<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="675" viewBox="0 0 1200 675"><rect width="1200" height="675" fill="#7f1d1d"/><rect x="72" y="68" width="1056" height="540" rx="38" fill="#fff1f2"/><text x="112" y="132" font-size="36" font-family="Arial,'Microsoft YaHei',sans-serif" font-weight="700" fill="#7f1d1d">OPA策略引擎：Rego编写K8s准入控制策略</text><g transform="translate(160,325)"><path d="M0,-72 L64,-36 L64,36 L0,72 L-64,36 L-64,-36 Z" fill="#fecaca"/><text y="8" text-anchor="middle" font-size="21" font-family="Arial,'Microsoft YaHei',sans-serif" font-weight="700" fill="#7f1d1d">资产识别</text></g><g transform="translate(365,325)"><path d="M0,-72 L64,-36 L64,36 L0,72 L-64,36 L-64,-36 Z" fill="#dc2626"/><text y="8" text-anchor="middle" font-size="21" font-family="Arial,'Microsoft YaHei',sans-serif" font-weight="700" fill="white">策略设计</text></g><g transform="translate(570,325)"><path d="M0,-72 L64,-36 L64,36 L0,72 L-64,36 L-64,-36 Z" fill="#fecaca"/><text y="8" text-anchor="middle" font-size="21" font-family="Arial,'Microsoft YaHei',sans-serif" font-weight="700" fill="#7f1d1d">准入执行</text></g><g transform="translate(775,325)"><path d="M0,-72 L64,-36 L64,36 L0,72 L-64,36 L-64,-36 Z" fill="#dc2626"/><text y="8" text-anchor="middle" font-size="21" font-family="Arial,'Microsoft YaHei',sans-serif" font-weight="700" fill="white">监控审计</text></g><g transform="translate(980,325)"><path d="M0,-72 L64,-36 L64,36 L0,72 L-64,36 L-64,-36 Z" fill="#fecaca"/><text y="8" text-anchor="middle" font-size="21" font-family="Arial,'Microsoft YaHei',sans-serif" font-weight="700" fill="#7f1d1d">持续修复</text></g><text x="112" y="548" font-size="23" font-family="Arial,'Microsoft YaHei',sans-serif" fill="#7f1d1d">风险提示：只做上线前检查，缺少持续审计、策略执行和修复闭环</text></svg>