge23" class="edge">
 <title>HARBOR&#45;&gt;SKE</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M492,-25.73C492,-16.6 492,-8 492,-8 492,-8 95,-8 95,-8 95,-8 95,-17.22 95,-17.22"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="92.55,-17.22 95,-24.22 97.45,-17.22 92.55,-17.22"/>
-<text xml:space="preserve" text-anchor="middle" x="288.5" y="-10.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pulls</text>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M216.88,-40C216.88,-40 247.87,-40 247.87,-40"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="247.87,-42.45 254.87,-40 247.87,-37.55 247.87,-42.45"/>
+<text xml:space="preserve" text-anchor="middle" x="241.63" y="-42.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pulls</text>
 </g>
-<!-- HARBOR&#45;&gt;MODEL -->
 </g>
 </svg>

From ab52aeb6da82cefb5a968a0484614dc3af546005 Mon Sep 17 00:00:00 2001
From: Johannes Rudolph <jrudolph@meshcloud.io>
Date: Fri, 31 Jul 2026 11:54:45 +0200
Subject: [PATCH 3/7] docs: refactor kubernetes reference architecture diagrams
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Both diagrams mixed a lifecycle split ("Per Application Team") with a
system split ("Azure — managed by the platform team"), which the diagram
conventions forbid, and left the starterkit BBD floating outside every
cluster with no meshStack layering around it.

- one cluster per system: Azure/GitHub/meshStack and STACKIT/meshStack
- give the meshStack side its own depth: platform -> landing zone ->
  project, alongside the BBD composition
- cross-boundary edges are dotted + constraint=false so they no longer
  distort the ranking they describe
- collapse the dev/prod twins to x2 cardinality labels, which removes
  most of the old edge spaghetti
- meshStack constructs always point at the cloud resources they manage

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 reference-architectures/azure-kubernetes.dot  |  71 ++--
 reference-architectures/azure-kubernetes.svg  | 309 ++++++++++-----
 .../stackit-kubernetes.dot                    |  80 ++--
 .../stackit-kubernetes.svg                    | 369 ++++++++++--------
 4 files changed, 499 insertions(+), 330 deletions(-)

diff --git a/reference-architectures/azure-kubernetes.dot b/reference-architectures/azure-kubernetes.dot
index 68553e40..4d5fda29 100644
--- a/reference-architectures/azure-kubernetes.dot
+++ b/reference-architectures/azure-kubernetes.dot
@@ -14,47 +14,70 @@ digraph azure_kubernetes {
         fillcolor="#ffffff" color="#a2abb8" penwidth=1.1 margin="0.20,0.11"]
   edge [fontname="Helvetica" fontsize=9 fontcolor="#697180" color="#8b95a3" arrowsize=0.7]
 
-  // meshStack definition the application team orders from the catalog
-  STARTER [label="📦 aks/starterkit\nself-service catalog" fillcolor="#ecedfb" color="#9aa2e6"]
-
-  subgraph cluster_team {
-    label="  Per Application Team"
+  subgraph cluster_azure {
+    label="  Azure"
     labeljust=l
     fontname="Helvetica" fontsize=12 fontcolor="#697180"
     style="rounded" color="#d5dae0"
     margin=18
 
-    REPO [label="🔀 github/repository\nGitHub repo" fillcolor="#e5f2ea" color="#85bfa0"]
-    DEV  [label="⚙️ aks/github-connector\ndev namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
-    PROD [label="⚙️ aks/github-connector\nprod namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
+    SUB [label="🗂️ Azure Subscription" fillcolor="#ffffff" color="#a2abb8"]
+    AKS [label="☸️ AKS cluster\nrun by the platform team" fillcolor="#eef2f6" color="#93a7bb"]
+    ACR [label="🗄️ Azure Container Registry" fillcolor="#eef2f6" color="#93a7bb"]
+    NS  [label="☸️ Namespace ×2\ndev + prod" fillcolor="#e5f2ea" color="#85bfa0"]
 
-    { rank=same; DEV -> PROD [style=invis] }
+    { rank=same; AKS -> ACR [style=invis] }
+
+    SUB -> AKS
+    SUB -> ACR
+    AKS -> NS [xlabel="contains"]
+    NS  -> ACR [xlabel="pulls images" style=dashed constraint=false]
   }
 
-  subgraph cluster_azure {
-    label="  Azure — managed by the platform team"
+  subgraph cluster_github {
+    label="  GitHub"
     labeljust=l
     fontname="Helvetica" fontsize=12 fontcolor="#697180"
     style="rounded" color="#d5dae0"
     margin=18
 
-    AKS [label="☸️ AKS cluster" fillcolor="#eef2f6" color="#93a7bb"]
-    ACR [label="🗄️ Azure Container Registry" fillcolor="#eef2f6" color="#93a7bb"]
+    ORG  [label="🏢 GitHub organization" fillcolor="#ffffff" color="#a2abb8"]
+    TPL  [label="🔀 Template repository\nmaintained by the platform team" fillcolor="#ffffff" color="#a2abb8"]
+    REPO [label="🔀 App repository ×1\nper application team" fillcolor="#e5f2ea" color="#85bfa0"]
+    GHA  [label="⚙️ GitHub Actions ×2\ndev + prod environment" fillcolor="#e5f2ea" color="#85bfa0"]
 
-    { rank=same; AKS -> ACR [style=invis] }
+    ORG  -> TPL
+    TPL  -> REPO [xlabel="cloned into"]
+    REPO -> GHA  [xlabel="runs workflow"]
   }
 
-  STARTER -> REPO [xlabel="creates"]
-  STARTER -> DEV  [xlabel="creates dev env"]
-  STARTER -> PROD [xlabel="creates prod env"]
+  subgraph cluster_mesh {
+    label="  meshStack"
+    labeljust=l
+    fontname="Helvetica" fontsize=12 fontcolor="#697180"
+    style="rounded" color="#d5dae0"
+    margin=18
+
+    PLAT  [label="🛰️ AKS Namespace Platform" fillcolor="#ecedfb" color="#9aa2e6"]
+    LZ    [label="🛬 Landing Zone ×2\ndev + prod" fillcolor="#ecedfb" color="#9aa2e6"]
+    PROJ  [label="🗂️ Project ×2\ndev + prod" fillcolor="#e5f2ea" color="#85bfa0"]
+    BBD_S [label="📦 aks/starterkit BBD\nself-service catalog entry" fillcolor="#ecedfb" color="#9aa2e6"]
+    BBD_R [label="📦 github/repository BBD" fillcolor="#ecedfb" color="#9aa2e6"]
+    BBD_C [label="📦 aks/github-connector BBD" fillcolor="#ecedfb" color="#9aa2e6"]
 
-  REPO -> DEV [xlabel="repo output"]
-  REPO -> PROD
+    { rank=same; BBD_R -> BBD_C [style=invis] }
 
-  DEV  -> ACR [xlabel="push images"]
-  PROD -> ACR
-  DEV  -> AKS [xlabel="deploys to"]
-  PROD -> AKS
+    PLAT  -> LZ
+    LZ    -> PROJ  [xlabel="applies to"]
+    BBD_S -> BBD_R [xlabel="composes"]
+    BBD_S -> BBD_C
+    BBD_S -> PROJ  [xlabel="creates" style=dotted constraint=false]
+  }
 
-  AKS -> ACR [xlabel="pulls" style=dashed constraint=false]
+  PLAT  -> AKS [xlabel="replicates into" style=dotted constraint=false]
+  PROJ  -> NS  [xlabel="tenant namespace" style=dotted constraint=false]
+  BBD_R -> REPO [xlabel="provisions" style=dotted constraint=false]
+  BBD_C -> GHA [xlabel="provisions" style=dotted constraint=false]
+  GHA   -> ACR [xlabel="pushes images" style=dotted constraint=false]
+  GHA   -> NS  [xlabel="deploys to" style=dotted constraint=false]
 }
diff --git a/reference-architectures/azure-kubernetes.svg b/reference-architectures/azure-kubernetes.svg
index ba427b61..58b713f0 100644
--- a/reference-architectures/azure-kubernetes.svg
+++ b/reference-architectures/azure-kubernetes.svg
@@ -1,129 +1,240 @@
 <?xml version="1.0" encoding="UTF-8" standalone="no"?>
 <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
  "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg width="411pt" height="385pt"
- viewBox="0.00 0.00 411.00 385.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 381.12)">
+<svg width="1269pt" height="434pt"
+ viewBox="0.00 0.00 1269.00 434.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 430.36)">
 <title>azure_kubernetes</title>
-<polygon fill="white" stroke="none" points="-4,4 -4,-381.12 407,-381.12 407,4 -4,4"/>
+<polygon fill="white" stroke="none" points="-4,4 -4,-430.36 1265,-430.36 1265,4 -4,4"/>
 <g id="clust1" class="cluster">
-<title>cluster_team</title>
-<path fill="white" stroke="#d5dae0" d="M20,-110.4C20,-110.4 376,-110.4 376,-110.4 382,-110.4 388,-116.4 388,-122.4 388,-122.4 388,-302.28 388,-302.28 388,-308.28 382,-314.28 376,-314.28 376,-314.28 20,-314.28 20,-314.28 14,-314.28 8,-308.28 8,-302.28 8,-302.28 8,-122.4 8,-122.4 8,-116.4 14,-110.4 20,-110.4"/>
-<text xml:space="preserve" text-anchor="middle" x="76.69" y="-299.48" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Per Application Team</text>
+<title>cluster_azure</title>
+<path fill="white" stroke="#d5dae0" d="M20,-111.24C20,-111.24 396,-111.24 396,-111.24 402,-111.24 408,-117.24 408,-123.24 408,-123.24 408,-403.24 408,-403.24 408,-409.24 402,-415.24 396,-415.24 396,-415.24 20,-415.24 20,-415.24 14,-415.24 8,-409.24 8,-403.24 8,-403.24 8,-123.24 8,-123.24 8,-117.24 14,-111.24 20,-111.24"/>
+<text xml:space="preserve" text-anchor="middle" x="35.01" y="-400.44" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Azure</text>
 </g>
 <g id="clust3" class="cluster">
-<title>cluster_azure</title>
-<path fill="white" stroke="#d5dae0" d="M47,-8C47,-8 383,-8 383,-8 389,-8 395,-14 395,-20 395,-20 395,-90.4 395,-90.4 395,-96.4 389,-102.4 383,-102.4 383,-102.4 47,-102.4 47,-102.4 41,-102.4 35,-96.4 35,-90.4 35,-90.4 35,-20 35,-20 35,-14 41,-8 47,-8"/>
-<text xml:space="preserve" text-anchor="middle" x="151.72" y="-87.6" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Azure — managed by the platform team</text>
+<title>cluster_github</title>
+<path fill="white" stroke="#d5dae0" d="M428,-8C428,-8 626,-8 626,-8 632,-8 638,-14 638,-20 638,-20 638,-403.24 638,-403.24 638,-409.24 632,-415.24 626,-415.24 626,-415.24 428,-415.24 428,-415.24 422,-415.24 416,-409.24 416,-403.24 416,-403.24 416,-20 416,-20 416,-14 422,-8 428,-8"/>
+<text xml:space="preserve" text-anchor="middle" x="446.01" y="-400.44" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;GitHub</text>
+</g>
+<g id="clust4" class="cluster">
+<title>cluster_mesh</title>
+<path fill="white" stroke="#d5dae0" d="M658,-111.24C658,-111.24 1241,-111.24 1241,-111.24 1247,-111.24 1253,-117.24 1253,-123.24 1253,-123.24 1253,-406.36 1253,-406.36 1253,-412.36 1247,-418.36 1241,-418.36 1241,-418.36 658,-418.36 658,-418.36 652,-418.36 646,-412.36 646,-406.36 646,-406.36 646,-123.24 646,-123.24 646,-117.24 652,-111.24 658,-111.24"/>
+<text xml:space="preserve" text-anchor="middle" x="687.01" y="-403.56" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;meshStack</text>
 </g>
-<!-- STARTER -->
+<!-- SUB -->
 <g id="node1" class="node">
-<title>STARTER</title>
-<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M268.47,-377.12C268.47,-377.12 169.53,-377.12 169.53,-377.12 163.53,-377.12 157.53,-371.12 157.53,-365.12 157.53,-365.12 157.53,-346.88 157.53,-346.88 157.53,-340.88 163.53,-334.88 169.53,-334.88 169.53,-334.88 268.47,-334.88 268.47,-334.88 274.47,-334.88 280.47,-340.88 280.47,-346.88 280.47,-346.88 280.47,-365.12 280.47,-365.12 280.47,-371.12 274.47,-377.12 268.47,-377.12"/>
-<text xml:space="preserve" text-anchor="middle" x="219" y="-359.3" font-family="Helvetica,sans-Serif" font-size="11.00">📦 aks/starterkit</text>
-<text xml:space="preserve" text-anchor="middle" x="219" y="-346.1" font-family="Helvetica,sans-Serif" font-size="11.00">self&#45;service catalog</text>
+<title>SUB</title>
+<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M261.79,-374.84C261.79,-374.84 140.21,-374.84 140.21,-374.84 134.21,-374.84 128.21,-368.84 128.21,-362.84 128.21,-362.84 128.21,-350.84 128.21,-350.84 128.21,-344.84 134.21,-338.84 140.21,-338.84 140.21,-338.84 261.79,-338.84 261.79,-338.84 267.79,-338.84 273.79,-344.84 273.79,-350.84 273.79,-350.84 273.79,-362.84 273.79,-362.84 273.79,-368.84 267.79,-374.84 261.79,-374.84"/>
+<text xml:space="preserve" text-anchor="middle" x="201" y="-353.54" font-family="Helvetica,sans-Serif" font-size="11.00">🗂️ Azure Subscription</text>
 </g>
-<!-- REPO -->
+<!-- AKS -->
 <g id="node2" class="node">
-<title>REPO</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M145.7,-273.88C145.7,-273.88 44.3,-273.88 44.3,-273.88 38.3,-273.88 32.3,-267.88 32.3,-261.88 32.3,-261.88 32.3,-243.64 32.3,-243.64 32.3,-237.64 38.3,-231.64 44.3,-231.64 44.3,-231.64 145.7,-231.64 145.7,-231.64 151.7,-231.64 157.7,-237.64 157.7,-243.64 157.7,-243.64 157.7,-261.88 157.7,-261.88 157.7,-267.88 151.7,-273.88 145.7,-273.88"/>
-<text xml:space="preserve" text-anchor="middle" x="95" y="-256.06" font-family="Helvetica,sans-Serif" font-size="11.00">🔀 github/repository</text>
-<text xml:space="preserve" text-anchor="middle" x="95" y="-242.86" font-family="Helvetica,sans-Serif" font-size="11.00">GitHub repo</text>
+<title>AKS</title>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M162.01,-274.72C162.01,-274.72 37.99,-274.72 37.99,-274.72 31.99,-274.72 25.99,-268.72 25.99,-262.72 25.99,-262.72 25.99,-244.48 25.99,-244.48 25.99,-238.48 31.99,-232.48 37.99,-232.48 37.99,-232.48 162.01,-232.48 162.01,-232.48 168.01,-232.48 174.01,-238.48 174.01,-244.48 174.01,-244.48 174.01,-262.72 174.01,-262.72 174.01,-268.72 168.01,-274.72 162.01,-274.72"/>
+<text xml:space="preserve" text-anchor="middle" x="100" y="-256.9" font-family="Helvetica,sans-Serif" font-size="11.00">☸️ AKS cluster</text>
+<text xml:space="preserve" text-anchor="middle" x="100" y="-243.7" font-family="Helvetica,sans-Serif" font-size="11.00">run by the platform team</text>
 </g>
-<!-- STARTER&#45;&gt;REPO -->
-<g id="edge3" class="edge">
-<title>STARTER&#45;&gt;REPO</title>
-<path fill="none" stroke="#8b95a3" d="M164.52,-334.69C164.52,-306.41 164.52,-260 164.52,-260 164.52,-260 163.88,-260 163.88,-260"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="166.62,-257.55 159.62,-260 166.62,-262.45 166.62,-257.55"/>
-<text xml:space="preserve" text-anchor="middle" x="179.28" y="-299.73" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
+<!-- SUB&#45;&gt;AKS -->
+<g id="edge2" class="edge">
+<title>SUB&#45;&gt;AKS</title>
+<path fill="none" stroke="#8b95a3" d="M143.48,-338.38C143.48,-338.38 143.48,-283.62 143.48,-283.62"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="145.93,-283.62 143.48,-276.62 141.03,-283.62 145.93,-283.62"/>
 </g>
-<!-- DEV -->
+<!-- ACR -->
 <g id="node3" class="node">
-<title>DEV</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M166.15,-170.64C166.15,-170.64 37.85,-170.64 37.85,-170.64 31.85,-170.64 25.85,-164.64 25.85,-158.64 25.85,-158.64 25.85,-140.4 25.85,-140.4 25.85,-134.4 31.85,-128.4 37.85,-128.4 37.85,-128.4 166.15,-128.4 166.15,-128.4 172.15,-128.4 178.15,-134.4 178.15,-140.4 178.15,-140.4 178.15,-158.64 178.15,-158.64 178.15,-164.64 172.15,-170.64 166.15,-170.64"/>
-<text xml:space="preserve" text-anchor="middle" x="102" y="-152.82" font-family="Helvetica,sans-Serif" font-size="11.00">⚙️ aks/github&#45;connector</text>
-<text xml:space="preserve" text-anchor="middle" x="102" y="-139.62" font-family="Helvetica,sans-Serif" font-size="11.00">dev namespace CI/CD</text>
+<title>ACR</title>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M378.07,-271.6C378.07,-271.6 225.93,-271.6 225.93,-271.6 219.93,-271.6 213.93,-265.6 213.93,-259.6 213.93,-259.6 213.93,-247.6 213.93,-247.6 213.93,-241.6 219.93,-235.6 225.93,-235.6 225.93,-235.6 378.07,-235.6 378.07,-235.6 384.07,-235.6 390.07,-241.6 390.07,-247.6 390.07,-247.6 390.07,-259.6 390.07,-259.6 390.07,-265.6 384.07,-271.6 378.07,-271.6"/>
+<text xml:space="preserve" text-anchor="middle" x="302" y="-250.3" font-family="Helvetica,sans-Serif" font-size="11.00">🗄️ Azure Container Registry</text>
 </g>
-<!-- STARTER&#45;&gt;DEV -->
-<g id="edge4" class="edge">
-<title>STARTER&#45;&gt;DEV</title>
-<path fill="none" stroke="#8b95a3" d="M171.34,-334.68C171.34,-334.68 171.34,-179.55 171.34,-179.55"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="173.79,-179.55 171.34,-172.55 168.89,-179.55 173.79,-179.55"/>
-<text xml:space="preserve" text-anchor="middle" x="203.1" y="-259.81" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates dev env</text>
+<!-- SUB&#45;&gt;ACR -->
+<g id="edge3" class="edge">
+<title>SUB&#45;&gt;ACR</title>
+<path fill="none" stroke="#8b95a3" d="M243.86,-338.38C243.86,-338.38 243.86,-280.41 243.86,-280.41"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="246.31,-280.41 243.86,-273.41 241.41,-280.41 246.31,-280.41"/>
 </g>
-<!-- PROD -->
+<!-- AKS&#45;&gt;ACR -->
+<!-- NS -->
 <g id="node4" class="node">
-<title>PROD</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M358.15,-170.64C358.15,-170.64 229.85,-170.64 229.85,-170.64 223.85,-170.64 217.85,-164.64 217.85,-158.64 217.85,-158.64 217.85,-140.4 217.85,-140.4 217.85,-134.4 223.85,-128.4 229.85,-128.4 229.85,-128.4 358.15,-128.4 358.15,-128.4 364.15,-128.4 370.15,-134.4 370.15,-140.4 370.15,-140.4 370.15,-158.64 370.15,-158.64 370.15,-164.64 364.15,-170.64 358.15,-170.64"/>
-<text xml:space="preserve" text-anchor="middle" x="294" y="-152.82" font-family="Helvetica,sans-Serif" font-size="11.00">⚙️ aks/github&#45;connector</text>
-<text xml:space="preserve" text-anchor="middle" x="294" y="-139.62" font-family="Helvetica,sans-Serif" font-size="11.00">prod namespace CI/CD</text>
-</g>
-<!-- STARTER&#45;&gt;PROD -->
-<g id="edge5" class="edge">
-<title>STARTER&#45;&gt;PROD</title>
-<path fill="none" stroke="#8b95a3" d="M259.6,-334.68C259.6,-334.68 259.6,-179.55 259.6,-179.55"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="262.05,-179.55 259.6,-172.55 257.15,-179.55 262.05,-179.55"/>
-<text xml:space="preserve" text-anchor="middle" x="226.08" y="-249.01" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates prod env</text>
+<title>NS</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M150.09,-171.48C150.09,-171.48 49.91,-171.48 49.91,-171.48 43.91,-171.48 37.91,-165.48 37.91,-159.48 37.91,-159.48 37.91,-141.24 37.91,-141.24 37.91,-135.24 43.91,-129.24 49.91,-129.24 49.91,-129.24 150.09,-129.24 150.09,-129.24 156.09,-129.24 162.09,-135.24 162.09,-141.24 162.09,-141.24 162.09,-159.48 162.09,-159.48 162.09,-165.48 156.09,-171.48 150.09,-171.48"/>
+<text xml:space="preserve" text-anchor="middle" x="100" y="-153.66" font-family="Helvetica,sans-Serif" font-size="11.00">☸️ Namespace ×2</text>
+<text xml:space="preserve" text-anchor="middle" x="100" y="-140.46" font-family="Helvetica,sans-Serif" font-size="11.00">dev + prod</text>
 </g>
-<!-- REPO&#45;&gt;DEV -->
-<g id="edge6" class="edge">
-<title>REPO&#45;&gt;DEV</title>
-<path fill="none" stroke="#8b95a3" d="M95,-231.37C95,-231.37 95,-179.4 95,-179.4"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="97.45,-179.4 95,-172.4 92.55,-179.4 97.45,-179.4"/>
-<text xml:space="preserve" text-anchor="middle" x="72.23" y="-208.08" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">repo output</text>
+<!-- AKS&#45;&gt;NS -->
+<g id="edge4" class="edge">
+<title>AKS&#45;&gt;NS</title>
+<path fill="none" stroke="#8b95a3" d="M79.3,-232.21C79.3,-232.21 79.3,-180.24 79.3,-180.24"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="81.75,-180.24 79.3,-173.24 76.85,-180.24 81.75,-180.24"/>
+<text xml:space="preserve" text-anchor="middle" x="62.54" y="-208.92" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">contains</text>
 </g>
-<!-- REPO&#45;&gt;PROD -->
-<g id="edge7" class="edge">
-<title>REPO&#45;&gt;PROD</title>
-<path fill="none" stroke="#8b95a3" d="M158.04,-246C196.66,-246 238.72,-246 238.72,-246 238.72,-246 238.72,-179.45 238.72,-179.45"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="241.17,-179.45 238.72,-172.45 236.27,-179.45 241.17,-179.45"/>
+<!-- NS&#45;&gt;ACR -->
+<g id="edge5" class="edge">
+<title>NS&#45;&gt;ACR</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M162.33,-157C211.78,-157 272.64,-157 272.64,-157 272.64,-157 272.64,-226.92 272.64,-226.92"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="270.19,-226.92 272.64,-233.92 275.09,-226.92 270.19,-226.92"/>
+<text xml:space="preserve" text-anchor="middle" x="227.43" y="-159.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pulls images</text>
 </g>
-<!-- DEV&#45;&gt;PROD -->
-<!-- AKS -->
+<!-- ORG -->
 <g id="node5" class="node">
-<title>AKS</title>
-<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M148.83,-62C148.83,-62 65.17,-62 65.17,-62 59.17,-62 53.17,-56 53.17,-50 53.17,-50 53.17,-38 53.17,-38 53.17,-32 59.17,-26 65.17,-26 65.17,-26 148.83,-26 148.83,-26 154.83,-26 160.83,-32 160.83,-38 160.83,-38 160.83,-50 160.83,-50 160.83,-56 154.83,-62 148.83,-62"/>
-<text xml:space="preserve" text-anchor="middle" x="107" y="-40.7" font-family="Helvetica,sans-Serif" font-size="11.00">☸️ AKS cluster</text>
+<title>ORG</title>
+<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M585.65,-374.84C585.65,-374.84 468.35,-374.84 468.35,-374.84 462.35,-374.84 456.35,-368.84 456.35,-362.84 456.35,-362.84 456.35,-350.84 456.35,-350.84 456.35,-344.84 462.35,-338.84 468.35,-338.84 468.35,-338.84 585.65,-338.84 585.65,-338.84 591.65,-338.84 597.65,-344.84 597.65,-350.84 597.65,-350.84 597.65,-362.84 597.65,-362.84 597.65,-368.84 591.65,-374.84 585.65,-374.84"/>
+<text xml:space="preserve" text-anchor="middle" x="527" y="-353.54" font-family="Helvetica,sans-Serif" font-size="11.00">🏢 GitHub organization</text>
 </g>
-<!-- DEV&#45;&gt;AKS -->
-<g id="edge10" class="edge">
-<title>DEV&#45;&gt;AKS</title>
-<path fill="none" stroke="#8b95a3" d="M107,-127.91C107,-127.91 107,-70.92 107,-70.92"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="109.45,-70.92 107,-63.92 104.55,-70.92 109.45,-70.92"/>
-<text xml:space="preserve" text-anchor="middle" x="86.49" y="-102.12" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">deploys to</text>
-</g>
-<!-- ACR -->
+<!-- TPL -->
 <g id="node6" class="node">
-<title>ACR</title>
-<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M365.07,-62C365.07,-62 212.93,-62 212.93,-62 206.93,-62 200.93,-56 200.93,-50 200.93,-50 200.93,-38 200.93,-38 200.93,-32 206.93,-26 212.93,-26 212.93,-26 365.07,-26 365.07,-26 371.07,-26 377.07,-32 377.07,-38 377.07,-38 377.07,-50 377.07,-50 377.07,-56 371.07,-62 365.07,-62"/>
-<text xml:space="preserve" text-anchor="middle" x="289" y="-40.7" font-family="Helvetica,sans-Serif" font-size="11.00">🗄️ Azure Container Registry</text>
-</g>
-<!-- DEV&#45;&gt;ACR -->
-<g id="edge8" class="edge">
-<title>DEV&#45;&gt;ACR</title>
-<path fill="none" stroke="#8b95a3" d="M169.49,-127.99C169.49,-98.19 169.49,-48 169.49,-48 169.49,-48 192.07,-48 192.07,-48"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="192.07,-50.45 199.07,-48 192.07,-45.55 192.07,-50.45"/>
-<text xml:space="preserve" text-anchor="middle" x="143.98" y="-68.61" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">push images</text>
+<title>TPL</title>
+<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M607.97,-274.72C607.97,-274.72 446.03,-274.72 446.03,-274.72 440.03,-274.72 434.03,-268.72 434.03,-262.72 434.03,-262.72 434.03,-244.48 434.03,-244.48 434.03,-238.48 440.03,-232.48 446.03,-232.48 446.03,-232.48 607.97,-232.48 607.97,-232.48 613.97,-232.48 619.97,-238.48 619.97,-244.48 619.97,-244.48 619.97,-262.72 619.97,-262.72 619.97,-268.72 613.97,-274.72 607.97,-274.72"/>
+<text xml:space="preserve" text-anchor="middle" x="527" y="-256.9" font-family="Helvetica,sans-Serif" font-size="11.00">🔀 Template repository</text>
+<text xml:space="preserve" text-anchor="middle" x="527" y="-243.7" font-family="Helvetica,sans-Serif" font-size="11.00">maintained by the platform team</text>
 </g>
-<!-- PROD&#45;&gt;AKS -->
-<g id="edge11" class="edge">
-<title>PROD&#45;&gt;AKS</title>
-<path fill="none" stroke="#8b95a3" d="M217.54,-142C201.61,-142 189.54,-142 189.54,-142 189.54,-142 189.54,-55 189.54,-55 189.54,-55 169.65,-55 169.65,-55"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="169.65,-52.55 162.65,-55 169.65,-57.45 169.65,-52.55"/>
+<!-- ORG&#45;&gt;TPL -->
+<g id="edge6" class="edge">
+<title>ORG&#45;&gt;TPL</title>
+<path fill="none" stroke="#8b95a3" d="M527,-338.38C527,-338.38 527,-283.62 527,-283.62"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="529.45,-283.62 527,-276.62 524.55,-283.62 529.45,-283.62"/>
 </g>
-<!-- PROD&#45;&gt;ACR -->
-<g id="edge9" class="edge">
-<title>PROD&#45;&gt;ACR</title>
-<path fill="none" stroke="#8b95a3" d="M294,-127.91C294,-127.91 294,-70.92 294,-70.92"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="296.45,-70.92 294,-63.92 291.55,-70.92 296.45,-70.92"/>
+<!-- REPO -->
+<g id="node7" class="node">
+<title>REPO</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M580.15,-171.48C580.15,-171.48 473.85,-171.48 473.85,-171.48 467.85,-171.48 461.85,-165.48 461.85,-159.48 461.85,-159.48 461.85,-141.24 461.85,-141.24 461.85,-135.24 467.85,-129.24 473.85,-129.24 473.85,-129.24 580.15,-129.24 580.15,-129.24 586.15,-129.24 592.15,-135.24 592.15,-141.24 592.15,-141.24 592.15,-159.48 592.15,-159.48 592.15,-165.48 586.15,-171.48 580.15,-171.48"/>
+<text xml:space="preserve" text-anchor="middle" x="527" y="-153.66" font-family="Helvetica,sans-Serif" font-size="11.00">🔀 App repository ×1</text>
+<text xml:space="preserve" text-anchor="middle" x="527" y="-140.46" font-family="Helvetica,sans-Serif" font-size="11.00">per application team</text>
 </g>
-<!-- AKS&#45;&gt;ACR -->
-<!-- AKS&#45;&gt;ACR -->
+<!-- TPL&#45;&gt;REPO -->
+<g id="edge7" class="edge">
+<title>TPL&#45;&gt;REPO</title>
+<path fill="none" stroke="#8b95a3" d="M505.28,-232.21C505.28,-232.21 505.28,-180.24 505.28,-180.24"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="507.73,-180.24 505.28,-173.24 502.83,-180.24 507.73,-180.24"/>
+<text xml:space="preserve" text-anchor="middle" x="483.52" y="-208.92" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">cloned into</text>
+</g>
+<!-- GHA -->
+<g id="node8" class="node">
+<title>GHA</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M587.34,-68.24C587.34,-68.24 466.66,-68.24 466.66,-68.24 460.66,-68.24 454.66,-62.24 454.66,-56.24 454.66,-56.24 454.66,-38 454.66,-38 454.66,-32 460.66,-26 466.66,-26 466.66,-26 587.34,-26 587.34,-26 593.34,-26 599.34,-32 599.34,-38 599.34,-38 599.34,-56.24 599.34,-56.24 599.34,-62.24 593.34,-68.24 587.34,-68.24"/>
+<text xml:space="preserve" text-anchor="middle" x="527" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">⚙️ GitHub Actions ×2</text>
+<text xml:space="preserve" text-anchor="middle" x="527" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">dev + prod environment</text>
+</g>
+<!-- REPO&#45;&gt;GHA -->
+<g id="edge8" class="edge">
+<title>REPO&#45;&gt;GHA</title>
+<path fill="none" stroke="#8b95a3" d="M527,-128.97C527,-128.97 527,-77 527,-77"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="529.45,-77 527,-70 524.55,-77 529.45,-77"/>
+<text xml:space="preserve" text-anchor="middle" x="499.49" y="-105.68" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">runs workflow</text>
+</g>
+<!-- GHA&#45;&gt;ACR -->
+<g id="edge19" class="edge">
+<title>GHA&#45;&gt;ACR</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M454.15,-47C398.52,-47 331.36,-47 331.36,-47 331.36,-47 331.36,-226.75 331.36,-226.75"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="328.91,-226.75 331.36,-233.75 333.81,-226.75 328.91,-226.75"/>
+<text xml:space="preserve" text-anchor="middle" x="301.09" y="-78.18" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pushes images</text>
+</g>
+<!-- GHA&#45;&gt;NS -->
+<g id="edge20" class="edge">
+<title>GHA&#45;&gt;NS</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M458.26,-68.4C458.26,-96.65 458.26,-143 458.26,-143 458.26,-143 170.92,-143 170.92,-143"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="170.92,-140.55 163.92,-143 170.92,-145.45 170.92,-140.55"/>
+<text xml:space="preserve" text-anchor="middle" x="331.37" y="-145.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">deploys to</text>
+</g>
+<!-- PLAT -->
+<g id="node9" class="node">
+<title>PLAT</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M833.51,-374.84C833.51,-374.84 676.49,-374.84 676.49,-374.84 670.49,-374.84 664.49,-368.84 664.49,-362.84 664.49,-362.84 664.49,-350.84 664.49,-350.84 664.49,-344.84 670.49,-338.84 676.49,-338.84 676.49,-338.84 833.51,-338.84 833.51,-338.84 839.51,-338.84 845.51,-344.84 845.51,-350.84 845.51,-350.84 845.51,-362.84 845.51,-362.84 845.51,-368.84 839.51,-374.84 833.51,-374.84"/>
+<text xml:space="preserve" text-anchor="middle" x="755" y="-353.54" font-family="Helvetica,sans-Serif" font-size="11.00">🛰️ AKS Namespace Platform</text>
+</g>
+<!-- PLAT&#45;&gt;AKS -->
+<g id="edge15" class="edge">
+<title>PLAT&#45;&gt;AKS</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M706.43,-338.42C706.43,-323.52 706.43,-305 706.43,-305 706.43,-305 158.75,-305 158.75,-305 158.75,-305 158.75,-283.61 158.75,-283.61"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="161.2,-283.61 158.75,-276.61 156.3,-283.61 161.2,-283.61"/>
+<text xml:space="preserve" text-anchor="middle" x="410.84" y="-307.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">replicates into</text>
+</g>
+<!-- LZ -->
+<g id="node10" class="node">
+<title>LZ</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M778.32,-274.72C778.32,-274.72 675.68,-274.72 675.68,-274.72 669.68,-274.72 663.68,-268.72 663.68,-262.72 663.68,-262.72 663.68,-244.48 663.68,-244.48 663.68,-238.48 669.68,-232.48 675.68,-232.48 675.68,-232.48 778.32,-232.48 778.32,-232.48 784.32,-232.48 790.32,-238.48 790.32,-244.48 790.32,-244.48 790.32,-262.72 790.32,-262.72 790.32,-268.72 784.32,-274.72 778.32,-274.72"/>
+<text xml:space="preserve" text-anchor="middle" x="727" y="-256.9" font-family="Helvetica,sans-Serif" font-size="11.00">🛬 Landing Zone ×2</text>
+<text xml:space="preserve" text-anchor="middle" x="727" y="-243.7" font-family="Helvetica,sans-Serif" font-size="11.00">dev + prod</text>
+</g>
+<!-- PLAT&#45;&gt;LZ -->
+<g id="edge10" class="edge">
+<title>PLAT&#45;&gt;LZ</title>
+<path fill="none" stroke="#8b95a3" d="M748.38,-338.38C748.38,-338.38 748.38,-283.62 748.38,-283.62"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="750.83,-283.62 748.38,-276.62 745.93,-283.62 750.83,-283.62"/>
+</g>
+<!-- PROJ -->
+<g id="node11" class="node">
+<title>PROJ</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M766.39,-171.48C766.39,-171.48 687.61,-171.48 687.61,-171.48 681.61,-171.48 675.61,-165.48 675.61,-159.48 675.61,-159.48 675.61,-141.24 675.61,-141.24 675.61,-135.24 681.61,-129.24 687.61,-129.24 687.61,-129.24 766.39,-129.24 766.39,-129.24 772.39,-129.24 778.39,-135.24 778.39,-141.24 778.39,-141.24 778.39,-159.48 778.39,-159.48 778.39,-165.48 772.39,-171.48 766.39,-171.48"/>
+<text xml:space="preserve" text-anchor="middle" x="727" y="-153.66" font-family="Helvetica,sans-Serif" font-size="11.00">🗂️ Project ×2</text>
+<text xml:space="preserve" text-anchor="middle" x="727" y="-140.46" font-family="Helvetica,sans-Serif" font-size="11.00">dev + prod</text>
+</g>
+<!-- LZ&#45;&gt;PROJ -->
+<g id="edge11" class="edge">
+<title>LZ&#45;&gt;PROJ</title>
+<path fill="none" stroke="#8b95a3" d="M744.13,-232.21C744.13,-232.21 744.13,-180.24 744.13,-180.24"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="746.58,-180.24 744.13,-173.24 741.68,-180.24 746.58,-180.24"/>
+<text xml:space="preserve" text-anchor="middle" x="724.87" y="-208.92" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">applies to</text>
+</g>
+<!-- PROJ&#45;&gt;NS -->
+<g id="edge16" class="edge">
+<title>PROJ&#45;&gt;NS</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M709.87,-171.92C709.87,-189.69 709.87,-212 709.87,-212 709.87,-212 120.7,-212 120.7,-212 120.7,-212 120.7,-180.43 120.7,-180.43"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="123.15,-180.43 120.7,-173.43 118.25,-180.43 123.15,-180.43"/>
+<text xml:space="preserve" text-anchor="middle" x="382.51" y="-214.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">tenant namespace</text>
+</g>
+<!-- BBD_S -->
+<g id="node12" class="node">
+<title>BBD_S</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M1118.23,-377.96C1118.23,-377.96 991.77,-377.96 991.77,-377.96 985.77,-377.96 979.77,-371.96 979.77,-365.96 979.77,-365.96 979.77,-347.72 979.77,-347.72 979.77,-341.72 985.77,-335.72 991.77,-335.72 991.77,-335.72 1118.23,-335.72 1118.23,-335.72 1124.23,-335.72 1130.23,-341.72 1130.23,-347.72 1130.23,-347.72 1130.23,-365.96 1130.23,-365.96 1130.23,-371.96 1124.23,-377.96 1118.23,-377.96"/>
+<text xml:space="preserve" text-anchor="middle" x="1055" y="-360.14" font-family="Helvetica,sans-Serif" font-size="11.00">📦 aks/starterkit BBD</text>
+<text xml:space="preserve" text-anchor="middle" x="1055" y="-346.94" font-family="Helvetica,sans-Serif" font-size="11.00">self&#45;service catalog entry</text>
+</g>
+<!-- BBD_S&#45;&gt;PROJ -->
+<g id="edge14" class="edge">
+<title>BBD_S&#45;&gt;PROJ</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M1043.3,-335.48C1043.3,-282.64 1043.3,-150 1043.3,-150 1043.3,-150 787.39,-150 787.39,-150"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="787.39,-147.55 780.39,-150 787.39,-152.45 787.39,-147.55"/>
+<text xml:space="preserve" text-anchor="middle" x="993.33" y="-152.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
+</g>
+<!-- BBD_R -->
+<g id="node13" class="node">
+<title>BBD_R</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M1011.54,-271.6C1011.54,-271.6 884.46,-271.6 884.46,-271.6 878.46,-271.6 872.46,-265.6 872.46,-259.6 872.46,-259.6 872.46,-247.6 872.46,-247.6 872.46,-241.6 878.46,-235.6 884.46,-235.6 884.46,-235.6 1011.54,-235.6 1011.54,-235.6 1017.54,-235.6 1023.54,-241.6 1023.54,-247.6 1023.54,-247.6 1023.54,-259.6 1023.54,-259.6 1023.54,-265.6 1017.54,-271.6 1011.54,-271.6"/>
+<text xml:space="preserve" text-anchor="middle" x="948" y="-250.3" font-family="Helvetica,sans-Serif" font-size="11.00">📦 github/repository BBD</text>
+</g>
+<!-- BBD_S&#45;&gt;BBD_R -->
 <g id="edge12" class="edge">
-<title>AKS&#45;&gt;ACR</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M161.11,-40C161.11,-40 192.15,-40 192.15,-40"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="192.15,-42.45 199.15,-40 192.15,-37.55 192.15,-42.45"/>
-<text xml:space="preserve" text-anchor="middle" x="185.89" y="-42.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pulls</text>
+<title>BBD_S&#45;&gt;BBD_R</title>
+<path fill="none" stroke="#8b95a3" d="M1001.65,-335.45C1001.65,-335.45 1001.65,-280.37 1001.65,-280.37"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="1004.1,-280.37 1001.65,-273.37 999.2,-280.37 1004.1,-280.37"/>
+<text xml:space="preserve" text-anchor="middle" x="981.15" y="-310.61" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">composes</text>
+</g>
+<!-- BBD_C -->
+<g id="node14" class="node">
+<title>BBD_C</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M1222.93,-271.6C1222.93,-271.6 1075.07,-271.6 1075.07,-271.6 1069.07,-271.6 1063.07,-265.6 1063.07,-259.6 1063.07,-259.6 1063.07,-247.6 1063.07,-247.6 1063.07,-241.6 1069.07,-235.6 1075.07,-235.6 1075.07,-235.6 1222.93,-235.6 1222.93,-235.6 1228.93,-235.6 1234.93,-241.6 1234.93,-247.6 1234.93,-247.6 1234.93,-259.6 1234.93,-259.6 1234.93,-265.6 1228.93,-271.6 1222.93,-271.6"/>
+<text xml:space="preserve" text-anchor="middle" x="1149" y="-250.3" font-family="Helvetica,sans-Serif" font-size="11.00">📦 aks/github&#45;connector BBD</text>
+</g>
+<!-- BBD_S&#45;&gt;BBD_C -->
+<g id="edge13" class="edge">
+<title>BBD_S&#45;&gt;BBD_C</title>
+<path fill="none" stroke="#8b95a3" d="M1096.65,-335.45C1096.65,-335.45 1096.65,-280.37 1096.65,-280.37"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="1099.1,-280.37 1096.65,-273.37 1094.2,-280.37 1099.1,-280.37"/>
+</g>
+<!-- BBD_R&#45;&gt;REPO -->
+<g id="edge17" class="edge">
+<title>BBD_R&#45;&gt;REPO</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M948,-235.12C948,-216.97 948,-192 948,-192 948,-192 548.72,-192 548.72,-192 548.72,-192 548.72,-180.18 548.72,-180.18"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="551.17,-180.18 548.72,-173.18 546.27,-180.18 551.17,-180.18"/>
+<text xml:space="preserve" text-anchor="middle" x="743.75" y="-194.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">provisions</text>
+</g>
+<!-- BBD_R&#45;&gt;BBD_C -->
+<!-- BBD_C&#45;&gt;GHA -->
+<g id="edge18" class="edge">
+<title>BBD_C&#45;&gt;GHA</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M1149,-235.27C1149,-184.7 1149,-47 1149,-47 1149,-47 608.39,-47 608.39,-47"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="608.39,-44.55 601.39,-47 608.39,-49.45 608.39,-44.55"/>
+<text xml:space="preserve" text-anchor="middle" x="952.57" y="-49.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">provisions</text>
 </g>
 </g>
 </svg>
diff --git a/reference-architectures/stackit-kubernetes.dot b/reference-architectures/stackit-kubernetes.dot
index 389f2678..1b63a726 100644
--- a/reference-architectures/stackit-kubernetes.dot
+++ b/reference-architectures/stackit-kubernetes.dot
@@ -14,59 +14,61 @@ digraph stackit_kubernetes {
         fillcolor="#ffffff" color="#a2abb8" penwidth=1.1 margin="0.20,0.11"]
   edge [fontname="Helvetica" fontsize=9 fontcolor="#697180" color="#8b95a3" arrowsize=0.7]
 
