direction: down

sources: "" {
  grid-columns: 2
  grid-gap: 40
  sbom: "SBOM (build time)" {
    grid-columns: 1
    s1: "flask==3.0.0"
    s2: "redis==5.0.0"
    s3: "(no psycopg2)" { class: muted }
  }
  obom: "OBOM (runtime)" {
    grid-columns: 1
    o1: "flask==3.0.0: present"
    o2: "redis: not loaded" { class: muted }
    o3: "psycopg2==2.9.9: missing from SBOM" { class: danger }
    o4: "libpq.so.5: missing from SBOM" { class: danger }
  }
}

inventaire: "Unified inventory" {
  grid-columns: 3
  i1: "SBOM only\nunused"
  i2: "OBOM only\nto investigate" { class: accent }
  i3: "Both\nactive dependency"
}

sources -> inventaire: "correlation" { class: principal }