<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="675" viewBox="0 0 1200 675" preserveAspectRatio="xMidYMid meet">
  <rect width="1200" height="675" fill="#f9fbfb"/>
  <text x="115" y="105" font-size="28" font-family="Arial, sans-serif" fill="#17313a" font-weight="700">多集群 RBAC 权限边界</text>
  <text x="115" y="140" font-size="18" font-family="Arial, sans-serif" fill="#53676e">能力边界与检查清单：身份源、角色模板、集群绑定和审计回收</text>

  <rect x="135" y="220" width="185" height="290" rx="22" fill="#e8f6f3" stroke="#2b9a88" stroke-width="3"/>
  <text x="176" y="265" font-size="22" font-family="Arial, sans-serif" fill="#11584e" font-weight="700">身份源</text>
  <text x="162" y="310" font-size="17" font-family="Arial, sans-serif" fill="#356d65">用户组</text>
  <text x="162" y="340" font-size="17" font-family="Arial, sans-serif" fill="#356d65">服务身份</text>
  <text x="162" y="370" font-size="17" font-family="Arial, sans-serif" fill="#356d65">离职调岗</text>

  <rect x="395" y="190" width="210" height="110" rx="18" fill="#eef2ff" stroke="#6366f1" stroke-width="2"/>
  <text x="438" y="235" font-size="21" font-family="Arial, sans-serif" fill="#312e81" font-weight="700">角色模板</text>
  <text x="425" y="267" font-size="17" font-family="Arial, sans-serif" fill="#4f46a5">只读、发布、审计</text>

  <rect x="395" y="365" width="210" height="110" rx="18" fill="#fff7ed" stroke="#f97316" stroke-width="2"/>
  <text x="438" y="410" font-size="21" font-family="Arial, sans-serif" fill="#7c2d12" font-weight="700">例外授权</text>
  <text x="425" y="442" font-size="17" font-family="Arial, sans-serif" fill="#9a4b19">到期、审批、回收</text>

  <rect x="720" y="175" width="170" height="95" rx="18" fill="#ffffff" stroke="#64748b" stroke-width="2"/>
  <text x="762" y="216" font-size="20" font-family="Arial, sans-serif" fill="#334155" font-weight="700">生产集群</text>
  <text x="746" y="246" font-size="16" font-family="Arial, sans-serif" fill="#64748b">命名空间边界</text>
  <rect x="900" y="290" width="170" height="95" rx="18" fill="#ffffff" stroke="#64748b" stroke-width="2"/>
  <text x="942" y="331" font-size="20" font-family="Arial, sans-serif" fill="#334155" font-weight="700">测试集群</text>
  <text x="926" y="361" font-size="16" font-family="Arial, sans-serif" fill="#64748b">更短权限窗口</text>
  <rect x="720" y="405" width="170" height="95" rx="18" fill="#ffffff" stroke="#64748b" stroke-width="2"/>
  <text x="762" y="446" font-size="20" font-family="Arial, sans-serif" fill="#334155" font-weight="700">边缘集群</text>
  <text x="746" y="476" font-size="16" font-family="Arial, sans-serif" fill="#64748b">最小 API 权限</text>

  <rect x="455" y="545" width="420" height="58" rx="16" fill="#f1f5f9" stroke="#94a3b8" stroke-width="2"/>
  <text x="495" y="582" font-size="20" font-family="Arial, sans-serif" fill="#334155" font-weight="700">审计：谁在什么集群能做什么</text>

  <path d="M320 365 L390 245" fill="none" stroke="#2b9a88" stroke-width="4" marker-end="url(#arrowTeal)"/>
  <path d="M320 365 L390 420" fill="none" stroke="#2b9a88" stroke-width="4" marker-end="url(#arrowTeal)"/>
  <path d="M605 245 C650 220 675 220 715 222" fill="none" stroke="#6366f1" stroke-width="3" marker-end="url(#arrowIndigo)"/>
  <path d="M605 420 C700 390 765 355 895 337" fill="none" stroke="#f97316" stroke-width="3" marker-end="url(#arrowOrange)"/>
  <path d="M665 476 C665 510 665 525 665 542" fill="none" stroke="#64748b" stroke-width="3" marker-end="url(#arrowGray)"/>

  <defs>
    <marker id="arrowTeal" viewBox="0 0 10 10" refX="8" refY="5" markerWidth="8" markerHeight="8" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 Z" fill="#2b9a88"/></marker>
    <marker id="arrowIndigo" viewBox="0 0 10 10" refX="8" refY="5" markerWidth="8" markerHeight="8" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 Z" fill="#6366f1"/></marker>
    <marker id="arrowOrange" viewBox="0 0 10 10" refX="8" refY="5" markerWidth="8" markerHeight="8" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 Z" fill="#f97316"/></marker>
    <marker id="arrowGray" viewBox="0 0 10 10" refX="8" refY="5" markerWidth="8" markerHeight="8" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 Z" fill="#64748b"/></marker>
  </defs>
</svg>
