[workshop-diagrams] Add theme-aware explanatory diagram for pre-flight troubleshooting decision tree

[github-actions]

Summary

This PR adds a theme-aware SVG diagram pair visualising the pre-flight troubleshooting decision tree in workshop/07d-confirm-model-access.md.

Workshop file changed

workshop/07d-confirm-model-access.md — the decision tree in the "Pre-flight troubleshooting decision tree" section was previously prose-only. A <picture> block is now inserted directly after the three-branch prose list.

New concept (not a migration)

The diagram is a new visual for an existing prose concept. No existing image was migrated in this run.

SVG files added

• workshop/images/07d-preflight-troubleshoot-light.svg
• workshop/images/07d-preflight-troubleshoot-dark.svg

Both files:

• Use canvas 1200×560, viewBox="0 0 1200 560"
• Pass scripts/check-svg-visual-language.js with zero violations
• Carry role="img", aria-label, data-visual-kind="diagram", data-visual-id
• Use data-node on every diagram node
• Follow the brand palette (light: #f2f5f3 bg, #08872b accent; dark: #101411 bg, #5fed83 accent)
• Were verified with Playwright: currentSrc ends with -light.svg for colorScheme: light and -dark.svg for colorScheme: dark; screenshots are non-blank

Why this diagram helps learners

The three-branch troubleshooting tree (got a reply? → from step 07? → still failing?) is a decision flow that learners must mentally parse from prose alone. Converting it to a left-to-right flow diagram with labelled YES/NO connectors makes the branching structure immediately visible, reduces reading overhead at an anxiety-prone moment (model access errors before the first run), and gives learners a quick visual reference they can glance at without re-reading the paragraph.

Warning

Firewall blocked 7 domains

The following domains were blocked by the firewall during workflow execution:

• accounts.google.com
• android.clients.google.com
• awmgmcpg
• clients2.google.com
• host.docker.internal
• safebrowsingohttpgateway.googleapis.com
• www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "awmgmcpg"
    - "clients2.google.com"
    - "host.docker.internal"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

Generated by 🧠 Workshop Explanatory Diagram Generator · 109.8 AIC · ⌖ 7.15 AIC · ⊞ 6.8K · ◷

• expires on Aug 10, 2026, 5:06 AM UTC