-  // meshStack definition the application team orders from the catalog
-  STARTER [label="📦 ske/ske-starterkit\nself-service catalog" fillcolor="#ecedfb" color="#9aa2e6"]
-
-  subgraph cluster_team {
-    label="  Per Application Team"
+  subgraph cluster_stackit {
+    label="  STACKIT"
     labeljust=l
     fontname="Helvetica" fontsize=12 fontcolor="#697180"
     style="rounded" color="#d5dae0"
     margin=18
 
-    REPO   [label="🔀 stackit/git-repository\nForgejo repo" fillcolor="#e5f2ea" color="#85bfa0"]
-    P_DEV  [label="🗂️ dev project\n+ SKE tenant" fillcolor="#e5f2ea" color="#85bfa0"]
-    P_PROD [label="🗂️ prod project\n+ SKE tenant" fillcolor="#e5f2ea" color="#85bfa0"]
-    D_DEV  [label="⚙️ ske/forgejo-connector\ndev namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
-    D_PROD [label="⚙️ ske/forgejo-connector\nprod namespace CI/CD" fillcolor="#e5f2ea" color="#85bfa0"]
+    ORG    [label="🏢 STACKIT Organization" fillcolor="#ffffff" color="#a2abb8"]
+    SKE    [label="☸️ SKE cluster\nrun by the platform team" fillcolor="#eef2f6" color="#93a7bb"]
+    GIT    [label="🔀 STACKIT Git\nForgejo instance" fillcolor="#eef2f6" color="#93a7bb"]
+    HARBOR [label="🗄️ STACKIT Harbor\nregistry shared across customers" fillcolor="#eef2f6" color="#93a7bb"]
+    MODEL  [label="🧠 STACKIT Model Serving\nsovereign LLM API" fillcolor="#eef2f6" color="#93a7bb"]
+    NS     [label="☸️ Namespace ×2\ndev + prod" fillcolor="#e5f2ea" color="#85bfa0"]
+    REPO   [label="🔀 App repository ×1\nper application team" fillcolor="#e5f2ea" color="#85bfa0"]
+    ACT    [label="⚙️ Forgejo Actions ×2\ndev + prod pipeline" fillcolor="#e5f2ea" color="#85bfa0"]
 
-    { rank=same; P_PROD -> P_DEV -> REPO [style=invis] }
-    { rank=same; D_PROD -> D_DEV [style=invis] }
+    { rank=same; SKE -> GIT -> HARBOR -> MODEL [style=invis] }
+
+    ORG -> SKE
+    ORG -> GIT
+    SKE -> NS   [xlabel="contains"]
+    GIT -> REPO [xlabel="hosts"]
+
+    REPO -> ACT [xlabel="runs pipeline"]
+    ACT  -> HARBOR [xlabel="pushes images" style=dashed constraint=false]
+    ACT  -> NS     [xlabel="deploys to" style=dashed constraint=false]
+    NS   -> HARBOR [xlabel="pulls images" style=dashed constraint=false]
+    NS   -> MODEL  [xlabel="calls with injected key" style=dashed constraint=false]
   }
 
-  subgraph cluster_stackit {
-    label="  STACKIT — provider-managed services"
+  subgraph cluster_mesh {
+    label="  meshStack"
     labeljust=l
     fontname="Helvetica" fontsize=12 fontcolor="#697180"
     style="rounded" color="#d5dae0"
     margin=18
 
-    SKE    [label="☸️ SKE cluster\nprovisioned by the platform team" fillcolor="#eef2f6" color="#93a7bb"]
-    MODEL  [label="🧠 STACKIT Model Serving" fillcolor="#eef2f6" color="#93a7bb"]
-    HARBOR [label="🗄️ STACKIT Harbor\nregistry shared across customers" fillcolor="#eef2f6" color="#93a7bb"]
-    GIT    [label="🔀 STACKIT Git\nForgejo instance" fillcolor="#eef2f6" color="#93a7bb"]
-
-    { rank=same; MODEL -> HARBOR -> SKE -> GIT [style=invis] }
-  }
-
-  STARTER -> REPO   [xlabel="creates"]
-  STARTER -> P_DEV  [xlabel="creates"]
-  STARTER -> P_PROD
-  STARTER -> D_DEV  [xlabel="creates connector"]
-  STARTER -> D_PROD
+    PLAT  [label="🛰️ SKE Platform" fillcolor="#ecedfb" color="#9aa2e6"]
+    LZ    [label="🛬 Landing Zone ×2\ndev + prod" fillcolor="#ecedfb" color="#9aa2e6"]
+    PROJ  [label="🗂️ Project ×2\ndev + prod" fillcolor="#e5f2ea" color="#85bfa0"]
+    BBD_S [label="📦 ske/ske-starterkit BBD\nself-service catalog entry" fillcolor="#ecedfb" color="#9aa2e6"]
+    BBD_R [label="📦 stackit/git-repository BBD" fillcolor="#ecedfb" color="#9aa2e6"]
+    BBD_C [label="📦 ske/forgejo-connector BBD" fillcolor="#ecedfb" color="#9aa2e6"]
 
-  P_DEV  -> D_DEV [xlabel="namespace"]
-  P_PROD -> D_PROD
-  REPO   -> D_DEV [xlabel="repo output"]
-  REPO   -> D_PROD
+    { rank=same; BBD_R -> BBD_C [style=invis] }
 
-  D_DEV  -> SKE [xlabel="deploys to"]
-  D_PROD -> SKE
+    PLAT  -> LZ
+    LZ    -> PROJ  [xlabel="applies to"]
+    BBD_S -> BBD_R [xlabel="composes"]
+    BBD_S -> BBD_C
+    BBD_S -> PROJ  [xlabel="creates" style=dotted constraint=false]
+  }
 
-  REPO   -> GIT    [xlabel="hosted on" style=dashed]
-  D_DEV  -> HARBOR [xlabel="push images" style=dashed]
-  D_PROD -> HARBOR [style=dashed]
-  D_DEV  -> MODEL  [xlabel="model API secret" style=dashed]
-  D_PROD -> MODEL  [style=dashed]
-  HARBOR -> SKE    [xlabel="pulls" style=dashed constraint=false]
+  PLAT  -> SKE  [xlabel="replicates into" style=dotted constraint=false]
+  PROJ  -> NS   [xlabel="tenant namespace" style=dotted constraint=false]
+  BBD_R -> REPO [xlabel="provisions" style=dotted constraint=false]
+  BBD_C -> ACT  [xlabel="provisions" style=dotted constraint=false]
 }
diff --git a/reference-architectures/stackit-kubernetes.svg b/reference-architectures/stackit-kubernetes.svg
index f09a3e83..65c22d94 100644
--- a/reference-architectures/stackit-kubernetes.svg
+++ b/reference-architectures/stackit-kubernetes.svg
@@ -1,207 +1,240 @@
 <?xml version="1.0" encoding="UTF-8" standalone="no"?>
 <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
  "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg width="833pt" height="391pt"
- viewBox="0.00 0.00 833.00 391.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 387.36)">
+<svg width="1428pt" height="434pt"
+ viewBox="0.00 0.00 1428.00 434.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 430.36)">
 <title>stackit_kubernetes</title>
-<polygon fill="white" stroke="none" points="-4,4 -4,-387.36 829,-387.36 829,4 -4,4"/>
+<polygon fill="white" stroke="none" points="-4,4 -4,-430.36 1424,-430.36 1424,4 -4,4"/>
 <g id="clust1" class="cluster">
-<title>cluster_team</title>
-<path fill="white" stroke="#d5dae0" d="M267,-116.64C267,-116.64 720,-116.64 720,-116.64 726,-116.64 732,-122.64 732,-128.64 732,-128.64 732,-308.52 732,-308.52 732,-314.52 726,-320.52 720,-320.52 720,-320.52 267,-320.52 267,-320.52 261,-320.52 255,-314.52 255,-308.52 255,-308.52 255,-128.64 255,-128.64 255,-122.64 261,-116.64 267,-116.64"/>
-<text xml:space="preserve" text-anchor="middle" x="323.69" y="-305.72" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;Per Application Team</text>
-</g>
-<g id="clust4" class="cluster">
 <title>cluster_stackit</title>
-<path fill="white" stroke="#d5dae0" d="M20,-8C20,-8 805,-8 805,-8 811,-8 817,-14 817,-20 817,-20 817,-96.64 817,-96.64 817,-102.64 811,-108.64 805,-108.64 805,-108.64 20,-108.64 20,-108.64 14,-108.64 8,-102.64 8,-96.64 8,-96.64 8,-20 8,-20 8,-14 14,-8 20,-8"/>
-<text xml:space="preserve" text-anchor="middle" x="125.37" y="-93.84" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;STACKIT — provider&#45;managed services</text>
+<path fill="white" stroke="#d5dae0" d="M20,-8C20,-8 764,-8 764,-8 770,-8 776,-14 776,-20 776,-20 776,-403.24 776,-403.24 776,-409.24 770,-415.24 764,-415.24 764,-415.24 20,-415.24 20,-415.24 14,-415.24 8,-409.24 8,-403.24 8,-403.24 8,-20 8,-20 8,-14 14,-8 20,-8"/>
+<text xml:space="preserve" text-anchor="middle" x="44.67" y="-400.44" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;STACKIT</text>
+</g>
+<g id="clust3" class="cluster">
+<title>cluster_mesh</title>
+<path fill="white" stroke="#d5dae0" d="M796,-111.24C796,-111.24 1400,-111.24 1400,-111.24 1406,-111.24 1412,-117.24 1412,-123.24 1412,-123.24 1412,-406.36 1412,-406.36 1412,-412.36 1406,-418.36 1400,-418.36 1400,-418.36 796,-418.36 796,-418.36 790,-418.36 784,-412.36 784,-406.36 784,-406.36 784,-123.24 784,-123.24 784,-117.24 790,-111.24 796,-111.24"/>
+<text xml:space="preserve" text-anchor="middle" x="825.01" y="-403.56" font-family="Helvetica,sans-Serif" font-size="12.00" fill="#697180"> &#160;meshStack</text>
 </g>
-<!-- STARTER -->
+<!-- ORG -->
 <g id="node1" class="node">
-<title>STARTER</title>
-<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M378.6,-383.36C378.6,-383.36 275.4,-383.36 275.4,-383.36 269.4,-383.36 263.4,-377.36 263.4,-371.36 263.4,-371.36 263.4,-353.12 263.4,-353.12 263.4,-347.12 269.4,-341.12 275.4,-341.12 275.4,-341.12 378.6,-341.12 378.6,-341.12 384.6,-341.12 390.6,-347.12 390.6,-353.12 390.6,-353.12 390.6,-371.36 390.6,-371.36 390.6,-377.36 384.6,-383.36 378.6,-383.36"/>
-<text xml:space="preserve" text-anchor="middle" x="327" y="-365.54" font-family="Helvetica,sans-Serif" font-size="11.00">📦 ske/ske&#45;starterkit</text>
-<text xml:space="preserve" text-anchor="middle" x="327" y="-352.34" font-family="Helvetica,sans-Serif" font-size="11.00">self&#45;service catalog</text>
+<title>ORG</title>
+<path fill="#ffffff" stroke="#a2abb8" stroke-width="1.1" d="M251.98,-374.84C251.98,-374.84 120.02,-374.84 120.02,-374.84 114.02,-374.84 108.02,-368.84 108.02,-362.84 108.02,-362.84 108.02,-350.84 108.02,-350.84 108.02,-344.84 114.02,-338.84 120.02,-338.84 120.02,-338.84 251.98,-338.84 251.98,-338.84 257.98,-338.84 263.98,-344.84 263.98,-350.84 263.98,-350.84 263.98,-362.84 263.98,-362.84 263.98,-368.84 257.98,-374.84 251.98,-374.84"/>
+<text xml:space="preserve" text-anchor="middle" x="186" y="-353.54" font-family="Helvetica,sans-Serif" font-size="11.00">🏢 STACKIT Organization</text>
 </g>
-<!-- REPO -->
+<!-- SKE -->
 <g id="node2" class="node">
-<title>REPO</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M701.94,-280.12C701.94,-280.12 584.06,-280.12 584.06,-280.12 578.06,-280.12 572.06,-274.12 572.06,-268.12 572.06,-268.12 572.06,-249.88 572.06,-249.88 572.06,-243.88 578.06,-237.88 584.06,-237.88 584.06,-237.88 701.94,-237.88 701.94,-237.88 707.94,-237.88 713.94,-243.88 713.94,-249.88 713.94,-249.88 713.94,-268.12 713.94,-268.12 713.94,-274.12 707.94,-280.12 701.94,-280.12"/>
-<text xml:space="preserve" text-anchor="middle" x="643" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">🔀 stackit/git&#45;repository</text>
-<text xml:space="preserve" text-anchor="middle" x="643" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">Forgejo repo</text>
+<title>SKE</title>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M162.01,-274.72C162.01,-274.72 37.99,-274.72 37.99,-274.72 31.99,-274.72 25.99,-268.72 25.99,-262.72 25.99,-262.72 25.99,-244.48 25.99,-244.48 25.99,-238.48 31.99,-232.48 37.99,-232.48 37.99,-232.48 162.01,-232.48 162.01,-232.48 168.01,-232.48 174.01,-238.48 174.01,-244.48 174.01,-244.48 174.01,-262.72 174.01,-262.72 174.01,-268.72 168.01,-274.72 162.01,-274.72"/>
+<text xml:space="preserve" text-anchor="middle" x="100" y="-256.9" font-family="Helvetica,sans-Serif" font-size="11.00">☸️ SKE cluster</text>
+<text xml:space="preserve" text-anchor="middle" x="100" y="-243.7" font-family="Helvetica,sans-Serif" font-size="11.00">run by the platform team</text>
 </g>
-<!-- STARTER&#45;&gt;REPO -->
-<g id="edge7" class="edge">
-<title>STARTER&#45;&gt;REPO</title>
-<path fill="none" stroke="#8b95a3" d="M390.95,-369C483.28,-369 643,-369 643,-369 643,-369 643,-288.98 643,-288.98"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="645.45,-288.98 643,-281.98 640.55,-288.98 645.45,-288.98"/>
-<text xml:space="preserve" text-anchor="middle" x="542.22" y="-371.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
+<!-- ORG&#45;&gt;SKE -->
+<g id="edge4" class="edge">
+<title>ORG&#45;&gt;SKE</title>
+<path fill="none" stroke="#8b95a3" d="M130.02,-338.38C130.02,-338.38 130.02,-283.62 130.02,-283.62"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="132.47,-283.62 130.02,-276.62 127.57,-283.62 132.47,-283.62"/>
 </g>
-<!-- P_DEV -->
+<!-- GIT -->
 <g id="node3" class="node">
-<title>P_DEV</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M368.53,-280.12C368.53,-280.12 285.47,-280.12 285.47,-280.12 279.47,-280.12 273.47,-274.12 273.47,-268.12 273.47,-268.12 273.47,-249.88 273.47,-249.88 273.47,-243.88 279.47,-237.88 285.47,-237.88 285.47,-237.88 368.53,-237.88 368.53,-237.88 374.53,-237.88 380.53,-243.88 380.53,-249.88 380.53,-249.88 380.53,-268.12 380.53,-268.12 380.53,-274.12 374.53,-280.12 368.53,-280.12"/>
-<text xml:space="preserve" text-anchor="middle" x="327" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">🗂️ dev project</text>
-<text xml:space="preserve" text-anchor="middle" x="327" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">+ SKE tenant</text>
-</g>
-<!-- STARTER&#45;&gt;P_DEV -->
-<g id="edge8" class="edge">
-<title>STARTER&#45;&gt;P_DEV</title>
-<path fill="none" stroke="#8b95a3" d="M327,-340.85C327,-340.85 327,-288.88 327,-288.88"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="329.45,-288.88 327,-281.88 324.55,-288.88 329.45,-288.88"/>
-<text xml:space="preserve" text-anchor="middle" x="312.24" y="-317.56" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
-</g>
-<!-- P_PROD -->
-<g id="node4" class="node">
-<title>P_PROD</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M519.67,-280.12C519.67,-280.12 432.33,-280.12 432.33,-280.12 426.33,-280.12 420.33,-274.12 420.33,-268.12 420.33,-268.12 420.33,-249.88 420.33,-249.88 420.33,-243.88 426.33,-237.88 432.33,-237.88 432.33,-237.88 519.67,-237.88 519.67,-237.88 525.67,-237.88 531.67,-243.88 531.67,-249.88 531.67,-249.88 531.67,-268.12 531.67,-268.12 531.67,-274.12 525.67,-280.12 519.67,-280.12"/>
-<text xml:space="preserve" text-anchor="middle" x="476" y="-262.3" font-family="Helvetica,sans-Serif" font-size="11.00">🗂️ prod project</text>
-<text xml:space="preserve" text-anchor="middle" x="476" y="-249.1" font-family="Helvetica,sans-Serif" font-size="11.00">+ SKE tenant</text>
-</g>
-<!-- STARTER&#45;&gt;P_PROD -->
-<g id="edge9" class="edge">
-<title>STARTER&#45;&gt;P_PROD</title>
-<path fill="none" stroke="#8b95a3" d="M387.25,-340.88C387.25,-312.53 387.25,-266 387.25,-266 387.25,-266 411.28,-266 411.28,-266"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="411.28,-268.45 418.28,-266 411.28,-263.55 411.28,-268.45"/>
-</g>
-<!-- D_DEV -->
-<g id="node5" class="node">
-<title>D_DEV</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M416.99,-176.88C416.99,-176.88 285.01,-176.88 285.01,-176.88 279.01,-176.88 273.01,-170.88 273.01,-164.88 273.01,-164.88 273.01,-146.64 273.01,-146.64 273.01,-140.64 279.01,-134.64 285.01,-134.64 285.01,-134.64 416.99,-134.64 416.99,-134.64 422.99,-134.64 428.99,-140.64 428.99,-146.64 428.99,-146.64 428.99,-164.88 428.99,-164.88 428.99,-170.88 422.99,-176.88 416.99,-176.88"/>
-<text xml:space="preserve" text-anchor="middle" x="351" y="-159.06" font-family="Helvetica,sans-Serif" font-size="11.00">⚙️ ske/forgejo&#45;connector</text>
-<text xml:space="preserve" text-anchor="middle" x="351" y="-145.86" font-family="Helvetica,sans-Serif" font-size="11.00">dev namespace CI/CD</text>
+<title>GIT</title>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M312.06,-274.72C312.06,-274.72 225.94,-274.72 225.94,-274.72 219.94,-274.72 213.94,-268.72 213.94,-262.72 213.94,-262.72 213.94,-244.48 213.94,-244.48 213.94,-238.48 219.94,-232.48 225.94,-232.48 225.94,-232.48 312.06,-232.48 312.06,-232.48 318.06,-232.48 324.06,-238.48 324.06,-244.48 324.06,-244.48 324.06,-262.72 324.06,-262.72 324.06,-268.72 318.06,-274.72 312.06,-274.72"/>
+<text xml:space="preserve" text-anchor="middle" x="269" y="-256.9" font-family="Helvetica,sans-Serif" font-size="11.00">🔀 STACKIT Git</text>
+<text xml:space="preserve" text-anchor="middle" x="269" y="-243.7" font-family="Helvetica,sans-Serif" font-size="11.00">Forgejo instance</text>
 </g>
-<!-- STARTER&#45;&gt;D_DEV -->
-<g id="edge10" class="edge">
-<title>STARTER&#45;&gt;D_DEV</title>
-<path fill="none" stroke="#8b95a3" d="M383.89,-340.92C383.89,-340.92 383.89,-185.79 383.89,-185.79"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="386.34,-185.79 383.89,-178.79 381.44,-185.79 386.34,-185.79"/>
-<text xml:space="preserve" text-anchor="middle" x="383.89" y="-255.25" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates connector</text>
+<!-- ORG&#45;&gt;GIT -->
+<g id="edge5" class="edge">
+<title>ORG&#45;&gt;GIT</title>
+<path fill="none" stroke="#8b95a3" d="M238.96,-338.38C238.96,-338.38 238.96,-283.62 238.96,-283.62"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="241.41,-283.62 238.96,-276.62 236.51,-283.62 241.41,-283.62"/>
 </g>
-<!-- D_PROD -->
+<!-- SKE&#45;&gt;GIT -->
+<!-- NS -->
 <g id="node6" class="node">
-<title>D_PROD</title>
-<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M612.99,-176.88C612.99,-176.88 481.01,-176.88 481.01,-176.88 475.01,-176.88 469.01,-170.88 469.01,-164.88 469.01,-164.88 469.01,-146.64 469.01,-146.64 469.01,-140.64 475.01,-134.64 481.01,-134.64 481.01,-134.64 612.99,-134.64 612.99,-134.64 618.99,-134.64 624.99,-140.64 624.99,-146.64 624.99,-146.64 624.99,-164.88 624.99,-164.88 624.99,-170.88 618.99,-176.88 612.99,-176.88"/>
-<text xml:space="preserve" text-anchor="middle" x="547" y="-159.06" font-family="Helvetica,sans-Serif" font-size="11.00">⚙️ ske/forgejo&#45;connector</text>
-<text xml:space="preserve" text-anchor="middle" x="547" y="-145.86" font-family="Helvetica,sans-Serif" font-size="11.00">prod namespace CI/CD</text>
+<title>NS</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M150.09,-171.48C150.09,-171.48 49.91,-171.48 49.91,-171.48 43.91,-171.48 37.91,-165.48 37.91,-159.48 37.91,-159.48 37.91,-141.24 37.91,-141.24 37.91,-135.24 43.91,-129.24 49.91,-129.24 49.91,-129.24 150.09,-129.24 150.09,-129.24 156.09,-129.24 162.09,-135.24 162.09,-141.24 162.09,-141.24 162.09,-159.48 162.09,-159.48 162.09,-165.48 156.09,-171.48 150.09,-171.48"/>
+<text xml:space="preserve" text-anchor="middle" x="100" y="-153.66" font-family="Helvetica,sans-Serif" font-size="11.00">☸️ Namespace ×2</text>
+<text xml:space="preserve" text-anchor="middle" x="100" y="-140.46" font-family="Helvetica,sans-Serif" font-size="11.00">dev + prod</text>
+</g>
+<!-- SKE&#45;&gt;NS -->
+<g id="edge6" class="edge">
+<title>SKE&#45;&gt;NS</title>
+<path fill="none" stroke="#8b95a3" d="M68.96,-232.21C68.96,-232.21 68.96,-180.24 68.96,-180.24"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="71.41,-180.24 68.96,-173.24 66.51,-180.24 71.41,-180.24"/>
+<text xml:space="preserve" text-anchor="middle" x="52.2" y="-208.92" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">contains</text>
 </g>
-<!-- STARTER&#45;&gt;D_PROD -->
-<g id="edge11" class="edge">
-<title>STARTER&#45;&gt;D_PROD</title>
-<path fill="none" stroke="#8b95a3" d="M391.14,-355C457.6,-355 551.86,-355 551.86,-355 551.86,-355 551.86,-185.6 551.86,-185.6"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="554.31,-185.6 551.86,-178.6 549.41,-185.6 554.31,-185.6"/>
+<!-- HARBOR -->
+<g id="node4" class="node">
+<title>HARBOR</title>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M542.4,-274.72C542.4,-274.72 375.6,-274.72 375.6,-274.72 369.6,-274.72 363.6,-268.72 363.6,-262.72 363.6,-262.72 363.6,-244.48 363.6,-244.48 363.6,-238.48 369.6,-232.48 375.6,-232.48 375.6,-232.48 542.4,-232.48 542.4,-232.48 548.4,-232.48 554.4,-238.48 554.4,-244.48 554.4,-244.48 554.4,-262.72 554.4,-262.72 554.4,-268.72 548.4,-274.72 542.4,-274.72"/>
+<text xml:space="preserve" text-anchor="middle" x="459" y="-256.9" font-family="Helvetica,sans-Serif" font-size="11.00">🗄️ STACKIT Harbor</text>
+<text xml:space="preserve" text-anchor="middle" x="459" y="-243.7" font-family="Helvetica,sans-Serif" font-size="11.00">registry shared across customers</text>
 </g>
-<!-- REPO&#45;&gt;D_DEV -->
-<g id="edge14" class="edge">
-<title>REPO&#45;&gt;D_DEV</title>
-<path fill="none" stroke="#8b95a3" d="M598.52,-237.66C598.52,-219.73 598.52,-197 598.52,-197 598.52,-197 424.66,-197 424.66,-197 424.66,-197 424.66,-185.86 424.66,-185.86"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="427.11,-185.86 424.66,-178.86 422.21,-185.86 427.11,-185.86"/>
-<text xml:space="preserve" text-anchor="middle" x="503.58" y="-199.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">repo output</text>
+<!-- GIT&#45;&gt;HARBOR -->
+<!-- REPO -->
+<g id="node7" class="node">
+<title>REPO</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M322.15,-171.48C322.15,-171.48 215.85,-171.48 215.85,-171.48 209.85,-171.48 203.85,-165.48 203.85,-159.48 203.85,-159.48 203.85,-141.24 203.85,-141.24 203.85,-135.24 209.85,-129.24 215.85,-129.24 215.85,-129.24 322.15,-129.24 322.15,-129.24 328.15,-129.24 334.15,-135.24 334.15,-141.24 334.15,-141.24 334.15,-159.48 334.15,-159.48 334.15,-165.48 328.15,-171.48 322.15,-171.48"/>
+<text xml:space="preserve" text-anchor="middle" x="269" y="-153.66" font-family="Helvetica,sans-Serif" font-size="11.00">🔀 App repository ×1</text>
+<text xml:space="preserve" text-anchor="middle" x="269" y="-140.46" font-family="Helvetica,sans-Serif" font-size="11.00">per application team</text>
 </g>
-<!-- REPO&#45;&gt;D_PROD -->
-<g id="edge15" class="edge">
-<title>REPO&#45;&gt;D_PROD</title>
-<path fill="none" stroke="#8b95a3" d="M611.75,-237.61C611.75,-237.61 611.75,-185.64 611.75,-185.64"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="614.2,-185.64 611.75,-178.64 609.3,-185.64 614.2,-185.64"/>
+<!-- GIT&#45;&gt;REPO -->
+<g id="edge7" class="edge">
+<title>GIT&#45;&gt;REPO</title>
+<path fill="none" stroke="#8b95a3" d="M269,-232.21C269,-232.21 269,-180.24 269,-180.24"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="271.45,-180.24 269,-173.24 266.55,-180.24 271.45,-180.24"/>
+<text xml:space="preserve" text-anchor="middle" x="258.24" y="-208.92" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">hosts</text>
 </g>
-<!-- GIT -->
-<g id="node10" class="node">
-<title>GIT</title>
-<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M787.06,-68.24C787.06,-68.24 700.94,-68.24 700.94,-68.24 694.94,-68.24 688.94,-62.24 688.94,-56.24 688.94,-56.24 688.94,-38 688.94,-38 688.94,-32 694.94,-26 700.94,-26 700.94,-26 787.06,-26 787.06,-26 793.06,-26 799.06,-32 799.06,-38 799.06,-38 799.06,-56.24 799.06,-56.24 799.06,-62.24 793.06,-68.24 787.06,-68.24"/>
-<text xml:space="preserve" text-anchor="middle" x="744" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">🔀 STACKIT Git</text>
-<text xml:space="preserve" text-anchor="middle" x="744" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">Forgejo instance</text>
+<!-- MODEL -->
+<g id="node5" class="node">
+<title>MODEL</title>
+<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M745.95,-274.72C745.95,-274.72 606.05,-274.72 606.05,-274.72 600.05,-274.72 594.05,-268.72 594.05,-262.72 594.05,-262.72 594.05,-244.48 594.05,-244.48 594.05,-238.48 600.05,-232.48 606.05,-232.48 606.05,-232.48 745.95,-232.48 745.95,-232.48 751.95,-232.48 757.95,-238.48 757.95,-244.48 757.95,-244.48 757.95,-262.72 757.95,-262.72 757.95,-268.72 751.95,-274.72 745.95,-274.72"/>
+<text xml:space="preserve" text-anchor="middle" x="676" y="-256.9" font-family="Helvetica,sans-Serif" font-size="11.00">🧠 STACKIT Model Serving</text>
+<text xml:space="preserve" text-anchor="middle" x="676" y="-243.7" font-family="Helvetica,sans-Serif" font-size="11.00">sovereign LLM API</text>
 </g>
-<!-- REPO&#45;&gt;GIT -->
-<g id="edge18" class="edge">
-<title>REPO&#45;&gt;GIT</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M705.61,-237.52C705.61,-237.52 705.61,-77.17 705.61,-77.17"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="708.06,-77.17 705.61,-70.17 703.16,-77.17 708.06,-77.17"/>
-<text xml:space="preserve" text-anchor="middle" x="685.84" y="-160.05" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">hosted on</text>
+<!-- HARBOR&#45;&gt;MODEL -->
+<!-- NS&#45;&gt;HARBOR -->
+<g id="edge11" class="edge">
+<title>NS&#45;&gt;HARBOR</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M100,-171.81C100,-191.29 100,-217 100,-217 100,-217 427.2,-217 427.2,-217 427.2,-217 427.2,-223.8 427.2,-223.8"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="424.75,-223.8 427.2,-230.8 429.65,-223.8 424.75,-223.8"/>
+<text xml:space="preserve" text-anchor="middle" x="219.39" y="-219.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pulls images</text>
 </g>
-<!-- P_DEV&#45;&gt;REPO -->
-<!-- P_DEV&#45;&gt;D_DEV -->
+<!-- NS&#45;&gt;MODEL -->
 <g id="edge12" class="edge">
-<title>P_DEV&#45;&gt;D_DEV</title>
-<path fill="none" stroke="#8b95a3" d="M309.16,-237.61C309.16,-237.61 309.16,-185.64 309.16,-185.64"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="311.61,-185.64 309.16,-178.64 306.71,-185.64 311.61,-185.64"/>
-<text xml:space="preserve" text-anchor="middle" x="285.89" y="-214.32" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">namespace</text>
-</g>
-<!-- P_PROD&#45;&gt;P_DEV -->
-<!-- P_PROD&#45;&gt;D_PROD -->
-<g id="edge13" class="edge">
-<title>P_PROD&#45;&gt;D_PROD</title>
-<path fill="none" stroke="#8b95a3" d="M500.34,-237.61C500.34,-237.61 500.34,-185.64 500.34,-185.64"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="502.79,-185.64 500.34,-178.64 497.89,-185.64 502.79,-185.64"/>
+<title>NS&#45;&gt;MODEL</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M131.04,-171.96C131.04,-186.11 131.04,-202 131.04,-202 131.04,-202 676,-202 676,-202 676,-202 676,-223.5 676,-223.5"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="673.55,-223.5 676,-230.5 678.45,-223.5 673.55,-223.5"/>
+<text xml:space="preserve" text-anchor="middle" x="355.98" y="-204.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">calls with injected key</text>
 </g>
-<!-- SKE -->
-<g id="node7" class="node">
-<title>SKE</title>
-<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M433.19,-68.24C433.19,-68.24 268.81,-68.24 268.81,-68.24 262.81,-68.24 256.81,-62.24 256.81,-56.24 256.81,-56.24 256.81,-38 256.81,-38 256.81,-32 262.81,-26 268.81,-26 268.81,-26 433.19,-26 433.19,-26 439.19,-26 445.19,-32 445.19,-38 445.19,-38 445.19,-56.24 445.19,-56.24 445.19,-62.24 439.19,-68.24 433.19,-68.24"/>
-<text xml:space="preserve" text-anchor="middle" x="351" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">☸️ SKE cluster</text>
-<text xml:space="preserve" text-anchor="middle" x="351" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">provisioned by the platform team</text>
+<!-- ACT -->
+<g id="node8" class="node">
+<title>ACT</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M327.95,-68.24C327.95,-68.24 210.05,-68.24 210.05,-68.24 204.05,-68.24 198.05,-62.24 198.05,-56.24 198.05,-56.24 198.05,-38 198.05,-38 198.05,-32 204.05,-26 210.05,-26 210.05,-26 327.95,-26 327.95,-26 333.95,-26 339.95,-32 339.95,-38 339.95,-38 339.95,-56.24 339.95,-56.24 339.95,-62.24 333.95,-68.24 327.95,-68.24"/>
+<text xml:space="preserve" text-anchor="middle" x="269" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">⚙️ Forgejo Actions ×2</text>
+<text xml:space="preserve" text-anchor="middle" x="269" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">dev + prod pipeline</text>
 </g>
-<!-- D_DEV&#45;&gt;SKE -->
-<g id="edge16" class="edge">
-<title>D_DEV&#45;&gt;SKE</title>
-<path fill="none" stroke="#8b95a3" d="M351,-134.3C351,-134.3 351,-77.05 351,-77.05"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="353.45,-77.05 351,-70.05 348.55,-77.05 353.45,-77.05"/>
-<text xml:space="preserve" text-anchor="middle" x="330.49" y="-108.37" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">deploys to</text>
+<!-- REPO&#45;&gt;ACT -->
+<g id="edge8" class="edge">
+<title>REPO&#45;&gt;ACT</title>
+<path fill="none" stroke="#8b95a3" d="M269,-128.97C269,-128.97 269,-77 269,-77"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="271.45,-77 269,-70 266.55,-77 271.45,-77"/>
+<text xml:space="preserve" text-anchor="middle" x="243.48" y="-105.68" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">runs pipeline</text>
 </g>
-<!-- MODEL -->
-<g id="node8" class="node">
-<title>MODEL</title>
-<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M636.95,-65.12C636.95,-65.12 497.05,-65.12 497.05,-65.12 491.05,-65.12 485.05,-59.12 485.05,-53.12 485.05,-53.12 485.05,-41.12 485.05,-41.12 485.05,-35.12 491.05,-29.12 497.05,-29.12 497.05,-29.12 636.95,-29.12 636.95,-29.12 642.95,-29.12 648.95,-35.12 648.95,-41.12 648.95,-41.12 648.95,-53.12 648.95,-53.12 648.95,-59.12 642.95,-65.12 636.95,-65.12"/>
-<text xml:space="preserve" text-anchor="middle" x="567" y="-43.82" font-family="Helvetica,sans-Serif" font-size="11.00">🧠 STACKIT Model Serving</text>
+<!-- ACT&#45;&gt;HARBOR -->
+<g id="edge9" class="edge">
+<title>ACT&#45;&gt;HARBOR</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M340.4,-54C405.24,-54 490.8,-54 490.8,-54 490.8,-54 490.8,-223.73 490.8,-223.73"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="488.35,-223.73 490.8,-230.73 493.25,-223.73 488.35,-223.73"/>
+<text xml:space="preserve" text-anchor="middle" x="460.53" y="-66.36" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pushes images</text>
 </g>
-<!-- D_DEV&#45;&gt;MODEL -->
-<g id="edge21" class="edge">
-<title>D_DEV&#45;&gt;MODEL</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M429.5,-149C445.27,-149 457.1,-149 457.1,-149 457.1,-149 457.1,-53 457.1,-53 457.1,-53 476.04,-53 476.04,-53"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="476.04,-55.45 483.04,-53 476.04,-50.55 476.04,-55.45"/>
-<text xml:space="preserve" text-anchor="middle" x="422.84" y="-108.03" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">model API secret</text>
+<!-- ACT&#45;&gt;NS -->
+<g id="edge10" class="edge">
+<title>ACT&#45;&gt;NS</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M197.89,-47C159.83,-47 120.7,-47 120.7,-47 120.7,-47 120.7,-120.43 120.7,-120.43"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="118.25,-120.43 120.7,-127.43 123.15,-120.43 118.25,-120.43"/>
+<text xml:space="preserve" text-anchor="middle" x="102.06" y="-49.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">deploys to</text>
 </g>
-<!-- HARBOR -->
+<!-- PLAT -->
 <g id="node9" class="node">
-<title>HARBOR</title>
-<path fill="#eef2f6" stroke="#93a7bb" stroke-width="1.1" d="M204.4,-68.24C204.4,-68.24 37.6,-68.24 37.6,-68.24 31.6,-68.24 25.6,-62.24 25.6,-56.24 25.6,-56.24 25.6,-38 25.6,-38 25.6,-32 31.6,-26 37.6,-26 37.6,-26 204.4,-26 204.4,-26 210.4,-26 216.4,-32 216.4,-38 216.4,-38 216.4,-56.24 216.4,-56.24 216.4,-62.24 210.4,-68.24 204.4,-68.24"/>
-<text xml:space="preserve" text-anchor="middle" x="121" y="-50.42" font-family="Helvetica,sans-Serif" font-size="11.00">🗄️ STACKIT Harbor</text>
-<text xml:space="preserve" text-anchor="middle" x="121" y="-37.22" font-family="Helvetica,sans-Serif" font-size="11.00">registry shared across customers</text>
+<title>PLAT</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M912.64,-374.84C912.64,-374.84 817.36,-374.84 817.36,-374.84 811.36,-374.84 805.36,-368.84 805.36,-362.84 805.36,-362.84 805.36,-350.84 805.36,-350.84 805.36,-344.84 811.36,-338.84 817.36,-338.84 817.36,-338.84 912.64,-338.84 912.64,-338.84 918.64,-338.84 924.64,-344.84 924.64,-350.84 924.64,-350.84 924.64,-362.84 924.64,-362.84 924.64,-368.84 918.64,-374.84 912.64,-374.84"/>
+<text xml:space="preserve" text-anchor="middle" x="865" y="-353.54" font-family="Helvetica,sans-Serif" font-size="11.00">🛰️ SKE Platform</text>
 </g>
-<!-- D_DEV&#45;&gt;HARBOR -->
+<!-- PLAT&#45;&gt;SKE -->
 <g id="edge19" class="edge">
-<title>D_DEV&#45;&gt;HARBOR</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M272.81,-156C195.66,-156 89.2,-156 89.2,-156 89.2,-156 89.2,-77.14 89.2,-77.14"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="91.65,-77.14 89.2,-70.14 86.75,-77.14 91.65,-77.14"/>
-<text xml:space="preserve" text-anchor="middle" x="116.06" y="-158.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">push images</text>
+<title>PLAT&#45;&gt;SKE</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M845.12,-338.42C845.12,-323.52 845.12,-305 845.12,-305 845.12,-305 152.01,-305 152.01,-305 152.01,-305 152.01,-283.61 152.01,-283.61"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="154.46,-283.61 152.01,-276.61 149.56,-283.61 154.46,-283.61"/>
+<text xml:space="preserve" text-anchor="middle" x="476.82" y="-307.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">replicates into</text>
 </g>
-<!-- D_PROD&#45;&gt;D_DEV -->
-<!-- D_PROD&#45;&gt;SKE -->
-<g id="edge17" class="edge">
-<title>D_PROD&#45;&gt;SKE</title>
-<path fill="none" stroke="#8b95a3" d="M479.71,-134.17C479.71,-100.93 479.71,-41 479.71,-41 479.71,-41 454.07,-41 454.07,-41"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="454.07,-38.55 447.07,-41 454.07,-43.45 454.07,-38.55"/>
+<!-- LZ -->
+<g id="node10" class="node">
+<title>LZ</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M916.32,-274.72C916.32,-274.72 813.68,-274.72 813.68,-274.72 807.68,-274.72 801.68,-268.72 801.68,-262.72 801.68,-262.72 801.68,-244.48 801.68,-244.48 801.68,-238.48 807.68,-232.48 813.68,-232.48 813.68,-232.48 916.32,-232.48 916.32,-232.48 922.32,-232.48 928.32,-238.48 928.32,-244.48 928.32,-244.48 928.32,-262.72 928.32,-262.72 928.32,-268.72 922.32,-274.72 916.32,-274.72"/>
+<text xml:space="preserve" text-anchor="middle" x="865" y="-256.9" font-family="Helvetica,sans-Serif" font-size="11.00">🛬 Landing Zone ×2</text>
+<text xml:space="preserve" text-anchor="middle" x="865" y="-243.7" font-family="Helvetica,sans-Serif" font-size="11.00">dev + prod</text>
 </g>
-<!-- D_PROD&#45;&gt;MODEL -->
-<g id="edge22" class="edge">
-<title>D_PROD&#45;&gt;MODEL</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M555.02,-134.3C555.02,-134.3 555.02,-74.16 555.02,-74.16"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="557.47,-74.16 555.02,-67.16 552.57,-74.16 557.47,-74.16"/>
+<!-- PLAT&#45;&gt;LZ -->
+<g id="edge14" class="edge">
+<title>PLAT&#45;&gt;LZ</title>
+<path fill="none" stroke="#8b95a3" d="M884.88,-338.38C884.88,-338.38 884.88,-283.62 884.88,-283.62"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="887.33,-283.62 884.88,-276.62 882.43,-283.62 887.33,-283.62"/>
+</g>
+<!-- PROJ -->
+<g id="node11" class="node">
+<title>PROJ</title>
+<path fill="#e5f2ea" stroke="#85bfa0" stroke-width="1.1" d="M904.39,-171.48C904.39,-171.48 825.61,-171.48 825.61,-171.48 819.61,-171.48 813.61,-165.48 813.61,-159.48 813.61,-159.48 813.61,-141.24 813.61,-141.24 813.61,-135.24 819.61,-129.24 825.61,-129.24 825.61,-129.24 904.39,-129.24 904.39,-129.24 910.39,-129.24 916.39,-135.24 916.39,-141.24 916.39,-141.24 916.39,-159.48 916.39,-159.48 916.39,-165.48 910.39,-171.48 904.39,-171.48"/>
+<text xml:space="preserve" text-anchor="middle" x="865" y="-153.66" font-family="Helvetica,sans-Serif" font-size="11.00">🗂️ Project ×2</text>
+<text xml:space="preserve" text-anchor="middle" x="865" y="-140.46" font-family="Helvetica,sans-Serif" font-size="11.00">dev + prod</text>
+</g>
+<!-- LZ&#45;&gt;PROJ -->
+<g id="edge15" class="edge">
+<title>LZ&#45;&gt;PROJ</title>
+<path fill="none" stroke="#8b95a3" d="M865,-232.21C865,-232.21 865,-180.24 865,-180.24"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="867.45,-180.24 865,-173.24 862.55,-180.24 867.45,-180.24"/>
+<text xml:space="preserve" text-anchor="middle" x="845.74" y="-208.92" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">applies to</text>
 </g>
-<!-- D_PROD&#45;&gt;HARBOR -->
+<!-- PROJ&#45;&gt;NS -->
 <g id="edge20" class="edge">
-<title>D_PROD&#45;&gt;HARBOR</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M474.36,-134.13C474.36,-123.52 474.36,-113 474.36,-113 474.36,-113 152.8,-113 152.8,-113 152.8,-113 152.8,-77.21 152.8,-77.21"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="155.25,-77.21 152.8,-70.21 150.35,-77.21 155.25,-77.21"/>
+<title>PROJ&#45;&gt;NS</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M865,-128.88C865,-114.8 865,-99 865,-99 865,-99 79.3,-99 79.3,-99 79.3,-99 79.3,-120.36 79.3,-120.36"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="76.85,-120.36 79.3,-127.36 81.75,-120.36 76.85,-120.36"/>
+<text xml:space="preserve" text-anchor="middle" x="439.38" y="-101.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">tenant namespace</text>
+</g>
+<!-- BBD_S -->
+<g id="node12" class="node">
+<title>BBD_S</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M1264.44,-377.96C1264.44,-377.96 1135.56,-377.96 1135.56,-377.96 1129.56,-377.96 1123.56,-371.96 1123.56,-365.96 1123.56,-365.96 1123.56,-347.72 1123.56,-347.72 1123.56,-341.72 1129.56,-335.72 1135.56,-335.72 1135.56,-335.72 1264.44,-335.72 1264.44,-335.72 1270.44,-335.72 1276.44,-341.72 1276.44,-347.72 1276.44,-347.72 1276.44,-365.96 1276.44,-365.96 1276.44,-371.96 1270.44,-377.96 1264.44,-377.96"/>
+<text xml:space="preserve" text-anchor="middle" x="1200" y="-360.14" font-family="Helvetica,sans-Serif" font-size="11.00">📦 ske/ske&#45;starterkit BBD</text>
+<text xml:space="preserve" text-anchor="middle" x="1200" y="-346.94" font-family="Helvetica,sans-Serif" font-size="11.00">self&#45;service catalog entry</text>
+</g>
+<!-- BBD_S&#45;&gt;PROJ -->
+<g id="edge18" class="edge">
+<title>BBD_S&#45;&gt;PROJ</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M1198.01,-335.48C1198.01,-282.64 1198.01,-150 1198.01,-150 1198.01,-150 925.18,-150 925.18,-150"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="925.18,-147.55 918.18,-150 925.18,-152.45 925.18,-147.55"/>
+<text xml:space="preserve" text-anchor="middle" x="1139.58" y="-152.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">creates</text>
+</g>
+<!-- BBD_R -->
+<g id="node13" class="node">
+<title>BBD_R</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M1165.78,-271.6C1165.78,-271.6 1022.22,-271.6 1022.22,-271.6 1016.22,-271.6 1010.22,-265.6 1010.22,-259.6 1010.22,-259.6 1010.22,-247.6 1010.22,-247.6 1010.22,-241.6 1016.22,-235.6 1022.22,-235.6 1022.22,-235.6 1165.78,-235.6 1165.78,-235.6 1171.78,-235.6 1177.78,-241.6 1177.78,-247.6 1177.78,-247.6 1177.78,-259.6 1177.78,-259.6 1177.78,-265.6 1171.78,-271.6 1165.78,-271.6"/>
+<text xml:space="preserve" text-anchor="middle" x="1094" y="-250.3" font-family="Helvetica,sans-Serif" font-size="11.00">📦 stackit/git&#45;repository BBD</text>
+</g>
+<!-- BBD_S&#45;&gt;BBD_R -->
+<g id="edge16" class="edge">
+<title>BBD_S&#45;&gt;BBD_R</title>
+<path fill="none" stroke="#8b95a3" d="M1150.67,-335.45C1150.67,-335.45 1150.67,-280.37 1150.67,-280.37"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="1153.12,-280.37 1150.67,-273.37 1148.22,-280.37 1153.12,-280.37"/>
+<text xml:space="preserve" text-anchor="middle" x="1130.16" y="-310.61" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">composes</text>
+</g>
+<!-- BBD_C -->
+<g id="node14" class="node">
+<title>BBD_C</title>
+<path fill="#ecedfb" stroke="#9aa2e6" stroke-width="1.1" d="M1381.77,-271.6C1381.77,-271.6 1230.23,-271.6 1230.23,-271.6 1224.23,-271.6 1218.23,-265.6 1218.23,-259.6 1218.23,-259.6 1218.23,-247.6 1218.23,-247.6 1218.23,-241.6 1224.23,-235.6 1230.23,-235.6 1230.23,-235.6 1381.77,-235.6 1381.77,-235.6 1387.77,-235.6 1393.77,-241.6 1393.77,-247.6 1393.77,-247.6 1393.77,-259.6 1393.77,-259.6 1393.77,-265.6 1387.77,-271.6 1381.77,-271.6"/>
+<text xml:space="preserve" text-anchor="middle" x="1306" y="-250.3" font-family="Helvetica,sans-Serif" font-size="11.00">📦 ske/forgejo&#45;connector BBD</text>
+</g>
+<!-- BBD_S&#45;&gt;BBD_C -->
+<g id="edge17" class="edge">
+<title>BBD_S&#45;&gt;BBD_C</title>
+<path fill="none" stroke="#8b95a3" d="M1247.34,-335.45C1247.34,-335.45 1247.34,-280.37 1247.34,-280.37"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="1249.79,-280.37 1247.34,-273.37 1244.89,-280.37 1249.79,-280.37"/>
 </g>
-<!-- SKE&#45;&gt;GIT -->
-<!-- MODEL&#45;&gt;HARBOR -->
-<!-- HARBOR&#45;&gt;SKE -->
-<!-- HARBOR&#45;&gt;SKE -->
-<g id="edge23" class="edge">
-<title>HARBOR&#45;&gt;SKE</title>
-<path fill="none" stroke="#8b95a3" stroke-dasharray="5,2" d="M216.88,-40C216.88,-40 247.87,-40 247.87,-40"/>
-<polygon fill="#8b95a3" stroke="#8b95a3" points="247.87,-42.45 254.87,-40 247.87,-37.55 247.87,-42.45"/>
-<text xml:space="preserve" text-anchor="middle" x="241.63" y="-42.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">pulls</text>
+<!-- BBD_R&#45;&gt;REPO -->
+<g id="edge21" class="edge">
+<title>BBD_R&#45;&gt;REPO</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M1094,-235.4C1094,-215.68 1094,-187 1094,-187 1094,-187 329.1,-187 329.1,-187 329.1,-187 329.1,-180.19 329.1,-180.19"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="331.55,-180.19 329.1,-173.19 326.65,-180.19 331.55,-180.19"/>
+<text xml:space="preserve" text-anchor="middle" x="712.09" y="-189.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">provisions</text>
+</g>
+<!-- BBD_R&#45;&gt;BBD_C -->
+<!-- BBD_C&#45;&gt;ACT -->
+<g id="edge22" class="edge">
+<title>BBD_C&#45;&gt;ACT</title>
+<path fill="none" stroke="#8b95a3" stroke-dasharray="1,5" d="M1306,-235.39C1306,-183.73 1306,-40 1306,-40 1306,-40 348.79,-40 348.79,-40"/>
+<polygon fill="#8b95a3" stroke="#8b95a3" points="348.79,-37.55 341.79,-40 348.79,-42.45 348.79,-37.55"/>
+<text xml:space="preserve" text-anchor="middle" x="904.83" y="-42.7" font-family="Helvetica,sans-Serif" font-size="9.00" fill="#697180">provisions</text>
 </g>
 </g>
 </svg>

