rewrite 2026-09 and 2027 articles for reader-facing quality

web/public/assets/editorial/2027/security-capstone-2027-control-evidence-matrix.svg

@@ -1,11 +1,16 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="375" height="300" viewBox="0 0 375 300" role="img" aria-labelledby="title desc">
-  <title id="title">Матрица пути, покрытия и свидетельства</title><desc id="desc">Неотображённый путь, невыбранный контроль и несобранное свидетельство не дают положительного результата. Разрешена только передача плана.</desc>
-  <rect width="375" height="300" fill="#f5f7fb"/><style>text{font-family:Arial,sans-serif;fill:#172554}.h{font-size:16px;font-weight:700}.t{font-size:12px;font-weight:700}.s{font-size:11px}.head{fill:#dbeafe;stroke:#1d4ed8;stroke-width:1}.cell{fill:#fff;stroke:#94a3b8;stroke-width:1}.bad{fill:#fff1f2;stroke:#be123c;stroke-width:1}.ok{fill:#e0f2fe;stroke:#0369a1;stroke-width:1.5}</style>
-  <text x="18" y="25" class="h">P114: матрица без мнимого покрытия</text>
-  <rect x="18" y="46" width="98" height="33" class="head"/><rect x="116" y="46" width="104" height="33" class="head"/><rect x="220" y="46" width="137" height="33" class="head"/><text x="28" y="67" class="t">Слой</text><text x="126" y="67" class="t">Статус</text><text x="230" y="67" class="t">Вывод</text>
-  <rect x="18" y="79" width="98" height="38" class="cell"/><rect x="116" y="79" width="104" height="38" class="cell"/><rect x="220" y="79" width="137" height="38" class="bad"/><text x="28" y="103" class="s">Synthetic path</text><text x="126" y="103" class="s">not-mapped</text><text x="230" y="103" class="s">claim → stop</text>
-  <rect x="18" y="117" width="98" height="38" class="cell"/><rect x="116" y="117" width="104" height="38" class="cell"/><rect x="220" y="117" width="137" height="38" class="bad"/><text x="28" y="141" class="s">Coverage</text><text x="126" y="141" class="s">not-selected</text><text x="230" y="141" class="s">claim → stop</text>
-  <rect x="18" y="155" width="98" height="38" class="cell"/><rect x="116" y="155" width="104" height="38" class="cell"/><rect x="220" y="155" width="137" height="38" class="bad"/><text x="28" y="179" class="s">Evidence</text><text x="126" y="179" class="s">not-collected</text><text x="230" y="179" class="s">claim → stop</text>
-  <rect x="18" y="193" width="98" height="38" class="cell"/><rect x="116" y="193" width="104" height="38" class="cell"/><rect x="220" y="193" width="137" height="38" class="bad"/><text x="28" y="217" class="s">Effect</text><text x="126" y="217" class="s">not-attempted</text><text x="230" y="217" class="s">claim → stop</text>
-  <rect x="63" y="252" width="249" height="32" rx="8" class="ok"/><text x="84" y="273" class="t">Выход: synthetic-plan-hand-off</text>
+<svg xmlns="http://www.w3.org/2000/svg" width="750" height="500" viewBox="0 0 750 500" role="img" aria-labelledby="title desc">
+  <title id="title">Матрица авторизации</title>
+  <desc id="desc">Субъект, роль, действие и объект сходятся в решении allow или deny.</desc>
+  <rect width="750" height="500" rx="24" fill="#f8fafc"/>
+  <text x="38" y="50" font-family="Arial,sans-serif" font-size="26" font-weight="700" fill="#172033">Решение доступа строится из полей</text>
+  <g font-family="Arial,sans-serif">
+    <rect x="42" y="105" width="150" height="85" rx="14" fill="#e0f2fe" stroke="#0284c7" stroke-width="3"/><text x="117" y="141" text-anchor="middle" font-size="22" font-weight="700" fill="#075985">Субъект</text><text x="117" y="171" text-anchor="middle" font-size="18" fill="#0c4a6e">subjectId</text>
+    <rect x="212" y="105" width="150" height="85" rx="14" fill="#ede9fe" stroke="#7c3aed" stroke-width="3"/><text x="287" y="141" text-anchor="middle" font-size="22" font-weight="700" fill="#5b21b6">Роль</text><text x="287" y="171" text-anchor="middle" font-size="18" fill="#4c1d95">claims</text>
+    <rect x="382" y="105" width="150" height="85" rx="14" fill="#fef3c7" stroke="#d97706" stroke-width="3"/><text x="457" y="141" text-anchor="middle" font-size="22" font-weight="700" fill="#92400e">Действие</text><text x="457" y="171" text-anchor="middle" font-size="18" fill="#78350f">read / write</text>
+    <rect x="552" y="105" width="150" height="85" rx="14" fill="#dcfce7" stroke="#16a34a" stroke-width="3"/><text x="627" y="141" text-anchor="middle" font-size="22" font-weight="700" fill="#166534">Объект</text><text x="627" y="171" text-anchor="middle" font-size="18" fill="#14532d">ownerId</text>
+    <path d="M117 190v75h258" fill="none" stroke="#475569" stroke-width="4"/><path d="M287 190v75h88" fill="none" stroke="#475569" stroke-width="4"/><path d="M457 190v75h-82" fill="none" stroke="#475569" stroke-width="4"/><path d="M627 190v75H375" fill="none" stroke="#475569" stroke-width="4"/>
+    <path d="M375 265v38" stroke="#475569" stroke-width="4"/><path d="m375 303-8-12h16z" fill="#475569"/>
+    <rect x="235" y="325" width="280" height="74" rx="15" fill="#1e293b"/><text x="375" y="371" text-anchor="middle" font-size="24" font-weight="700" fill="#fff">ALLOW / DENY</text>
+  </g>
+  <text x="38" y="455" font-family="Arial,sans-serif" font-size="20" fill="#475569">Неизвестное значение ведёт в deny-by-default.</text>
 </svg>