Every mechanism in the proposal, one picture — nine branches, from the failure modes it designs against to the defenses it publishes. Branch labels link to their chapters.