From b855136e8ea61272fbace818ebe7721a8391c7f9 Mon Sep 17 00:00:00 2001
From: Johannes Rudolph <jrudolph@meshcloud.io>
Date: Fri, 31 Jul 2026 18:24:10 +0200
Subject: [PATCH 4/7] fix: ignore dot dirs for building module index

---
 index.ts | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/index.ts b/index.ts
index 67106f43..6c73f29e 100644
--- a/index.ts
+++ b/index.ts
@@ -44,11 +44,18 @@ function getBuildingBlockFolderUrl(filePath) {
   return `${remoteUrl}/tree/${hubRef}/modules${relativePath}`;
 }
 
+// Directories that never contain hub modules but do contain vendored copies of them.
+// `terraform init` mirrors the whole repo into `.terraform/modules/...`, so recursing into
+// these would count every module once per initialized module directory.
+function isIgnoredDir(name: string): boolean {
+  return name.startsWith(".") || name === "node_modules";
+}
+
 function findReadmes(dir){
   return fs.readdirSync(dir, { withFileTypes: true }).flatMap((file) => {
     const fullPath = path.join(dir, file.name);
     if (file.isDirectory()) {
-      return file.name === ".github" ? [] : findReadmes(fullPath);
+      return isIgnoredDir(file.name) ? [] : findReadmes(fullPath);
     }
     return file.name === "README.md" && dir.includes("buildingblock")
       ? [fullPath]

From ad50abeab84ab6caa8221ae4d921559f68d347b5 Mon Sep 17 00:00:00 2001
From: Johannes Rudolph <jrudolph@meshcloud.io>
Date: Fri, 31 Jul 2026 18:34:23 +0200
Subject: [PATCH 5/7] feat: standardize reference architecture directories and
 logo location

---
 .agents/references/diagrams.md                |   9 +-
 .gitignore                                    |   2 +
 AGENTS.md                                     |  27 ++++-
 index.ts                                      |  95 +++++++++++-------
 .../README.md}                                |   0
 .../azure-kubernetes.dot                      |   0
 .../azure-kubernetes.svg                      |   0
 .../azure-kubernetes/logo.png                 | Bin 0 -> 28358 bytes
 .../stackit-hub-spoke/logo.png                | Bin 0 -> 5579 bytes
 .../README.md}                                |   0
 .../stackit-kubernetes/logo.png               | Bin 0 -> 22760 bytes
 .../stackit-kubernetes.dot                    |   0
 .../stackit-kubernetes.svg                    |   0
 .../stackit-sandbox-landingzone/logo.png      | Bin 0 -> 5579 bytes
 website/.gitignore                            |   2 +
 .../src/app/core/reference-architecture.ts    |   3 +
 ...ference-architecture-detail.component.html |  18 ++--
 ...reference-architecture-detail.component.ts |   2 +
 ...reference-architecture-list.component.html |  18 ++--
 .../reference-architecture-list.component.ts  |   2 +
 .../template-gallery.component.html           |  18 ++--
 .../template-gallery.component.ts             |   2 +
 22 files changed, 139 insertions(+), 59 deletions(-)
 rename reference-architectures/{azure-kubernetes.md => azure-kubernetes/README.md} (100%)
 rename reference-architectures/{ => azure-kubernetes}/azure-kubernetes.dot (100%)
 rename reference-architectures/{ => azure-kubernetes}/azure-kubernetes.svg (100%)
 create mode 100644 reference-architectures/azure-kubernetes/logo.png
 create mode 100644 reference-architectures/stackit-hub-spoke/logo.png
 rename reference-architectures/{stackit-kubernetes.md => stackit-kubernetes/README.md} (100%)
 create mode 100644 reference-architectures/stackit-kubernetes/logo.png
 rename reference-architectures/{ => stackit-kubernetes}/stackit-kubernetes.dot (100%)
 rename reference-architectures/{ => stackit-kubernetes}/stackit-kubernetes.svg (100%)
 create mode 100644 reference-architectures/stackit-sandbox-landingzone/logo.png

diff --git a/.agents/references/diagrams.md b/.agents/references/diagrams.md
index 61261931..85fdc03e 100644
--- a/.agents/references/diagrams.md
+++ b/.agents/references/diagrams.md
@@ -8,8 +8,8 @@ Diagrams are **Graphviz DOT** source committed next to the Markdown that uses th
 SVG committed alongside:
 
 ```
-reference-architectures/
-├── azure-kubernetes.md     # references the SVG: ![...](azure-kubernetes.svg)
+reference-architectures/azure-kubernetes/
+├── README.md               # references the SVG: ![...](azure-kubernetes.svg)
 ├── azure-kubernetes.dot    # the source you edit
 └── azure-kubernetes.svg    # generated — never hand-edit
 ```
@@ -22,6 +22,11 @@ task diagrams:check  # verify committed SVGs match their sources (what CI runs)
 Graphviz runs from a WASM npm package, so no system `dot` install is needed. CI fails when a `.dot`
 is edited without committing the re-rendered SVG.
 
+Keep the markdown link **relative** so it renders on GitHub. The website generator copies every
+relatively-linked image into `website/public/assets/reference-architecture-diagrams/<id>/` and
+rewrites the link to that served path, so the diagram renders from the website's own origin
+regardless of whether the commit has been pushed.
+
 ---
 
 ## Composition
diff --git a/.gitignore b/.gitignore
index c6a173d4..d0deebf5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -27,6 +27,8 @@ __pycache__/
 website/src/generated/
 website/public/assets/building-block-logos/
 website/public/assets/logos/
+website/public/assets/reference-architecture-logos/
+website/public/assets/reference-architecture-diagrams/
 website/public/assets/*.json
 .worktrees/
 
diff --git a/AGENTS.md b/AGENTS.md
index 350e3ad4..95a6c76b 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -282,7 +282,22 @@ Do **not** commit these relative paths; switch back to the Hub GitHub URL before
 
 Reference architectures are curated, end-to-end blueprints that show how multiple Hub building blocks
 fit together to deliver a complete platform capability. They live in the `reference-architectures/`
-directory at the repo root as Markdown files with YAML front-matter.
+directory at the repo root, one folder per architecture — mirroring how modules are laid out.
+
+### Folder structure
+
+```
+reference-architectures/<cloud>-<capability>/
+├── README.md                  # front-matter + body (this is the architecture)
+├── logo.png                   # optional — falls back to the cloud provider logos on the website
+├── <cloud>-<capability>.dot   # optional — diagram source
+├── <cloud>-<capability>.svg   # optional — generated, committed alongside
+├── meshstack_integration.tf   # optional — makes the architecture importable into meshStack
+└── buildingblock/             # optional — Terraform for the importable architecture
+```
+
+The folder name is the architecture id used in website URLs. A folder without a `README.md` is
+ignored by the website generator.
 
 ### File format
 
@@ -308,7 +323,12 @@ getting-started steps, and shared responsibility matrix.
 
 ### Conventions
 
-- File name: `<cloud>-<capability>.md` (e.g. `azure-kubernetes.md`, `stackit-kubernetes.md`).
+- Folder name: `<cloud>-<capability>` (e.g. `azure-kubernetes`, `stackit-kubernetes`), with the
+  architecture itself in `README.md`.
+- Logo: colocate as `logo.png` (or `logo.svg`) in the architecture folder, the same convention
+  `buildingblock/logo.png` uses. The website generator copies it to
+  `website/public/assets/reference-architecture-logos/<id>.png` — never add files there by hand,
+  that directory is generated and gitignored.
 - `buildingBlocks[].path` must match a module path under `modules/` (e.g. `azure/aks`).
 - The Markdown body should include an **architecture diagram** showing how blocks relate — see
   [Diagrams](#diagrams) for the format.
@@ -317,7 +337,8 @@ getting-started steps, and shared responsibility matrix.
 
 ### Checklist for New Reference Architectures
 
-- [ ] Markdown file in `reference-architectures/` with YAML front-matter
+- [ ] Folder `reference-architectures/<cloud>-<capability>/` containing a `README.md` with YAML front-matter
+- [ ] `logo.png` colocated in the architecture folder (no logo files added under `website/public/assets/`)
 - [ ] `name`, `description`, `cloudProviders`, and `buildingBlocks` fields present
 - [ ] Every `buildingBlocks[].path` references an existing module in `modules/`
 - [ ] Every `buildingBlocks[].role` has a one-sentence description
diff --git a/index.ts b/index.ts
index 6c73f29e..8e015bb8 100644
--- a/index.ts
+++ b/index.ts
@@ -6,6 +6,8 @@ const { execSync } = require("child_process");
 const repoRoot = path.resolve(__dirname, "modules");
 const refArchRoot = path.resolve(__dirname, "reference-architectures");
 const assetsDir = path.resolve(__dirname, "website/public/assets/logos");
+const refArchAssetsDir = path.resolve(__dirname, "website/public/assets/reference-architecture-logos");
+const refArchDiagramAssetsDir = path.resolve(__dirname, "website/public/assets/reference-architecture-diagrams");
 const hubRef = getHubRef();
 
 function getHubRef() {
@@ -67,7 +69,7 @@ function findPlatforms(): Platform[] {
   fs.mkdirSync(assetsDir, { recursive: true });
 
   return fs.readdirSync(repoRoot, { withFileTypes: true })
-    .filter((dirent) => dirent.isDirectory() && dirent.name !== ".github")
+    .filter((dirent) => dirent.isDirectory() && !isIgnoredDir(dirent.name))
     .map((dir) => {
       const platformDir: string = path.join(repoRoot, dir.name);
       const platformLogo = getPlatformLogoOrThrow(platformDir, dir.name);
@@ -247,6 +249,9 @@ export interface ReferenceArchitecture {
   cloudProviders: string[];
   buildingBlocks: ReferenceArchitectureBuildingBlock[];
   body: string;
+  // Own logo, when one is committed for this architecture. Null means the website falls back
+  // to the logos of the architecture's cloud providers.
+  logo: string | null;
   sourceUrl: string | null;
   // Set when the reference architecture ships its own meshstack_integration.tf and can be
   // imported into meshStack directly, the same way a building block is imported.
@@ -255,31 +260,57 @@ export interface ReferenceArchitecture {
   modulePath: string | null;
 }
 
-// Rewrites relative markdown image links to absolute `raw` URLs pinned to the built commit.
-// Diagrams are committed next to their markdown so a relative link renders on GitHub, but the
-// website serves this body from its own origin where a repo-relative path resolves to nothing.
-function absolutizeImageLinks(body: string, markdownDir: string): string {
-  const remoteUrl = getGitHubRemoteUrl();
-  if (!remoteUrl) return body;
-
-  const dirInRepo = path
-    .relative(path.resolve(__dirname), markdownDir)
-    .replace(/\\/g, "/");
-
+// Copies images referenced by relative markdown links into the website assets and rewrites the
+// links to the served path. Diagrams are committed next to their README so a relative link renders
+// on GitHub, but the website serves this body from its own origin where a repo-relative path
+// resolves to nothing. Serving our own copy — rather than a github.com/raw link pinned to the built
+// commit — also keeps diagrams rendering for commits that are not (yet) pushed, and for files that
+// moved since the last commit.
+function localizeImageLinks(body: string, archDir: string, id: string): string {
   return body.replace(
     /(!\[[^\]]*\]\()(?!https?:\/\/|\/|#)([^)\s]+)(\))/g,
-    (_match, prefix, target, suffix) =>
-      `${prefix}${remoteUrl}/raw/${hubRef}/${dirInRepo}/${target.replace(/^\.\//, "")}${suffix}`
+    (match, prefix, target, suffix) => {
+      const sourcePath = path.join(archDir, target.replace(/^\.\//, ""));
+      if (!fs.existsSync(sourcePath)) {
+        console.warn(`⚠️  Reference architecture ${id} links a missing image: ${target}`);
+        return match;
+      }
+
+      const destDir = path.join(refArchDiagramAssetsDir, id);
+      const fileName = path.basename(sourcePath);
+      fs.mkdirSync(destDir, { recursive: true });
+      fs.copyFileSync(sourcePath, path.join(destDir, fileName));
+
+      return `${prefix}assets/reference-architecture-diagrams/${id}/${fileName}${suffix}`;
+    }
+  );
+}
+
+// Reference architectures colocate their logo as `logo.png|svg`, the same way a building block
+// does. Copies it to the website assets under the architecture id and returns the served path.
+function copyReferenceArchitectureLogoToAssets(archDir: string, id: string): string | null {
+  const logoFile = ["logo.png", "logo.svg"]
+    .find(file => fs.existsSync(path.join(archDir, file)));
+
+  if (!logoFile) return null;
+
+  fs.mkdirSync(refArchAssetsDir, { recursive: true });
+  fs.copyFileSync(
+    path.join(archDir, logoFile),
+    path.join(refArchAssetsDir, `${id}${path.extname(logoFile)}`)
   );
+
+  return `assets/reference-architecture-logos/${id}${path.extname(logoFile)}`;
 }
 
-// Parses a reference architecture from its front-matter/body markdown file.
-// `codeDir`, when set, is the directory checked for a `meshstack_integration.tf` that makes
-// this reference architecture importable, the same way a building block is imported.
-function parseReferenceArchitecture(filePath: string, id: string, codeDir: string | null): ReferenceArchitecture {
+// Parses a reference architecture from the `README.md` of its directory. The directory is also
+// checked for a `meshstack_integration.tf` that makes this reference architecture importable,
+// the same way a building block is imported.
+function parseReferenceArchitecture(archDir: string, id: string): ReferenceArchitecture {
+  const filePath = path.join(archDir, "README.md");
   const raw = fs.readFileSync(filePath, "utf-8");
   const { data, content } = matter(raw);
-  const body = absolutizeImageLinks(content, path.dirname(filePath));
+  const body = localizeImageLinks(content, archDir, id);
 
   if (!data.name) {
     throw new Error(`Reference architecture ${id} is missing "name" in front-matter.`);
@@ -297,7 +328,7 @@ function parseReferenceArchitecture(filePath: string, id: string, codeDir: strin
     .replace(/\\/g, "/");
   const sourceUrl = remoteUrl ? `${remoteUrl}/blob/${hubRef}${relativeFilePath}` : null;
 
-  const hasCode = codeDir !== null && fs.existsSync(path.join(codeDir, "meshstack_integration.tf"));
+  const hasCode = fs.existsSync(path.join(archDir, "meshstack_integration.tf"));
   const integrationSourceUrl = hasCode && remoteUrl
     ? `${remoteUrl}/blob/${hubRef}/reference-architectures/${id}/meshstack_integration.tf`
     : null;
@@ -313,6 +344,7 @@ function parseReferenceArchitecture(filePath: string, id: string, codeDir: strin
     cloudProviders: data.cloudProviders || [],
     buildingBlocks: data.buildingBlocks,
     body,
+    logo: copyReferenceArchitectureLogoToAssets(archDir, id),
     sourceUrl,
     integrationSourceUrl,
     folderUrl,
@@ -323,25 +355,16 @@ function parseReferenceArchitecture(filePath: string, id: string, codeDir: strin
 function findReferenceArchitectures(): ReferenceArchitecture[] {
   if (!fs.existsSync(refArchRoot)) return [];
 
+  // Every reference architecture is a directory named after its id, holding a README.md, an
+  // optional logo and diagram, and optional code (meshstack_integration.tf + buildingblock/)
+  // that can be imported into meshStack.
   return fs.readdirSync(refArchRoot, { withFileTypes: true })
+    .filter(entry => entry.isDirectory() && !isIgnoredDir(entry.name))
     .flatMap((entry): ReferenceArchitecture[] => {
-      // Directory-based reference architecture: README.md plus optional code
-      // (meshstack_integration.tf + buildingblock/) that can be imported into meshStack.
-      if (entry.isDirectory()) {
-        const dir = path.join(refArchRoot, entry.name);
-        const readmePath = path.join(dir, "README.md");
-        if (!fs.existsSync(readmePath)) return [];
-
-        return [parseReferenceArchitecture(readmePath, entry.name, dir)];
-      }
-
-      // Flat markdown reference architecture: a conceptual blueprint with no code of its own.
-      if (entry.isFile() && entry.name.endsWith(".md") && entry.name !== "README.md") {
-        const id = entry.name.replace(/\.md$/, "");
-        return [parseReferenceArchitecture(path.join(refArchRoot, entry.name), id, null)];
-      }
+      const archDir = path.join(refArchRoot, entry.name);
+      if (!fs.existsSync(path.join(archDir, "README.md"))) return [];
 
-      return [];
+      return [parseReferenceArchitecture(archDir, entry.name)];
     });
 }
 
