function tracePropagationFigure(host) {
ensureStyles();
var shell = document.createElement('div');
shell.className = 'mf-shell';
shell.innerHTML = [
'
Trace Propagation and the Audit Chain one trace id, three programs, two independent logs
',
'
',
'',
'
',
'
The trace id stays constant across both hops while each arrow mints its own span id. ops-desk and credential-vault each keep an independent, hash-chained audit log: neither log reads or writes the other’s entries, so the only thing that ties one server’s entry to the other’s is a shared trace id, never a shared request id.