diff --git a/public/diagrams/authentik-sso.svg b/public/diagrams/authentik-sso.svg
index 9d2cd92..339da4d 100644
--- a/public/diagrams/authentik-sso.svg
+++ b/public/diagrams/authentik-sso.svg
@@ -1 +1 @@
-
\ No newline at end of file
+
\ No newline at end of file
diff --git a/public/diagrams/edge-ai.svg b/public/diagrams/edge-ai.svg
index 11b4bdb..f27495d 100644
--- a/public/diagrams/edge-ai.svg
+++ b/public/diagrams/edge-ai.svg
@@ -1 +1 @@
-
\ No newline at end of file
+
\ No newline at end of file
diff --git a/public/diagrams/homelab.svg b/public/diagrams/homelab.svg
index c987bef..07d3e3b 100644
--- a/public/diagrams/homelab.svg
+++ b/public/diagrams/homelab.svg
@@ -1 +1 @@
-
\ No newline at end of file
+
\ No newline at end of file
diff --git a/public/diagrams/iac-fleet.svg b/public/diagrams/iac-fleet.svg
index 90eedac..b6bda49 100644
--- a/public/diagrams/iac-fleet.svg
+++ b/public/diagrams/iac-fleet.svg
@@ -1 +1 @@
-
\ No newline at end of file
+
\ No newline at end of file
diff --git a/public/diagrams/outbound-exposure.svg b/public/diagrams/outbound-exposure.svg
index 5226dca..e773e70 100644
--- a/public/diagrams/outbound-exposure.svg
+++ b/public/diagrams/outbound-exposure.svg
@@ -1 +1 @@
-
\ No newline at end of file
+
\ No newline at end of file
diff --git a/public/diagrams/workload-least-privilege.svg b/public/diagrams/workload-least-privilege.svg
index cf71c4c..99d9710 100644
--- a/public/diagrams/workload-least-privilege.svg
+++ b/public/diagrams/workload-least-privilege.svg
@@ -13,39 +13,39 @@
no API token mounted
-
+
-
- namespace
-
- PodSecurity: baseline → restricted
+
+ namespace
+
+ PodSecurity: baseline → restricted
-
+ workload pod
-
+ ServiceAccount: its own — not the default
-
+ automountServiceAccountToken: false
-
+ runAsNonRoot · uid 1000 · drop ALL caps
-
+ seccompProfile: RuntimeDefault
-
- the documented exception
+
+ the documented exceptionGitOps · LoadBalancer · secrets operator→ scoped Role + token, nothing more
-
+