diff --git a/reference-architectures/azure-kubernetes.md b/reference-architectures/azure-kubernetes/README.md
similarity index 100%
rename from reference-architectures/azure-kubernetes.md
rename to reference-architectures/azure-kubernetes/README.md
diff --git a/reference-architectures/azure-kubernetes.dot b/reference-architectures/azure-kubernetes/azure-kubernetes.dot
similarity index 100%
rename from reference-architectures/azure-kubernetes.dot
rename to reference-architectures/azure-kubernetes/azure-kubernetes.dot
diff --git a/reference-architectures/azure-kubernetes.svg b/reference-architectures/azure-kubernetes/azure-kubernetes.svg
similarity index 100%
rename from reference-architectures/azure-kubernetes.svg
rename to reference-architectures/azure-kubernetes/azure-kubernetes.svg
diff --git a/reference-architectures/azure-kubernetes/logo.png b/reference-architectures/azure-kubernetes/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..94c65032793cdfbc1f79e279cf5740ad5f01bc2f
GIT binary patch
literal 28358
zcmcF~g;!MH_x2q?LK;N6I|LNz?hpiI5ReiC21zMFVn9KVl1^z<T1q+wX$C22h7fS*
z?i}9B=evG?!pmB$nYs7WJ!kJ{KRa%?-cxnryL5K}03g=XP<aLbSm0MI03R3pIPw|0
z06z%cXqb2afHcYNKje39ZZH6_0GcX_P@jygOgv8`)sr5)Im0oIzZ*Z$h|L#o&6{>M
zX86VKvF230{nh<r^95Oa8gpSK>q|vFef`QmUGu8nBJbe9MGzqt2|-8qweZt!(#|;-
zQ)07D?N(Y&uQNP`rkDAe)5Le@FPl6FS-~~@fB$1K)^o$p4cBfz3kccIdclK85QY=1
zi!GDZGLzm;ZZYD~Z549BjZb-qPg!NR_$}mMouj*Yk?8iO;>V}XiZskBg;N$yi{)yC
zJZw>?tdfLZP!_k_2y75W*RewXiBIkA(ovCxaA92hByX=567ua#EM9TZ-yGNj3u?xB
z`P;S-@Olmx&F)UxVz~e(hcreA)sGEcQ!q@e|HZwG5TS_8^lRL<y*;KJhIDTpE9-=E
z5`{km8nI2QTd(~Z!0UjX9_IaScVK~x-T!{S+)t3zxhRpoTcMvqbKA3xEfL|eHyM~l
z$+A<`;sjn{Y4l9HFjYGDB_wInMm@m;FXa(Z!RW;?=s)bIEU5nft`I~nyc&SyG?#6o
zZx=NZ5&@ZD07Ui4z#qW<9RE+UcnbffEabpnWI8;|b|Vl4`P*A<ccTza`*(Ai{;ywn
zswf^yclpm2fAB6#x(&Br^$Os*s{Vg{s}BAUpiQIb1Ci9z7E-svIk|tY<B;vt3<-Z5
za)3&(3cx(Jx*~4x><Nk3B|ujbP#zL26B1B5B0F!^14X5Pyz*`5+cnN|tA8a=mWUP}
z`6xUeBfKwXb(Qi+SrD6xGX%}_+V9EjhSz=SB4w#m@l!hQ2#GkoJz}&pgYc}y$D6RJ
zd26sio16e#BKOL!{ftHFUHh871wToU@lzURRUU*<4BKE_(=_}J*evL#kX1r^R*8mL
zlg83{js<leX~cP|G^^AYiS3MFx*dpK>hnzIaA(7<D4|D{ZwL{Zc_*Pad8d5I66(8*
zU=uPLsIh7E%y`G!vqzVqqHQA(zWIp+Y>#eC_le`}EXCp%8%F%-p^ml7C8B#2-Pxm`
zsp1Bl5H8?7eeQP!x?Z)d&g`^|CR#MR%7qf0C!65ek=0mU3b@4$+QIUsAi*>`Bj`AP
zBCGJv^=x3Tzs%-cyZC6?c!UC@a8N8%f0ske*xwS>g98el@tWjvg^f~n*GWU{1(Ivd
zfYotj!HJn3?5D^ned?)n-qd$eGeJ!M)#_PZxqVevQEd!4xEDD&7dr;~;n-?KOW}JD
z-+)5_V?>$n{2x`44*0h7@>vPPtF~W(3erYp-O$5{x7)TCW_cvdq+`8AgX#gnCTP4A
z{xC?da<0|t1C0<X)Eu{I;4FCi6+YPIp80o7^6inf{%K_WFqJIY7-#T#s^g>*oaQgL
zfSaV1buxA+-cs_vcqe$#_A&tgEM9goJ~7isUDGX0g-(chi{$zf=K7Oc`QOc5;%q;o
z;(%?;x5@<5iGJCdg`tL36zZ{uhBfrZnPtD<WDCJS5oc3=KL0CZA086!MXcBUg@Cf0
zf(x@WpxkR0a_}X=W0g@@nC$dpM9oD6zH%6-o)6WGJUJ6xotoKJObMuBHrEtiS?zZu
ze6u8>q0#_8#;B_+f*>H|=|HG-PR+!($b8({5=yd}n`dhB_!mT(LX=>SO2IHU?~^c`
zIS-UmJ$eCed8KntW+J50Tns|4a|w^ETfWXkf`ye*4!7a91*17);R*NQc|p)>>?Lg5
za#Lj32XFRR`HHeNepuyur7MW^SP*pi*^eOJo6;G*Qg^xd(F+D)irC>u2bM(kKc)UK
za0l;A??)2zEes~zxWFIhvI))LYI@h0D)D6JL{n0>AmfEypPtBSWPC5-v!Blm={g<%
z<J>Jr<yVLich>uc8{(#Dyc2i7RSW>$+%dQ7A*O3mx{kC|JU0y4Cq9XOUsMyh?OV>v
z{Jm+?mRpd0?wnj_$GU(4*qzt)T;bJgWirA7g4UFlodtO2r3t74l;xYlBK+IWG?dO;
zLiPhMCVq(Bmq&K2!YyOwb>ynkOO0O!Fb7Zt;QGaV&VPG~o&#m4T6q8Soo`Lu#OU41
zLL9Z@O^c5^eq0!*9Y!v}gEx%V-sgwM<H2hxg*1vZmW+em+^v5Mg+VnT7%OKY8hf3$
z_;(b4IVN^%cC_p|!e;3{>12Z8X<B%;B2QqVFy=|`JlZTi>8zyk6cpeI4X%`Fqh>`)
zBxT4!Smyepp3Y#VAG?jX*K>SQIX?*FMc8ciK9+M;p1o^r;RiPbi|<EW`I}(RY#}C(
z?zMvUv;M3ykz|R2k)d2Zsj&dxzlXSI&*KNmkB=B3K#)P<Gm%Z?#QuSdY$VG_rKSk+
zRcN?wi>b$at`3}O9BH!3xu@TF@ax3SDRJ)^BO2_Ymlt|$Z1nRflCIsyHD2~Gh67*t
zVTVY*_i2W#Y(Q<+m2SwsoGs;r6JoM^tIs2q9RTo|`4;;dKX_>r8s}^tjw^g+Sv0w{
zY5iRXgJzzNeX>BpOaq6AQ@k|>rxwm?#R1?Y107-ng5C&vqgb_kbJylUeb(aNX^X3^
z%fn*X=ck+6|7HSriOCG-*AGNN<#~*swC!YCIdjvsz!@8gU@)v*$&9;foATg3#F4@k
zVB6#EGnty5Vggt1T6j6nQ?pb?)@nS&fv;?w67if#3K*gfgddaGUp<#4{B_Y#ILQ>S
z_$~`ncVortjp{OJG_R}vSIR%_j|rZV5*;`NrlL!Tw0IWmuQSGYuawO|2>d|0EIw^i
z*vh~4%sk$%O17MrXLm6Zn+!2>;;s?1ev^{%Y3(cnAGtt$G!6pT8bq{@OWaBn^TFm&
zMAJCeItS*5eugJA9@~5Ta0J>MN}&iSROkm=IPn_{C5bG2r*AkDeLqCSbJJTbYmgsq
zt~6J(nTDM=WySqcA%9Z6i?#8%$_4%VlDvC?C5rTq(ZeXqd_NvgRuR2+eXs3Fc%Zr=
zx~$XTuQcxscYKnWu6_m+nO*<AOn{b`*uoi;_f|q@>$w?S&wtrbJHrN1;;*j(sLd(@
za3I$|&dYY@v1+sV%|^_hIRPqunVBZ4PTQk<N{Vw)xNH6&=^ZSCoYbtBNZLEgqv7&V
zH{$n_KvBdC?}}lA3e=VB(SHk}j;E22R4I=d&9{-n5E5WbFG1VS7%o@Kir=r8I>-bf
z8|;=GhvpL;jYNT<*qlT{%IZ@7vCzK1dPyguTjuX-!k80sVv|yy@&t~)_b?ilC?AVX
z<CER|jd;B}hC;w<n9#%kkd@F};6HHwOn^&lGgMB$3-$D~P<)Q!`SwLh-L*%mL&j?C
zk0tNE)qd%*y1VqqNlK*d&ub92tZt1>duPf?l7rV>J%N$MzdZRnnJpq_vYKSM;fRzP
z&)PsP?;SMF!9wM0ke#&#VuNsrDhHL?uIilSQmZC@>GE!bt~4;#B#RbL$Z@|Zy{;MY
z>L*CGU)!a9?RN<QtUhu*%51!wvm|Y!l#**V?pIe{rV%@0h;?;mb9FR=L$Ipl8VIV$
zrAQq!&-c1xq^ae3X`RCc?1Bv&)Z>K}K!7@6B*`#Hcr<ZRiw(4=;IBFGPsA&Pm9~5c
z&z41vx`>>xTCsBdm>|eI87h(t*IMQWf*_t$LD&(*PZb7)TYrCP`B$Pjr6+o>UFz{S
zBb|I4AOwJPqG<1mAHy4)IE9k9`YO@+$9!WtUD_0C@l;szo?4#fJlQY(njnCpddw?y
z3D(!Mw<>=K^h8(Yw-;d?vvUuWWwxu#&Tvtt!~p&yNq2FjbMccT6ZVXtLQ$N&B`4D8
z9u^9_)H6aW|H@;Jjk>~#VE`EB85?_u(kk6oD^0983)F!2u1xyY2a?8D<Yxd#!tHDW
z=5I|B!zW_cz=uy8R!nEVU(3oJKc%<>ve(7=IVCoO3A!;Wqhm6!2cVh~D~l1@tjQyv
z0#rl3wJ^}YXhQX_57Ue(<(7xMV;L&Lwzuy9IK*6y#zrqKq#+J(eN(Nhe|nPu^64t!
zHsLSZ^39uipP^890em`Hchb9Pp}Y!dNa78MIYs-8`pTk&cMW<JM43U-w^ftiwJ)VG
ztJ?m_`<wHo1~h!%=@K@^-gp0|wj~n?Vo?Nb3%?+C_3SZA{!N^4F5bc#mxjew42yo~
zeo7hr?)N7I;a#K^ElFToulQHi$#Ze7@3_Cbmio#L@lL21PPpmoxIT|pp%pcW-*;sc
zUeY;Fp093+2Alutygs>i-|{Q0-sq>}N6KLq<0~T4(-lJsuf~W4a=!b<;{T!(tj*iO
zLp^3Y>E9)wa(qC0^B|;4_s5Y8$ZxwdfcuCr9LD6ewZ+RevNU(~$DfiQ#SHgARd?If
zT&{b5sm+xMh>FPd>Wz#m<NbY$>UaC#1n079ZfjI@P3_bi9BXlQWdvAwI^AOq1>cwc
zdQ?9FGk6Lt^Dp9zLC`}!^~`0OiMa-*WPG?d6&!DPrEVa=hi50^2#e#DMuRT|+zMg3
zv;=HXF-K0MiOMvFJgz0gMFFqo_0q!p0s)1NwYbZesw#=<yO9yw9MY#pzVZc{+(F?q
z1a#WkCr;Orqo(nNaY^141)28-kUdlcKS5&RIyUP~uN8TKM|V|PEc;-&|1S<S*gM}@
zJgzXhX~Mbu92bx1oiZX<H6(oVXclCD_GBB>^^9G|!7gT_g)p%-9KHEqoSsiqe${qy
z>Ul~6@DBys2?H5@&LIavM{BV0I`G`-?kvA5<*E2S|FCCCJuMPvFN=d_(Xo8uN|ZqQ
zmKdc-6<6D%awcz@(lo924>js&FQ?|^0EOZGTDPckIuA6Cp2gah*GEl|#4`Oj_M)&$
zB(Is?uHucSlJ7b>fdK764pa^n;R9@-bLUr!D*@58zS1I{Jm(>Bgvoc~nP~bPKMh6A
ztARtV55@>vo(?@Z{_R!XmwqlDJn({vLon}x+NY*l_-U+xIYp82Vi3gD7frNr1p#zE
z>{AQyl-C8A#(;Yn5%$SZc>k;SW@H_!)%z~eNlD^b;<~z3QfD~Wl-9jnobLGx)sP5f
ze{-Y6OaK}7u1*ZjM$qvXVFR^E@Cx2;abmj#KT{$ApN+3%?&qIJUV($|F^_#1W0lR`
z9}vu!@&D~s6|K$lPsa|O>DlGYnd5^1_w{Q|yHObjU5#7Fdq{#DwuRxD3o`0G2dA=#
zF&rvGrh@sfmbCkJh@$S35dcuR*Ih3BqqK0%$v?B0+t(%on2r)|9slCp1xv^|*)6aR
z59n~xtD;Pqo_`A{#O7SFS4Tt)jht4B39sYmjigMm-Is6cI6ZzqKmjT=C~s9RQ3-x9
zv4b3>4+O}u@TA7`oe-?WxMz-wmc;XRQ-{tF+`6)6J*FIFg@s{jN<5akL5o7;RDuuP
zQugB&&;ZCD{Q3gT)|ifKAFksRy334qQf$lmV=Owo)<8>2wSW@6po006gzpm`c@#;%
z6IK7UC8CEa#|HjNA<6ubc%EDKeZGmTR~qWfjxNiND2VzI9e(r9ei-w_Ow}vavmh|A
za`3v|Z!jw<D=wV=w;Wz}ux1btG?N?d5zWVC>tx>ljHHCJ&Bv8AyM@v1_$vLz%e<or
zO?jk(OfPX-`4aH`jJA6L4`5M9-Mu=MUt$AwxjS2|ii>N0e=E(9xaCR3S?k~txOrtR
zg3!sD`&8z{^3+n;SbziJ4Lx0ILZT=K=+GMJGZN@rYvo_jE=+cG8V_ZOgHRIAUq6P(
zj?ld&Ge+gBgUBb7gC8nk%O9Wqn*jiZkcj7@RCWMGACVL!>h#e2f&UNnp@#AB%YRuS
zB<$M$ujkgdPgOW$YF+l|psJtxR--rv_tEAc?vPLk(L&WYIs8_bHOVxjAcr5ean{`H
z2bg46WtNm~;G-UV4jGNyxR0gclVnU+F0k}4&8xfE0NI;(O-%$HG$T8fWdy{`RLY!P
z2U*O=0MPQv`nS4u-haIB-QGDgK^*wZj;#A;`k&}SOhW@~r9b0I;~hXn;BsMHz}-6|
zC`HB#3#!xXt!BgXPzS`f%=Lxx6_&zA-*O_}Xm8<*tB3Gp?jg{&5zHrl8fT~Ndxo+U
z$^eFT{%k(}DI`8lU@xn_Gi{Y7v-7i$el0FPrJoY<;(;#4rA)?o$@kqv%$J{qH)WW#
zi<>co$6m=3n+pREw2LgIi|3=S`(nO@(as&&GELd*q52kit#>>Uc*p6Oj*reE03_^S
z9hYkT6-RI3>>ZD%Z8@P5kj(qY6~^Sg=V^Bi_D?>#yI*28v;^cPM#sH<@&qk88u4$0
z`A6&}qT)?~vO<@6C-jNKxYT6ri0+SflDStadJ=y(?t*Uq+Y^kqvAnr~M<UB&D&=si
zURH()51!3^q+zt^nV065kDRt~9}LaIkE-t~h>dn9?~j9018cZEmnmH5dF7brAI3xk
z4ige?O2n7F&S9pU;7+`a;x}}xA1}ZDt#rQd8%uIXDBm*jx3eYBF4TxfPTTHkuyt|L
zPcEgCf||mhFpZ{rqQ~`7tsoH8k;<4r$8M!08j$N>OB>9ATWr~5bg#DsC6r*2cE>&K
zPKTxDBSIT1yWFh_xA55#&C4m<4OcJg%#DYC9d6)=+$GjvlAv>yr$CV7+M7+jR}t#h
z?S%9u@9@63V_~G+r(;j<xaT@|AR^iIcv5Ql6OF_jZlE4?262gvArYD!T%TFRdT&8=
z(`->igc}G_O{^06?s@i@;&~!vTc-fx#HG9k)<4SaTH&&`xrpySWfxv*$v>O1{=kcp
z(Tm#|wI@>f!{Yk#Iy54!d!m$q1W*XE%8OLQ`)fsE2enQjJ*`JD*Xvn`xi)z%&jTiD
zCOksr)q#k<ZiAYvC;Q<d=DbBdv$KuMbu$)%KpR&g;`P&MuBYr)Jsq8GcCr))Q@YQQ
zCwC@@eLKD>B-`Cba!YBMG?;uY&Mmki+*Gq96k>S@=X4|B8x*U@3w9Qw23}Hnd~+&c
zAN>HGEI(8+IC(NYn=NJ45}-Wqd9J~Yzk#{VqX%Pq0UbhGo=vvY-1-~Iv)xE$*!1oE
z_vh@cer5cLHlC<#B(eWWxrYin_$O%)=|t}`^mRL)arDIBbK)KzQD7C3C_ntJ8|^DY
z$>y=5%0U1K1_6;+3J_Nv`xPPHd$#(ok8sJfl-{{qwM<h|?1Tux!<GoUlXs`4ua!YD
zqYnb?0ZEB4t&u{e3w@RA_TmD{ic9Q<+zYg&;b3O1$qwe_4`RH(PyT@6Q4St3f=A;S
z#Z=W|1_TkO`Ygo8_i^igXL=f>btdg)&9igmNM(pDoN(xEE8+{L*C5l!u8#8ma%GNs
zatD}do3%%gb8PT%=Ooj)W^V5Wy%%Hc@o)YUw7;6)dtH6Pt@tr~B$Od&x;Eu5Aglu#
zZyLuorLMW!luaBY%fpBH8yJSYgS?l?7oyMaewBGMY<)xYBFa+X0|}LRw4usB?K#wm
zI|ShB8<d@k{SY?@GdK0bf`%dbsS~Hfk)i0SbCm62kDcG^v%2+%qo9RP5RQHDwCj`r
z*b8&ocV$O@jM(lDE3W_S@V>;ZN`(B=Nh`eXHRYtA*C1EIR%a!LcA=|UfV5hxz9$Y2
z%L_eB6fL^FVf&ku=HO9sSaXv6Xf1i|1D)o(8YjD?j={XI^1rKE-adIq6;=>wWeb#A
ze{O$<y7x{kafNe(&D%=BK&Q@Wx-vZBkF-fLj!X201PMS8{;xA3yTr(x+LR5p?UX(N
zRQDv6r1ih5(2Rm_ajz{pd~}t`gR-53sDPIgToW|<g45ysPD10NQV$XbP}E2)ROlqt
zYgzB6*%laM3&gYQZs2Dd^tXh<90o=a@}Q*u_V!NZO#5(opr-NF8&tnnG)ezI^V;Yi
zj_y;#?KAM)!KhA-zG9n!t1p$ikF`Ei0de2MB>G~ld0D}r+{B4{rV`Q)1cfZ;;LUWi
zj5?k8DZy2kNbU#K6QZJcwO1`tc1*6facN30AVrH8Bvji1owPUN8LDx1GEch370{5C
ze&wlqRoLP49=u&w(*gy82vXOqdm%Kgenme<TJ>5TP{WOU+yOOeA1_lVk*>AZSs9AQ
z62kjs-Dl4KJpqLBp)!JR{wFwe{LLf6e^RK>3B%V-KWz?wxuSPrm$H%{`SL}VO7maf
z1=+WqjfN&_389{Nh5z<{m+Q<<4@eH3__^Qh_M^Xeo(&EHE?`W^gI(+60?e;SFwTU9
z*}JVx>H&!GR;b-R-oiCIaB)t4Mc_jT?-#M+{pI>^Ffd-_j7<-uy#(jGLzNlrUy>MT
z^S@SdU7wyQQs&%!F%;)#cfZ#fkEnDs-h`*l>z+F)YPX-32GJgc&B8Tp!3VHtE34&A
zHGjjE5=iKo7W)B-&v!-$!Cvl*5UFm4Y=6T7wA(uU*|j+N_l>}5Kc0L%(842f6#lAU
zHv_kf+r-s4H@g+H)S!slR<}m{UN8A;U#6DEgHPeo_~;l4u6Z`7e*qOg+VnF+%WSI^
z@h6-6y-uj|F<LNwtcL^WGy$J*pryijP;10h77pWhXz~i9mUXxXe)NLzgz}=QQWtkf
zxJ0hCbHK?`r;w4Uc&TFCZ>;kV+mky)m1ht;HozLxg#T75C8A~PK)56|*Y%zQ#HQSR
zl8^&G0`$<@`I?k|Jhjhw<n_PZi5KFf@8ht}leb?j5(%`Hr{M<~zxr?I3R(HN6166G
zPpg>HW5QqIQ<ixX42a07e_SEvHF`JmmH33%@y)-0lGScb_wPH--6qtk|4GFA^gl4A
zB2R{zrkdgA3)NS>^^@v@7q1hX^XWKfmr)G_bQ|=KJk*}tYR>RI<0~6kxugT{V<NAl
zt%9ACc*I)-D^$kxxzScDcFvBRH}OCW2h@Mp)}DzZC;<yEhd}}i<k0nz`++nDRWSp%
za5%o3<6xh)uO7c0eqQ%o`S3fA5kO2~21yJC<1Pv{JlGD!-w|$qG;e%i&AN{&pK5a^
zQqy@TFi>zn#1vw2>M1!OSioBX!e{%5(xHjcdqggTNMKXw=FDaL;8DSTHpfN|5gAZH
z336_^-de@r$J)dAg_wg${eA<Y1edQzg{_Yw*z9p|fWn}IRcCq;jSlo*qZH%YlL@vk
zF}s#4?tE^zom(uQhxG!24Lp7fFL74JeVy@DUUah2ia6ryX{Kop{NRs`sKyo3TrcnM
zmo#L60>4y`1B&%HWzLt&rs><aiRhBeKY|G8&IG&uO^YEq$04yyON>}~bG=x2WbijF
zn$j8EPd&;g(i-PZ7M%o-0xA>niXZ)w^3<a67~Tc7)U#AQH`#TuSIiW+sr6mI&;K#c
zfHI#W<@=9GC6%Yvxee@<FK=cw*VZVg9#GNV)cBSwlrp`S!+U5t0f!1%9hITWXHgC6
zsDhW?d`Ip6hsWk{`8T;<*qe=8r&n0Jr*e{&Zo++^Ew>!~9OPd%*X16bf4!B(;(SGO
z42$3@<fjSLdak#TFGYyw_0)CXtIat>PMxUiZ%-V|d&b5sqhKg-MQzX7$v%-wu5XG?
z5SNwYrE}5-Fhd1cp+qdu3>~wN;eB=|Z19r*##K_~N2w9ArKhKgW$QhBIv_1^l=*?$
ziT;HV+WVT?*k6||MsJ_YszIG1MK8GgcgAS#t%MfdMT?t?TgT4aD@b?VW4E&Qoc`H$
zsiAGAW4!b@v)M%Sw}5Rm$R~d|zXEYJu}LRB6?<2N*MMMoPE!}dZJm(uaUi<p^1Db(
zUE^~=K~xW3fPMF2I+)U%WBGV6<aud}WF97=MXx68Tz%@cOQ{n|^qvu`|IwGLeAmqX
z2E+l%qn|qTvbfg!`B7z}{6ceQVD{H5XeSU8x<bpWTj=vecq9@G1mT0(%*xqie9%ag
z8_oEBo~;hZ6{v9bG>@C`sOz8eyU4hj^yDqFm+%B>emDV?AV02VKS^x@8?a~Da2aep
zAj~UeP2|R3euWI>9{J~`wZzuG6owMS>la9zbEda2`uB;v-zhsO6wCnPQ|?kGuW2;G
z5h<==A>nufrRrDzP;>yG!vdn+=G`I5MS4$A%Z6Hr2EKe<rf4v-d!ONoI-5z3^r*YD
zI2p(Y({IjaSHHDPqsr}PJj#wV>+2rafDD`Zjv9}pt>p+U(SSi^o0|RnW5&C-jwsxz
zS_X;2(7r&$d)Ju`VMqSgb7EA6X)pgZs9NfhJO<kEz`Uk;!#ghjG!n^Y`%G4O^0|2>
zgXu$qvY9q$Mutx-0!$!~%l~u^aqcsbcR3r!ygS;?pk6DEb#imaCkbtQq4y4tD=R5t
zFpJp<2vWbzeU=ZWv+duIabYMzhMQl{2*ll_n6Ma4iFJSHtX9CxSbdcFWW)WLGf^H)
zR@mQUTyP!YgZU)<=K=a8l|`%l5!p+dta!j<2-VXu@A(NTlVug#r@=4Eu|UiB8K3rs
zahvcTXOmNiJ1)&`!dBVewua+XQw=gC^F)JejiRc!@(^^%k&PW_!yaR-cSeufFXlVB
zW^aPd#yq(@z*Hi=tD0dx@!easFcV^!nOELgoKr%iEfYLwKMQ6@|5pppd$?~5ZY#UV
z;C&UmoVJsRhNtSh-maD`>L{^6+<*CpU$1no#qGv+8a)lTLpGu=g{82h`Fx2yzwG0+
zxFqqvT0yCR{>u9tR8#;yW%Y-me+MKrEdf79U*|f_%LVp?klh?G7feijov1Gs3U$XV
z<f(#xzmB75UrHDVNV$UOl0F35)S-drHfwsg+EUZ=jV!}gmCbPK&N^f93Ax^*&yHWc
zIWvkGpr>%MY%;D0Mu~-A_lO`^EHA-00|m074jFV=W*<5|FSe?W9m2D){~xE8r~bH+
zf+*-l@PR4PcylJNNp+D94<**-F=P}rpg=j|)!wX|;P|m<%35Q(v~~_Y`P#i36AGq?
z&f(h=BCNWZ6>?|Y2t9aVBNH8}XDcmm%zJ&~>0IM`FAMkR7HS}fv``InzKbZs>Fi<&
z@go<MjjtZOx~o1e7QCUq3@h0(s%9d1_q&JR_VR-QW@90@>e|pfzed*Z9k(xTNbYCf
z_i<JB%xFSS13_7gvA<5CkIp8J;b#H>pUj~x+NF@qZfuLF@VB*GV&_>BRX{&4VlHRt
zUFV6Iq$U{SAfWu>FjKdHsL<2>O&Ggxnd?hWmZBlX;A<?74sTp6kKrlM^je38_W(ga
zZq>J>_Q<ZGQBG*_sF99$!1R@U@ZB})Wj}J9)U%&IS{yM`PPZ0#BHGW~edg;iYVdQp
zbVfZ<WOk_^5e<J0VTE2LL)ixi{)4Kt5i4acFNH`thp$f9C%UTGg4#|sE^8%UHoV*V
zBau<Kh)f(vQo^(OH=p*CCZfwm+vPbVJsvqB9sxm<g?20}_cV1uYKr?!&r49P<K)dL
zo;#YHJw?*(!LYAOrHplF6(4)RxevwTv5bfaCT#!wfZ)xqzgfW0<P6*p0EF~e<qWh!
zBGN$LfhbXaA+ZITgcU~oAd!02S;XZ`2sy_^%J?ED+iKGLw|6X<F5~E>5<}AJJt!Ub
zakvbfWX$!)vcm(&YFn|mHVa-Y(NK6nkJW<t#T}B9uUGn)5yqV5#?Y#9q5K6q{cxG{
zrkaCOZ0cff<CNT9Hme}?j(X~vQYy_R`tt5iy@%~5ju5~{Q;WC}a_2xI{E?vpriIdC
z<|=MhWQH1f2r4mq+DCV5yY~VvrN3NLEcu4gUU0-*y!<%3dw$2gj%oaArrg9Xwjww5
z1k4m$U8!%XO*QWEJ0VDbAR~?^_&U5Xwp6yC^uMO32kNSfyBX!?$NK#gN>s1ok7ayB
z$l+|sf>$dP>uP(y_Y|D)q1MrjV61EA!*|M8<@w3|AX^X^y&QBd{Iy`%Zl*h*$((y=
zBD32|dv7sPpABEZ_!H;g!(s({wgeS&K9YUTK5awyS$W4BE?HB7k$Ds>LgQ;eUJsD{
zYC)JjF}1$q1hfRr{NXQL1|ekGu{=uW>X<EFL|+1iT)Xsehw)Ig@%Ljb9+*Pinv0K@
z`d*0c&lWJFTb^T`qj={T#hUhhHyNeTWmO6^>hSmQqeVBzwKH0dh=09v8lbbs6R0}$
z3%>wcuUI-33s4H$VX%k3KjPA7<rm7-i`(sBa^b8z)6bHHi6O>DR}H>>*5_8=%1v0|
zVWwzg!hQ_Tzs*AU9G7(2ti>N3$E^!?pLt-ma(#N&OIY}xuNC9Ps*DfAdTvxxeX{jj
z>?sPeDOkCgf`*q<a*L-4>Qh1(MI&>IUVSN9Xqvv5pT8FQJMogm=+l5d3l2$JSZy6S
z@Rte<R$1Mt5*|a49Sb?g4TJ^ob3%U}pwq^u?1ZunYbNg`>DyKmCk{43T&tpLz$64P
z6gv<Vqdl-P8DF8KDxQ7fTv0x>?W~F78jCVgG<2R4pJ&3qnK*fl1vH0*r|NU&DNS#r
zxKHg>uOPnf4_f@{e8of`;piVQ&yqVRMOnQ?@2We$sewX)uC2dV5RX`?whN0@M|pZ6
z()Hwe+R*lW-OyFs?hwO0kdn17o@}+qIrvFK0E_&1zu$cE4Y|lWIahqEj+o7M)Vn)f
zz7<c$M!avVTfI8Ar{6`{tLp+v#L;z?IeIRvRz>G9>!L%^n-$o7PgZ?y(<^D2?rhgl
z7$ZQ2%mVDH6Akk-ggGM5jkMBU!7nny(2-KU<W}w~FX~_59O~EB-2=#yZ4{h2&N?`H
zamrQ@g3z=SZ`}OE;bvt`s8wD{K>l`aA;cO?NVYFszOXlMOgqxPO2dg`nYfz#n0~fW
zH1c<vBVsLrOy6eC-p`v$zOLmP03dR$gWS+c=fV^!sr3s5*FJOe=}VUzv)H>6k1|!r
zxzteNGZrn%+r3v^C&^gA)%Vq?4u68zlYGsO-z=(%P74=`-hAg*0t;8-cyhmE&4|rp
zWoZ%tSS(V7Hq6Uf-G4Ic{A?34orKDqe4@j4pUXVWYoGHt;eh^26CYzzbLO*DeTXsz
z!x);i664KSqX#quSP$X0e;qN7%97Tg9=MqM$5C!RdY_&QL!%bO-${+@t3p8RK6#4;
zIJI@AbSKeJp)^U|D8j7=5XF^)E9#U+FP9#;PSVH+hh!RG;Se&4Ci$DWJ^1E(EPg%o
zMYn318Z{5b-^O_WA<<o&J?4xo%D+bOUmel0(^t=8CQoGuM2br|DdoS2WB9bQ&-~Df
z7E*K-IdOgPn7AJcyS5(u5I`^oZbD;Z|AJgr#SF|?fgzdrAveJr#S{r&nrGjwRSRFp
z8>t@m)*Y5L8!cZ(a?Wh}Gx1GKxS!Ng@U@PbOOBvP0X<0OJDFVnush#s=Ne+&-1AV-
zY(5r2j*+!DQ|TdbH1hra=%~-dTP%s$#t6Y|kR^AQvp_v39;Cl+4#vQ&-XcMkPzKA=
zbziX|Gs?*;k>C91N@jE$)iDj`oaeF%zAeVHv|p#Eb@4j~f`ln4dpH8)O!eQml2dDN
z89C$I4g{JPZW8QHH1po8W`1VnU-->6KlL`Caa*3&PO>ay{LKAN_%jZK1IAEd!VCH=
zHN|o8R{0dpGf!Fx_e*cv<%zJrOk%Vxpv%|`d|}$u%71KYzKpF;U*1jb=TLv9&Ox-c
zNiLthJGQx1$^|B4C~Tqa){oSS9)$0sJUiI<vi=x3^!-Ekg@l`2@I5pkul%kp_H7IO
zJt8pc%6lc{T6_a>EpZOpFF4LFyCIo>ev_$@j1w2!wOe`S2n$crdk1yEY<}3clral*
z`x|W}01pyc&6}sVAq~eWX3*C`ecd-r=r&(v*Qq&u_4SW<Y1SePEY-3ddK>wJ!o4gV
z571qEbX*q_Zsy0#$oxv?Ra!VEuJF8^u)E2x5d+4%D7JRnI^z0>lj}zV9;H7H;RB1R
znqemV2PV(?_|pYB`<@T`+qgdn@4pRi)z(o5ea}bMJHgGM%{ESD#m&f+f9iN3La_1g
zzSK>sba}_1m+CWqApR1j{Zk0WH&R(zIRWKIciX9&t2UQC5w51}!Ckr_4Kmkb6)It-
z*xk9LGo1Ump|RF;*!1Gik~#~sVK}#WK*FgQe8BX4NDi&6p|{QlSEoUQ>S4I7{L{=C
zmxA;x3VYz2zfAW7Zp-a9)V<wank+?qi&59*X_}uDeFV?eWxoExQP|nZn6;xC1xsMb
zy;n0}S+p_OfQpijZDaYuxx0Ig4VDyQ(+!Hha~9UzO+tda_%-y|=Q&cl>YdgV%X(Ck
zrVmxS5#E#cM&9b1Ruj_bQBA#^aF1=<E2E6;FB)Wei_S^QOU^f+J`q@!g5{tR^hS5u
z6pz~C9wy5tdR<V5PJ;EBx<h`11X32K%Ae3o>SpRX1wZNb|KKi~77#1C-?bKM@0976
zVhw3uCF5h7M27(q%0skahDAj+`);M$Tw^{VgG!&@fO5QcsYQCK$}5(lIgy5XAZb8(
z(Rj%I$+1vu&i8vzs*MqziUyA^8CT(80njD|pGy+o%ID$GzWUbZsQ<v>dTpKQXZp>I
z-Z-I!MT}l+uSpM&q)ZRIijK;ga+S;aKr!SXdg7F;Sm`|3rpRWA4b=ltp_`7<+fSnO
zw$lM~GLD9US=;0kTx0&Yx~DyrMKS1ZOVRAAz#sD7?TU?Hn(P8h5~rP<;ylwFlh%LG
z<<ZGh8$<Akt(ZSO#bcTNhE>4zNH(ppLuDZFx_2eT_j3O1u(M{-D2iI*O_tGG1U)K&
zgcmXCGO4T~JJf$*b70%n<n#ehqD-5R5BgflI=wW8E8CQnG+1zUD8ouLQY7eUA?1%8
zF52<k38^!hk?$!UORB4>Ck;y>2C6fbv0qmdme86jlC{avv$PfZDRRpJm9>hTANnjM
z78z}~@S@~b*Db)RG>^Qon1kbqq4N8f4>gsOjUw6G@#>%Oo@H#w(8$jsO|Zz>(^R+_
zB+j(N5>o3M2VpyLeq;_9dTD~8j_YR;$PM4Knn4;_uY!`$zo{yjhTWGO3H=OH*q_2y
z!(B(^2cdzKfd6g8E|AC}zoW2*bk1riAW*LHtc+vJ2eoFK@Rr3nhfQJUDA#gXQ}sze
zL*N7kEIpjDsztp0gs3u!5mWmN>``&eyk2&^Y2*GFF<IR5>ZD{P`+(r7jmsr5Wz4%q
z*A1h3%`qEIQ8VPp`RqHFw`6p#uioTYQHviivfR(mjwpuwW$yd&@(<(UvR93gq@=;=
zN!f~}ZJhdh<13z+(;fDFgg@_1H>RPKLsD(x2Zh00LvipF1rkQ@A)(l*VK))zavf`w
z{Ow}rMI4de#h!OaDQKW+Zn`?I`Nb%*plO(5NZj>dDxc-%#$5!X7!vX3Wf@sYNQCau
z_yZs-FHsWhQO3Ndl}FKX#@;%1RZ<grYvIT2?SxK+O|MXstKY5$ZJs4=dl+llolB93
z(e4xsa!4wfC0b|VL^wkJ@*=B$&OMn+4XIc`z!NB2=nu8JBo^pqgyqICw9~dN{QldA
zx|D(3iMrLTPc`&7o`Rv2g+caDEDm37r}`tEQYxoI!Yk*WyZFquahO!C%_mA7>wx86
z;mjN!W*0si8H#zVjclQ$Y?5pPDb)mQ_)k1N3&)VJ2;PCJ_aBJBqF{b0=<*l&jrKTR
zNx!{1#luVmDiCTKZMN`Wx?+ePzjh~s#Mu0ks0FpWs7A!e0X*$sT?hW1X^Eq~6S@h@
zS6iG5pOo0%Q^4Zml#2hSRpLVS#`BB*X4s5$xE45#FebO)lCEF&hyGBm)Y|&zw{W7j
z2V1{omUXcOG5N<ew8;xc8olzTX%B|zf9k!ZOA=x}yD&Q6`f7NvZ8?D)vU5(97n~MY
zEt}z@{=u8<D3)SB{nI&2K>d36An*q!v!SH6k2%?C;->6E<U+@c(+_@Jf~g)~$i@7a
z^W!KjM>Q9k@Y?edHPbR*rC(!jzgH;&&j>8}J9z8bwM-1h<$KX!<W&{P7BKA*rmvba
z2GDFe9_pT~rNwd+r*gZ}r3q!HS3HBu!t%{3?7j#H@+N)P4=lK7LZnyg%Spn&!MTo|
zHfWu96NX^k*j9N71u$xrTJ<15+G%1cBs0i=2Xm0jEl!ZKjiXIRo@yB8q2y6#?oPsZ
zzx2hHU*qZ(G2R5afnmb?bF-UGtG^r4LDFOTK7VLyZXql~zg|_o+V^b@F6weEp_#71
z9rpKO@jAhBK7+*X=mehsNFsa<%`}<BTK;HmJky(nPx~zF;`2N|^qa~j<RuB*I=R`|
z^F4#4N2b7Rg?Z@5567tEbQebRoJo7XY*|V^I2)8<Y5E;5`M(`WKipaolebsaDAXzg
z$f{hEhyq(@5bB&9MWKpO)W-67#}t?bxlM~-XPk<=WtFDdy&iZEVgtI%#t`ZG3a^V2
zM+xhC=U*8iJuED8PTNlW?3WrWG_Au4Wu+%sJ`@fbK$~GV!r}^rXTL@*J**-&^eSgN
z0xa}-FO4l3*WI7>?4I-Y^~|eA*i=_(r7PH-^9OsM^b`K`NH7Z9FoGN8VPkWZ$HQ9g
z*~4-=tE<e(^yAS_I>4<Ujxz}fr~iu&eZRjdGq<|cX*)xZvrm7#M{&8^f>Amr8yXCI
zn|S_ZVsZ>$^812WrcO4Zb*gs2EBV`I1bUS6d0+nJKn<pqjyG7J51%du<Hc>^^_N9l
zn@4Eubokcoo>$`5csqCaCXiB|yqo&Amh}F(=0JXk{5b4=#O_vk5$4a;`;aXO&u|72
z?*x*7;0qDa!0N37`1{$_T(iyHN=2|{tr0B-=<tve*<}NK6BK+G@wcw|hOk`E#brea
ze)fLpm{8hQN=55;-w34tuKepHv$}7cwT#3vj&+G^EiylMoi=xCAQbBEEcSGX3-nX9
zzxw26ULBcxL6xnwW$dnHjmbrOg5<a6<PHLT(+w8$GsNDsGEi9xJ$d_gwRN&k)-Va@
z#@`CA*BXo^8*(>Dt>aAe7te0-v9hrm&8|)rWlua$?#iI)g5PpgnjSm}=BGiqnk;G&
zC-`J@lDaRPFwzOt+baxLjBB>pW82(qVX7kWzzL#0?L$btN&O<o7gYjhv^&h#y!Y~o
zdehHkXYR)zY@cSfZlO0V)!9fhX6e8LXFnPfE+M{n>ej~L{avMdxn^{aiNVNWqqHrb
z-Ny4eq<u(DgaUC>Wy_GA&3&*8Y0qiFo^5pWmljihn()=r{efnkgClCjR=OO%i2m}u
ztxJIXYsnd-)zXvAuxVzKd}+2nXJuJ*6eye3OwCk$J0|t(Bos_ad7<A?h%2J3yoB!j
z)$a5`*=xtRkzF3<RhKv7Cb7l8%&xeGS}DmCp_)k-<6CfqH|YUxr@fM@Q9DJ!oxHh<
z9nEYB9r<dPjjxk`+bk}=4WE6sSuY3+xUN305fnSq|7ITpZ&Gp*oR?H2t=H7wCpq5}
z=l?fPDrF*PoQD?*8RjwGf%jROO^{ZZXnw94;EamlNIYfH{>g44a<lT<aXOU7_t=}e
zV@x(-h~prGsb%x}()fveb9BLF@#$!bCB}%@<im<A#HO#&dK$CcH8DgwZ5Tm-c9y+<
ztAGQ(<RA=kE<BP7<vcdl;#oEAKa8u;8VJ?gQT<b|)$S!2S+d{Pti`enZmQxz^4C;;
z#hAJa*y+#=VrxPFW{36y`&*vJ!O&8`QFa-IWX@ZDYb3?@pNmg`P6q{b!}D$Tm*pl0
