Diagram · Domain 3

Place the zero trust pieces

Maple Transit wants contractors to invoke an internal reporting application. Contractors may not address other internal hosts. Access decisions must use identity and device signals, and every request has to be checked. On the diagram, requests meet a gate on the app path before a control-plane decision is returned; account signals feed that decision from a separate control-plane bay. Place each zero trust piece on the diagram.