function trustZonesFigure(host) {
ensureStyles();
var shell = document.createElement('div');
shell.className = 'mf-shell';
shell.innerHTML = [
'
Trust Zones in an MCP Exchange host and client trusted, server and upstream untrusted, the model reads only labeled content
',
'
',
'',
'
',
'
The host and the client it owns sit with the model inside one trust domain. A request crosses the dashed boundary to reach the server; whatever the server returns crosses back through the trust filter, marked untrusted, before the model reads it. The server may reach further upstream systems that the client never observes directly.