{ "document_id": 259, "page": 2, "width_pt": 841.92, "height_pt": 594.96, "engine": "paddleocr_vl", "source_run_id": 384, "item_count": 23, "counts_by_type": { "figure": 2, "footer": 2, "heading": 11, "list": 1, "list_item": 3, "text": 4 }, "build_ms": 1, "items": [ { "id": "p2.1", "order": 1, "type": "figure", "bbox": { "l": 731.04, "t": 566.4, "r": 802.56, "b": 530.16 }, "text": "", "attrs": { "role": "page_header", "block_label": "header_image", "embedded_text": "STATEFUL" } }, { "id": "p2.2", "order": 2, "type": "heading", "bbox": { "l": 44.16, "t": 553.92, "r": 402.24, "b": 537.12 }, "text": "Their infrastructure — what runs on their server", "attrs": { "block_label": "paragraph_title" } }, { "id": "p2.3", "order": 3, "type": "heading", "bbox": { "l": 43.92, "t": 533.28, "r": 309.6, "b": 522.24 }, "text": "DATA PLANE · FRANCE · THEIR HARDWARE · THEIR DPA", "attrs": { "block_label": "paragraph_title" } }, { "id": "p2.4", "order": 4, "type": "figure", "bbox": { "l": 33.84, "t": 495.36, "r": 471.36, "b": 205.68 }, "text": "", "attrs": { "block_label": "image", "embedded_text": "FORWARD-AUTH →\ntheir domain · their TLS certificates accounts-api\nsessions & user accounts\nstatic JS served by nginx\n~30 read/write APIs\nlandscape evidence content seo geo security privacy okf stats\nroadmap academy guardian toolbar feedback accounts …\nTheir broker\nscreenshots · OKF · PDFs RabbitMQ · federated to ours" }, "children": [ { "id": "p2.4.1", "order": 5, "type": "text", "bbox": { "l": 41.28, "t": 490.08, "r": 221.28, "b": 475.92 }, "text": "Their staff browsers, inside their estate", "attrs": { "block_label": "paragraph_title", "ai_retyped_from": "heading", "ai_reason": "Item combines heading 'Their staff' with running text; but primarily it is a diagram node label — the extracted span also mismatches; still it is a labeled row…" } }, { "id": "p2.4.2", "order": 6, "type": "heading", "bbox": { "l": 443.04, "t": 488.4, "r": 471.84, "b": 478.8 }, "text": "HTTPS", "attrs": { "block_label": "paragraph_title" } }, { "id": "p2.4.3", "order": 7, "type": "heading", "bbox": { "l": 41.76, "t": 446.64, "r": 127.68, "b": 432 }, "text": "Traefik gateway", "attrs": { "block_label": "paragraph_title" } }, { "id": "p2.4.4", "order": 8, "type": "heading", "bbox": { "l": 40.56, "t": 378.96, "r": 118.56, "b": 364.8 }, "text": "40+ frontends", "attrs": { "block_label": "paragraph_title" } }, { "id": "p2.4.5", "order": 9, "type": "heading", "bbox": { "l": 41.52, "t": 332.4, "r": 116.4, "b": 318.96 }, "text": "Data services", "attrs": { "block_label": "paragraph_title" } }, { "id": "p2.4.6", "order": 10, "type": "heading", "bbox": { "l": 39.84, "t": 240.72, "r": 96, "b": 227.04 }, "text": "MySQL 8.4", "attrs": { "block_label": "paragraph_title" } }, { "id": "p2.4.7", "order": 11, "type": "heading", "bbox": { "l": 188.88, "t": 240.48, "r": 252.24, "b": 227.04 }, "text": "Object store", "attrs": { "block_label": "paragraph_title" } }, { "id": "p2.4.8", "order": 12, "type": "text", "bbox": { "l": 39.6, "t": 224.88, "r": 150, "b": 214.08 }, "text": "16 schemas, one per service" } ] }, { "id": "p2.5", "order": 13, "type": "heading", "bbox": { "l": 495.84, "t": 488.4, "r": 615.36, "b": 477.6 }, "text": "EVERYTHING STORED HERE", "attrs": { "block_label": "paragraph_title" } }, { "id": "p2.6", "order": 14, "type": "text", "bbox": { "l": 494.64, "t": 471.36, "r": 798, "b": 430.32 }, "text": "Findings, screenshots, documents, PII analysis, remediation tracking and every user account — on infrastructure they own, under their own DPA." }, { "id": "p2.7", "order": 15, "type": "heading", "bbox": { "l": 495.84, "t": 396.96, "r": 593.04, "b": 383.04 }, "text": "What they control", "attrs": { "block_label": "paragraph_title" } }, { "id": "p2.8", "order": 16, "type": "list", "bbox": { "l": 495.36, "t": 376.56, "r": 784.56, "b": 294.24 }, "text": "", "attrs": { "item_count": 3 }, "children": [ { "id": "p2.8.1", "order": 17, "type": "list_item", "bbox": { "l": 495.6, "t": 376.56, "r": 750.48, "b": 363.36 }, "text": "Database backups, access controls and disaster recovery." }, { "id": "p2.8.2", "order": 18, "type": "list_item", "bbox": { "l": 495.36, "t": 356.16, "r": 784.56, "b": 328.8 }, "text": "No analytics and no telemetry leave this estate — we cannot read their results." }, { "id": "p2.8.3", "order": 19, "type": "list_item", "bbox": { "l": 495.36, "t": 321.12, "r": 774.48, "b": 294.24 }, "text": "Single-jurisdiction infrastructure: no multi-region replication to reason about." } ] }, { "id": "p2.9", "order": 20, "type": "heading", "bbox": { "l": 496.32, "t": 262.08, "r": 589.44, "b": 251.04 }, "text": "HOW THEY REACH US", "attrs": { "block_label": "paragraph_title" } }, { "id": "p2.10", "order": 21, "type": "text", "bbox": { "l": 494.16, "t": 246.96, "r": 794.16, "b": 218.88 }, "text": "They never call us over HTTP. Their frontends and services talk only to their own broker; the broker federates across the private link." }, { "id": "p2.11", "order": 22, "type": "footer", "bbox": { "l": 29.28, "t": 36, "r": 160.56, "b": 27.12 }, "text": "SPLIT DEPLOYMENT · FRANCE", "attrs": { "block_label": "footer" } }, { "id": "p2.12", "order": 23, "type": "footer", "bbox": { "l": 782.64, "t": 36.24, "r": 812.16, "b": 26.4 }, "text": "2 / 4", "attrs": { "block_label": "number" } } ], "ai_vision": { "model": "claude-opus-5", "confidence": 76, "added": 0, "retyped": 1 } }