<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="675" viewBox="0 0 1200 675" preserveAspectRatio="xMidYMid meet" role="img" aria-labelledby="title desc" data-image-type="flow">
  <title id="title">K8s准入控制可观测性的指标与审计验证流程图</title>
  <desc id="desc">image_type: flow; target_section: 准入控制为什么需要单独看可观测性; purpose: 用五个独立卡片展示API Server请求、准入决策、指标审计、告警分流和回滚复盘之间的验证流程; key_terms: API Server请求, 准入决策, 拒绝率, 延迟, timeout, 审计日志, 告警分流, 回滚复盘; reader_task: 理解拒绝率、延迟、错误类型、审计日志和回滚依据如何构成准入控制可观测性闭环。</desc>
  <defs><style>text{font-family:system-ui,Arial,Helvetica,sans-serif,'Microsoft YaHei','PingFang SC','Noto Sans CJK SC';fill:#152033}.h{font-size:22px;font-weight:700}.b{font-size:17px;fill:#334155}.s{font-size:15px;fill:#52667a}.card{fill:#ffffff;stroke:#99f6e4;stroke-width:2}.mid{fill:#f0fdfa;stroke:#5eead4;stroke-width:2}.strip{fill:#ecfeff;stroke:#67e8f9;stroke-width:2}.badge{font-size:16px;font-weight:700;fill:#0f766e}</style></defs>
  <rect width="1200" height="675" fill="#f8fafc"/>
  <rect x="58" y="58" width="1084" height="552" rx="30" fill="#ffffff" stroke="#ccfbf1" stroke-width="2"/>
  <rect class="card" x="88" y="150" width="180" height="184" rx="22"/>
  <text class="h" x="178" y="194" text-anchor="middle">API请求</text>
  <text class="b" x="178" y="236" text-anchor="middle">写入路径</text>
  <text class="b" x="178" y="268" text-anchor="middle">主体对象</text>
  <text class="s" x="178" y="306" text-anchor="middle">来源维度</text>
  <rect class="mid" x="308" y="150" width="180" height="184" rx="22"/>
  <text class="h" x="398" y="194" text-anchor="middle">准入决策</text>
  <text class="b" x="398" y="236" text-anchor="middle">允许或拒绝</text>
  <text class="b" x="398" y="268" text-anchor="middle">超时或错误</text>
  <text class="s" x="398" y="306" text-anchor="middle">策略结果</text>
  <rect class="card" x="528" y="150" width="180" height="184" rx="22"/>
  <text class="h" x="618" y="194" text-anchor="middle">指标审计</text>
  <text class="b" x="618" y="236" text-anchor="middle">拒绝率延迟</text>
  <text class="b" x="618" y="268" text-anchor="middle">审计字段</text>
  <text class="s" x="618" y="306" text-anchor="middle">证据沉淀</text>
  <rect class="card" x="748" y="150" width="180" height="184" rx="22"/>
  <text class="h" x="838" y="194" text-anchor="middle">告警分流</text>
  <text class="b" x="838" y="236" text-anchor="middle">安全拒绝</text>
  <text class="b" x="838" y="268" text-anchor="middle">误伤风险</text>
  <text class="s" x="838" y="306" text-anchor="middle">角色分派</text>
  <rect class="card" x="968" y="150" width="180" height="184" rx="22"/>
  <text class="h" x="1058" y="194" text-anchor="middle">回滚复盘</text>
  <text class="b" x="1058" y="236" text-anchor="middle">窗口评估</text>
  <text class="b" x="1058" y="268" text-anchor="middle">例外回退</text>
  <text class="s" x="1058" y="306" text-anchor="middle">治理闭环</text>
  <rect class="strip" x="128" y="410" width="944" height="92" rx="24"/>
  <text class="badge" x="600" y="448" text-anchor="middle">核心观察口径</text>
  <text class="b" x="600" y="482" text-anchor="middle">拒绝率、延迟、timeout、误伤和审计证据要放在同一条复盘链路中</text>
  <rect class="strip" x="220" y="534" width="760" height="50" rx="18"/>
  <text class="s" x="600" y="566" text-anchor="middle">准入策略上线后，指标解释、告警分流和回滚依据必须同时可见</text>
</svg>
