The exact config the engine runs, drawn from a single source of truth, so the diagram can never drift from what actually sends. Edit it in plain English. Decide what each sub-account is allowed to run.
What each sub-account is allowed to run and show off.