z=B@L!jMz+OgoP#ab*-$eI^L%^ITlB~vOKAoe_3)VL|y8^@TZI{%3+3;@=IxXnRa?t
zNR~6A5nso@{ewfV=TJ}oY`Um|YMh|Qot)=TcE;|&pYWHgI%GR-B9Glz;+U=aOV4-(
z$IovTD673t7GzIbL6l`0>o0Qa+|-Df4fMg7zb8{X&nIDkYIvd@<H0h$(^aWmy%Y*g
z>E>#cAMNFs;c9n-@ZX-i;z7ldeD?H24$Y_Dbxd>=)+4N1ZgsHhD}%nYgxt$-C<}H<
z_i{WBukv?f51^8;bpGH_9^IF*bW>DdLIy6uIzq|Uy&j?=ug4xhdoyuCmp1$gcKF<>
z#yK*Gv-6<rptoSvSU!w{*HZnh%iTiUq|6__B`EpSSe~TQha+7nme*7Xg13;<7vgj}
zVXeK1?cOoLc(B3xq%>PSKJgdE-<!op4_=LpM?pcmm=9L-1@0Ydi;!2h41$KsW?`Ry
zWPlW!GpJO)`+Tk1>e8QLT#f-Sg7YdW2^NRPg{Rwe3sugch1j``U>~sc7_*0Fct$-0
zR`2LlX6lU~Pj|^BK0DM~qa+lR1pGyFuPoSuQ+>HG+BBB0JzDVOA3ni6tLUnYhJ2>9
ztW{<D)AM$jrS%1OP%wTzQn{3#Kx2(VGSMb>2X61A_94~5V}Sc8yTG&qOON^Pglo!;
zk4qNXHR(p_HnkDwdQak$^4tguEA4zo=Ns9cwl&EW*C{jaThNF`33uW>mXX|x{}t&J
zSY1wY{ro-un$!B5n7EHL6c$>AXCcF#3(?H4MCYfMX3G6x;j_;_ILQx7)Vc`OEIj^n
z@FhC1t__lE>@aR`EN(_dI=@Ua=Q4@w@G`bb3^7S;$yc`<w2!BgZ=+tc^_XvAUR?WJ
z?e^V<Bv%?^74cV<){n*P^A)>3X++l(XYP4%NV}CLRhLi@(q>ybZhJQyu~=QcH!7_5
zy!5+s(rU{GS4zk!{B_o!OfoygcRh2NDEi5*tx%DU=dkQ2jqTFIFWt<dm^R0;v_|Kj
zI^03>PFK>n_pS13zIEJ3p-mFWtv*<DxRHHCSRKuFpPAHdTuYOf=PB0$XYZw6OvV^H
ztV(~kZeq$LW)sErsj+&c|6()1;PY&BMW<?`BLijENi_XeIE8#iZ`uI)>yZ7AwG@~)
ztE5-o>pLB+|N6&^c)7AKJbDB0Wr_N>@!aIi58aPs&Y|zq8{DRs&|o~^eF&kvb}rqm
z62H%iVx}o0sh@fg&JsA&TSvq|i?4Fdr;Jzf(+zRYR^)nt7xpp2A1{jWYjI)xGlX=c
zZKQ#72*$AE{@6J-eE`-|hL^b}WQOR)P&VH-2n}NB_b-Za(Q}h=DhL&fk`Fg0A=kql
z!M$2Jb1HaJK~8Xi;I`}kwzh{S@RsPxz?INB*zk)F^o~l%?Mp2I@J2fP{2kX8_>PTI
zDiZ&OHac2>5S>kqc*)jt<U2N;O#5+dn{=x^#Wm>x)1U{t34O@D@w!a6#ZkozLviPQ
zdQpeu{V(|F4ty&9Qu@xq@QB_sMFIFdEB}(dn!?Jm)D1kd#cC6Jw9CWgg~R)g@gpd}
z41LJK>v<-&N)`S$^c81|jRW5r1&2GVl@<ct$XP8h`VA!c@HT*6UKT<<Ny5SBf$nF^
z*QTr3df`0?Q!C{H|E=>=B8Km`kjC)ipax^ObGOnGuA6GFp6U~;hY<ve$+pk;qwgL6
zu10Ecj=z|Bu01~*#}GNRa(wxHU+nv2j#kC+8eY8`$c#Yrwq9;>*<KeX#sZ$0Jx%R(
z9($kbF9_BTaNrlZr8YjOWa2xtNz=ccK5;t#x|h_bTHwpYcd-G34!uC(>!L`4+^b}^
z4RRS6J%(=TU@ORD)BJ?}@^rdrCjNiXG0ptCh-=k%?a|k00`F#lo2<hu8E4NdnOEAa
zGRvEsgT1x}&-(%g1ZGq*nN21qmd%EP{4?Yi$RLpTh+dnovat$BtVLa_d?&#!y3Co0
z#@tsr#{-L*J-gr1^dg^dd#>zXP}e?ceV7HNXd?75Qn^>`N?jaE@A3qW<PfDrf9Pb*
zUaht|30%TT_%O1^3miA7nE1eCAHH)~kE;&GTqMTTv;FJSwV(IK^<WCu*NP=ic@uty
zx!cZ1ls)1TFt4<*cr)~+3jIyDH#tR4(A44})#=>`dsWv*(!Tp;zQ|<ilUQ|GS+%U|
zL$1pMgJbszU3#>M{7#|=e3r-3xJq=)gYN90%zYQnLnm<I=5VVC7oy@77Qs2lnz-<k
zX7`84uHo+5KgP@H8DlJQ4Jo?&48X(DYEe%rgvi{tgPQEg-ogrZ^EjFHWJULd{tIMs
znO}c$%88Z~KrPQ^YLUop`qNjhRw5f2<*}0zxOtd1s)mTaicRFE4nf8FfwX;e;gqi3
z{q%6_5*IjAIiTxk#%}A}%XwS4wKqsX%emvf;?b~+)_sll(sCP+VFjPC-s#<beid4k
zlsg}wK8mGXeVg)Nu*nj0IC>|UIPig*eAiw9GG<fDCbjSJg5a6vP^&8tq|0$gD<A<}
zap{6$yQ3HqKJY#3@-MetpP}la*!>~_%N9*ct25#e-e1jzUE2VMX53y0Ayd1IIYXwI
zZDLs9wh_O981hHM7u!^mh9VWFF~{USSAUT{r1VsRD+BPCk`HQRG#GkX)mN>i3nhAd
zJUd{m^f|3bQ!PA2E}iSt`OxzjG9xIx9Fp3KJ9V13b5P1GF5!A)fX-kR>mBc6eTp0V
z?6g=9Hucwge&N3%+2@no(-{f0yI8rtU_9R;6x5=hG?Aj#0efx*RS3A%DJRJfgw_qW
zMHRYDPLY%g=^M~b2&w$QiA3Uq-|pw|V1HMWGnB-FRAbw$_Yb(S&Cpdo_ktAA#tpu}
z*G<GrrFyY@h{a_g`t3LL%yVF6Ed)b#&M)4(V7?zUTc^{Is0tC()x?DwL8xW<OwCda
z*6IEZowls3m0uG}6W^RBp#}9hItCjba9+^$XHc@>`W}>F1O6fV>O{PEHU<v6Nx8M}
zeR*cX%pulWxPNtNU=S5Z#jSwG`YAYc#|K*5TrY6<4P4tUV^pWs$qOOlh?G)~!u&v-
zlq6JhyT<a@eY~Voc*xf}pM%|2x30kmv{^yrak;oIOUb%@Cr;n*Q)}~9mV~MBZz3`x
z8;KJhl>4aFIwd6D<<5B~*hWd!06g#%R3J@rvq=6eaVht%{foRL)l#`W*KVRWVO<~3
z@Vvbtu)EqPP73VB8D9le*{RB1QILrcfJF{Xje(VYAqO*{8<K{QyYlWZG-<RBo~?71
zpFW6y@_OJ3>aJk@9BTmh?#BMUW1s5|c_GUpg7n2=a3A7-`ti*1(M8cgw$E8P<X+_D
z{r;9HQT!!(4KQe$<$nnP%$jsYuI!LR58WppcmmtT%Be-6oDoON*B(^MmgD3;TGGIS
zVkpj<Sx}XYf*0|dmD9}(g8fOGqZ(~3q)Ea=KbrjY?$vOrC9x#HWN{4v{M80XUs_ji
zQ<9I@+X_j`7ZZGNNUVT-J1&^7w$*og9HnSDh;S`*de>EL`z)Grc;)r<!9jry;WiGa
zQf8n^>671?N+a@V|I3_lci#whG?ekvqMz3GQ63B3B=9BDyI1+*x7a^m@5AuV06Z3o
z&NI+;q>T<DNmT#8T7auHkK@u0fVkkZzGwP2i&b9k3vY*z$<F<ZK~P?AAYMP{eu{ii
zKA_3{_u=%?Qkbn;37)N*iEfZGM!dI(EYL7N+u>{|H8oM%PNiV7BX)gLTNOz3JTPMh
zfGeg0ju)JMclL<A{QrJAisiOFYhgG_xJ&6qiQM>|a$n``Z&!qOpcdUt@w0LAVf`R(
z+sOV44#uD-3Hm`%k%^SU2H#6;+75S9VA>YT+Mf_y`PqE1r)EMas{iP6enOF>xP#)$
zfS%kObtV7^2i;xl>U<b-Py)_`WaiZF#HY$6SiTusd?#<UFQR?@;@k!93BU6ko#7V-
zKH+772JxVRiPFo+eq<hya`NYPPUbk;GN#z|Rf9D6;PpYhQGo;~dVPD2X|ah`Px9S}
zbIyDR)q?c_jIN~@4#4uY(5)9Y5n5tIjVyd59;gG#f#I{vAe(zRs;YttyH#dj%}6&0
z>QRK&kFIBT4r07pwm@wc>#!88(}_vO_L<N5_&pCOpL)&?zJ;AjLBP9UucR4mNf!OA
zV#CMbpKg_H6GXFUoLsM}nk}ab9RO|+xLE2Gb;z?H5Uw9@xjHQqM#^LNH-G+f{oE}Y
zWWChRW<b)W78MNEm=N8+i6OW%esQe&2$}KjG&Yk&p?K^cP9i5xZDBlNtXp5c6s_>J
ze{wS}&Ex5ek#hChm6iWH+TZ*q{iGJj<F;7Rod?vRo`Y4~EQ;rkDUq7j6cKzL&@;rG
z$G9{gDv50iYAYWf)&)lbBnkVC{^#HJ<I3s~%vp8{D3GA!8+<$b8U08rDihHch23@*
zQ#(!ozU`z3&m-viT9uoxy}KxnyuY0_`b<b&K^nWL0pQgSdcu@KTg;|lj-8SHKt!<K
zGE2-Q$$%B(Kzvh=ta_|82}BrJ2t&zZGbJW!UqApH2r^qZH*p?4QhF)0`tyc3?!lvk
z+b3NoN|b~o#Y2R)lbUhs_gK>`l8JnNw-Nlm(ysfT?eF`)A{C`n7fNZVRkWxSHHr?@
zZjGuMp%tU{-V#;XqO|so4y*Rw64YL`i`aW_5-Xn<eSiOgugAl0$;rLvoO{mmoO{l>
z|98&&C(ZPs)EJ{Q0rW3cu#H*#n`ibI)k1EygK=~4NBUzW9tVb;&^tmHfv`DeMXz`t
zP@MGIk_nYme+GaVP9F&mvcoYf!jbnk;>W~|3JvRhu~!2Cr-b6ngj&bl381Yw>jeO0
z*G+QA5oEhj-MoxQcbX%%dWdVa52$!<<8(7+0P;DyzslJE*V$W3lwa%&MBVmF_!3T7
zM+nP*(OUZ*bf#dY56Meq``v1X46tS7O5E1Hn4WHCAtJBTtUc3P;om<F^!6~`3L(>M
zCT}X$l!e$E?~^|;-Y?VHjGk+hpqm`)n~!2VUUP04_tP~Fe_4_IWYy}mdQ$li6hJS2
zZ9hA8?&!sn1i6{kTXhWC;dh3xU&7n$&6D7NoY9tc^#%EU!DN#9WgNMc+&JRk=J>FI
zS!vha-QS3v0q?Rd={vI7Bs<?ACeh$F(Tn8KIaoUY$fY~R6y7RNMg_=!P##<WekxWm
z``DWrqAk0!v6gnS(lK4L<}r4}FrgokR7v&_(E6ZnyU_^FYNtLr>|;ElB8u>w6OrY6
zbkE!8TZ0VPYggPy4dB3={69A2j=gXPc8TrOcobgjNwJx9t~+-UTZc>qBwu#e6xl%6
z*%TzA)*J-FnxOtFWJ7XD>vrIc$OQ&aM?)4#37{&)26_LgEN2C!6>tIxC(it~%wPo2
zfr57jZOFIVew%TVR4^sq+X&hba`&P8yh&Kgu3|(tWoczjTWMxVo7sp`3gR$L*=7f=
zEP-k9we}bVO`(b$_EEJCA4!<geE{%k%-J4;BzeBG5{3e{H1uOpg3l*YHwW)<86WSz
zW<=VLCf?L_yc!+;mc_^aKD1No6IogYI{X$+R!m4`=gfU<oaD~Z45+FZ@O=s7=Sa6}
zKb&ZCjrH>^>9>X<7lu!7^7?219A`eU$eXl(e{P0cXfgh0Es4cI`Rfp~kNbV-5M*8e
z&O1XEE)Ti>bpgbcg<A#F&yT8|cz<IvCJ-7r4VhnkXRRWiPX#eBM1LgHL+XOn8+z|P
zl^nj1>_lN-$;G5Qct<cs1d#$&TwuRu$-+6ICWYRQQV^Tb%Gi0f7-y+43McOlaPwCF
zq+X#icl&K|St*HT88raRD`bIVF8Ck1eH)t~)zS<j!xxARdqO|zl!hp8MWskUXS5+l
zNdFG<TY+Tr7H9+H001g2QD?JPfC@YTpf}@d9<Z2Rrs*n&H6ak0SUOAsI=T2{&vem*
zz%i`&_v^>n5wwlR9v|CE)y05x^(go=?P?q@Ko1?%8-Q+Y{SNRlu0M*Pj=mG(xql5*
zt<?V4gjVD@ejYR~JE1-nXt15CAj=tCri`p9mQEF8$A=6j+VyY#+{ocIxDOR)VAZ*p
z^aB`zJbiKIXDSEu`d@SOe+uLnU8*XV^>%w>?FC^C5VZ5PDgq@9X+do0PPFOKSCy}7
z{#^<~Hbe-devInCb?BiLp92Z!l0qRjBF!0ob)ZLPcrdfz@yvN%t)Bl%X>{LApGAf5
z@9SEKYgh3Q1Skb&D5WFXA6A*jmJ>r>9o*IT*R%s9onb>!5<of~q&ZY3f!cM#x11aI
z)eCD6nxU{RwTL-W2HDk0W)SIuHAQrAs|*$ZeQt*ozP7G0h!-iBk&9W|ifj(bfPw#S
z?Ey(!*tQnho@~E0$hq^yTiW=<P-<6P`_a+4jS%zwoFh%*T$F;jgtgUlHpKe+%$6mv
z)BXeW?H9Qv>|(|y8lG>=M>r&h3cK3JK)>)BoJzH`IVd0iov#NZP!m2XSFA%~ybX#a
zXQnt$E$?Ca&3@S>Cd2t{r(<zI!Q4vs2ml_9lB8Q^P!fttGh?f+sZ12$iN-1IIKYOm
ztnfnUm)LX9u9N>AygV*Yg*`F2VO;~8vg-SDbh6pZUkEF}NjdR81o-=Y<GD9)OdTek
z{YTsHC*Rsi7bC7PPGjJIj%8!M65lxk-NQRk3v`@5UdVFLs@?8+wG)mi&BK5)9im2+
z>D?6p&+doqn3a;tg7|+FKk0xJ<K$*rZ#j@M!i*dG($AwY9q97&S8u_EFi{IFlx7E+
z%GgQs7;n&?=|`L~*i2LIX-4a8-nhYU2d*`tYm6sjT3Q;xIc4#KPNCeIppIby_$@PT
z0O&g>Ii)cu+Thsea}e)|@3>e(qaY5XPo~0?n9;kPOBp9<0;6oR6|RiU%u%k`wu^D@
zdTft5_j*&HO3LLwse6~j8Hc-09Q46p&^wmax-<~L@(b7rJ9pvD&m~f0!#U&qzML0N
z{po4reTJAJUUciVsuW39Sdeymm{66IO^ovfyFKOwZPOTn6!cHS%i=eQyo393!uIm-
zS0O13O!E|f9>*J>(!MZNLQL1&^<-rWRJ!>yFT-{%=~DzV00;H_J<butr+hubQei=4
zdZY3w`ui`1sBEPoNUo@_AmzoNV;+oF<buU_2byPk>b!gNG3#PfIGf@ue*h3kn&gp=
zXjOpDHmBuR8Gn#G-2En0HDw`mv^enA@r<V(3`83(4v-VXwijWZ<<VRi=rApn<=#|x
z<DmD{4q^2YFM%fGel<xF^8=_Xu@XK5<U%h0IMU=#kdqaKtPe916+oOOX$M=JI9sTu
z0#kl*hQk4}-&Ck{J>o!*fX0)`Q%`;Hwi?kfRZpA?bQGdN>tYwb1Y9icy8z%|%E~($
zWs(n!B7%5bs_x~vQ{X<rpLx>>K1(S<d7JX1t6@)7V8)w2pPxI0L7*>JZ|&8p7vkM!
zEa^6-K$8qlxhO;A1vjhhAkuP6T`&LfF|nTw-0b+3yUWy?nrD7alcn9l&8W2$_Nz4&
zf-dZ!aFK@=MYs$aGGRuqI~a~++K`U2ean716br!RU39|0l;#$tJ)OKJa*N{TTbn!E
z$wEg6-!S!NO2K(*kRS-IdCPz(DXzV;^@n97VYQRcs(C)OMHZ12`Mmi~LV<nU*m*Pu
zc!^ppP6kAC&`Z~-C2z)E@5%xQoq?B;`&a{ku$stIFmzskD+eN^!2~UGvo{q=Du-RY
zI{=EnNscsaPrT0~ogLI5j4KXRFVk%^rC<efkyapP7Noqqa;V9RT7~P%2_K@GvL0(N
zqX$;RpxP1g5Lk<2!i7>equ@&Zs1SII?<h1rLF+XQLgo|bUu7aU$21;N<z-E&JY@xT
z<N;`f==sT1bum(epHP73T`L8e1}w}p>CKx2AMGV)n7TbAv>DwQAq#1-hx7{LWNBO8
zta>(|stKZ1o^Qqv@dTu}9K`^d5d2$RaD<C;?UOdO<Zj}KStKyJQF|uFyZsu-!kO1S
zjIOdNQDTq<7K1MfE3FmKNRVnMq=3SkHzz*##05IZN%QdW8n*<PO-JMJ35_AZu~`LH
z;3{Q4#sWKsi`tCB#q?24zBY`!J=t!L1D(%UN<g(~LKlW0uFq2z-s2LQ(dOmw@gMd>
znVw>{yC$HVix|D{fGwyYs$;A_WR_cJq~w7oh~dSvV8>X?*tSNxqy&%q13>D??UQoF
zY`c(xIHW(pC&S?Df_Amu1n?6n#oaTs6J?I{f*gAv1nv)-<_Mgaq^vFh_~DFwjVT{;
z<2<8#VoYg^4aK<dKf=6H8ye}ATdl7cg{{4;9|b_yQ`kFX$}X>mDldT=UW778DY}-#
zf-dAsjHIo)TRcgW2u3WOCNXlRZ}142yMgiZXnb)$f&#rkd%^&;LK<NdR3l>Mys<f7
z@fDB>ngr6&A~Vq1f$ku8)k#65e+Qt*S1I;DVuZQ2Bs;M-L0ed$o&TR#BQ;V;aGJgX
z$x5{kkC#9NyH1r8EQpehXbDjgX}z^E5fW%TRAiIf6bFm<sR11aD0|-TKn!#`-K9#)
zoW?;k91P{8%V3}$&3TopTc0D^qIm*E4_1J)|F+FFdyuX<n@xo>6NylTHfY-cdiJoE
z1auTKHh|3W=`7hclL#`(Da`_iIyryGs7jKBpYqFME&rH7Zx`rK&+PxyTj@xXm$>w!
zD_!Mzp;Luq(w1P1^U841eaL4ASa+2@j8_)YtA%s0-|ZHz$VC2GzIiI=V|zE-MR!IM
z`kXtv5@fl5|Lrh<&YL%aF0QyWZGALcR%k^Wd6*IKxC0$P7Or*X7R7kbft+SVq~A5A
zAU{If>+Pb-sPF>mS8OHzrF?%jKM#8a10QFK!4Ww)4zN&BBRz9i{pOEan$BRg6BqLx
zp2SO*eVwBx+g(A5xY{Y4Jr`?d@y}vK99Ah;^POE2#>KXCf?D^R=|3)sfLs!h|0Yv$
z`;hdZqYgRbv=-hxyebamp@VEu4fK_!XwO~wXH~SD<`Kw{8+9Hu&onFR*3Qa&{f|SO
z;HE;qn3_bv-)`1k0d29K11z)*m@~#|FU8W^@SdpX36?34qFxi0X%1G$vICs|wqXlM
zP7HZZ%}5Q<rq@%h|7A2&=6v`I{%1p&xcmXWq&MI+)h`a(w2pahq?`JvK0mgZc1~D^
zk{RszN*$+4YPQ6y-`-o3)B_>ZWIp_hUHg)KSB{ftC!=KQNj^hGPFgEJwbwK2qH%yN
z*yON&1?=&PnYhfb`ub4c1@`IzL7}QY5}`TyUl?y%xtD>jeBk*tRro2{8NijQ1&C8_
zOl@rT%DxeMb5#P`iQ-zUs=n5cb$afC6k8OKn|)wZX?a_okrlvcfSq6pnS4WBsMK1L
z=udILS^~N-P|XvSiPu~cu1?Q}FoV&c386K4czT`Y+p8cs830f-dYy<-<Xp}|e^7qO
zx>siOvK#U=0wzwzmEaTTAZ7E1X-63S_$1D$j{K@1=Cqw-uVGi34KevaCkX!JEj2>A
zW~~(Ud`oIW1c;j_-@%_1Twd>va-%VrQ<>^N$$6acPsh(Q@4nsupdm<o78vINCx&RG
zzjtF^A5s~fu1=8CoB~RhsEzgZif`*_^o|!*KPdUfK}74vpN<Jvvn|je4qn$Ol!<5l
zvslubpkX;uDh;>gwF!<B*eiQJLW*k5-Ist44BNq8NpB*5^p|^Xop;Lz7q3rE`lvtC
z`@D6g;etN2@~%_X*m)eqKP?EyuBNIlh}uO^^Tl{Ia)P-kJ3OQ7%#zM$0~=E(n(=3#
z!>G$a5`^3)*O8k&eiLQy+~3wJp14VaqO4#5;QDrgGZZ^>yd#W^`~0)=k*Uus#DVh?
zP{si)dsLQH<wNFQ|9B53F=i4eD}u$(^X3Ue9WX;Kc>S|!(Mg~hcdX5}3JMV_-0U&e
z<TbyR$NLz)NbnH}2{G@E)wWhJfJPIG5NbaVz7qpNmNAmZ-$G^Hy7$YUkKPv=1A&0)
z;0rJn7xv7%0;4!{s7>D@Xzzx}vtNsoYpSwQR=fb(vavSv&2k&Yl7<uQ^e6o`@}t|_
zcxS5zjX&BXJK2$S-oG7HW`Q(1y-Zqj^X%(h#B{lZ;}254B86(*Oq1$q9#04Cs0ajJ
zld>uJFMz=dI~P$yQOgg8=g!Jhem*^$3gEC7j3RRHI;9SC{zhhwCtRSOpiL*5;8R?M
z-7#Lt0KKTk>id&KDfjsi9&TEJ@TFqd0h8g<?unZpK#)Rz|GxWANIGr{QXlAM-U&}E
z!dw?Fzp=0b@Q$!if_1j(5>{UydjHCanrTPu%?VfTJ^Wb?2(c-gjCncXNYAtC7Pb1#
zndS9+&{x&gfy!%#+2C%T^Gp`Q|7@mA*zYuCC9c#oxyk;^=5SLF@{ouke+K}}ED?X^
z<0phw2HQzvd-P(ey_@}^A|t&46I^@MYb&j#o7L3ty`5>&<FUNN)tcBWiD{m-^2?Js
z#@iWJkL`&Ef5^(*m27h$iC32#Xn__~?kO-ed|ilXnMwIN!9!kII`Fb=uYE1D`PNuG
zWM@tkd!$h|$AS^nITp1K25V3d0*qh{60_KwtjLS-{-%i@?bZowW@ueXR`_FY1O73h
zU5w|_fu~#j2l9UrJ~uVb7w*aejnRb5cnkEBzrc<J85n;skpb^>8UK6&(Xe2y<qCaF
zzqupmj<W?iaEUISYzoeJ8$U#yKusyfAe>`CN+r}<TB&=7LSZ$5qj_YClei`t>PXZK
z)s<^Kn%6#I)QQt?j2?GRmRubylfrt84xjwSUztAAewyA%8QAcnXO!!;+72_L3BTaS
zqhe4GC#HmZwIV^N?h8*tA83STA~+UAgckt3s7|N{*V9ex8V9kHAr!ysbJ%{TZu(Q*
zxqm5dzUdV*w{8jY@&Gn7OFo{yu`iv$W1s(_=iA=-WBy1vqjmX$Vt30-ysj+3``g3R
zuya_t!0eDO$cICx2h0E;phBmsc|!3L&qFI373}A<L-8AV90~Hx?1^y;r*H$ICD$>^
z;oBfUu6u}@JIxZEpmT5@z-8XzgLFfK_)E*Tmy<I@TfM|nnMhsL_o3}JL>vu85@?%r
z$HESfsEJc-nKSLmX+zhfi=`SB#(@=B2Zz=5&i3F0zEdr_6Wz3<(To>-olY%ugpFq3
zTiiB?>76}$Z-kN1{vhnO1f)nG8kAKE`wMC{HJ|NiQdTYE@>oX{Ux1?Vmr|4HPD*sR
z!|);nI7^~Iem~v#{K~cENZg#1_>0xPGCah!^Ra0XlYCN7h5eofmiD(WZlY5ajO|dK
zMgG#L)XErv4>ROTOyg?aC4h-%n$->z$fca2C0J=jX7fcpG;aQNvuy9q+KC}dpQK)1
z$%C)Qd2p4x(bx`@&<z0C)_pu^J&OEE?JeC4fpkK*ZoksC9M?Z*auR!6h9;D@*~r3Q
z&x$iXNhDeZ<1@AncwTof5?1u5SSn!AFNsVbh;gfxAa=YbWE>CWsH%Fx5ywnlEYRP2
z28g8W0wS1~p#^7cfYoD{T3iU}W?<1Bt8Y^bElRr{BDh3-xQiVVbER2#su#u?9i^P!
z=Zya4d3>qHOwFsO$rCenckJPOFa0SM5nje7d8EU$9G(1ohARMl=3kDz>K$mA_8je7
zJF-I;*lwwV@}_o~?*MS%e9(64v=PmANc$<%RRlCVQqc`JRdDFt3Aa4WeSj_3Ha{*E
zdIM_S;<~F&trQW-cROTK!331Y@d00*s?1R~#ChqSq#Mnjmp|6*K4O1$sR<u8Rwaf{
zArQRhM9RHr1i|t)2)7z_;lET7vE7?5e)Ns6@YVUk_%&xIK+**!H!#fjx1g1Q*K!Fj
zjQggh;&2-IORw%EM@*|!KP+#1GnOql0qEK2u7Ei<^d~GK%eKSK&4-%GA<`<`V`S4P
zz;paP{Lf)<r!ib(<=qmvp3UP<5RI+fJ5+Lss8J|8o<bzI#uK~AplhOQ&xYSp0OM5Q
z4EyP}&ViIVx!x7jWL45JclOGK`yjTBjL*Wz;?mbEBP`Hs8rhI)Wdo?=b*>N(hfna+
z1gMryeocEpsiS`0@ry&@<JX_8oWS%IB^Xr<r%^{U2RUb^O5S_1>a--Uz@4PWY!8ba
z+t0I%6t0W0Kuhl({R^T<r30Ztt|@T?K&P@E5?6LPXXphuZ!*g8kO@oIsUuK^q7n2M
zlp8$k4=G&MQo!58df~!L$AKdjXcP*(cbMP*1UjQ3YHa8mgf6dy_x!9d&Kx>-um*q~
zkf*6WPH?y_mI5jqNLl8ZHLMT0K{9*c2WFc1#i5IxLn?lAD*8}7>CMgnkl^1sHTv@8
zdPV#PLcu`)CWC}CXOXK_-m%=F)8cREUJ?{=_6tw|lclci?}i5e6v{T!(tEg3yv-ni
zeLNQar*ey8Gdk5&rxHeZf`Br2A8>=nypQQvJ4!QD+axoJzsnS_i297`PQPZO+YSzy
z6=xVvGo2M5zVdY1<|%lK^}3DG6<gDRgOG?Xv-x==qpI?n7KLR3J*2^u>nWnm7}e#{
zp9H_OzXl|cq=BSY;P?U(%IB<@ozYjvukupSoN;5j3OlMYe(d9saNEWVjhzA;KAs(O
zPfJiwW1X0|LRc#QoE+v&MWoJnQ$%kmdEBAs@epL3d*}rm0JK4DIHs7^ljgZ_lly^S
zaU0|*T}gtEfa&TXoo@aQO=mYOZb%r1aX%XW55fwlIZQE)`(O0FZ&T4EIlM>?j0*+r
zZRlQH*)h!4D;Ugj&V)y0Mz!1IygeLohMhlL<F+5(Wr^tjmaUyHjj*0!Vx3AP*{rFe
zGk<kRqA|a}a-qM)$EfQl-<t9_dE6Ml)$v-nExc7({Zj{ru=rbM8O8XA3)OSNZ^O<!
z41%3GQzHoFM;qSyep}?T<!9EP-=Z80*7!zP?^UfGh&pxp&O(mL5iVE{>_IsR`zxpA
z()>)73w90fuuANZPmG<U)!Mevca!oi|Ab;pDlhYutBPJ|0LESL3*<m$+oqZw+r_R)
z=&1YE_2l-!lx9^{so;Pb+;*S5hgZ^Vd$sTndDQE@^!wd!mgXZ%0v`z1k7-O`lO+_D
zr?rb{K2(u7JQ>GkRRw@?C-oWegdnavZQpiP*Cc5O?Suypq3En&T3Gd^w}R_W2);fX
zeFp}+bQo>9><qoqRse*uZv&(W)}+Z=RI9F!D?Hi1w9v)5Yrvq{u9~1L9w?Co$lS}_
zmK0rmD)MuSbJVagz`|@=WB3s@fWJ;{NogS{Xf!MGcB#}BEIC^0c{{%;<~<h)NgTOR
zNSzy#9ZfV<Q`z{yyI-?`^AGzyQ`O5f7l?Hu_3Et_k^x;fMN;H7g@s@w`82u1ak$m_
zAxdhpV%d5_!-m-2Tol%7aA&scoOUGS*nvgGKxaOk=QuII+a>et6Kl>+A)J-c<_IG|
z*uH}|CkMX!^`h+9@2>Dok6pSyn0Q=50n|)v)ZkK&H@%O74+5FYm+`mfq9BQXpIk;A
z#H6MW9@8C-zqJ2-G?=Egr9ZUK-N&}-2ri04Rn382Y^0<-`aTO!=C^3l(Df_BlG0bB
z3Cp{X2hw)iPvH8(0uuSH0BLJ*5Q!c+Av!n-u5FYG`)P*LkyL(py4d3dT^St66-t~|
z<pu|sU)sLPrj>Awvc>vcZT(QRQx||c@b!sV`$<dKYv;H5X2CFhA4{G49jBpj_<+t!
zf-CNp$XER?#mB3wW9mCMMV6>e*Cw~vXU&mbF*Yg2`DYZ4^0l!MfTFjc5CIz4u1Nyp
z_BXg_b>z~#5bk{$MJ;w1F>`nYWjlfKd_Ez%VRHA*eq}6vla}us$hD_Mp%R}#*#@*$
z_9Sp5x3hd5mJ&!yiB6Z`rw#!XMvAY?@$gz^&(6v{Br9!_Um3NaNdrA7OoV624Lw3<
zz1LcK&$rF6c=xCPEZ4=j4Hvxm8Q^<Fa?i+9O_w_Yjz?dT25%Vaiv#O;!|_@OE^|-o
zw>K$v_B{MxvR4SFVl(UUHUOLY9c4#oP0)wUFWxLTsE?SmN!MK6h5%h{-60iDCHed*
z;_96Ma9;D|jezzl?!1*Jo>h3IyBgAB*CcLAUv=f(^!1sJZ*qQSX}PpaQg~N&2io>@
z(ExT8^JN(n$(Ouk&r0vyfcU~)vmy@{lKO*|1SxPzyoySh-c$WWx!TxL)(=dt4y>&&
zQ(|Vcp0^b`)RQLHXAKRz9VFO=j!<_GIBMkkSwaXxxcO93aLLk|U9`bBuo`lzDo^@K
zoVy7`-@krcIS*s`FH^doaoGpZX52-cSrw6G75gPvuOt(zCMs&+UEP$g&)`zgn;dzP
z>ZN51M%Il(AzZ%X>FGEOi=yvoR|-`AiFs=`EgY;SxiUI}O@3Y00|ThZg{Bk>5}N#e
zBQXKal?{X0mI?a$_js%Y>XntK1FB(AiN6%k51R=IiK_z&?~M4NK^}J4|Fqk6M`ju^
zSNrP)6Y<?x)+B;2GdvG(4h8(Fl&};1Bdxv`icJa>ZQH2V0uxm=IMLTGF+PFUYQ+_D
zJCW!WA0(PF4m3A5jqPkyq;@5;jXDzFXM)APfQ1si;vi~Kc-0XCJpL3RtnhSX_Qj=x
zXMLd>vsQPKq8B81Oolq7U}Of2)RxJAX%DAUs?{!0J1~xK(A;yA%{yJ*@%XJQtB}7I
zWm4_QP!!pkQegCt>={)CK(P0(imaZZ@jzv~ik1q?^n25OWcSAf36*FcnJd(=^9-c}
zKe?8}&eZ9_O6?S~|J&<*cOjuph^C11pFUr6EPgDvSAF#!xV-0<{jO|IVY<!B>C$37
zm<Qet)_VZ!{YvqxrO#KLtK=WO<fim5pk7~Uzvt%m6(m;osq$>Xc>*CtNHh>t@KG%R
zm%s%WriH%!q)XXu@IkdLEA{Dt!z;1R(TR>C&i>b_mA4uUaeGGec2r)WhGVS&J4R)D
z`U=Wsqe_eO;-GaIdusKXDbG!&MOyp<1n|!%wAs~mf41fn_SoOn^qTH}W7Tez;FusF
zW_DqGqy`6aFD)sa)HMACT$mp0uW2Nt;b=9QJC)!O=+_+K>s{4yZO9zo%CCB)G{Wl1
zsO^wS0bE^NP7NASvfR#Dd*ZE)>kqPL5__Xf>x;IffPTuRhRu4#%Nuk}f#>5kG$`P~
zRafATug2lG$?BqH%>kiO6HR^nC$wezz1Xq?1TKLdFeGe~r`f`5vLu;_Rf87i6Mx=?
zyYzfa4I`V#tC3l5xLsUC8dbeix$^Gudw1}(afbX+Q9AcPto{b?Dyk$%@#Y`j*9$d@
zC4s2qFEOaP6N;s|+sdM0`1vTIW|a6Q%aFaQaCex+p<|zehxzZG3Q&u+rNW*_>&HGi
zu!l+0tb|AI^1t#-dRM(AcgzWL)vIwnmKfvc5Ps#z!4IXSNF!WA>s=UeEbB1;fh&PZ
z=|OwKdBE_#!rv|JTJ@IpCoXjsWwU1_QZ+>ipHIYa72nqyo_v~v;vSUkNu+DKWAm*p
zS;aBw=hx7{Ys$+4zfzC<oC<T2B6nv8x>xbM`}a!h$G=`SVCG3rof2O0lGCyBcoJ|d
z*4NJBc(mp)!hh`TaEA;iZJEOk^ciy(Eu_sBncJZ|_`g&1msYLXd?*i*0B?eAkqaRs
zs_t8R@e>_;0K?O#_8Uo<t-P3nO$zkH?S7Q6xy<D2$%@;fYQqKWV>bXpR;iZEr5{%L
z>|Got88)_vV?YqEAl$f8f#JI(#Is`zcUk>l)Ug^OILjGzW51v-b+S~z13=@TKI$wE
z5|qIh%nG5a2KW}<SKReG@ZjcC?VBpfDrNBp`4qs}FN^2doIVUUulLKk1+P*A^9oi<
z++H4bw$f)-R9}|sHw6us3Aljwv4d4jBiL)-Z{+Zcc=SN<hBhpfrdk&p6Qn8A5i`|o
zVE6Wp=a3nj6GZ-X;V^lLli>xRBVYOrZNBAR&u$_~^6M9&fCC{4U_M6e2>pf!7mUHW
zNG>uh$ZY3I>yoOg!_x^C9*ZRY)z)i3l8gG0Kc|AC3if#Y3={do--DQRZjp$MD=70x
z+0|AifVEAeW}j6%|1gBMC5;6RxlkiP;+B@I(LTK6B_mn6A$0m7Nueomqx4tVKZ!O=
ziW|xRb?gzNyYYx!hXjeq2&pnz9S;Ha8`VSZa;a_^vN}`X3=?-vJ;v3X$BszgT4BJ|
ztLbC2%1OKQHRX}2tFOqOH>}>NDeVjCXs};xWdIDvO=cU;D&3e+{yC->ZW^3Pezv4;
z%w^2bY?IyhF^kXuI0sTQ?ngFVB>$Xp+LS>@N_alk>JZuWsAE~Uwg+PIyb|V;-NNNE
z0bKyyv`$=`S){e)Uw*7xJaOgW{EQ~Hi<#n}>0AJ+VjX$NzBfY!T+rF2G>LE4dh1}h
zR5>y;PX~-Fv;4pgYIWHC6xb02qU*h4$bkEG-F$z;GJCgiv6p@|usy0v^h)dO97T@I
z%0H|ph2W#W;wXpZH_FM1uhojxdp_sPgo^jo>ieSYs!01|bM8M087wJ2^Z@Ql<d*|2
zqXoy^pM1ifJ!{kgX*CTM45M{C3S&`K2xkTq=ZW`-;snqVlN#J-)0GCp)&>d9B>El(
zrxm;tCG(5XKdQ7@Nb6OQ9|?jL#sJ_SL1-IR&d}K9@bu0Y=N9|RDX6*9l%8r~&|yM~
z|Kwn_@YX1O%@zUP3ra4ttKQM-Obqg!oY)J|kY&Gqfth#t!-G_7sfUQoT8-oU3W6vV
zhO|~D06qhAd>s<`)<mu4q1{fUWq~Sn7q$dd>p9yXwHa!5Ny>?K4++MeG?DI4LC54X
z?b+<}$c&xYE8y1<fp+ujgZIg={I<tBy})NKT$S`1*zqG|9s$n<OuCg6Qq%KjK2W*o
zKepg*SCF)FcCkfS|4!~=^W0~^M}Z|cQ52BGILh2NhliH0+)7&<gP}HgC3e<rX~{WN
zlVuCui`8558=&6%YSOx|#GuCsqjBVgaE1!<%G%K~yT*L7-A=!=EGp5v;AxEVVhzxA
zy8d*OZR&uJ%3RwU>T-0gI5d!HAyG?q83XO|xOaAeba8Ly3~)i;bCJSe@$v=URj-PV
zyH^ZZ$0OCYuFYdA5rpRDt&rBrumd47;G=3JDqtb9A)&4A<8T!HpZ!9nw~dd<E}CLf
z)>8ZbfOvUuY)&u`#Ta`C0MwBqyjqLYyFag+D8Gt+9C%)Hys+kM+S|pXfiS+x16xGr
zSCd!z;9#ON9P@W;)rTd&;Ol~;84go24Al*w=dUfMf(qVK)j9gE`ABLP?i^c}4Hj+I
z%2N)TrfhK&y&F|>=DKRVO#f)6G1T{2ZMTfVXQNG4_bd#*jn;mx1_0I2x5W(CV1AdK
zrS~f$8Dcr#<-ekaDOwE8(>BvN&TW#}>@2RSfoAEYJN+IK0tiaJ-2YJ9J+s`5y0C#n
z81hZDR<th6f0{MQQ#O>oVXn5;IjnCDd$enTJCdT#Ct!qhUqArd$_Hql(eBL)-*Q8K
zd3kCuW+`Rdb!m89zY#0qE>PruefXuxd7Vk`1ooGQw39}la`D3*-n>tKk;ed~sP*1F
z(!Qo>K3Jou_+U`kie(gY(`;q_`y1}q_RhoBon*(AcWLhKSm``Hj`@rD8z``}toKc=
zdeQY;)WP*L4u{)W^+c0rhSIl7z}9m6&cfL5OU0mH+o~!-4)nZxVA|GcOtReVY&sGb
zV|IS?3t^AKLjcz3w$cve)=dUV?K%T_42V!yy)(XCKS~OkysQ>iwPg|fqNhJoTwJr;
zIKb&4l27ZNb9B|tPS%{7NFizX7`2NTL^U2)P$)4iOl6912`}f&988B3hj#aJvD&>k
zBeb_P^P{Io;(LwYt&{s}o4U}U&BageKAL&8Alm6@Z7PEfrf2}b>yyS9gE~Vl1ML&X
z56PQ<I&T21Lv7*&I<`K(t|2&3Q(Z!$>G8P)KJTPid7S-aUtn35{2~izLfHCP@Hcb;
z;A3wAByxWZM_j&sOX#eCT$s*M<E|8dW_!B0<kx${E$J_7C0$%QKS<&#eb)P)2hUtD
z#2YQ#X4{c=Krw@|Q=#0Rk%4}jm(l?4et8yQqHs2K4+2oXDcDAwOGnT}T2BiopZ)NI
zEf>x)rMMcx0syY{4udEU=V8Mz3M#srp+@O1*!mPNV#I<EPTmJH0Ns|B39Dhc$!@LR
z$7d6b>0aQQ4*V5s70C>g>5G5QF@DGTVPCvlbaF7h2fhu2{%xXfbp2|<w%u;6|2%sy
zgNcB2KLM1`>t)zopEn;gi04=)-{p>7KB#(l8LT?84R0$Q*$#**52zy03_o+K?Or=Q
z!i^Bn7{<N-{`JxR4SIFX4Tj%Fmw6s7rr%Ek9}}r$>p*4X_S*RM4qm?%`Z(termFZx
zDwhKmOyK}tG_YAJrI}oYPBR)Mx;P}g(pdWuIJgDa#>`-D{@kTZ-;HqqgX9eDx=N9^
z7`LotcF@rQ{?vTP%-r5izhu&_pZrLHa{R@=uZYg$!U~M7N4p^1Qg#uGO1F=Kxj$HC
zU;YZKx+THDQmcN93p;TCrNaeMKo`Kz>~0k9-YZQOJ)7<r&VQ{i2BW{YQ`@cnJ00`!
zJwC@CTL}_+-j8mQuD@4)*YrxXPmK}Vj`{8*n+1(pbxhnNfj%;}z8@w>*J<3qPcm<V
zm;oNa-{<>ik^6n}>-Me&^&EP2tBdNKn5xSHf=207J(W%BJ9B}h#I;`qD0+g&>{v9a
zqTch4lE4-9c9F5VV}sp2<)@7GM@!&{{{PqC*^qq{lUhh_z8vNG6G95Is!y^X8NT};
Dcaq!1

