diff --git a/docs/blog-diagrams/README.md b/docs/blog-diagrams/README.md
new file mode 100644
index 0000000..fa9b5fa
--- /dev/null
+++ b/docs/blog-diagrams/README.md
@@ -0,0 +1,4 @@
+# Blog diagrams (public CDN source)
+
+PNG diagrams referenced from CreateOS blogs when `createos-content` is private.
+Keep filenames stable; Blog A links use raw.githubusercontent.com paths under this folder.
diff --git a/docs/blog-diagrams/isolation-primitives-ai-agents-microvm-gvisor-container/boundary-layers.png b/docs/blog-diagrams/isolation-primitives-ai-agents-microvm-gvisor-container/boundary-layers.png
new file mode 100644
index 0000000..8737046
Binary files /dev/null and b/docs/blog-diagrams/isolation-primitives-ai-agents-microvm-gvisor-container/boundary-layers.png differ
diff --git a/docs/blog-diagrams/isolation-primitives-ai-agents-microvm-gvisor-container/decision-tree.png b/docs/blog-diagrams/isolation-primitives-ai-agents-microvm-gvisor-container/decision-tree.png
new file mode 100644
index 0000000..12ddb0d
Binary files /dev/null and b/docs/blog-diagrams/isolation-primitives-ai-agents-microvm-gvisor-container/decision-tree.png differ
diff --git a/docs/blog-diagrams/isolation-primitives-ai-agents-microvm-gvisor-container/egress-sequence.png b/docs/blog-diagrams/isolation-primitives-ai-agents-microvm-gvisor-container/egress-sequence.png
new file mode 100644
index 0000000..0c9027f
Binary files /dev/null and b/docs/blog-diagrams/isolation-primitives-ai-agents-microvm-gvisor-container/egress-sequence.png differ