digraph techviz {
  graph [rankdir=LR, splines=ortho, nodesep=0.55, ranksep=0.85];
  node [fontname=Helvetica, fontsize=11, margin="0.18,0.12", style="rounded,filled", fillcolor=white, color="#2d4357", penwidth=1.5];
  edge [fontname=Helvetica, fontsize=10, color="#364b5f", penwidth=1.4, arrowsize=0.75];
  n0 [label="BFF · /bff/csrf", shape=box, style="rounded,filled"];
  n1 [label="Browser cookie · raw", shape=box, style="rounded,filled"];
  n2 [label="JSON body · masked", shape=box, style="rounded,filled"];
  n3 [label="SPA POST 조립", shape=box, style="rounded,filled"];
  n4 [label="Spring CSRF filter", shape=box, style="rounded,filled"];
  n0 -> n1 [label="Set-Cookie · raw", style=solid];
  n0 -> n2 [label="masked JSON", style=solid];
  n1 -> n3 [label="document.cookie · raw", style=solid];
  n2 -> n3 [label="headerName only", style=solid];
  n3 -> n4 [label="Cookie raw = Header raw", style=solid];
}