client_users { # External Participants
  n1: circle label:"Acme Users"
  n2: circle label:"Beta Users"
  hermes_profiles.n8.handle(right) -> execution_sandboxes.n10.handle(left) [label="executes"]
  hermes_profiles.n7.handle(right) -> execution_sandboxes.n9.handle(left) [label="executes"]
  hermes_profiles.n6.handle(right) -> execution_sandboxes.n9.handle(left) [label="executes"]
  entry_gateways.n4.handle(right) -> hermes_profiles.n8.handle(left)
  hermes_profiles.n5.handle(bottom) -> hermes_profiles.n7.handle(top) [label="if /support"]
  hermes_profiles.n5.handle(right) -> hermes_profiles.n6.handle(left) [label="if /eng"]
  entry_gateways.n3.handle(right) -> hermes_profiles.n5.handle(left)
  client_users.n2.handle(right) -> entry_gateways.n4.handle(left) [label="general"]
  client_users.n1.handle(right) -> entry_gateways.n3.handle(left) [label="/eng or /support"]
}

entry_gateways { # Client Gateways
  n3: rectangle label:"Acme Gateway"
  n4: rectangle label:"Beta Gateway"
}

hermes_profiles { # Routed Profiles
  n5: diamond label:"Acme Router"
  n6: rectangle label:"acme-eng"
  n7: rectangle label:"acme-support"
  n8: rectangle label:"beta"
}

execution_sandboxes { # Secure Runtimes
  n9: rectangle label:"Acme Sandbox"
  n10: rectangle label:"Beta Sandbox"
}