rewrite 2026-09 and 2027 articles for reader-facing quality

web/public/assets/editorial/2027/security-capstone-2027-attack-path-contract.svg

@@ -1,11 +1,17 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="375" height="290" viewBox="0 0 375 290" role="img" aria-labelledby="title desc">
-  <title id="title">Договор о синтетическом активе и границе</title><desc id="desc">Три карточки неопределённости ведут к передаче плана. Заявленный путь, контроль или эффект останавливаются.</desc>
-  <rect width="375" height="290" fill="#f5f7fb"/><style>text{font-family:Arial,sans-serif;fill:#172554}.h{font-size:16px;font-weight:700}.t{font-size:13px;font-weight:700}.s{font-size:11px}.card{fill:#fff;stroke:#64748b;stroke-width:1.5}.go{fill:#e0f2fe;stroke:#0369a1;stroke-width:1.5}.stop{fill:#fff1f2;stroke:#be123c;stroke-width:1.5}.a{stroke:#475569;stroke-width:1.5;fill:none}</style>
-  <text x="18" y="25" class="h">P114: договор о границе</text>
-  <rect x="16" y="50" width="104" height="75" rx="10" class="card"/><text x="27" y="75" class="t">Актив</text><text x="27" y="98" class="s">synthetic label</text><text x="27" y="114" class="s">not-declared</text>
-  <rect x="136" y="50" width="104" height="75" rx="10" class="card"/><text x="147" y="75" class="t">Граница</text><text x="147" y="101" class="s">not-mapped</text><text x="147" y="116" class="s">not-accepted</text>
-  <rect x="256" y="50" width="104" height="75" rx="10" class="card"/><text x="267" y="75" class="t">Путь</text><text x="267" y="101" class="s">not-mapped</text><text x="267" y="116" class="s">не карта системы</text>
-  <path d="M120 87H136M240 87H256M188 125V150" class="a"/><path d="M184 144l4 7 4-7" class="a"/>
-  <rect x="85" y="151" width="205" height="55" rx="11" class="go"/><text x="108" y="176" class="t">synthetic-plan-hand-off</text><text x="108" y="194" class="s">effect: not-attempted</text>
-  <rect x="18" y="232" width="105" height="35" rx="8" class="stop"/><text x="29" y="254" class="s">path claim → stop</text><rect x="135" y="232" width="105" height="35" rx="8" class="stop"/><text x="145" y="254" class="s">control claim → stop</text><rect x="252" y="232" width="105" height="35" rx="8" class="stop"/><text x="262" y="254" class="s">effect claim → stop</text>
+<svg xmlns="http://www.w3.org/2000/svg" width="750" height="500" viewBox="0 0 750 500" role="img" aria-labelledby="title desc">
+  <title id="title">Проверка URL до сети</title>
+  <desc id="desc">URL проходит parse, схему, hostname, порт и egress-контроль до вызова клиента.</desc>
+  <rect width="750" height="500" rx="24" fill="#f8fafc"/>
+  <text x="38" y="50" font-family="Arial,sans-serif" font-size="26" font-weight="700" fill="#172033">URL не должен сразу стать fetch</text>
+  <g font-family="Arial,sans-serif">
+    <rect x="38" y="120" width="120" height="120" rx="16" fill="#e0f2fe" stroke="#0284c7" stroke-width="3"/><text x="98" y="168" text-anchor="middle" font-size="22" font-weight="700" fill="#075985">parse</text><text x="98" y="202" text-anchor="middle" font-size="18" fill="#0c4a6e">URL</text>
+    <path d="M170 180h30" stroke="#475569" stroke-width="4"/><path d="m200 180-12-8v16z" fill="#475569"/>
+    <rect x="212" y="120" width="120" height="120" rx="16" fill="#ede9fe" stroke="#7c3aed" stroke-width="3"/><text x="272" y="168" text-anchor="middle" font-size="22" font-weight="700" fill="#5b21b6">scheme</text><text x="272" y="202" text-anchor="middle" font-size="18" fill="#4c1d95">https</text>
+    <path d="M344 180h30" stroke="#475569" stroke-width="4"/><path d="m374 180-12-8v16z" fill="#475569"/>
+    <rect x="386" y="120" width="120" height="120" rx="16" fill="#fef3c7" stroke="#d97706" stroke-width="3"/><text x="446" y="168" text-anchor="middle" font-size="22" font-weight="700" fill="#92400e">host</text><text x="446" y="202" text-anchor="middle" font-size="18" fill="#78350f">allowlist</text>
+    <path d="M518 180h30" stroke="#475569" stroke-width="4"/><path d="m548 180-12-8v16z" fill="#475569"/>
+    <rect x="560" y="120" width="150" height="120" rx="16" fill="#dcfce7" stroke="#16a34a" stroke-width="3"/><text x="635" y="168" text-anchor="middle" font-size="22" font-weight="700" fill="#166534">egress</text><text x="635" y="202" text-anchor="middle" font-size="18" fill="#14532d">fetch</text>
+    <rect x="100" y="320" width="550" height="78" rx="15" fill="#fee2e2" stroke="#dc2626" stroke-width="3"/><text x="375" y="368" text-anchor="middle" font-size="22" font-weight="700" fill="#991b1b">redirect и новый host → повторить проверки</text>
+  </g>
+  <text x="38" y="455" font-family="Arial,sans-serif" font-size="20" fill="#475569">Credentials и неожиданный порт останавливают путь.</text>
 </svg>