literal 0
HcmV?d00001

diff --git a/reference-architectures/stackit-hub-spoke/logo.png b/reference-architectures/stackit-hub-spoke/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..0ef884fbf0fef303b0bf55d4b29920442a71d7a6
GIT binary patch
literal 5579
zcmcIoc{r5s*T0{!uUQ*p8KqLv6p>0bBB3u45o60v36VV>WGO9@U6}Zi>{}>}8M0-m
zDLYwG%-D$;`^-CjzxR5t>vz4&_50_&pFi&B+~-{9`rPN-=X0Lteq?BHg^yc;8vwwk
ztD|)t00i?D0XSKh)2BSSHs(Y${LADrFtA`S7!!-j09P7X+d!w&w{~_mwzgP}thjI7
zI_(p(Ok0butVMhHvtPI7`MZMurhUZQQaR^)=l#R(wvmpMeiX(!4^L5O8=H?xDhr!G
zA91^n%&(TVcmF!Sv?s4>VU^lKnPtl^*MIm#D<q0EJ*VsyWcR6yH2O28_s96m?9}|?
z&DfU)__pEsrSuQ=wO_vZXXpP-Y^wj>+tfGcn2<ibv|K$tnKdvPO6rH-6sy;K^3MD_
zD5u~-ZlP~y&n4SVJOCmsx>_10{zG#a&YHt|0+$bN-x2pq+c$oR%RoL%p!++WK?oG!
zjKAZs*j^`{=zTGKDJ3IkWN^P#>*e=Jn!>x0VFjE(0H6Q{zyLu19}Bsh@RyqO*iG8c
zyh_9L#56MFsac^XzG1c*P-tj=sT;jt89Rdk8MFG<i%FYEYWrnEofD|PhJE&I#-lUv
ze#z+od{E8GW<;M)g*Lc*P135@no-e0)h=CRhtIsX5(ZK`tLF?RsU8ZJ9;=(yl<315
zDuA@p8}lO6d4*bf`u!+{I{Y(BH6)-KqVz~{fcSe4?k|wD&iX=>nu*D*<0I`<zZHTD
z)g3|do_L)7rG?r|;~>nKv*6a1ed(!vgYQE&zoA3-DnezK=;j0E-aE;AqJQr@2efDm
z$0WDr62eX#oXH0^WgaBIEDmvQdiEGs|JTKdTn}mZi@Mw4Wi#B1GxxVv6ugU{xq=Vg
z_T9}7tFJvi)apG8W!?fIU91E3d4n(io=sKJAb&mvGE%8yu}9rAkKI5!wO2kf0#4eg
ziW2Gpf!t)ufE=iiIgWkp;OZp4T&DpHY8l=A9IsMX#;^KszsY@B;3;+DBs<21&n0~m
zT`mzhg)p`U!F(adRtR!m*&|Zj{PZEuE)cg@YW6s%0z`7Z&3{ZsPk7`c#(giTd!Jd{
zt8n3JO?x21NK8Iw0(14(*dj?M*<kGU<{vS`t<O1;!X*oN)(s^er7Y)u80b}bd}x8|
zHNcPk?&;jrB3?*dWpg5nR9FY%G&h|6JRsEbqj>#62^*^jV3Nwny|R;0(S2RL;tea2
zG8G`?@Be9etS3J|m{0&n0YRc|x1y7}UWtJGyOqMPZi7IttaDm}0JWrr$zbo01?k?U
zCo%64s9L;MM6SkYe}-=mxsU^F^o+czY5lYSP|0hI!x<c`5X!s2^?U;hNHum`=rsm$
z3e#Of02L&Bt~eNCa=^bmD3IZfYH?KuzlH9kuj6KM+9hzdTff3tFTLBK9Z=}M`%VuF
zZqMa$!L{s_E@5VrfIyH^^*K2}%HTT!6TLkwJFYGTe5M(S)5fPo!M2=n^(vMXhV31$
zIszQM=CqW0GO%rBe3Xh@H=Yb7_dTU93}&Z~eI7SKz_3kBV>-E@efHwhyG8w9_l_){
zSwIvZK*DGpEERc<mVUGoU1I75<lhs#)j3z$faettH12}9xFpnW@bxM6&qjP*qCLnH
z0=3QbWg5-PW;&!;o~2B*kX8OeuR2=UL<^8!-1Ajkv`YfyfKf*`w1@1k=h3roUvHQC
z*e8JiY3Nmysf?u{zyz?ai+TuACij8JVDZq)Peg&l7yTlMGBvUTKd8LAyu~OPSv-V<
zk(xRFD!6_CH*fyYCeo4plAt{VYCniM;>6`S4~P{PaAxS_+4Jv;4<yF=Y$FoPRIZeR
zr62naSMcQbAL0tg3b=p0umi&N+85qgq^z^$_ra|z_`1jHYstdp!#(*2+XsqFZac7o
z^90Z<v2<kgtZiGX+V+c@yNy1>ZR{X01S-Fc@i4I}F*<!uoKl#s)>{F=nKtkQ<J+Ic
zgP6|`?hPr5UVh5pI#qpa-WdV9axXXQVpLd(GYZ=({au%lC;(4Qg<J6X3rj<pZ`O)?
zC7j~5z#%0Nv&q&p%wzo^FiYoRVF4$o2!S3SBzBsPH%^}iE{>Q1G-_1I@JL|bR{<1W
z+(8;9v^H4gsMspS5;IvrBNLb&+<P1I##+ys?wA+GTyO)Ok{s!!kn<r%`rA2#!`|>G
zGF+90ELGZ-D&xkr>~l!X+3*94{;rSWKIV?kDgk*9wkY8rnb<xoKir*v&`m_Xw@7_|
zA{&^hM#L`Ut9x5^^2|d~p)zlGSlv0+XiT;fsX=53|FH0}ETW9QlT3ImJ04ig{)2mM
zNtv*gNj6r$mnI9GY7oxC>VzBqEWjLrJAX7#R`gn<3U0di63`I>=t59=ba><_E9^i8
zhw)?AWJm4{?TUZ9vlj;x3V`@(fl~?{*hmnUElq4Ol?8uugOy$JC`h_1s{Og;r3Ni?
z8G`dAJVi>`t7r~!xz53VI56h=Pnn0MYkqu~9Tb&v3~-SNVmqg9>X>Hn7C^)qkl<0B
znRI)Wyf%2BcrGy+G5A0!ziJOqU?G{h&wCyvS94!XniRgJ0&WVz$)fa<H`%FJb1(G3
zpYkOxP{fPrL~7Q56w!e|$Ca=GP&Ok#l4uS_<A%IW0G+d7(#;Yi^g-f?B1pi6(Z>y5
zH5Czh-7v$KZPBfOvcaYmvNE=;2YOdv-z?sC>M6soXw;wd)(2>u1)s}%o;K>GxJ(<2
z1D{yG^d)L@oN97-X-5D%hG})wYW~GMQqv+xsqMS+h4P*_fayS^+(tqa7V2KBJd2pe
z4)QM?blNt<8oUGWvuxf2nG+DvtE@~Ua~(<JiK%$9AzjHzxhHun|81Y5{7<BSqlBme
zqW~MW@gm$cq09!8;BNVG#NwKlxIFrL`BPyU59!1+EmdvcN&rRn?gof+dPfAPJVf=O
z?7N-ldtz%m{!^uw@{V;u=LNy)HX`$Wh)&5J%F+)}h>3T6aq0}~KpP?Pz@C;J1byai
zbg=j$!~F+i?>1s|YLQ@0IEiJ9`Im@*z;vF)NTLX9XEEcib7yr$sXUw_&v#sNyJDqG
z@zmi&R~wJ##(ijvF$3RWRi`9@9YDi!I<0$YJSeX3<&irGop7H!w+J8}C51)X{M$7A
zpN4V}&_RGWR)FFH7$E@50ifG<7AP`SEaYUPcT*PkuoJ?Okr*K*4ra|WwUWDpASW9H
zTy~Yb2#nBok^d1CGjO}0cJapi6ED~EVm>%;*NGSy+I4~jlr6T89s4d?FYrC*R+w?A
z_1jRR#VE31cnPo>-<K%12#HL-7)1ypNr01`YLAKaPr?JU9H_n*Cp^~jZ8fgc9kfF;
zg#Ls;W<hLMH;oR`gbotXww{J%c@a=Ka*V;${Bml@PGhk{$A7dT_LkY+2)bd1j;po7
zxR%<QUsShCPkUz$Y-?<-LSx*I+Dt)Wl96U7rCZGQDa^QS3s_@a?+TnN2dw=XX`!Zf
zAFj1<>X&_u$uI%zVZE^tTYM28_IxR4Z!(Yv&S9yu(@{oGSrp5!&N(2)H|$MULOzu(
z?2LNe-0!;|664V8<NL)eGGuReSO~t7)vK_==QT6t{JhCP4umKMSKrd0>jde}X(7f-
zqs|Yw#BhXKB@8@bB`y}Ws7f@-xb2C_&;i?l)OKx6%Z-=rOfP_7Ia0QtvGRxyG_eD_
z-EZ>$W$3K40Spb0{_p^J4#G_$%W7o}{MJOWvhFO*XQt_2^0gmkXO@)hEzRJ*z`*K_
zK?flv$zfGs5dy_ZOjIu9cxH7Sl<g=lX2JbJmf>U#-eqNaWTxp|%CjHlz-aPF>~HC=
ztjmj!n;uY(r}Eq+37nM98dFYu_*ZM@iy|9hcvQ?XJt6O{oWoh#6NeoHz(@jf0*C_3
zvY0+Jyx;I6X9AVSRzm&)U(ZYC(b*f`gbaVe!bD2EUbcR{%nMX)BL;Yd#(0(Z;UpU{
z+%PfR&;pSxELfQvBEBfAf>6^)0RHSY6#%R4_7Z^Nhl`js5yOI-WvV7X8&id$J&XLW
zKo#*5ThsR&?L*BD#C^Urw+aOCikm<8=6{oOQ1f*I>qP;ajSfN;lIIk`u?rHt>hDsS
z`!V1Fbsson`3}i;mv<wGnF~fP5xQ+Yb5(%U^FXZ8R!B)|9{{i{^VuJ_Kh71^joBN1
zlhf`<O0KPH!~n0|xs-X^f6Ws-0LGDV-e8HR?aXe-2U?xKUa)4SW1X(wsw!c(O<(3{
zvPSNz=u>MEPow;oYQ8<fs{&@jKR!m7PJJ4s7Q|S;YFD}k@SU#@?S38Eu++ZjD)UH6
z)|>#BFBl;e+4%dP{6hp^ovD;jpL0L9-qFgm<~ToZvenXEZm6BG6nMS|Q6pZSBR7j2
z=SLit=6^EEvliwn&l@9k#E1afp5OkluRtci+=63Xn(e}R{6Op`&>+BMtn7Lu&!@`h
z<#xyA-u0h%#I}2KpmM&?RW`&*J2eN&%%1XoPG;7K9p9JtF#peTwB}S0%+xL=r<^bB
z^7Ju0NIMHL&!)c=f4b_v>@z5u1w_JH1iN#^t~E9=E1nJG;r+Atbd{<!T}&`&`d$&v
zh8T2twN=m0fAx*loTCtxXGwIR@l;+1RGvJ>$PR&C3wrsvRES2^vDhi-^r3C@G$sGR
zGNub4Iw<-1FQM{8<}PuCjM2#wEAgj_vrLL>vhTPcuJunE{MY>apVIc&=zD5j3Cpdj
zfVMEw-f|5+7lG@!sE6{`HD8mVL^>nu{!n+iFy)I_ux{g~_3fYSm3GftX}tf<DP{za
z3Xrhi5C?3E2Tw>BK-CPJ?L!)byMYD=n0>l95E6SG2`D{0L{4|saXBmU>>VM$Qj+;h
z%gZ|%vvM&jSoHYqFKuRmEy{0P5@X3W1S;Y}!l<2c_XqvRh{gBT#PoRasfyRB$IL3p
zfsjWQ17HWgp^)N44?OG{{d!I}sc6s{4=;%;4EDq>>*qM=_va(aTC{!d|B?n7fzXk?
z6;jBy3>KUb8r8t4EK&2~gSGL17Rq0Bj}KO_YD0``VOv4|1I7am!^aG&*>r_4uCm8G
zuQ0^RQlWHmy#N`PoL9in>8!n{aH7q0J#2J_O@!XHa3D(g%{e|a5sQas8#iQVHCHgF
zd;`Vg*ibd(f^3v<Da16)*C57F$5sUk1K&A$IQ2V;!B4n|c_w=llqV`v*=@6{uAWSB
zeXEhAs|dv;`d;OAvbd@uX?Yd&c(N_atO&}gG?`unt7qwkwf<82*)B?fR%$Ze@~G~u
z{MHa>_v?xh^8i0mc0H5OzAI>}1@WJcW~Ysu1=Y(9Mr$pJd}#xI!(c!%;8c&FL!>rs
zL<uC7N6a2Co~g3}5AnZ}r2_dsmPgS>j)M@q`fpU!0I43!hEdygM;)SFY-B19fkw8|
zTkRH>J-lVD<Bs#kxnV(e^le`wz<aW`T9|Yc=*Zl|QL@1}*I*d?G3XeS%mSWsqJMA&
zH;*Ud`Q!wAeum*ZCr(NZlj`x%34y=@N%nWECv+^(#5S*`wqGyqbZybt;VNr@yfjCf
z=L4>IFrsj4=YUyGb(pY9g@*^wnPqc95OWQ?>USVi5faCPDLYmieIVMba^FDB6@bWL
z;JA}26w+!R7!G}`&;2!9Yz<!ki-NC5=5`+S+#%BgOuILeo|V=FLhAhQjxPT)^q?aA
zrSJB88{%6CDyybwm{rj9pn<^8Vry{3u1N3I{uV4AsOXwx$r<IDf!^k!eLf>>?hmPm
zKMHvuDE`eOWqu}N%t@o)QmV>Fo@%{lfdu+_<ejP_0hV_9EIzFW8HYUZ$~^ohZ!yE%
z%fY(_#AwD&`Yc<0Z_X+`Fg-zjjRn7Dt+}<;j2z=8e>#da54M~K8d3M%JVVtPADh;M
z(jZKitMSi}LnmqF#qAxMv5TU=dU-*CQK6gR?}XTzqPvrw^c6~8-6;goWV-%)IiW$z
z_eKD54Ob)DKg`a}A7EYfLjOkcGyPuo6hY9l{v~T>>Uj}@HWk`%c;^b*P7c_X{tByi
zjX3Pm!FZ_!I|W8-BS5B44(T&D)_jnm`(>?l=27QMK_Il#Z;ZVM#QQB(S7*q9iDD40
zj4y>vX;PtrC}vXC9=U9DpDjh=!ydzwZ_PC~TQ@GGH$8abm$|ttH%y*b8EdTDa@GVQ
zm$t>p%1_^)j+a2#svCx?I48^&ek^mPh#^q^rlG$6U26R|){I9)F|3#)mFWH*x55c}
z&@FEG-t|(c16J4OSD!sq0Rt}5Iw+Z=QcdoB2*WS4t&)aYi#8vugb{HGv=s&Qh7TK|
zx$8j*Vr=8gV)yJw>33tC#-DYMPePDVlMk3QvCQN&H#l|%w4MMOO7dCyqsmL~3{#|?
ztfgbd9NMy?-wY+cjN?%xUojB){dGm<56cfLDL>^_zm>-?2`;Poaw$3Z&$P8}<Kz69
zteA}tW6p>)t%NPY8s3&P>as;X5NgTc3po3)IKj7X%}1BYy{tMt6cX%EaWgsz$QL6{
zw>It}%pSqvH)z9^Q=#r4eAO8(5ZV;p)NFIXihXFGJK@X{L#11J`p_f2`rt2=Uy*uO
zg5Npn1@X)$Pwo&F(u3!Z-O3nYyd=&$%L%Y-xXXyBhJ7>GIz#7joml9uOP{aFY7m*P
z!3T0s5)vex$y`mkE5r2GlUW%)>fWm0PWN_o=nBi2%&n%chYzV=xM(aNCPA1VTV340
zK{i<t*Acy%-{-Nl;&8(3gj+U~@Be=<2LE~6*j7$wiMNP>cHSvG-)%9vmkqQ^F4>0v
E2S}~H(*OVf

