🥇 export from upstream (0ae8b80)

topology.svg

@@ -49,8 +49,8 @@
 
   <!-- SSH Keys -->
   <rect class="box-component comp-ssh" x="50" y="350" width="180" height="50"/>
-  <text class="label" x="140" y="376" text-anchor="middle">SSH Keys</text>
-  <text class="sublabel" x="140" y="392" text-anchor="middle">~/.ssh/</text>
+  <text class="label" x="140" y="376" text-anchor="middle">SSH Keys (selected)</text>
+  <text class="sublabel" x="140" y="392" text-anchor="middle">sandcage-ssh volume</text>
 
   <!-- Arrow from CLI down -->
   <line class="arrow" x1="230" y1="100" x2="320" y2="100"/>
@@ -80,7 +80,7 @@
 
   <!-- Mounted SSH -->
   <rect class="box-component comp-ssh" x="370" y="395" width="330" height="45"/>
-  <text class="label" x="535" y="417" text-anchor="middle">/home/agent/.ssh (read-only)</text>
+  <text class="label" x="535" y="417" text-anchor="middle">/home/agent/.ssh (from sandcage-ssh volume)</text>
 
   <!-- Volume mount arrows -->
   <line class="arrow-mount" x1="230" y1="195" x2="368" y2="260"/>
@@ -90,7 +90,7 @@
   <text class="arrow-label" x="272" y="305">persist</text>
 
   <line class="arrow-mount" x1="230" y1="375" x2="368" y2="415"/>
-  <text class="arrow-label" x="275" y="392">ro mount</text>
+  <text class="arrow-label" x="275" y="392">volume</text>
 
   <!-- Arrow from agent to workspace -->
   <line class="arrow" x1="535" y1="210" x2="535" y2="233"/>
@@ -108,6 +108,6 @@
 
   <!-- Legend -->
   <text class="sublabel" x="50" y="460">1 CLI orchestrates Docker</text>
-  <text class="sublabel" x="50" y="476">2 Volumes mount project, home, and SSH into container</text>
+  <text class="sublabel" x="50" y="476">2 Project and home are bind-mounted; SSH keys via named volume</text>
   <text class="sublabel" x="50" y="492">3 Agent works in mounted workspace — changes visible on host</text>
 </svg>