literal 0
HcmV?d00001

diff --git a/reference-architectures/stackit-kubernetes.md b/reference-architectures/stackit-kubernetes/README.md
similarity index 100%
rename from reference-architectures/stackit-kubernetes.md
rename to reference-architectures/stackit-kubernetes/README.md
diff --git a/reference-architectures/stackit-kubernetes/logo.png b/reference-architectures/stackit-kubernetes/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..57c2c04b90ebe5566b5172f3f068df442eeb4f7b
GIT binary patch
literal 22760
zcmb@ug<DkL_Xc`sX+DIgGy+2?s0c_7Da{}uBBdZAT@phLD2Rx(bc3{j(me_yAt~K8
z)X)P%&M^1z{oVT?T%Lyq&YX4j*?aB1V!!L%6QQrCPD^!*3IG6FO$}8803ZhcB?hjM
zgMW^EN6*1Olx`ZPo&X?AclAruSC{)90Js57RV5?ejGZ~kFD#u{=zgTY?w=cnk;BFJ
zUyr18s_H&WJN;{|{HoOMV`^WSABo^CM#R~Ak$~v^v^TR7E~@=7-hc9ojE@Wb0o(sr
zh<yH2wT)Bz5=asD((W8l%1I@B&&+2IJ+Uw-eZmgAzV3zG_22R`nd80c-T$9I!A>O`
z-lUYqnt8rNaEu3&a+W$vXZDkc=|MMy9QY!QPsMm*IL43BK>#j1ul6t@mPxZ%``!)k
zR(B~HP10=`*ln2pTo5OFZAvw(DNb+e2kXg8@UEgGJWLeT19uj~aYan@hy<ixxPc$%
z@aOGQ96my>bRwCRow;Ggo?O?#kGFNgngoBe6MiZEe9ahU<;lefei)Dfi7a6z>|~RE
zT-KZorvyLREBPiJFV`qAMihLLw7X}t@i1#PoEp55R+KjyNvKo$De-^T#^_U32)-64
z{G!&>`Wh(kITUSIe(D;z;K?Nk_AUsE#=2urvNR;YVAJ5t##*spj6N(|eX8hGX`tr<
zXE<99i*zCh))M-EFGIKcC4nJXs;em=$=$VM1ANh1yB!puCLl2R?h{e~58eTMuX)kW
z0E&CER~Iy)O`rEDgU|U-mPh~qWf*o&HUs38u0_s<(}VAXSq|cR61KMK0hHPQ^};z(
zUO_Vv{Rs1k)411DI|jRY7p0jUdP_OWFDcaTy_`g3Xqs-;^Cwi)&4ir*z>Vp|9&Fgn
z$_pEWVrf%X#`5yG-sVwZbZ8&9=Cl(Ioz^jyuv$_m0Q=(dU)cK+<)?A6CUFopjp9^3
z)b-=`%voSDXxESi0De|R%6yWW%9I-m56y7$a<t5PrkYg>fn~YY@wQ=l=NgdUz=MxA
zb=~CPl5huZ%G%kGcYQcjMN#o}<?ICUQs`ei7JLm~ev_XMW|Y1sVFFw%p8M3u+r#E*
zGu)L$z034{jbLxPY4Fd?Tx-pyo$PW+!X!Fi6t57~o{RQHfuAoN$pB!|eRu--T;2=v
zDM<Kz2pOsbkru-81hQMn1^^g6<OnO;K-?_5S!0bqG(#I)bHYs=zwlTRKyf~3#~)qv
zTCzEoZHn63QbjC=*?}2edaDv#0NnCpW7)hsgeoknAc9EM33?;Nv5DLJ35AE1008KV
zs_w9AF`Yk}S?7Jux+aTOu{<c7O{N8aSBZjIs>%vZ(-T#!lB(%>N10=Wi8#>{TT%cp
z&Ar(5_Ym~|PlZq7#*MHLaP-^e1?P`Tbnm8Nzw9Y0atsEh5&^*?O`}0`PA%`-v%`lL
z4!AL&tXA5#L1p?pMedH*_k^^Ee!uxTTx}}5X*}q|#RITqGe7M4Bg(Nzx!NzS3_J}s
zVfH8^i&lygThIvXOTXB~#*VNH%3VuVE*3HpLJS1LiGeQ*V!NM~VH(A<-3hStx<=)4
zeptnASesf_Ky)Y$%2@hN*l#DH*KWwHKS|*9fR!z@gD2b|c{f{o^%g16O<U<ENC{`7
ztSud*d`1th+ho<9WX5ym%<hD_`d!&Q#So=OT*?&>D?fhUWB?S?y?9|38p`FnioBLE
zWedkF&KeU|uhDVK1DqOJTq}bIjSOfgHBY^;M5vOb9{!iucT?__<>}aK*rI=q<P=nt
zyd6C08q8upM?ghbl%TyCD5dWo@ZA}88i_$ls4l(0pzd9^hX|Gp!Q$^p0l*82(y|lD
zgtLFz?IR`1L4L{EzeKz{n}bw8{rD1ETH_5P0$#m~CFsc$QDZmgxH{3l)Jt;deL@sb
zysr?Y74tEx3M7ErC&3JtyJu8h;}n<P#{KtEB_%kukjAo1eNT<<ABB(LXc=)z!^)tc
zK>DM#$9~3Yw*7IVY8-EtkER0`pyB7)VNQ50+R*5UlF~I18Xq<wSp4Wg^TeI&&17q=
z$frDmd^`(YIX5Oh>6#5<-xvB@fc9=Y7Vx9PV*3c-ZX8U>$1|g3efa_4Y?Y<y8LY(^
zBZoohu39;v<S?U(7}S~36S@1f-nA^4jo%8M1yudx&FA7<f3%hR*P$^bAKJ((^U>%z
z!!s8E$XG2QqS5pTBZ+{X3F^KG7?Nv(sszq2`<#xTqLt<j;t<FnEcYjQjc!7${@<xV
zPhlSQG~;^!(3pe3zEH`Gz8;;dS&U2&%=&#S@-M*-;w#6xhjHDs`4$UFD5?<175Fmc
zBmKUqTg>cY9yH309@}kAsrNjnSBw~8yQV(Mvk6pmIrq#_J$8iXut`y&|FV_O1Lq)Z
z+&yA&Q2};Pzl7Ppy<evr&WDm1V8-uIdcmx_Oigi0%}{lFwJtB)d#*3!;Z?C4KBT}R
zbM@$F`KhKhIoO_>{#>p+?LUFh+Yubqmud@7ni4(jE#J+zx-(szOt!s|guwxzH-7$G
zICQw_hKNQnTe0K8y<TEiTl}-(ty%b>D%8xje+gB>)=w9RTX6JW&Yn~UpNPrY@63L|
zL3LJWnq4WS+8d9WhKT9xh@%Jm{UR-M=NAcCGwdWAH6sd1(~U&HcRgkY4vh-Y-&=fC
z$N|)Ix9V^e<#nav<U0ZLbNv@yxrLARTkH8b-=0fc8N|la04^f&f)!DzbN%vU!`87U
zGogEWU9_L6cwm%?NPc3uhST3v7VJpL@SgwS*r$`$c0%1$LJm9U)~EIuCOIje=LFoj
z?EWYDe#>jy6KZAFzRQPv0Pt+XD)3AQr~6v@x%3WcQ8S%@PtawbH~VXK4KE?e+BAZU
z{ehgsvKQ#9tisTLvh~Z4{449HvnH<d5aK7{|2&l&yf!Zz%Vl|+T4ABF^mgZC{{g{M
zIfXU$y5@xkGRETp*}aKHyL#K^jiW>`DL#*&^fyzi+N4C_<USVL?s>Sx;PBoa6+ccF
zP{H8gX1%WCs=LjIubA7G=9X&m&+M7sQE2<*qMkDTw<)nYwmuFLh%w?i6fQIvOW_1F
zE1|7d-YP44g%M!^(W*<&dP!PuK6$WSJ~ef7HxbRoH+o2C<yxLCo4cOvi#{pG&8PLd
zQ)7$zu!TS{4H&a}5?l`;BXpgG<;e5HLzi(wZAKX%?QYw1S&0PF%z#@%I$3w>+(<LK
z4Us%Nto0WcC9wp<>mnw=PbC)28_Xy#1*5}^O7RrmsL&TkfjX*3Cuzj&;<Xa!#o-Pz
z7ue&t*e!2AeCn@SzdJwndTLE10DXbC9{+jVLMS_H8+<uQ9Q)T+7hn>RsUi_t)xOmT
zg+F+K+*P=xt!q<AA27ab(!cm{c+29hlo^}^;2UTu`Vu&2^{HSy?Sle5(FxLpcrtF(
z>)9{ny1TXi{(fd@8PxbZKtjE+zWs5ViiHER6VC!DHZpc5XcYe!eVrh^=I)lYc{0$$
z^5w5kWJ`O!uC`r$MgNn6{utEnqrDIp3U>q<pg+)}%ys<r{Fk)^W5l4-dVu}A^%_}Q
z<1k!}P}BCrD#fS6N7@KS?vqW5U=Mzy0>et;&;Um9-1>k1V-RmkYG~md@iJ1B#r6aQ
zhWm1HM55R@%#?D}{P>cz-Xhl^UH8IzNH@6s_kg2uzezE>FD8J|gZjeD0h<+@-w2Zh
zz9blQFiM&IKr1OGahXEYijx^-i;5<8wO89kE_-ztR@?N-=b5DK1IU2uU!D@}LnLX4
zy$1}bnPigxmdtKQoGF)EBlXJX=rO{(hIGK{PZ4ih*qd?=(v3hGjE1Xv`fUELrcrbs
zRmg7{{w5CP=v9R|AlA!I_9;)Yt>A%k&noxNZ}(wn_EPndZ_Q>&SeN9zIf^}xYzLsb
zN~Cf&O785D{{zPfZf-l;5MfjaWmboR(Eu3Jx)WTht%~f!U1({6AyL1H`@4MOmqXet
z2zB^UkFxc;o~ydq?h&_QHyNFI(Prn(vFufaejrw@DI9)mrze#VyZ(gJs5mlS))nK_
z+g~;Q*~NP-ZKyH~0H%u#1-S6*aE8U6875h~JU5xuu-)vv5*Dzb9wd2L#r*q=BVxtz
zYh#h}A^h^!hWv|?#bLBs+X2R7>?&}B=e!MdedK^=BTNK%r8}|AV|x}^JWD~OET28w
zh;D?gM%iCC(&Hdm)z~$p0^lx?t+n4j7YwDf9PHCwk`hdmEtY>ur0E#-E_h_?0o{z1
zLtzs3l(hr@GJ*-}tG}HB@@07hJc2BX<e1Q$$IEjE7jMKP+JDU!F#=U%nl88YlG@O|
z+PdLsn#`Aqt9eyx`=pUw*LuZUtG^ayy%1aGXimP>0J{ymihvNhQ@+nX@NY;Td~zyD
zPULLF1JiQ@+{9Kbys$-}hB2&|;{b$5zG*u(FeIE=Mu-eG?=iwnq*`6hlo@rIvXT0t
z5kgyX#+fgOehEC7Ii~Gi>;>SmCnY4ocU}hWnQk|B48HPW;2tcxb2u6nkr|@}7d=^e
zlv}lS!8aOk`ELFL1ID;?qn7^aiEkSQ7g$nAY^}u0x%$6@g%m_t&p#<CQinE4H12&J
zO2vF@ItLi5eAbdk(O!fN90hRG^jNCQc&lGKb2{m{U%<ItFE5N%XPbS4=%uBx)=MfO
zpZl(!2PWbN^IX7mVcuzG`Q9&QNVzWGCrItN=QKO%HLshtQTl^?-ngrT9lpXsr(2Vd
zH@6H$;VEkXpuF%Ta9z{fq~@#|eO#0E{G-xOI=;Hva&r~<%<l90*6SFHW99kdJ@j2h
zGW+8l0C>ZMr_Q+TzL`|p<gV-gjDxfrssH*@%52JzJFK9EA<R`^Mq#SAwK_yjV%7=&
z?ZO)XY9jUXpD{jDU$}45onKB%EC-jiT{-YF=)&DdY(}G7`whAb?nj9;CKM}YJq9iF
zZ{Rt=y%q1o-tps)IX!Wx`Qr8#ReCAPC*dN<2nvSuk5%5y+ZxPziwc2&KHb|g{fkb-
zt;}(o%HPpM?}Hh0gHjjWEp=^YreN5YY5QqI_<YV~g(%P{!7awCXD16z$L6p!6I^NS
z>$}RAiRND~Soyp@uQt3lFVS9RJSLt$m<;v01cvS_&)Y)bJ(ndMG5t!x5W?e%|Illw
zXmGXms<C=~NgerV)sWC~Ikd(K$m|Om6^|t)JY_O|E6Y2!(tF7L(~w@k+o@?m*>roY
zDEm{l1ddGhz|ob~*h}`~1v81_^-a^AW2WTHlXb9HKPH>;S{`AsHcYY=-&k2kCbio7
ztcndeNMBW(@dNk%IqsF$ODDRf+nUsEfL&QPm1$$^A&YP}6G;~=JHkA|2fFRpza(Ti
zSaHz;-9ov--ykBn164s8O%T5zaw0I~Y%!fz%;)qS@0oa>Qdf5t>mwHxc7RxZWxBeI
z;==TkAMD@gh*7$~)tKq@_Mc_t+}V6C7b<5wX!+Ue83M!2)&PS7udbYo?sp3(k%YWW
z!vS@%R7MAHQ+ndk(F4lsKV*78=oKQ6kcF3b&u8l5c41lPt*gl99-3ePV9&svG;KZ^
z>|f(n6zi%kSANRxOEVF-B|Ik8Z8-RV6@Owa14pZ`d2ae({J6-{5mv?8jYvAcEmQP&
zgf6qAvxhJ)&D{ONc}wd`GU2<Qlkz3<w}O8dj>{u)mwQu-aQQExhONYNT^_oBQ{J=&
zXIf|jQ3NI>VE7>y>v&fgDeXpc&_T_`&aR94p?0y3CllBKWwFLlS%Y1TO`)H6%Cgn>
zHi>{mopmU_Y*fvgf~fwPv;d4&qauYFsUo_WNB0&ST&#$$XKs?EBOI;VoK2faMD$|9
zzjJ2#o_ZJ6RqAeDAj>#?o+vO{Ucwa<o6mI7a^+FXmy8HO(qEe163n+0d<OB_@5!{Y
zbr)tt`)Y{*iiq}@yAYidNW3X%OEU)Y*I@%18`Tv)%YjuOqCqL~4!My|H0#6|HsGv4
z-pc!XZT;JwOYX!yV&H*ZH=#P^o|NIl^2;w|ehl2BeV^%xk31S`DFc1Pd%`a9<0mDP
zFP(UK{Od0?pKeZ9O|dQx{6^9Pf|29M$Q^!O=`U4ZtJd5c-v|F|o_>XRY0?dYoZigl
z6}4QN;TzSaV-CX0w<@!AGRX$%c%*a=whlFF)&sHiQ-tUNULRYAoa{e*($@sbBVg!i
zdBr;8qv@{9OMF$&w=!61tY2rvQz%luh!4|9l%vDfr24IsxGK1O$CdGYFlxS_{!8)R
z=011M$#?k@M90MD2U)R#$ja!=UNf7f^XQZcq)1`<o>17O9X@-Lu$xzAb3WI3e=MuW
z=fX2TA=hNXTC(<~7;a4#KKk&pR(u=l_Kr@;3R)EkF4K%yrn_`NMedyuPgW;d;-i0c
zbu`2Q2r=};z718LqtLZ%9_Xy95_7!>?p~qU#h;_~Eo+(ecRLiMNQl|p676!&Giqef
z^*Bg#au;CU`eoW3Q2djk>gbL?8c5536#?ptTPEvWvDDdcl{YIcDbF=<Q}dT`y@iH*
z#+q=jUg0EF?QH5L-gu5q>%bSw9+kgC3!tu7-)9B@IL0Zm$Bs8~tWeY8Q^Dc!Ud*?p
zapdt<9)Sm%mil~n;cO)2CUfX|stJweUY{T;;c5~}ZODz85z2KN^7oxM%)-#GcN&17
zFD2_WS<nxJAx)c+`mWDp5I*TvU4b9ARf2r)lMO3xg%NI(guEd-8_q6n3)-X0?6PcC
za1j{a<Rqy$-h-t>2(J%r?7&c@!1`NWo@7&PxpP*_#sjMG=WL|rZ?Smh(CR5_f;t7U
zr_dXmaq~d7i=NGvrdA|Rwm{{n#PT8w(&6A)@}uECO5n!kD?72qHl5X88e&w<=zvAP
z^!+(sDMYR-oO?*)*U)%vd-?W(=7_2~GGR>=r(Et}Ot`FpJH)rHhz2EMpAiM8>bGw5
zo5EQV#pQnpN1ZgRTi!6t4nK|bFQXt@GC;Ft4qFp~%A$(ASv-oxEri0F#+QK{$jK5h
z0D+MoGwLn*8|}tt+<0cpHnJ*}l(gc`imjt3PV0%OC^|o<m;5{IxFIi*0a}t3{!p{n
zDqb5*w2q^#=DPwxMfO-4rmr^ID>;x8d3bbvLe!^JG$$ZqeFC`eP3kb*k!U_+f_p@f
zgdwW!>$jKnz7+D;7p%sdC$a!2BM^UlhO3RMH0?U~QuL=FvOE5`IqrWJ>0{u&kds_e
zxbC?fhJ4GR$5-h_+}Jl?n(?}*&Wjv~6n>Rh`#ZhMtIIE#A64co14GJ)6wVVNhV^9p
zE($_u%?^@vQ9Y63!|$eFTSed5?I8jvhY~PO{I}**pfN{c-^S^Po4iFTtuDEuXLchu
zljn9=5xI|JL6>2xX57zum+tfBpR2(sbq^WDr>eup)07l#f7A%k`^4$Vx}2KWd*mm!
zSDM`H=CzHRzxQ`Q+ArlopD6f!Yq>K)1zto!)cky<-0s4Y)y~X)idK>wz#8#Dbxl`G
zl)QI!vE(PY#KF#BtadCXiWJ0!T)1WCP{%{8&brSwv0YB0SVz|ln;owweq{ZI(7bP8
zW|Tw@q?hDPC|seQk`c?APZ>W`cG+2Y(h<K6M<VD^V!d_wg9xpzEOVZj7j>x$<z1FW
zbYRSPM-VH@2(P-{<xkNamoj$Gv=1q>e6S9o-U%F`l3(XZT_(^(wEr;DJCe`e;}AI!
zlp!WYMe5g2Yl>ndc2&H*8TP}GI@V(Cvj;O!uNDNNQ8J~fPAR@60vv7*y9sd33wn|(
zqv_Li*daAVea{EC74i?$RcB@PzK>jIRR@+;`vB0#&W2L~l9Up^{sD^yV5{+5mVK51
z77<X(u@76C1O2*(w_uhoo0LC6yc86KJA@^o403~h1r`q+;9CW+tyi;Jnk;99Tcf9y
zU4#F9N<_p@cp`eK<%fP8lD-hS(&pW<F^XqeckX*VQFrI6@Wg#ssAjd8SjLHXdvWOY
zcIw4*t$`-DqtHL{lZtync+7o#{Kg504exe%X|en8LeqLI-7F%T$-gx51nr-jYG>g*
zT`GB6zYagGjMl=^?skv?Y#{!0Sf<?84|a?47NXnI$s($n@ICN=%hqpsJyZX1hX(k%
zs9*$qS1Pvj&H}pc&xWJfp)JX+Lru3#=JP7k)lfaVvsMY>Z(~SAPD*9MK^^`i&lRmc
zBIO33I}sqLl}%EYmks+2JwL~1(=T79W#lCfPu~Py)Y2)6`eLrjk^o*DpuRg}g4!)#
zS;RE$KisYC5mKIeVGp>8U+IDNJh?IPt3gZfg?=WZDhOsio9KwCxN3=aG<$ot45P5C
zay1mc-&zJG`g0BRV?sekcl<-V6xx4)T{8@o`TGxeaqoXkWd#iU0|4FN`4RugEM`@<
zGwN?EOX_T(KcwHS{CiW`_*tWg{MkcLR?*b?L43#BUD*-j($;pTgvb+C&JMhnbiQ(y
z)4HW`r6-p#Fu7P_`ZQjP^~@Gr0gsXU$=hL9a!)-F7H3=Jf_85Ilj(tjGFK6qVr=Xp
z6~BQMp@-o=$azUn8mlWS*fW+vCWbpr4q3;)g>qT6;}d1_^Je}7t>eu!SuAzdb8G&R
zw-uLSy)ttj>Z;Z>O7C0-tLAz;(uX19AmQ<`mGQA6W?rI~-qeVf{d%*V_*z*NX1Y3Y
zKtHm9o&|7Xa7ax2nkU8KF$bn<{Gii;cUGW!K%ZyUf4Sk8_tm8%%}DIHY;RGtbcz!C
zZKdr_#xRH*+5_L;{ckR-dp;!+{hZ&9S!-RM&|sE991XXmxp4N+Xja^}KuCcv)jECI
z?Kju(6|`mViYHUQ1B-zd@8=5!2Y?qob?S%btWo95^Jxu@^#7AxDjuy!|2BLQ8?|M)
z4x+c;g}qv)6pXvWwf&3Jdx9eCE~f)C<lxPwCK+Kw!SIu_IQ2u49>YO_^EaF%zzH!)
zurr7R24{lV)q7zSp~l@AA-*LNOb<<CMemu-FhO79hg-^jiUilu0Q*#n^1dJ}FKZ;6
z<2`;<4^hnxKf~^V=-O|Y+&>Ai)Zb_o&8c*Vo&Ewq0<iF2GZ@$(?s|veYP|E+l=cpZ
zQ=s{r8L|$<=|4dX=3n0A2AqnR;HC8bN-8yXhprW4-G>+IWqq3B;+v*h9`xRRNK71j
z0!Ql|TYq@tkK47rY)?x(ol}#QjY;Tppl?0DEjC1T1E8s#OlXbenP#nBKL96P^`QQ4
zCJc|>GR2G%(jM!r(xej+DVEq|+BnYqR~}R9;^)DJaQBiwm-uaDJac~Nko3N{sQ=Z7
z#~XS4OUvQvw^7k6poLD}<l%ZDX8kd`)A<Agn#f8LqMm@Gsto}vFo{~jo3$4P()*|>
z?+VydH#kGzZ(Br$$6i$%Zsge<tZ#vau;sq#rO8qwz=-ByERC1(nNO(dO<<jARIs%I
z4J?@BKaALRC-v~bqjlm-;w`@;Iq2D8g^v?6Mu9PG#LyX*NuKNS-NTv6>&j|>M%R@8
z<!WDr11IB$tfnR_^C8augoU;tdGcMpT)q3+4i<J>W7+!2S2nUQL98_SQN(pstfu0F
zOVX>uW(Eg3%BgfPCZmLNvwnCge3EYj7qfy6b5NgU4FgAd%2S64+?T1nMV!d4HTcw@
zDa0bKqA(uZlYyHjp5%?FN+)(i0rQpf<y!06-BzRdaX949b`47mchI-5?_4HBu^`ke
zm;7I2*21~OyWAm|j+@(^<FyTriaLpE>TQM+S;C`gMy8&R+-1PfGd>+?QtJAhQv}!!
zj$Qu&`91p~pzEQ=f9T=zo#e`UBvrl32tzQ;&d4{*T^qC!YpCcvGkLThxR=uv9Bb3>
zlFlwqE{qyJj;>$79FL&~o(JzDHWkuXJ!s%nP!PPwjP7-dyv-G@wJHK@lLi-h{`4~m
z@7xsphrRfB;ev$~wG~!k=?kupu7a-Q2LEU8XxEa&6{29te|u{U309IeWR%jWp|@;<
zTB*G@$0vlK1)^xd<JA{RZ~yaO^5Vbr<v*$Y_a}BsqdQj4Sa)p9zsNi4+L?)V*P*pT
z7XWY!sRgA%m!z*Nw>fh5`+Gdgi&=9ntz1Zd_vX6)!D@6fMFU|Ax$5X14EGo<o9JR{
zeJp3}y7`D);JlHDo5#emk&UwPv;44W;6t&6SMZ0f=?g=tt$?R`B{Xrk)^T@4;Wc;Z
z-c0lZ5hkYqZ@3}vggEdO+!0qn>QUCYaMVT*IU|}5GaB}Kyag;<SuPFfJhan{=aQ&m
zeOb|PmeomT9wS6ceuR;S%NqCW)onEmRbKCFArZ;Oe*0bN2xw@41q*-Wt!KDs5Gi|b
z@Mga5#m2he$E5G9HZx1=k@kumJbYAL@sLVL?rT}M%tGTAcJcZXX^>~-w&cI-6l|74
zjVj%N4FLaWxaH8BJGE8>bv9dckED{g?mMfk|BtYD`*vK?^sn#bxIAoS>Gi&s11an+
z>zmE8_zw;9R*0F-K&w6mG=hUD1~OZwxv;ZEgK(v{D$zlBtC8hkllt{BXFvJcuPqcL
zeqNv8SgcZkF}b8d*C=zP1E8T}|Hq%4DKl*_5S?LSg_I>*%E5?TF1@%Ve{NH*Am-Ot
zXxUT(2~B!Eo4lg<;_rn#IaqJ|!(N{%VzatuLk1`cWLP$fQA$V2zpRA_J4T}v0tXK9
zt=+CS%>E#8*$=uV<Hj2b#XeYa@TT{A-pi3pi2E-a@&9oFVv{6+2kvTl6Ze3x8YjsU
zF?8a|lb_@pU={+nrgi7hnRT)82=zyC=cADNP(v{aiKtAJKBLF&3vA}tPXR^Xrsrd<
zT~9*g4@gX1=lj{Bez+eA5B||<ALso!%pT@^HT%^8;X4`)OZ}x-vX!6N@7a4h&Gh&Y
z5KQ+^+^7HZW^@Hh($+UVw%nxZ`US74t8!{++WzHPDf;?|mrs()f$KvHdS?)S=xfoI
z+8dps{x-ui%Ivs64SZFUy7ixfsy*+MbeEvk!BaxK;OLb0qt1i|SaS8zaW$8Mm7o9Y
zUzZ`K^;2s2j7?<fP9;RjWB5?7?~cD22e#@uMt9_kwku-0q^mn2uzoGnW~xmbctg?p
zE6SyKxyQu&{*7lE$_k3gcnrR6H4$U(PXb_lc1KWO#YfkB5*)q#<_B7HYHT<WPh6ev
z+;62d&x=g6L{z3@zO&BjgmON#cq70`qWEEB>YvOKSYOi8E~bKPA6Zy|HN5K-0MobZ
z$U6+^xa)&gTO<nvtItbUX_p3nk~!~%C#Wi6FWfjMNnO&kt@QO=<9mu{=vQ9Vxk)lP
zt5Nd?b$8ccP}+uSC?a=ZxFQHS)$}7Ks1)4y>-E-sP|@ZPtfLEe`Z~}Fb3@nyu@C2H
zep~W3W`K!#E|Y`3=;N7zmlH1c@du?TyYN`#K4IZKc+pGmvRUTi(RZsA*6A-#9{RlB
z%FTl2jLP`<l<&lZ4AA@+bGpqR4-yZyXkc?wxt=8^R2c|09Ut27R;SnnIYMQ@;QrEJ
z!FrC-IJ=&y<x3lKlG3&sc?q8-FTqgu$W{`dx1ut*A3M@n`D8wIjLq4+@kiOl<weTn
zc}&V~xmEV_VPw5RVcFit%~@(~5oYhRR8%LJ_cw8<UNHpJA?Ja%(xEu|lL=x#b2^CD
z4^63Rp$$J?k|6Y`iT7AS3@v<bkqs~O#Qb@};Oyk{Yj1*Kr2OR1+fA?gSUG56=?>>%
z{S6F@u$12j=aZJ;P`{AYYo6iyEVEV=0AJ@Fo|+`Z>upGy`!U`%YtXpZKq#gjy>*h)
zw10!@R<i+vg;tQS)Y(f8vL_^GOM*-Vh>CnR0#?}K=p-e`$6cp$q3*}xUa`iP13ye@
znpoP|ovE$v)X~~w$)sz<Um`&s!8ZYhTw$RYu<{?*%O~C%pRXL$WRtD?lpn{jzM?q@
zDqT(@6M4@pYQZhr571DypBYm-jt^(o0&9_rMgw+X=p-G&wOZj{d#87+`yRrMUgV7C
zHSd(kR<W)$z@)%282XrLbNbQ0zca|}N?&<e_GMt*FoNZIZoD(C1rMxHt_h?>bQ?lJ
zMuGG3uSKzOd)4YqMJm8HXH<H~lK4L~c`tS4`Xxw!5z6QS_joaS+n!H*vmv;%-LEZR
zC7?qmjR}2OwRN8x#59Unf%x+=YwU1A07Po8Qw}@$WngK69l=ub`<q`dW9tV?<{(|=
z598j;I$l6*zLK2cly<rPPEBwoY*lZsb7;vq-6thr;ojbk1(IC#S9w&3`BI6<B(-nX
z-ooSEk!yhFe`w}1O4Z^iTRinJE-y)}$ZZ!y`GYcg?Z#&$A!dB%MHuO79kKUg+MD2G
z>U&nwX%|MsiXJjk3lEI17n@UJi@q@K1(pQuswUU;NIVn2<nbFL_c_oL$XZlL1Y-HX
z%}Sc;QN9yiyK(kw;~K(lMi!#h?Z}AlODq)_8%*avf6nTWM$#!8aicp>hKPH!l_+%f
zjZ|DWZ(@4QIL^PyADwMcc}D{yzU4{8pCvaF(w=E#-hU-(@8=OSNA&Y^RT{NE&*0mj
zeuQ@XY^5T-Aoh<8+-@FUW=hAr8`?IJ;eA9Z=xCW6i4Wx+Ec7rv6hoP>PvB<es}=W3
zlYJ5~_1kK)jeDN&8^^&Ns%+|1R>7V1#Libgj*<*4?GY!<s>x#LBGxlwi&m@D+G`c-
zAZtcnG=a!#L)W<Kj-%tHSza=n--o>)OlSC36N@T5bKXE${YdTuf`%5OA>(GrRJBP1
z`q@QydY97(NgEss@%SLIT)BTD%5qb`Eo+#lr9WSMAy%9QiA1q4IKSS(ptuaBxs<Us
z9Hi(*iU^L#3=KG{M9J0&m##4y6!AY<kd|Tq|Ju6sW?*(jt+o2)Q*c0*|NSdC-ueRZ
zGf_Ow%S1^;&;|n-71;5QtXC=X@a8%v17?3WuC%EZfvLUY=e>~wnJ0WO-CC<+TMw9X
zotiitGdNqs3^<j>FVtrL?5kXG6r>J4w_TgS?S10>NC{fS@=+2~m+kxcyD=;CLbbQ_
zTujvQ%-;>N{(|!n{9ga|4aO;fQlqXXoD;Y$iE(3zu2_-KQtdj$o`jOwh<2$RpV5aC
z1F<Jo+MAYm4ua1B?~_NF7jKDyJ;UJFA6^}|j9id@mC*cGyBeE_S*PS$$ut^xYoeWN
zSrvp#@vqt6*-_9e`Zofcy}l5*=y5D=@^k$oP6_A@A@6KM9%g>Ld@NdO&{gzM$)m~h
zkgJcei<C>q-$B!~Ht6!+-0kdjOZ&;q6BC}Yz5q@hlilToA6cORRW(*bO*o>T{vbB4
z(S4UD!a2b+=5v3vi$efa*R&2udei5WVgICTC#<fV+5X+*F;rq&87$6@m5OFxCBwPG
z8pYK*k*_N!$8dJ5a)KnmeHC_DYMGJQ+$O&0_P5c7=P2PPazaZsJFwNlt9p}z<X?H-
zQI#vE*J__gP(O}$UDM4A)t81ib1|(rbBzd+kDCQv=$dZhzsvJ*EjCIWz3NytX#~k<
zy_vB-Klr3MMDM6+Irk%FBF&2+Vf=oxRf?<1-G`IA)Uf%1z*8VLU7i^Apzu|F7Pz&l
z;%E*sNz*z=wt4VF($ZBuW80m+&_mx(KK}7x=F<$7+Kemr4<E00N1#~)-=C|!!)>r*
zI-m($m+#*V6>+mGE1lAiEj^^lGew2F#&cCn-f|TDXw7t<U5{UPO(T?_5mE?yvE_sc
zGcCgI2K!<C(ZVQ#joajkCWrJ6P3yoE%ZY(j!aEvDN&&EmTeYYzEgDrsj(6<|(u3Z=
zu;~v|vDKufqdS+X(!(s=o2d)643Q(d{f^{rdM?qxx<A!IAEO})K8_OfioE|LKuLtT
zGu-Pv|7@GP+uaG;6j*m<l)uzEGwVGHjNM4;ac=dt^lE}V_Ltx94jC1bd5_!opvv<*
z)SiuztY$s0qo+Bt%hC#ZIK&<)UAU0|I@+9-qX(iDzfH7)2zEQqu$a=f0??-VH6%Zn
zD~BdGZYFhsJb~7h6JSJgSaWN}SMcnm1lbeU!!m`BU<SMQRt0If0aF@{eD|x%fW4V;
zPQQ3NG$2KS2yK;bKeAQmrQU9&fXoNA5WihH|GE@pD^@-3M($rnctLH)TCv%AO~oH@
zf;rsJHx!lDf(*U~<Gyo|Emii9&<E>0%0I70m9Tt{_?{}9sD-_ucJS`4LNkqEnH)Af
zG;)gn3%_5uYF6Phv%zHZ#}<xI71LbA68hvs$(QVGxH>f;!`1a(&S3w@n)xQ26wo{T
zB!80vX!89gF*otgf3{UPY_LVnkTO7BL@7Q4D~eL>rGnvOo&OO0b1yFJLV{X$)J>i+
z=-P>WGo^(F%(UDpp@wyq5xYHshzrH|Fns^i(oPw{m0FbdR-sxhy-IX5=o)ArdKDwh
zh8Tr|e+Qu>+K=D=THu4WMC0BF_#fOs4v~~N_G454yN}aiDFZGo5$-}DrWnCtSRi+M
z0@Tsr4Y}dNybAu4llDb4;)ld5CXg%@XD<F?5~9U4eU$Hb%$u5U4PwY(;jm^1eAnKw
zfTw@jB4(_$Lht|BxL#|2^mcGMjbJfc#>yBd&%5B^{o<=s@4=|@<yP}Pg-1k?I)`dt
zcg)j6*59*#WU7s-Dh`TflSxo!5DZG=m~XSEURLhfP`R<8<|29zggP&2G_$xSyaPwI
zWY_!M7n?ZOegh?7Aw@Tz4Vr;cJWz4sI+s1jul^s<^_LW*;iIPQy>NQ`hxf3%F0gA~
z_uH9kf!5h!=-_ZBYI@B?x!-5e&(iwotQ*=80gx@7q0~L6s5$b&uCb=}BzwKAYj#p5
zr!?MFY#;sc4g_UqTGkd41`Cehy?g&<?kXp52fIdWR;<4R!JSl-b_9o%VF9z#`cj*c
z`V)pZY)ISLM<><IF&$S-{x)_hnC8%ki-NHzi|Kont~RMWJjm45HiI077a#UC&J9}n
zV*ovizCE#Tac4cp>aA~yxK%?I2%yN^V$)q$l20Mg$jnk*FPWH1uq!#O;0H6F>rhXS
zgYfKdVK;N1QO>Rkx^=K|_fzA<nQNpbNJgw5TiILKzlrH!tJf1<5jFqF*AXL`qM6==
zeV|whvc`%G^k-Q6@47VIew8w?AbR}Oqi9`<PYQTuLmqpli)YYoXaD5av$*b0N#lMm
zx{G?~U2j95|FtY;u%{;-Pb-hQuMQZjvd9|-oF#1fcNXl?E!;1vUqgIj60aW-KuJ&{
zU}R<4R(p3!q>`<X3JXY=x>&G!wK{ombk<<nu@|mAMa|TXQRFs%=|}lu4EXxTaN-AK
zlwM%s{_EOy|0^!!bQ(fFQjQ)36etnu@9zd3!xA7|c1Tg^4U^~6-mTuV^j3Cas@K*+
z6pzTyXuZiZV#Nzmu^sFhr8BH4jcaqY0x0KAT+{=z!v)4%0lrhb)7MfLimB91u?1@+
zC-g>4>KKbXhJr&^>0w6eKKCpY^p+N$JWzVfk={cC;t3mY<8E}}+R}~Fv+YM_Jn_ED
zFzR3HVc4JcE)<@_!{jQDzI?#T%wAX46KA_yaM3_8=-XD`=9Ns-%<;Vo^uVZ4y9F+H
zdtLhxTi$xJ8H>^Z!ij^X7J&feSun{&cessaY2fA7Eu^l}Q56Xpd0fObtAfj@1??Tb
zQ1;T;qIk%JbgYvh&6=%KMksscVxv=GZ`v!il#K}m<^H$(X{PFl5(`BSk8W1QoT-^i
z+s%ixzw6d_y8oAaYwJXNbvl$CV^pi6T^=9hVFjuHh8I{mgloR5##L&aQmPpY>*R3@
z(fZNDp#dWy%I~_p`*;!hTWqC7+wuCziJQP8d#^bDQl>{hMp<ur-ww<t;`CRhDx)&P
zvSj0GhV!AX{eG>OKzU1sCgOwQzplptZ&PAh|CXJuzXDT0xv7*5_zuYX@D8M#QyMgs
zDy;cos66qxN#fwJ($4*2n0lM6!z18Z#r;cMPTYZgM^~r(pH_CO`!BTuE>NlNgjCOE
z^>xutR?nJvv(9$Ye2>wEzMUVU1je1F*^%mmLw`c!<wBpYk1h`Pk7bQeM&PK|&AMr&
z@bc4{&lWP5Fuv;*wcXXvFqm6#kFPe+&FYvhLx*>85DZfv+bfwA>L=<}#Br0qj3HbK
z75<D|_s)l<&7^`O{z@EgKp!c%bSJpiyRWPuS`=;vIbANF_K)cv{JCppJ#!US{ZY8i
zgZ@fgsccPzB>raOpkdR0ZQ5QhV^k|Gy6s~CDZ5wo5*2F-i33A_xtN@Z?k+fZ<!*yp
zd!6>Tr57kVo8ZRdgyjqWCk*GfFrKs1_MABPoymg(WMS(~*z*HA?Oaz8{7oy<w%&l(
z_$lmtx9l#XcKSVu2~I_d`Y+`^+(PyBimTwl(mvV^*UVZ;dflDw5{)T!`gSia>a~Hj
z!O_!7+nScWq4T8!=|P>36a!hTV$YgIMOhEi$5U<4XMLoepJ&&lfBD9tKd{G5VritW
zxcVR!7}wLt!9!K#nXRyH1n!3dvi4?|7KSfmHa;jR_uC=qo}1vpQyt}nlupGl`L=Y-
zA>LgsUQq}1;W1IJ0nSZlV;L0v?(8u0HsQ9VF{x!P8ZO5HqLY)M+@TAN(_t86a|KU0
z$Q0&=NxmvOEn8>8OPE-~ysq>6RwM_!V1kTTJ~x&nWD(v^^v3?qV(xT@P__T9lKE@J
z+F}?U6-AJ?eQJvD-Rm9+nKyj>r-<h7{)?XzWu$qpl6I8!Hm%Vm6jKRa>5R=8kF)Mr
zbMNzHo!jNDH!9=XX^2&GuNeAxe^;{uB=pCYO8pybez5#f{q45#(}q-CXeFf@!fs8n
zJjxXw_&7l4=+VW=*gyllHd*d_CX%t%ZO!H#k`S^r`M0()Fpq3y$VP>KM3&7NFC621
zyw|uh4EaHcpqKODK3htl<2!rWWl8ek_ZY18M$Gf?zva$9jI$w~Y-hKoA`aS4=wA{z
zXRa@;j23}qjtY2pfnMqk6E{i=<QiXLv8$Oyh1Ccy+!jujUusG$qc3~bjMZ=Lf&(0K
znWPh{B0sg>qvNrsXiVRz!@GTB9lFry1JqfnGut<4y?%aQGkRyiYCR%$;yc)(VW%u|
z{sOCx2<Fhp(*(c22d(N^pSJ7<Bc-HPPJ;d&Nsoz8>II-mzR?h`rRx?0)8z(ZuWaBG
zqBcB~UL;^X@C5?WG${sJ=NKIB8h48`$%ZSf(Ce<S9KUMY+K@v}`OYre&PqIx`g7;`
zb;9-!yGi89)8E3|w*kuSWdYV?^^n+v{>qNhG#f$s(6paH13Q8BfBQggGgyj4`Po6`
zJp+&03udwR>a$E+<Su)<i>4|`rfoxYM=Oc`7UYtEKxglMCWdbW{ggGz!$K`bs<}t~
zAo~gd*V%3v3rl1U-8xG+iC($r_>;3Qi#j0FUQXcT=m@eH8nEFQ3uB3x<BC<eI$V(Z
z_&em{t+iUoZR;O)d10YuwmT={vN8E%omTP=-pV>!7Dg&cHNzoa@o|s71*w`#dD6W;
zl6C0L2;0@We$=6hQlDdNhH=;bC9UjNM4m+dQO1mNgJ3Rrup>FbyW?COJ?NlNZI7<`
z-a?Jc+7PPLs;fk({OTl!`Uy>sRq8}exXjnR=WHmkA6YvsH7Wda(a;buG%?|Qy7haP
zwL29IPN`PrvpowzPQ1B=u|?$Zu?U{ZjW`pWLteS<jL}A<6@RX9PeO9~AV`eYb8Srz
zIIz;R%+=0YACo)w*-Iv*=36NqX3?Zozjijqq7Jtw=mQ^08Xz_J{Pq;-z$7nLUwkS7
zX*O(*4in3k<XG=>Ai+WyJ30A`$c(!au1NDBo8FcjcK*Z*Jg~BtZHON{hnB@=i{f1!
z+N>|3i3YLycBzQuBA17R-G2)y+3$<Q?sk6tZ8b6~aXH!oS%nSkb=gtS#c%~VD)?}`
zC$*&BFp-*_U~=XPstI|w&l)kWqW`DqI(^R@$RkzLux%JvOHbdZofA7(I9s}P{Ix|w
zhAeJsCg|*(cD9z9F^}y5evi6Rrfx!U@>NnJ@pk+sQKjV~?D8Xf7vrH3pS@QUq@iYj
z;EC<fov{>z-Ch@qroXu{>ixT{*s8;a5m}k@*%$3VK?U$44{pH2RG5$zy8a7qa!E8N
zRVN_XG096Nh$*wCAQkhoP!&%S+#8~4@{WOp3x9`J5;Y*MIaZgC3Zd~Wn{Z4{a}m0k
zJdhdiUU1(3C&P#%Cq_+deRl6McYA^>^%^9B>*Z~UQwG@asu<}<_CJQNm0#UDN@`O&
zB1Qa*>Z_|ZG->^75gFXGC9)8OWQ?{((v>jBycBsk`FK!oqIK*nl86`f_aYRX*jpKN
zH(EB1i;RwMX3~FIdV8GWpqWjo6L||ye1X*{Xb?-hpnCwG`k107=7l|hfg6nkv;;?J
zvO8pIZtK=cx@CH_OVGYT;9c_*G~3$rVw-}{M^P;-XXxksSBr{I6u%&J3aAn<(@@;F
zn?A`%nB2Y5K2nOwxR;05J1?O3z94PgkRP~;f}rnK-gdBDE(Z%vFgQrVF##fM_puyD
za7;%*Mg;aMvV^XdH8|2d+8txr`>ih5H~;93G?oh&HoB+nmJ&-n8A+PQu2O$z*QSYU
zdhsgOMXl=;FR<f6?P;lpZh?WQbK#~;+J)v%Qm_Ow(<@I!he6$<_(YcXO>*xEeQF?$
z6P0qdc$_yU)~UsBL|`|K_+|$CX?0iDQV`?5YuSnLqkO|D*V~cbS^7~uxu6v~<Arxw
zk5M`~NOrt(%gevlcb^mAtPMK6PLW0~;awlJ@Qx%j<FDDnNov--e4bH33>D<NIa29V
zZ9o#~(WiY-___}p9z8WX%YJg><iP^)Gv=uwQpxIdV|YlM%b#|Ghp6VlH`mUx&7IxN
zTzF8zjA1sW6?0%F^jPVL-Q*vxznW>~uHa=XL*U)ai$2l;2$5Kxrv5y5;LLF82L95n
z_?vW94M)X1VJ;-^!yCuGyk5>@v(M+l5*eLb1zhokl_j2!D2RgICSosc+=x)NOUmOJ
zwdFdy)AaG0mrxzwfVIW~+G~qmCd{!Ffi)CMQ?CQ;<tg=TtgN@`83Gs3tu)&+fLOix
zy|j|Z*|Uqn|Iw_mh9eSs-BGws+TqgTScqBUYcM;^=g#PtSfby<@i?>9f7heQPy-oM
zHmjE86uubmzn#{;Wzcj%cBflCz8HyP;_ykYYuIa3i|RgZe1EJy`(3Zb|3agKN2Zdl
zeW-udnEWe|HU#xRJ1nm;6Ui)_O31$XtsB1GN%tdx6R6$vzE0h~=OK4KL2LGXfa}pY
zX@FyQ0{i>myGE?j@H`4ShED2jW~!<Bj%;HjZ!wtm#<mXk4AsUWzSeBq4Z?3o%=GMo
z2ENj$yRlCZz(GR4{)TNkJmI@Aw^(VJ4|udM&Lbp63uGPeUp9uxgoU<z2=$|kib_!_
zRu{Uf<Xf=AS1jcWCu_xrOgV}yM9};0|Mvkxw4@GkR7w38I3thslL=E2Ed+t=!XO&I
zvMH*uC^;-Q+=0?xsn2W!^1y!oYKzb?{~9wgQ)g`gb?eOcWbJI8TF~<4xJA0!bHzA-
zwPiRx(f2G?=Ir;7vlx8>@<j?J$Q%Obn&=03VRSE?Dn@lOW%p7~Pj0AoI1|nr&uTYk
zrMVVKDl#8NtqA>${k>=BHVKxm)4b+-m_xhzDm_fD_z>VRL&`G~M$Ah_G%ce;HAz^r
zb1t+xcBD=;5hr4-b#OW0UjUH~$iBO|H{-ftExWnN|LoZ|MTLFz%4y%Q*d!O}DQzZG
zYY`8L@aj#z(J#j=#M19utWA2~fdph-Gi$I&AKKJtWHhFYDk<0wn-3sA%RAG_YUv4h
zj5o#F&EMQ53g&#puLe`5YPXk6m@~<Lav;lge}!w-;-;I<QNt>c;zKef;zNzW2G-K}
zt7DMn6UxIAgh16i?vf@ydSMFi1Z9aqU<a;Ul$Jr12X^^B6s@jICje8>Rn`-g_cN)k
zlQe#=q+C9~JJEEx&SIAQ+y%d|Nr*Wk&`A<1{vi(;52cP4{voPcnFO?%Zl`8BbbGDs
zK{{hZzo%{-HzVH2d5tyCN^|CPYKC0QLVsftg7*ph-c~B)AT2XoI1-uzGSiKVBelf$
zR*ly<nk|!xBKaF~9}X@065kX0Vbf55X~?Yl*IA&kZDe72U<WA2RNA{f529kI0Lvjc
zzjs{$jR?5y&wBs^I`?-p&o$Tj)Ws%+GdUkUiZ=;b7d!7<^|mj`gTJIS64Q_Xt)$|V
zB)8~zpwAseesDa8%30P0k@zTpq6J%0zr$(RT@Hj4Ym&|-In%o3=>Q?{V4eP7Pf11u
z0V(j~F)YZpzWnRB(8uK`)JbmZ9>Lx>r4c_GKis7w-qk>HQUo*e*MAw=P5SAj68(MZ
zsA!^^snPS1V)#+O>vwZ&ir|a2QI-_JU%;}IX4Z4pl2fTvWHKqVW#Z|Bkr<eX(`0uh
zl1S#&*oUY!iKNydU}-L5b_<B*&AoK71-M5GA_C?w$T`%&B<Lw`<h<q2%w{6SCs6;a
zP9nvcUvecRK=@`5jk0`#%RzEJ)7Axps?U^`^;KZ<86ej%8cVotLUy|395H(cw)y0d
zuVZ!ILvkRYxamCj_c;Dy=@wg$<HAMw@58il_jSi$)z;S6&LEU$M*FVarzb`swY!xb
z5Gt*>G{V4$QI05<cr!-kP?O1XY@U=ck)S#v{n6OGVKBGW+87t`RcDWj8x=^o^YQdW
zUMANSkpTB5B<iczX~*s5Lf!Pn!-tB(<1X{;TnGEt%wR-ohJk_bnm~$fvRpkLSlhpW
zo*=_MOES$Z*5ev%nHnsqH{B;~{Ex`fN~K4P{r#J}5^%yd>EkTo(J*<&K?)%DSO6Br
zm0o+H+&0sme<|@g0b+5QFuP&ruXI`(^$LrBY2#7fUnwe?ZP5D9it^nX<L#5Jtb?_?
zX8-U5D~~ScZ^NeisP5fQ%m9Gv8#i&52aZNOgAdc?;AjU%^aDopol?OpjVm94UZ|vo
z)nOf1d&0C=T2gD>?)wj`I7J!~a6Tdn7dD5iGyYUVl}o>kJV}8sLeOoy+nRV^)QCGL
zE&B=k|3s<JkL!=;vLypD%9Va18^Hq8E8T@Z_@0=jGa3dq*Y8FiZp1Gt9p{BlUMG1R
zQ++%aW7g6)04OeWoLhp7ED0zsGm3N!K3eT=iAPmV{9u*;U6=A;VwZ0;`*XnbxM8qo
z;|L}2N|T}0>9+Kyl`=e(GWaYVIDMJVDq4$WUL@NEYYC?ARvq<Dd;;=pGL`p;?qxFp
z(CyIN{JZjGHv;bXJSPgiv!B1^%vTV;kjAynA^@!U5HB8c`gv9q5Gndf{GUL_O?${!
zF`8R9UG*9_Km7%pK{5gLMSCInw>Y&Cz@oaVTM-N3X2HPWy29FXwLOA=0K1X}G_=kL
z4AvYnD<Y>!fXNc>Ch46c#FH`rxbg1ldjV9x`ly-xcxjVik^*czb<+W6=X+_{RswhH
zzZ>QR)lvZ8RorJI-nn^CM-+E8B(KPIkSf-{a|Ao+&=p;O!2BYqv5N?3;3PmZM+y*o
zzy80wZ^iGhop7EFyU*H_1Li1ogsv<R2ZwxCvo1n`h6$LXs-O(!@&^58n3AIJO`kL(
zfR$`X+#Zr+1{wT#NOvVMKp8yKyji;mQcrCfM`(bCwGeeWKInADYs^%6#r>>_8qoo9
z9pJ4<0|an!9Z0KnFRGycf*K-lAb!3HzI9oO`QIh>;Qf-#O3PKZ+rz*XWzUB1Z$ioT
z^TiuSXn}^`^jrV*Ko6G5vTlJN8LVcN4>bc7>(iW=1-!J{eM<s}9^{kRLocnqOD@C^
zYPGjGt;PJVod^JJ>PX&^6Rlntu;x+32DqsaepzW<m{4#Ml3x(#m@V~^{@lrY;N)};
zBRZ$QB=(sGhj=<{Y7fa^vr6Y&=MVszSVVO}eb*)w7C?c0wokM66o5H{DnU<nN$2^2
zUWU)rlr%^Z?aPaanc2St81Rv@J3uh?J2#KCp0(JJ4$lRg`u_%2OBuX3eDbNy?jHvb
zn$R#p2Q+-Ygnq31n(8zFf8Bo3b9e9_(NMXYGdOQeG1`Hy!FM-6L-tWRjjZ948Xxp_
z&10dsQl)tYaGFK&y1({5eU7-#IZ^O~JwnVXLJnNA^R;FHMwQeIvL9_O*R3I-&XMf*
zutbUs_%K=U>ja9pOJU+Y>|^_r7n*km9|-`L+r4ZJ^lUPVAH&tZ$^*V1|4%9->2>_3
zq)ULh$BU`O6yP+Oh@=seQjCTR%@GB2wGCtj0m0gV_<4I*;O!t=wQM}eU-B-}pC9b3
zPzp{P!OevOTK>TI2$0Rc`;Zi1N8f^Joc(uuoFJ|T1UMcT>~?&hOKAu&ZXyB1uYHVO
z(Nh6_{)!pU6mQ&?e&N<KycF?t_5bPQ%HyHl!u}ac$XZCYMk>=HvMYNjx>;_Ky2PYK
z<AxbqW1X4QO(i6y>@K3Nlv0)~GYCn-Ro1Z%A`BzLV3zmH^ttcn{rmOr9MA9ho!@hw
z<@-G6YmQjRxuDBm`R~e?Z5**eb8*b<m&{v$bOXuV(Ka4Ly^k_W6K)mK0*51`FD}UY
zT8UO%H<LzySPiv@K0(uZ^oeVz+MpN-QioUL>pdnSiw!(n;dU@0XG`mH&?&FB%p1J(
zD&xG6#@ok3w)-X!l%G^zabU{od}Em0`f)XGAd~e;f-l|T5dP#RVG>3UuOb8n){N=d
ze_oKt<wI<NL*7CfAs?3TZiQx`<0P7l#2*p@=`nS~4hGL5TDWN+IDn8lglS0G&w#ko
z9$BFc$kxmRKq<)SJONh_IzA>$*1n<WAr{_nd83wo_8s2LJ>??Hs_$`yJ3z^v+YwJw
zUAd7rt2~NR)<q~b?bVd%-upQaTyn&N4tSeZAWWlLyDdMcyX&mbGrm3#hn#l|qCn>^
z>a;lc^h}~-LcZWbc&r5J{>@getPDEP5XX)=*@5%PNKs#{M+2z#d;HV9U83A6D`^?z
z=n7tfjlrZHzf5^?FmPzXTWI8;0xg4%*UIyT#qmFPK3Tm6zn#^e<G-X>r2CvwHpZUJ
zz=uBpVcx@t?!>?a$<;LU;z#OVzOtYxkpD6*i3Rzou3iu!{Zf_9Wv;!+2CRnGmt}-|
zKT{@V`Xd5b79Wa%(HXwhez0!{Ra2gSdFQ9LEIjOnCe7<TOK&6YiQ%nuzoeV|OW!aR
zYf#a(3G~7?NSDK27^NG-Q{YRweE(8TxaawjYnNeyef3BBG8plvhll`U(ar~k$)6sC
z&d|(T8$>AU*%AF~dfd6|Hi1Lh?p2n9@R;Zbw#7xR_&0;+FZxUL_`b^lwP=j^o$r79
zoq?O+v$Q037o@uK!}WJ%El?mIo(`TF`S)im%agPOk6P`VgpZn>oHXSJlgy7a5o^cc
z6VsN6+s48Ct&k8VeLXL9{!mi01W5&Q!`#=d7P6NXh{^!ZMin9Ng=8{txgkNCw%vvT
ze?Acr2QBsbls9R>G?KBosQI=8X<55o-x}B}s30D-iCA-1mWJPn%7eKG)p!!nI7u)x
zXv=@l<3<Ti(TS6FCBIfV-81aN+^UD@cxl3)c-^dcGZ}7Muhg?BZ=oE|c5ed>VDBnt
zne20_?iyu65{gpMM@`I;Zs4?k*#i!jcKj*t^FeC3{3&><uB{pjIYk1wU*A@C9U5vt
zx_Po0_V91e6P+||{*%%EQ^a}>`KsL>4@P2Ff&@k&%S-Y(RT)*UkX)Tp4V`fG;~MjW
zb0}aUkOOOfM}y}X%n-tGUkcp(x38|vvfgHcbDw`1`XQ6H{KerNO@ZGX?Gaj_AOEA|
z^&Tq(#ys6j9YJ#BXhPwu5TWPmNP>H$?q;PqfdbN=0!vYl;`%_FUU}aXMoZaGt(4yk
zQ-S5;;p$yOFj&E<kmz_cjc?K}F#qU^ezCO?`!ZncOZI&Y2cX@cL$XnD;U%pL-lHus
z<!S2KW1rEVGp)AUJOP;D9l<UELgRLEm0fZGC!Wjj)q0$cPXF@X&&*e~NsB-uD(nBa
zDB}QgJolyu-2Z4;&`-;Nn5pf2hk3bIYRcnC);N5!oC6qVFq=^SZUa<`!25ae(k}${
z<?%+sgx!Q5io!j@LiaMc?KeD->kj(m;F=5BGn$0Ut9$9@8zm?r*6Ui@=ts-1h!zqH
zrUH))J@aCNqp#KzqGM#TS>j<K7<y`nPN|QA7_ufO=e;8Zg2wDz{&moAeBGBSZtBP0
z7YKvzj%#wwnZ#5kf<nFAN;5AC|IzrC$RRiJBSJD#+5v`_)T9)Os<Hpw74y<qre<t!
zAhdKfBp3H-Kk3E-g1#gSGGZ3)h9o;EwEMfOR?#O?OZ(!sUGNx>78>y=N<XE;om8Y`
zS9Zw)+{SuzekO)%5a~7ho|qW*pk``&+0h{susm=zU`?3xe(F1QS`3)3cB1z111ToL
z(qQ|wLF{~O;(sfzshU{MAt+n;EmIgPK|qB5?{@`(nKs$$k76@63KGk3I_OnvX4DDC
zK80cMuU{ejnRC`Uf}bZOtw@k)kBi?jxV!-RTbOQ$t5g+c;sU~$@x7<{2>@SpBSDHV
zrL;$|V#<nj0;UnLp`co|5oStvtDOOxTcWom3)tEP6{-W=U&#IT2BWiXJzLwc?n+hS
z{6*%@AY<TdH+3Jhh5CcP5+pmDe)6FR=TznYT~ZyoC?!eeHbe@tqkNrzj+-$u^gq}1
zfd6z^*%rQ+gRq9T9|STMDLcdpYV>|D)VMqBMRPl2%}*m1VT7GCy4q&(VDS~t@hndk
zAQf$$3pq2il%6Xebog1KX1hFqZIXyJGM9ssf(alggD!~+S*mbxyw1;6KK>M;<mEN{
zOMwm^5?s@`o#1SN5It!gz<ATED9|NTXv8Hhr2x$irS>fBryB}`my3C+zNo*q(WtCP
z&|3!_%|d}KFim~EOw__hAi(3*(Rg1}ZjG4K9YF;c3_aHCk24~aN2<n6{F1o|jHu9;
zgn&-bRd!jtT@v23Lmmir*a=jBYw9P;-ypYSdI3tPjiJTdrI2yhuPg8wnkESp3KSYC
zn4Dz6e5ZFSaF}q~2kwj7gcQf4ck)s#5{*_b@IN>7$}8<@7r*zAk)Dm2Za_nF?dWhx
z(nHvI*i-f)j<2;B3J|VLVa$X{>nhOt;hKHyg<Yz5d_QYu?YjQoqvR!1diQW4+=hpf
zPTCT=!~OP7R*|#HDdPem(6w_hA55VTg157v3ONN+2+`3h<IN8PVlJri(@z*%ST~E&
zJi^;Fn0d5kIsuKVF;kYR$A7rq@)UxbQ~Ys2go2boUcCb3Y@;jq<x|oy?!nWYmkFEt
zpq~ynI-~^>o{)Rp7>UncGDPTxu-ci3P4?UQPcl;dqJJ`UZqOPG5hVu`+I}cOWpJAK
zH9*q-nOEw^aSvZ;t8{y?(A1VrQ!MJyP`gvWR2{2+mhS62NS3ks(UfTkG+Nh|R^cH$
zrz$a1vbKql2J6{iSkJm)`xTJxR@74r+3zQ#Ioqhy!r+aLxNa%4XaY7Ag1-BbT-g&7
zEnA43Sf$`XX|P)icBFFtaJsZTaN4tT^2HymnMH`r%t_cweT6vUr^v%UbLJqZzHngm
zs2sD5IrDUk@x9`wk#%l0Dywv5#!4JJ>ZAmIcVbW3Z_JG^d(fLxJ{kPok7R4UG<hz)
zk!Zn;lljhH5fI|C>BODcQsLO<eXvFKWe}*piQ?R1ja+Y-l?Lo7C%Pd5OgzKV{vNlx
z>c6WrI6IZX2P4K`6r#&mGgj_)bsg=2g%V)*85@?fheWZ9TqA_@C%=q>IsK?1&0y()
zbtZDCDRUdh$&kjF-i#?}aXST34W(kw_RLm9|D~4qOvZNM*a2<s)v2L6vEV{6up1wd
z^12ai{K(n7J+mFr|CN5`Y$g*swt)^g09L0ZOFsL=%=~QfqgTsx?1kmf<tmnL;rj&*
z{?Fl~cEpm@@#Pw#y?OXV6}3|R{9~=+Fx1e1TSNBB4)a7abzq%!ZyQH%F|Wr@>%DGl
z-q`80D&h(5mEITGPj5B*De+n+y+lCCr$oX9lfI(`d1=M|HxTYuPXq^3Cjw{YAsyGq
z6{;^J&H9vhtKTW2hrG4{Un|BU?L#@eL$f&t#%nnUjrKL^wV>ySJ2fB5BRwyg`weN*
zGi1+8rIsFmA+|G!(IZ`1uNySXg@p|vta1)*1u=ZXtcoZ_JUuoeGQ96o7<oNbpS_l-
zGg>=`0A)_%Qm9_1nAmRF=I%O*k5|`w7BsQtIHFw5;pnxfjP)|OZ__<E&DBmHh`jbT
zHNVyeFCwqd3Rvkkvd^<7kO8^y8u0oxF~HIojH7a2{moix&brfs9jf<~*Fbgq52^9s
z8B9QP;eFgTYWYDxv11}DbwxY16Fxi}5XDksY(V}A^hHJOR*oiThPZ*L{6==gUj~$1
z<mR}TdWlY%1}{l6CVfIANFh^Kiw;cgdO1eE^P@hw5{rdoRFb*m(w!|DciY2#gj7Ur
z#+Hmim%DU-D)1<u*LeF@{2^~hzj0lA(5}}0*EE`A*k&NXU7Uw4@7gh>t+PushfXaw
z0@gEBld0W{4fu)&K5Z_#7o6buLhUUA=WAR>BT;d+Gl^Pm0IUZ@;s=%G3sbk={)XsC
z>f`#!b7P7-bx%>t^?>y{YqTaq!c})u6rQHV?=|E_o;aYxjB{jlk}I%iKw6%$@N?dn
zt8`F)x<@tp_VBT0Ys`^YGVPXmiwFD0)WP6+NDAamp2BU+-IXE1gvBk5(drh|vjs=Z
zSDeSaTZu0}T5)@Wp;}Y)fDnKKJcRmh$dQ_k^fL29Fu>J+!7~R|xZA56hfQWU&a_%j
z1bFZif8ZkLvSO;g$E!?3=^CMtXpgjX8kwyBjhj+imypXiOdn7H8tOJnMD}sxyH)1g
zbJd&E#V4|cz820Tx0j+5FKN!UMn?*Pd^_yLAF+9?WPb(XE;U7R*`hjKMdaT6I{E9u
z*7Z>Pr&|M5FbMGQ9iqX~hG5!qJzsU+=)8SY^TX7zUH1(_4Zbgs=Vi-oA#09B|BxN2
z-H!mX;<pHJ`b;NsaZtsIIGY+a+8;^{l{i&)X>jeVc^#FC>b0z2^?4)(tY0o&WhMBA
ze#*L8zF$#IkEn-_k9jDSUA~(;OBvNs<UI<3_)-P-2msq6;#{oU+p_PKABA0!rq*uk
z$jdYL<t+M2AwEiTk~!z`wwPsdk~}3wEr-N`#6*&Ydvo@~@<y1Pq^^9p&w0nmF2YZr
zA?6RSzIvL&u%ni%1ClD7z>LA{hzuI4yLA||Bg3Nfj0pofE<ans!sZY<m8s>BUd$tA
zp@%vsgjaxZbSHP<!}Gwdf;MWXw0nsU?C~y2xP1O0BNoT=*{DKnj82D;k(oGd;W#Pb
z$V_Z=^w1OkL(SJcmP}4rMS4YjXrM;3^D-5A(!03;?0+t~?_9ckNp#eFQsG#0i91C(
zVxs9zqIn~~uN}v8H(wS5nEf@|f0L_i&8o(48b%sx5u)lg)7Kt*(6;Et5e+Y>t%q7y
zX>&(a{<+HDvoa?F?(c`^>)a3dl2R6Iv(q{y9|!d`P{S_NJz$YNb=lVwaJyEeQGvt9
z0O)h=VflCMkGDuIS8JA4SGQW4q=v~)itlvF?t(~3JlP<`aD9dP&q6~uW>FYc>hDkg
zDOdX`>#K*dos5d|uw}T`HB|@7U5KhdYzv1E8cv`ocKuKRVDs;Sh@2<0bH%MWOL#;2
z%b2_^+I2oh{0#|xzjf6(>(-5Pw++DQtTsqerZHN4lbJQmK3?0#_=a(f>blz1>55Sr
zavxL}X7z`ZIvT93e0#aj5Lxn67g(poOlc~qZg{5^VztH(#a^2}U#+L#2u|;A;tvO9
zFHLQ2j$oEQU%=+(@Xvt|&_J#kv7f|XBqA5*tzqhjN!jcL+op`xR=3G9qw4{=`N(;+
znQxl1_;fIZV-ccVf7GXCFC_iSQk$~VT~NAy=`i+mWOtWtvuy3b9=5)YQgHW+`1x!j
z6x}kQy6@7Rb#v4fcu`kt9RYCD0&hSpRl1>YxIOC3MfBbIv_t!#uRdKJ*qYKCs#@lE
z2c?a^Y+0)I^Hfw=na_OrQx-1{&gPEPvJpT7GwVcP$wYeF>sbyFaqRdy=O;GTv$Re8
zhH}H!%!(X4-}!SU_fKN2AiNUQP=tNbo^O@Tg>yc8Ce9wU*<GoNhdgmZ(KizITBKao
z-RyRRY-a@r9im{#Czy32SDW{}$dvV|RkzZ|d$XwzCJN5BN8lZ+{Wu#+%LvQ@$9bh-
z{zyO<FOxew#hWWVk<xtRyN)4GhBN<ucA{l+xR`f~>(NKV4<{_-1%AbMe6Q4n)U3Um
zYNYnv)(H)@v#~vPWp%ytv@5*-wK4(u8~0BuMQ01H-&tQWW8*fgtqMc58X{riu_iw6
zu7H?Gf8y7HkQ@;}y0@4|`zVXPpu6|B-%X@bE<qX<gf4@%elL}@5LIerhQDr8p-gyt
zZKjH#JueJ)n{mX55XBXbd~H*qNZ6Wo8nU(Bzu{KDc2XBVYJ+QbT~s|3j81^$g<X%%
z(0x?IFGo2eY^yF*hVQyLxDG(j?9iGs9OZPd=^eNBKAf){A#>YHnV<Uyp&`M~$X&5p
zQ4uq5>fX)%wJ`}dnrQsH9P@94bSw_-1AqO8E1j(;d>#54uL`*q1;T8<7@v4(y;f{=
zPT}VK8zp^PRY@XCX0@}}rxgQl`(B$Ks34~v*m5(tS5h_i=~+zoB2C>2A{WO@ZtE3o
zsJ|nlaOi{BVInGiu=4|y^{=9BbGjFUP!U6BO&Bc|rIuKIGvYp64}!9);r;uMvPCVj
zb__UN`yp&&u2=6f_&-!RDa(|Yg+F0CPe!37DDL^>Ai*<CYNZD<jF!yQk#x=ymTn0*
z8Wb^7!rM+MWqsm=LR!(co}RSwJ>t4Mtkg<Fv%~52KYXTw^V*XRo`Fy|8q$7R2d#ZY
zS`$LFM7`0Ad6lzAA6wKP9FJW|3(jqaAK6-G$>02|gXY)7_a~AE${x<^vM~mtqn8YV
z(avLCuZ}}v&XF3Fh;(Lotv*Y3b#z8K+P|bTYFQ)VHhZDnRf&@U$1g-yrr|B;k1~VQ
zrq4StvtIo#>}92Ll|CkJ`Kh#q+q63Rv!Fw)QyNa`d|r<<97jNM+>;PoNVA&`^%fP4
zzmkmfI@jNC`aY5UEQyVwcB98i9ax?EUDa>`8M}fZFuQqvePz5%!eS1Od@^qpFFNX|
xV5^i$_U3kvTzuYsKUzRE3w8bf|B=*~JVdvvk=xOayhOg3<42urUmiXm^FK8ku#x}(

literal 0
HcmV?d00001

diff --git a/reference-architectures/stackit-kubernetes.dot b/reference-architectures/stackit-kubernetes/stackit-kubernetes.dot
similarity index 100%
rename from reference-architectures/stackit-kubernetes.dot
rename to reference-architectures/stackit-kubernetes/stackit-kubernetes.dot
diff --git a/reference-architectures/stackit-kubernetes.svg b/reference-architectures/stackit-kubernetes/stackit-kubernetes.svg
similarity index 100%
rename from reference-architectures/stackit-kubernetes.svg
rename to reference-architectures/stackit-kubernetes/stackit-kubernetes.svg
diff --git a/reference-architectures/stackit-sandbox-landingzone/logo.png b/reference-architectures/stackit-sandbox-landingzone/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..0ef884fbf0fef303b0bf55d4b29920442a71d7a6
GIT binary patch
literal 5579
zcmcIoc{r5s*T0{!uUQ*p8KqLv6p>0bBB3u45o60v36VV>WGO9@U6}Zi>{}>}8M0-m
zDLYwG%-D$;`^-CjzxR5t>vz4&_50_&pFi&B+~-{9`rPN-=X0Lteq?BHg^yc;8vwwk
ztD|)t00i?D0XSKh)2BSSHs(Y${LADrFtA`S7!!-j09P7X+d!w&w{~_mwzgP}thjI7
zI_(p(Ok0butVMhHvtPI7`MZMurhUZQQaR^)=l#R(wvmpMeiX(!4^L5O8=H?xDhr!G
zA91^n%&(TVcmF!Sv?s4>VU^lKnPtl^*MIm#D<q0EJ*VsyWcR6yH2O28_s96m?9}|?
z&DfU)__pEsrSuQ=wO_vZXXpP-Y^wj>+tfGcn2<ibv|K$tnKdvPO6rH-6sy;K^3MD_
zD5u~-ZlP~y&n4SVJOCmsx>_10{zG#a&YHt|0+$bN-x2pq+c$oR%RoL%p!++WK?oG!
zjKAZs*j^`{=zTGKDJ3IkWN^P#>*e=Jn!>x0VFjE(0H6Q{zyLu19}Bsh@RyqO*iG8c
zyh_9L#56MFsac^XzG1c*P-tj=sT;jt89Rdk8MFG<i%FYEYWrnEofD|PhJE&I#-lUv
ze#z+od{E8GW<;M)g*Lc*P135@no-e0)h=CRhtIsX5(ZK`tLF?RsU8ZJ9;=(yl<315
zDuA@p8}lO6d4*bf`u!+{I{Y(BH6)-KqVz~{fcSe4?k|wD&iX=>nu*D*<0I`<zZHTD
z)g3|do_L)7rG?r|;~>nKv*6a1ed(!vgYQE&zoA3-DnezK=;j0E-aE;AqJQr@2efDm
z$0WDr62eX#oXH0^WgaBIEDmvQdiEGs|JTKdTn}mZi@Mw4Wi#B1GxxVv6ugU{xq=Vg
z_T9}7tFJvi)apG8W!?fIU91E3d4n(io=sKJAb&mvGE%8yu}9rAkKI5!wO2kf0#4eg
ziW2Gpf!t)ufE=iiIgWkp;OZp4T&DpHY8l=A9IsMX#;^KszsY@B;3;+DBs<21&n0~m
zT`mzhg)p`U!F(adRtR!m*&|Zj{PZEuE)cg@YW6s%0z`7Z&3{ZsPk7`c#(giTd!Jd{
zt8n3JO?x21NK8Iw0(14(*dj?M*<kGU<{vS`t<O1;!X*oN)(s^er7Y)u80b}bd}x8|
zHNcPk?&;jrB3?*dWpg5nR9FY%G&h|6JRsEbqj>#62^*^jV3Nwny|R;0(S2RL;tea2
zG8G`?@Be9etS3J|m{0&n0YRc|x1y7}UWtJGyOqMPZi7IttaDm}0JWrr$zbo01?k?U
zCo%64s9L;MM6SkYe}-=mxsU^F^o+czY5lYSP|0hI!x<c`5X!s2^?U;hNHum`=rsm$
z3e#Of02L&Bt~eNCa=^bmD3IZfYH?KuzlH9kuj6KM+9hzdTff3tFTLBK9Z=}M`%VuF
zZqMa$!L{s_E@5VrfIyH^^*K2}%HTT!6TLkwJFYGTe5M(S)5fPo!M2=n^(vMXhV31$
zIszQM=CqW0GO%rBe3Xh@H=Yb7_dTU93}&Z~eI7SKz_3kBV>-E@efHwhyG8w9_l_){
zSwIvZK*DGpEERc<mVUGoU1I75<lhs#)j3z$faettH12}9xFpnW@bxM6&qjP*qCLnH
z0=3QbWg5-PW;&!;o~2B*kX8OeuR2=UL<^8!-1Ajkv`YfyfKf*`w1@1k=h3roUvHQC
z*e8JiY3Nmysf?u{zyz?ai+TuACij8JVDZq)Peg&l7yTlMGBvUTKd8LAyu~OPSv-V<
zk(xRFD!6_CH*fyYCeo4plAt{VYCniM;>6`S4~P{PaAxS_+4Jv;4<yF=Y$FoPRIZeR
zr62naSMcQbAL0tg3b=p0umi&N+85qgq^z^$_ra|z_`1jHYstdp!#(*2+XsqFZac7o
z^90Z<v2<kgtZiGX+V+c@yNy1>ZR{X01S-Fc@i4I}F*<!uoKl#s)>{F=nKtkQ<J+Ic
zgP6|`?hPr5UVh5pI#qpa-WdV9axXXQVpLd(GYZ=({au%lC;(4Qg<J6X3rj<pZ`O)?
zC7j~5z#%0Nv&q&p%wzo^FiYoRVF4$o2!S3SBzBsPH%^}iE{>Q1G-_1I@JL|bR{<1W
z+(8;9v^H4gsMspS5;IvrBNLb&+<P1I##+ys?wA+GTyO)Ok{s!!kn<r%`rA2#!`|>G
zGF+90ELGZ-D&xkr>~l!X+3*94{;rSWKIV?kDgk*9wkY8rnb<xoKir*v&`m_Xw@7_|
zA{&^hM#L`Ut9x5^^2|d~p)zlGSlv0+XiT;fsX=53|FH0}ETW9QlT3ImJ04ig{)2mM
zNtv*gNj6r$mnI9GY7oxC>VzBqEWjLrJAX7#R`gn<3U0di63`I>=t59=ba><_E9^i8
zhw)?AWJm4{?TUZ9vlj;x3V`@(fl~?{*hmnUElq4Ol?8uugOy$JC`h_1s{Og;r3Ni?
z8G`dAJVi>`t7r~!xz53VI56h=Pnn0MYkqu~9Tb&v3~-SNVmqg9>X>Hn7C^)qkl<0B
znRI)Wyf%2BcrGy+G5A0!ziJOqU?G{h&wCyvS94!XniRgJ0&WVz$)fa<H`%FJb1(G3
zpYkOxP{fPrL~7Q56w!e|$Ca=GP&Ok#l4uS_<A%IW0G+d7(#;Yi^g-f?B1pi6(Z>y5
zH5Czh-7v$KZPBfOvcaYmvNE=;2YOdv-z?sC>M6soXw;wd)(2>u1)s}%o;K>GxJ(<2
z1D{yG^d)L@oN97-X-5D%hG})wYW~GMQqv+xsqMS+h4P*_fayS^+(tqa7V2KBJd2pe
z4)QM?blNt<8oUGWvuxf2nG+DvtE@~Ua~(<JiK%$9AzjHzxhHun|81Y5{7<BSqlBme
zqW~MW@gm$cq09!8;BNVG#NwKlxIFrL`BPyU59!1+EmdvcN&rRn?gof+dPfAPJVf=O
z?7N-ldtz%m{!^uw@{V;u=LNy)HX`$Wh)&5J%F+)}h>3T6aq0}~KpP?Pz@C;J1byai
zbg=j$!~F+i?>1s|YLQ@0IEiJ9`Im@*z;vF)NTLX9XEEcib7yr$sXUw_&v#sNyJDqG
z@zmi&R~wJ##(ijvF$3RWRi`9@9YDi!I<0$YJSeX3<&irGop7H!w+J8}C51)X{M$7A
zpN4V}&_RGWR)FFH7$E@50ifG<7AP`SEaYUPcT*PkuoJ?Okr*K*4ra|WwUWDpASW9H
zTy~Yb2#nBok^d1CGjO}0cJapi6ED~EVm>%;*NGSy+I4~jlr6T89s4d?FYrC*R+w?A
z_1jRR#VE31cnPo>-<K%12#HL-7)1ypNr01`YLAKaPr?JU9H_n*Cp^~jZ8fgc9kfF;
zg#Ls;W<hLMH;oR`gbotXww{J%c@a=Ka*V;${Bml@PGhk{$A7dT_LkY+2)bd1j;po7
zxR%<QUsShCPkUz$Y-?<-LSx*I+Dt)Wl96U7rCZGQDa^QS3s_@a?+TnN2dw=XX`!Zf
zAFj1<>X&_u$uI%zVZE^tTYM28_IxR4Z!(Yv&S9yu(@{oGSrp5!&N(2)H|$MULOzu(
z?2LNe-0!;|664V8<NL)eGGuReSO~t7)vK_==QT6t{JhCP4umKMSKrd0>jde}X(7f-
zqs|Yw#BhXKB@8@bB`y}Ws7f@-xb2C_&;i?l)OKx6%Z-=rOfP_7Ia0QtvGRxyG_eD_
z-EZ>$W$3K40Spb0{_p^J4#G_$%W7o}{MJOWvhFO*XQt_2^0gmkXO@)hEzRJ*z`*K_
zK?flv$zfGs5dy_ZOjIu9cxH7Sl<g=lX2JbJmf>U#-eqNaWTxp|%CjHlz-aPF>~HC=
ztjmj!n;uY(r}Eq+37nM98dFYu_*ZM@iy|9hcvQ?XJt6O{oWoh#6NeoHz(@jf0*C_3
zvY0+Jyx;I6X9AVSRzm&)U(ZYC(b*f`gbaVe!bD2EUbcR{%nMX)BL;Yd#(0(Z;UpU{
z+%PfR&;pSxELfQvBEBfAf>6^)0RHSY6#%R4_7Z^Nhl`js5yOI-WvV7X8&id$J&XLW
zKo#*5ThsR&?L*BD#C^Urw+aOCikm<8=6{oOQ1f*I>qP;ajSfN;lIIk`u?rHt>hDsS
z`!V1Fbsson`3}i;mv<wGnF~fP5xQ+Yb5(%U^FXZ8R!B)|9{{i{^VuJ_Kh71^joBN1
zlhf`<O0KPH!~n0|xs-X^f6Ws-0LGDV-e8HR?aXe-2U?xKUa)4SW1X(wsw!c(O<(3{
zvPSNz=u>MEPow;oYQ8<fs{&@jKR!m7PJJ4s7Q|S;YFD}k@SU#@?S38Eu++ZjD)UH6
z)|>#BFBl;e+4%dP{6hp^ovD;jpL0L9-qFgm<~ToZvenXEZm6BG6nMS|Q6pZSBR7j2
z=SLit=6^EEvliwn&l@9k#E1afp5OkluRtci+=63Xn(e}R{6Op`&>+BMtn7Lu&!@`h
z<#xyA-u0h%#I}2KpmM&?RW`&*J2eN&%%1XoPG;7K9p9JtF#peTwB}S0%+xL=r<^bB
z^7Ju0NIMHL&!)c=f4b_v>@z5u1w_JH1iN#^t~E9=E1nJG;r+Atbd{<!T}&`&`d$&v
zh8T2twN=m0fAx*loTCtxXGwIR@l;+1RGvJ>$PR&C3wrsvRES2^vDhi-^r3C@G$sGR
zGNub4Iw<-1FQM{8<}PuCjM2#wEAgj_vrLL>vhTPcuJunE{MY>apVIc&=zD5j3Cpdj
zfVMEw-f|5+7lG@!sE6{`HD8mVL^>nu{!n+iFy)I_ux{g~_3fYSm3GftX}tf<DP{za
z3Xrhi5C?3E2Tw>BK-CPJ?L!)byMYD=n0>l95E6SG2`D{0L{4|saXBmU>>VM$Qj+;h
z%gZ|%vvM&jSoHYqFKuRmEy{0P5@X3W1S;Y}!l<2c_XqvRh{gBT#PoRasfyRB$IL3p
zfsjWQ17HWgp^)N44?OG{{d!I}sc6s{4=;%;4EDq>>*qM=_va(aTC{!d|B?n7fzXk?
z6;jBy3>KUb8r8t4EK&2~gSGL17Rq0Bj}KO_YD0``VOv4|1I7am!^aG&*>r_4uCm8G
zuQ0^RQlWHmy#N`PoL9in>8!n{aH7q0J#2J_O@!XHa3D(g%{e|a5sQas8#iQVHCHgF
zd;`Vg*ibd(f^3v<Da16)*C57F$5sUk1K&A$IQ2V;!B4n|c_w=llqV`v*=@6{uAWSB
zeXEhAs|dv;`d;OAvbd@uX?Yd&c(N_atO&}gG?`unt7qwkwf<82*)B?fR%$Ze@~G~u
z{MHa>_v?xh^8i0mc0H5OzAI>}1@WJcW~Ysu1=Y(9Mr$pJd}#xI!(c!%;8c&FL!>rs
zL<uC7N6a2Co~g3}5AnZ}r2_dsmPgS>j)M@q`fpU!0I43!hEdygM;)SFY-B19fkw8|
zTkRH>J-lVD<Bs#kxnV(e^le`wz<aW`T9|Yc=*Zl|QL@1}*I*d?G3XeS%mSWsqJMA&
zH;*Ud`Q!wAeum*ZCr(NZlj`x%34y=@N%nWECv+^(#5S*`wqGyqbZybt;VNr@yfjCf
z=L4>IFrsj4=YUyGb(pY9g@*^wnPqc95OWQ?>USVi5faCPDLYmieIVMba^FDB6@bWL
z;JA}26w+!R7!G}`&;2!9Yz<!ki-NC5=5`+S+#%BgOuILeo|V=FLhAhQjxPT)^q?aA
zrSJB88{%6CDyybwm{rj9pn<^8Vry{3u1N3I{uV4AsOXwx$r<IDf!^k!eLf>>?hmPm
zKMHvuDE`eOWqu}N%t@o)QmV>Fo@%{lfdu+_<ejP_0hV_9EIzFW8HYUZ$~^ohZ!yE%
z%fY(_#AwD&`Yc<0Z_X+`Fg-zjjRn7Dt+}<;j2z=8e>#da54M~K8d3M%JVVtPADh;M
z(jZKitMSi}LnmqF#qAxMv5TU=dU-*CQK6gR?}XTzqPvrw^c6~8-6;goWV-%)IiW$z
z_eKD54Ob)DKg`a}A7EYfLjOkcGyPuo6hY9l{v~T>>Uj}@HWk`%c;^b*P7c_X{tByi
zjX3Pm!FZ_!I|W8-BS5B44(T&D)_jnm`(>?l=27QMK_Il#Z;ZVM#QQB(S7*q9iDD40
zj4y>vX;PtrC}vXC9=U9DpDjh=!ydzwZ_PC~TQ@GGH$8abm$|ttH%y*b8EdTDa@GVQ
zm$t>p%1_^)j+a2#svCx?I48^&ek^mPh#^q^rlG$6U26R|){I9)F|3#)mFWH*x55c}
z&@FEG-t|(c16J4OSD!sq0Rt}5Iw+Z=QcdoB2*WS4t&)aYi#8vugb{HGv=s&Qh7TK|
zx$8j*Vr=8gV)yJw>33tC#-DYMPePDVlMk3QvCQN&H#l|%w4MMOO7dCyqsmL~3{#|?
ztfgbd9NMy?-wY+cjN?%xUojB){dGm<56cfLDL>^_zm>-?2`;Poaw$3Z&$P8}<Kz69
zteA}tW6p>)t%NPY8s3&P>as;X5NgTc3po3)IKj7X%}1BYy{tMt6cX%EaWgsz$QL6{
zw>It}%pSqvH)z9^Q=#r4eAO8(5ZV;p)NFIXihXFGJK@X{L#11J`p_f2`rt2=Uy*uO
zg5Npn1@X)$Pwo&F(u3!Z-O3nYyd=&$%L%Y-xXXyBhJ7>GIz#7joml9uOP{aFY7m*P
z!3T0s5)vex$y`mkE5r2GlUW%)>fWm0PWN_o=nBi2%&n%chYzV=xM(aNCPA1VTV340
zK{i<t*Acy%-{-Nl;&8(3gj+U~@Be=<2LE~6*j7$wiMNP>cHSvG-)%9vmkqQ^F4>0v
E2S}~H(*OVf

literal 0
HcmV?d00001

diff --git a/website/.gitignore b/website/.gitignore
index 89dbeffc..fa48b585 100644
--- a/website/.gitignore
+++ b/website/.gitignore
@@ -44,6 +44,8 @@ Thumbs.db
 # Files generated by index.ts
 /public/assets/building-block-logos
 /public/assets/logos
+/public/assets/reference-architecture-logos
+/public/assets/reference-architecture-diagrams
 /public/assets/platform.json
 /public/assets/templates.json
 
diff --git a/website/src/app/core/reference-architecture.ts b/website/src/app/core/reference-architecture.ts
index 00c53e62..b0f8e2f4 100644
--- a/website/src/app/core/reference-architecture.ts
+++ b/website/src/app/core/reference-architecture.ts
@@ -10,6 +10,9 @@ export interface ReferenceArchitecture {
   cloudProviders: string[];
   buildingBlocks: ReferenceArchitectureBuildingBlock[];
   body: string;
+  // Own logo, when one is committed for this architecture. Null means the cloud provider logos
+  // are shown instead.
+  logo: string | null;
   sourceUrl: string | null;
   // Set when this reference architecture ships its own meshstack_integration.tf and can be
   // imported into meshStack directly, the same way a building block is imported.
diff --git a/website/src/app/features/reference-architecture-detail/reference-architecture-detail.component.html b/website/src/app/features/reference-architecture-detail/reference-architecture-detail.component.html
index d5f7c549..ced8104c 100644
--- a/website/src/app/features/reference-architecture-detail/reference-architecture-detail.component.html
+++ b/website/src/app/features/reference-architecture-detail/reference-architecture-detail.component.html
@@ -12,13 +12,19 @@
   <div class="bg-gradient-to-br from-primary-50 to-blue-50 border-b border-primary-100">
     <div class="container mx-auto px-4 py-6 md:py-8">
       <div class="flex flex-col md:flex-row items-start gap-6">
-        <!-- Platform logos -->
-        <div class="flex -space-x-2 flex-shrink-0">
-          <div *ngFor="let logo of vm.platformLogos"
-               class="w-16 h-16 flex items-center justify-center rounded-lg bg-white shadow-sm ring-2 ring-white">
-            <img [src]="logo.imageUrl" [alt]="logo.platformType" class="w-10 h-10 object-contain" />
-          </div>
+        <!-- Architecture logo, falling back to platform logos -->
+        <div *ngIf="vm.logo; else platformLogos"
+             class="w-16 h-16 flex-shrink-0 flex items-center justify-center rounded-lg bg-white shadow-sm ring-2 ring-white">
+          <img [src]="vm.logo" [alt]="vm.name" class="w-12 h-12 object-contain" />
         </div>
+        <ng-template #platformLogos>
+          <div class="flex -space-x-2 flex-shrink-0">
+            <div *ngFor="let logo of vm.platformLogos"
+                 class="w-16 h-16 flex items-center justify-center rounded-lg bg-white shadow-sm ring-2 ring-white">
+              <img [src]="logo.imageUrl" [alt]="logo.platformType" class="w-10 h-10 object-contain" />
+            </div>
+          </div>
+        </ng-template>
 
         <div class="flex-1 flex flex-col gap-2">
           <div class="flex flex-col sm:flex-row sm:items-start sm:justify-between gap-3">
diff --git a/website/src/app/features/reference-architecture-detail/reference-architecture-detail.component.ts b/website/src/app/features/reference-architecture-detail/reference-architecture-detail.component.ts
index 41035c55..a21550f4 100644
--- a/website/src/app/features/reference-architecture-detail/reference-architecture-detail.component.ts
+++ b/website/src/app/features/reference-architecture-detail/reference-architecture-detail.component.ts
@@ -31,6 +31,7 @@ interface RefArchDetailVm {
   buildingBlocks: BuildingBlockLink[];
   bodyHtml: string;
   sourceUrl: string | null;
+  logo: string | null;
   platformLogos: { platformType: string; imageUrl: string }[];
   integrationSourceUrl: string | null;
   folderUrl: string | null;
@@ -157,6 +158,7 @@ export class ReferenceArchitectureDetailComponent implements OnInit, OnDestroy,
       buildingBlocks,
       bodyHtml: marked.parse(arch.body) as string,
       sourceUrl: arch.sourceUrl,
+      logo: arch.logo,
       platformLogos: arch.cloudProviders.map(cp => ({
         platformType: cp,
         imageUrl: platforms.find(p => p.platformType === cp)?.logo ?? 'assets/meshstack-logo.png'
diff --git a/website/src/app/features/reference-architecture-list/reference-architecture-list.component.html b/website/src/app/features/reference-architecture-list/reference-architecture-list.component.html
index 22f7a25e..b69cc34a 100644
--- a/website/src/app/features/reference-architecture-list/reference-architecture-list.component.html
+++ b/website/src/app/features/reference-architecture-list/reference-architecture-list.component.html
@@ -34,14 +34,20 @@ <h1 class="text-2xl lg:text-3xl font-bold text-slate-900 mb-2">Reference Archite
         <div *ngFor="let card of cards">
           <mst-card [routePath]="'/reference-architectures/' + card.id" [label]="card.name">
             <div class="p-5 flex flex-col h-full" card-body>
-              <!-- Platform logos + title -->
+              <!-- Architecture logo, falling back to platform logos + title -->
               <div class="flex items-center gap-3 mb-3">
-                <div class="flex -space-x-2">
-                  <div *ngFor="let logo of card.platformLogos"
-                       class="w-9 h-9 flex-shrink-0 flex items-center justify-center rounded-lg bg-slate-100 ring-2 ring-white">
-                    <img [src]="logo.imageUrl" [alt]="logo.platformType" class="w-5 h-5 object-contain" />
-                  </div>
+                <div *ngIf="card.logo; else platformLogos"
+                     class="w-9 h-9 flex-shrink-0 flex items-center justify-center rounded-lg bg-slate-100 ring-2 ring-white">
+                  <img [src]="card.logo" [alt]="card.name" class="w-7 h-7 object-contain" />
                 </div>
+                <ng-template #platformLogos>
+                  <div class="flex -space-x-2">
+                    <div *ngFor="let logo of card.platformLogos"
+                         class="w-9 h-9 flex-shrink-0 flex items-center justify-center rounded-lg bg-slate-100 ring-2 ring-white">
+                      <img [src]="logo.imageUrl" [alt]="logo.platformType" class="w-5 h-5 object-contain" />
+                    </div>
+                  </div>
+                </ng-template>
                 <h3 class="font-semibold text-slate-900 text-base leading-tight mb-0">{{ card.name }}</h3>
               </div>
 
diff --git a/website/src/app/features/reference-architecture-list/reference-architecture-list.component.ts b/website/src/app/features/reference-architecture-list/reference-architecture-list.component.ts
index 9d7f8796..851d9f6f 100644
--- a/website/src/app/features/reference-architecture-list/reference-architecture-list.component.ts
+++ b/website/src/app/features/reference-architecture-list/reference-architecture-list.component.ts
@@ -17,6 +17,7 @@ interface RefArchCard {
   cloudProviders: string[];
   buildingBlockCount: number;
   integrationSourceUrl: string | null;
+  logo: string | null;
   platformLogos: { platformType: string; imageUrl: string }[];
 }
 
@@ -62,6 +63,7 @@ export class ReferenceArchitectureListComponent implements OnInit {
       cloudProviders: arch.cloudProviders,
       buildingBlockCount: arch.buildingBlocks.length,
       integrationSourceUrl: arch.integrationSourceUrl,
+      logo: arch.logo,
       platformLogos: arch.cloudProviders.map(cp => ({
         platformType: cp,
         imageUrl: platforms.find(p => p.platformType === cp)?.logo ?? 'assets/meshstack-logo.png'
diff --git a/website/src/app/features/template-gallery/template-gallery.component.html b/website/src/app/features/template-gallery/template-gallery.component.html
index 40ed2dbc..0cbdaf80 100644
--- a/website/src/app/features/template-gallery/template-gallery.component.html
+++ b/website/src/app/features/template-gallery/template-gallery.component.html
@@ -74,14 +74,20 @@ <h2 class="text-2xl font-bold text-slate-900 mb-2">
           <div *ngFor="let card of refArchCards">
             <mst-card [routePath]="'/reference-architectures/' + card.id" [label]="card.name">
               <div class="p-4 flex flex-col h-full" card-body>
-                <!-- Platform logos + title -->
+                <!-- Architecture logo, falling back to platform logos + title -->
                 <div class="flex items-center gap-3 mb-3">
-                  <div class="flex -space-x-1">
-                    <div *ngFor="let logo of card.platformLogos"
-                         class="w-8 h-8 flex-shrink-0 flex items-center justify-center rounded-lg bg-slate-100 ring-2 ring-white">
-                      <img [src]="logo.imageUrl" [alt]="logo.platformType" class="w-5 h-5 object-contain" />
-                    </div>
+                  <div *ngIf="card.logo; else platformLogos"
+                       class="w-8 h-8 flex-shrink-0 flex items-center justify-center rounded-lg bg-slate-100 ring-2 ring-white">
+                    <img [src]="card.logo" [alt]="card.name" class="w-6 h-6 object-contain" />
                   </div>
+                  <ng-template #platformLogos>
+                    <div class="flex -space-x-1">
+                      <div *ngFor="let logo of card.platformLogos"
+                           class="w-8 h-8 flex-shrink-0 flex items-center justify-center rounded-lg bg-slate-100 ring-2 ring-white">
+                        <img [src]="logo.imageUrl" [alt]="logo.platformType" class="w-5 h-5 object-contain" />
+                      </div>
+                    </div>
+                  </ng-template>
                   <h3 class="font-semibold text-slate-900 text-base leading-tight mb-0">{{ card.name }}</h3>
                 </div>
                 <!-- Description -->
diff --git a/website/src/app/features/template-gallery/template-gallery.component.ts b/website/src/app/features/template-gallery/template-gallery.component.ts
index 2051241d..2949691c 100644
--- a/website/src/app/features/template-gallery/template-gallery.component.ts
+++ b/website/src/app/features/template-gallery/template-gallery.component.ts
@@ -21,6 +21,7 @@ interface RefArchCardVm {
   name: string;
   description: string;
   buildingBlockCount: number;
+  logo: string | null;
   platformLogos: { platformType: string; imageUrl: string }[];
 }
 
@@ -215,6 +216,7 @@ export class TemplateGalleryComponent implements OnInit, OnDestroy {
       name: arch.name,
       description: arch.description,
       buildingBlockCount: arch.buildingBlocks.length,
+      logo: arch.logo,
       platformLogos: arch.cloudProviders.map(cp => ({
         platformType: cp,
         imageUrl: platforms.find(p => p.platformType === cp)?.logo ?? 'assets/meshstack-logo.png'

From 9b42a01195fc439f806f927a282479795db75f3d Mon Sep 17 00:00:00 2001
From: Johannes Rudolph <jrudolph@meshcloud.io>
Date: Fri, 31 Jul 2026 18:45:19 +0200
Subject: [PATCH 6/7] feat: standardize logo asset path standardization

---
 .agents/references/diagrams.md                |   8 +-
 .gitignore                                    |   2 +-
 AGENTS.md                                     |   7 +
 index.ts                                      | 140 +++++++++---------
 modules/aks/{aks.svg => logo.svg}             |   0
 modules/aws/{aws.svg => logo.svg}             |   0
 modules/azure/{azure.svg => logo.svg}         |   0
 .../azuredevops/{azuredevops.svg => logo.svg} |   0
 .../{CloudFoundry.png => logo.png}            | Bin
 modules/gcp/{gcp.png => logo.png}             | Bin
 modules/github/{github_logo.png => logo.png}  | Bin
 .../{LOGO_IONOS_Blue_RGB-1.png => logo.png}   | Bin
 modules/oci/{oracle.png => logo.png}          | Bin
 .../{OpenShift-LogoType.png => logo.png}      | Bin
 .../{OpenStack-Logo.png => logo.png}          | Bin
 modules/sapbtp/{sapbtp.png => logo.png}       | Bin
 modules/ske/{ske.svg => logo.svg}             |   0
 modules/stackit/{stackit.png => logo.png}     | Bin
 website/.gitignore                            |   2 +-
 19 files changed, 85 insertions(+), 74 deletions(-)
 rename modules/aks/{aks.svg => logo.svg} (100%)
 rename modules/aws/{aws.svg => logo.svg} (100%)
 rename modules/azure/{azure.svg => logo.svg} (100%)
 rename modules/azuredevops/{azuredevops.svg => logo.svg} (100%)
 rename modules/cloudfoundry/{CloudFoundry.png => logo.png} (100%)
 rename modules/gcp/{gcp.png => logo.png} (100%)
 rename modules/github/{github_logo.png => logo.png} (100%)
 rename modules/ionos/{LOGO_IONOS_Blue_RGB-1.png => logo.png} (100%)
 rename modules/oci/{oracle.png => logo.png} (100%)
 rename modules/openshift/{OpenShift-LogoType.png => logo.png} (100%)
 rename modules/openstack/{OpenStack-Logo.png => logo.png} (100%)
 rename modules/sapbtp/{sapbtp.png => logo.png} (100%)
 rename modules/ske/{ske.svg => logo.svg} (100%)
 rename modules/stackit/{stackit.png => logo.png} (100%)

diff --git a/.agents/references/diagrams.md b/.agents/references/diagrams.md
index 85fdc03e..87abb5d1 100644
--- a/.agents/references/diagrams.md
+++ b/.agents/references/diagrams.md
@@ -23,9 +23,11 @@ Graphviz runs from a WASM npm package, so no system `dot` install is needed. CI
 is edited without committing the re-rendered SVG.
 
 Keep the markdown link **relative** so it renders on GitHub. The website generator copies every
-relatively-linked image into `website/public/assets/reference-architecture-diagrams/<id>/` and
-rewrites the link to that served path, so the diagram renders from the website's own origin
-regardless of whether the commit has been pushed.
+relatively-linked image into `website/public/assets/markdown-images/<scope>/` and rewrites the link
+to that served path, so the diagram renders from the website's own origin regardless of whether the
+commit has been pushed. This applies to every markdown body the website ships — reference
+architectures, platform readmes and a building block's `## How to Use` section — so a diagram or
+screenshot can be committed next to any of them.
 
 ---
 
diff --git a/.gitignore b/.gitignore
index d0deebf5..391eecd9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -28,7 +28,7 @@ website/src/generated/
 website/public/assets/building-block-logos/
 website/public/assets/logos/
 website/public/assets/reference-architecture-logos/
-website/public/assets/reference-architecture-diagrams/
+website/public/assets/markdown-images/
 website/public/assets/*.json
 .worktrees/
 
diff --git a/AGENTS.md b/AGENTS.md
index 95a6c76b..fd7114f2 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -36,6 +36,13 @@ modules/<cloud-provider>/<service-name>/
 └── meshstack_integration.tf   # Example wiring into a meshStack instance
 ```
 
+The `modules/<cloud-provider>/` directory itself holds the platform's own `README.md` (front-matter
+with `name` and `description`) and its `logo.png` or `logo.svg`.
+
+**Logos are always named `logo.png` or `logo.svg`** and colocated with what they depict — platforms,
+building blocks and reference architectures alike. The website generator copies them into its
+generated asset directories under `website/public/assets/`; never add files there by hand.
+
 ---
 
 <!-- scorecard-checks: meshstack_integration, backplane_source_hub_git_ref, ref_name_hub_git_ref -->
diff --git a/index.ts b/index.ts
index 8e015bb8..b20ae71d 100644
--- a/index.ts
+++ b/index.ts
@@ -5,11 +5,62 @@ const { execSync } = require("child_process");
 
 const repoRoot = path.resolve(__dirname, "modules");
 const refArchRoot = path.resolve(__dirname, "reference-architectures");
-const assetsDir = path.resolve(__dirname, "website/public/assets/logos");
-const refArchAssetsDir = path.resolve(__dirname, "website/public/assets/reference-architecture-logos");
-const refArchDiagramAssetsDir = path.resolve(__dirname, "website/public/assets/reference-architecture-diagrams");
+const publicDir = path.resolve(__dirname, "website/public");
+const assetsDir = path.join(publicDir, "assets/logos");
+const buildingBlockAssetsDir = path.join(publicDir, "assets/building-block-logos");
+const refArchAssetsDir = path.join(publicDir, "assets/reference-architecture-logos");
+// Images referenced from the markdown bodies we ship (diagrams, screenshots), kept in one tree
+// keyed by the scope that owns them, e.g. `reference-architectures/azure-kubernetes`.
+const markdownImageAssetsDir = path.join(publicDir, "assets/markdown-images");
 const hubRef = getHubRef();
 
+// Copies a repo file into a generated website assets directory and returns the path the website
+// serves it under (relative to `website/public`, which is the asset root).
+function copyToWebsiteAssets(sourcePath: string, destDir: string, destName: string): string {
+  fs.mkdirSync(destDir, { recursive: true });
+  fs.copyFileSync(sourcePath, path.join(destDir, destName));
+
+  return path.join(destDir, destName)
+    .replace(publicDir, "")
+    .replace(/^\/+/g, "");
+}
+
+// Logos are colocated with what they depict and always named `logo.png` or `logo.svg` — for
+// platforms, building blocks and reference architectures alike.
+function findLogoFile(dir: string): string | null {
+  return ["logo.png", "logo.svg"]
+    .map(file => path.join(dir, file))
+    .find(file => fs.existsSync(file)) ?? null;
+}
+
+// Copies images referenced by relative markdown links into the website assets and rewrites the
+// links to the served path. Images are committed next to the markdown so a relative link renders
+// on GitHub, but the website serves this body from its own origin where a repo-relative path
+// resolves to nothing. Serving our own copy — rather than a github.com/raw link pinned to the
+// built commit — also keeps images rendering for commits that are not (yet) pushed, and for files
+// that moved since the last commit.
+function localizeMarkdownImages(body: string, markdownDir: string, scope: string): string {
+  return body.replace(
+    /(!\[[^\]]*\]\()(?!https?:\/\/|\/|#)([^)\s]+)(\))/g,
+    (match, prefix, target, suffix) => {
+      const sourcePath = path.join(markdownDir, target.replace(/^\.\//, ""));
+      if (!fs.existsSync(sourcePath)) {
+        console.warn(`⚠️  ${scope} links a missing image: ${target}`);
+        return match;
+      }
+
+      const fileName = path.basename(sourcePath);
+      const servedPath = copyToWebsiteAssets(
+        sourcePath,
+        path.join(markdownImageAssetsDir, scope),
+        fileName
+      );
+
+      return `${prefix}${servedPath}${suffix}`;
+    }
+  );
+}
+
 function getHubRef() {
   try {
     return execSync("git rev-parse HEAD")
@@ -85,7 +136,7 @@ function findPlatforms(): Platform[] {
         category,
         benefits,
         logo: platformLogo,
-        readme: content,
+        readme: localizeMarkdownImages(content, platformDir, `platforms/${dir.name}`),
         integrationSourceUrl,
         terraformSnippet,
         official
@@ -109,15 +160,12 @@ function getPlatformIntegrationSourceUrl(platformDir: string): string | null {
 
 // Finds the logo, copies it to website assets and returns the path.
 function getPlatformLogoOrThrow(platformDir: string, platformType: string): string {
-  const logoFile = fs.readdirSync(platformDir).find(f => f.endsWith('.png') || f.endsWith('.svg'));
-  if (logoFile) {
-    const sourcePath = path.join(platformDir, logoFile);
-    const destPath = path.join(assetsDir, `${platformType}${path.extname(logoFile)}`);
-    fs.copyFileSync(sourcePath, destPath);
-    return destPath.replace(path.resolve(__dirname, "website/public"), "").replace(/^\/+/g, "");
+  const logoFile = findLogoFile(platformDir);
+  if (!logoFile) {
+    throw new Error(`Logo file not found for platform: ${platformType} in directory: ${platformDir}. Each platform should have a logo.png or logo.svg.`);
   }
 
-  throw new Error(`Logo file not found for platform: ${platformType} in directory: ${platformDir}. Each platform should have a logo.`);
+  return copyToWebsiteAssets(logoFile, assetsDir, `${platformType}${path.extname(logoFile)}`);
 }
 
 function getPlatformReadmeOrThrow(platformDir: string) {
@@ -168,27 +216,12 @@ function getTerraformSnippet(platformDir: string): string | null {
 }
 
 function copyBuildingBlockLogoToAssets(buildingBlockDir) {
-  const assetsDir = path.resolve(
-    __dirname,
-    "website/public/assets/building-block-logos"
-  );
-
-  const logoFile = fs
-    .readdirSync(buildingBlockDir)
-    .find((file) => file.endsWith(".png"));
-
+  const logoFile = findLogoFile(buildingBlockDir);
   if (!logoFile) return null;
 
   const { id } = getIdAndPlatform(buildingBlockDir);
-  const sourcePath = path.join(buildingBlockDir, logoFile);
-  const destinationPath = path.join(assetsDir, `${id}${path.extname(logoFile)}`);
 
-  fs.mkdirSync(assetsDir, { recursive: true });
-  fs.copyFileSync(sourcePath, destinationPath);
-
-  return destinationPath
-    .replace(path.resolve(__dirname, "website/public"), "")
-    .replace(/^\/+/g, "");
+  return copyToWebsiteAssets(logoFile, buildingBlockAssetsDir, `${id}${path.extname(logoFile)}`);
 }
 
 function parseReadme(filePath) {
@@ -197,8 +230,13 @@ function parseReadme(filePath) {
   const { data, content: body } = matter(content);
   const { id, platform } = getIdAndPlatform(buildingBlockDir);
 
-  const extractSection = (regex) =>
-    body.match(regex)?.[1]?.trim() || null;
+  const extractSection = (regex) => {
+    const section = body.match(regex)?.[1]?.trim() || null;
+
+    return section === null
+      ? null
+      : localizeMarkdownImages(section, buildingBlockDir, `building-blocks/${id}`);
+  };
 
   const buildingBlockUrl = getBuildingBlockFolderUrl(filePath);
   const buildingBlockLogoPath = copyBuildingBlockLogoToAssets(buildingBlockDir);
@@ -260,47 +298,11 @@ export interface ReferenceArchitecture {
   modulePath: string | null;
 }
 
-// Copies images referenced by relative markdown links into the website assets and rewrites the
-// links to the served path. Diagrams are committed next to their README so a relative link renders
-// on GitHub, but the website serves this body from its own origin where a repo-relative path
-// resolves to nothing. Serving our own copy — rather than a github.com/raw link pinned to the built
-// commit — also keeps diagrams rendering for commits that are not (yet) pushed, and for files that
-// moved since the last commit.
-function localizeImageLinks(body: string, archDir: string, id: string): string {
-  return body.replace(
-    /(!\[[^\]]*\]\()(?!https?:\/\/|\/|#)([^)\s]+)(\))/g,
-    (match, prefix, target, suffix) => {
-      const sourcePath = path.join(archDir, target.replace(/^\.\//, ""));
-      if (!fs.existsSync(sourcePath)) {
-        console.warn(`⚠️  Reference architecture ${id} links a missing image: ${target}`);
-        return match;
-      }
-
-      const destDir = path.join(refArchDiagramAssetsDir, id);
-      const fileName = path.basename(sourcePath);
-      fs.mkdirSync(destDir, { recursive: true });
-      fs.copyFileSync(sourcePath, path.join(destDir, fileName));
-
-      return `${prefix}assets/reference-architecture-diagrams/${id}/${fileName}${suffix}`;
-    }
-  );
-}
-
-// Reference architectures colocate their logo as `logo.png|svg`, the same way a building block
-// does. Copies it to the website assets under the architecture id and returns the served path.
 function copyReferenceArchitectureLogoToAssets(archDir: string, id: string): string | null {
-  const logoFile = ["logo.png", "logo.svg"]
-    .find(file => fs.existsSync(path.join(archDir, file)));
-
+  const logoFile = findLogoFile(archDir);
   if (!logoFile) return null;
 
-  fs.mkdirSync(refArchAssetsDir, { recursive: true });
-  fs.copyFileSync(
-    path.join(archDir, logoFile),
-    path.join(refArchAssetsDir, `${id}${path.extname(logoFile)}`)
-  );
-
-  return `assets/reference-architecture-logos/${id}${path.extname(logoFile)}`;
+  return copyToWebsiteAssets(logoFile, refArchAssetsDir, `${id}${path.extname(logoFile)}`);
 }
 
 // Parses a reference architecture from the `README.md` of its directory. The directory is also
@@ -310,7 +312,7 @@ function parseReferenceArchitecture(archDir: string, id: string): ReferenceArchi
   const filePath = path.join(archDir, "README.md");
   const raw = fs.readFileSync(filePath, "utf-8");
   const { data, content } = matter(raw);
-  const body = localizeImageLinks(content, archDir, id);
+  const body = localizeMarkdownImages(content, archDir, `reference-architectures/${id}`);
 
   if (!data.name) {
     throw new Error(`Reference architecture ${id} is missing "name" in front-matter.`);
diff --git a/modules/aks/aks.svg b/modules/aks/logo.svg
similarity index 100%
rename from modules/aks/aks.svg
rename to modules/aks/logo.svg
diff --git a/modules/aws/aws.svg b/modules/aws/logo.svg
similarity index 100%
rename from modules/aws/aws.svg
rename to modules/aws/logo.svg
diff --git a/modules/azure/azure.svg b/modules/azure/logo.svg
similarity index 100%
rename from modules/azure/azure.svg
rename to modules/azure/logo.svg
diff --git a/modules/azuredevops/azuredevops.svg b/modules/azuredevops/logo.svg
similarity index 100%
rename from modules/azuredevops/azuredevops.svg
rename to modules/azuredevops/logo.svg
diff --git a/modules/cloudfoundry/CloudFoundry.png b/modules/cloudfoundry/logo.png
similarity index 100%
rename from modules/cloudfoundry/CloudFoundry.png
rename to modules/cloudfoundry/logo.png
diff --git a/modules/gcp/gcp.png b/modules/gcp/logo.png
similarity index 100%
rename from modules/gcp/gcp.png
rename to modules/gcp/logo.png
diff --git a/modules/github/github_logo.png b/modules/github/logo.png
similarity index 100%
rename from modules/github/github_logo.png
rename to modules/github/logo.png
diff --git a/modules/ionos/LOGO_IONOS_Blue_RGB-1.png b/modules/ionos/logo.png
similarity index 100%
rename from modules/ionos/LOGO_IONOS_Blue_RGB-1.png
rename to modules/ionos/logo.png
diff --git a/modules/oci/oracle.png b/modules/oci/logo.png
similarity index 100%
rename from modules/oci/oracle.png
rename to modules/oci/logo.png
diff --git a/modules/openshift/OpenShift-LogoType.png b/modules/openshift/logo.png
similarity index 100%
rename from modules/openshift/OpenShift-LogoType.png
rename to modules/openshift/logo.png
diff --git a/modules/openstack/OpenStack-Logo.png b/modules/openstack/logo.png
similarity index 100%
rename from modules/openstack/OpenStack-Logo.png
rename to modules/openstack/logo.png
diff --git a/modules/sapbtp/sapbtp.png b/modules/sapbtp/logo.png
similarity index 100%
rename from modules/sapbtp/sapbtp.png
rename to modules/sapbtp/logo.png
diff --git a/modules/ske/ske.svg b/modules/ske/logo.svg
similarity index 100%
rename from modules/ske/ske.svg
rename to modules/ske/logo.svg
diff --git a/modules/stackit/stackit.png b/modules/stackit/logo.png
similarity index 100%
rename from modules/stackit/stackit.png
rename to modules/stackit/logo.png
diff --git a/website/.gitignore b/website/.gitignore
index fa48b585..96d3f2e7 100644
--- a/website/.gitignore
+++ b/website/.gitignore
@@ -45,7 +45,7 @@ Thumbs.db
 /public/assets/building-block-logos
 /public/assets/logos
 /public/assets/reference-architecture-logos
-/public/assets/reference-architecture-diagrams
+/public/assets/markdown-images
 /public/assets/platform.json
 /public/assets/templates.json
 

From 70179ee44cdad04024199adfda919e1295eac9fc Mon Sep 17 00:00:00 2001
From: Johannes Rudolph <jrudolph@meshcloud.io>
Date: Sun, 2 Aug 2026 09:24:57 +0200
Subject: [PATCH 7/7] fix: ignore provider folders in scorecard scan

only consider $provider/module folders
---
 tools/scorecard/pr-scorecard.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/tools/scorecard/pr-scorecard.sh b/tools/scorecard/pr-scorecard.sh
index c7c64c24..04747b2b 100755
--- a/tools/scorecard/pr-scorecard.sh
+++ b/tools/scorecard/pr-scorecard.sh
@@ -18,8 +18,10 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
 cd "$REPO_ROOT"
 
+# Only paths inside a module dir (modules/<provider>/<service>/...) map to a module.
+# Provider-level files such as modules/<provider>/logo.png are not modules and are skipped.
 MODULES=$(git diff --name-only "${BASE_REF}...HEAD" \
-  | grep '^modules/' \
+  | grep -E '^modules/[^/]+/[^/]+/' \
   | sed 's|^modules/\([^/]*/[^/]*\)/.*|\1|' \
   | sort -u || true)