diff --git a/docToolchainConfig.groovy b/docToolchainConfig.groovy
index 6790af1..a93c2ab 100644
--- a/docToolchainConfig.groovy
+++ b/docToolchainConfig.groovy
@@ -51,3 +51,16 @@ microsite.menu = [
         specs        : '-',
         doc          : '-',
 ]
+
+// === diagrams ===============================================================
+// Rendered remotely by Kroki, so no local PlantUML or Graphviz is needed --
+// neither on a developer machine nor on the CI runner.
+asciidoctorAttributes = [
+        'diagram-server-url' : 'https://kroki.io/',
+        'diagram-server-type': 'kroki_io',
+]
+// Note: the diagram blocks carry opts=inline. Kroki decides who renders a
+// diagram, not where the result is stored: asciidoctor-diagram still writes a
+// file. In the microsite that file lands in the site root (output/images/)
+// while a page one level down references ./images/, so every diagram 404s.
+// Inline SVG removes the file, and with it the mismatch.
diff --git a/docs/arc42/src/03_context_and_scope.adoc b/docs/arc42/src/03_context_and_scope.adoc
index e340651..93236b8 100644
--- a/docs/arc42/src/03_context_and_scope.adoc
+++ b/docs/arc42/src/03_context_and_scope.adoc
@@ -8,7 +8,7 @@ Everything else it touches is a tool it calls.
 
 === Business Context
 
-[plantuml,03_business_context,svg]
+[plantuml,03_business_context,svg,opts=inline]
 ....
 @startuml
 !include <C4/C4_Context.puml>
@@ -51,7 +51,7 @@ Rel(user, site, "downloads a template")
 
 === Technical Context
 
-[plantuml,03_technical_context,svg]
+[plantuml,03_technical_context,svg,opts=inline]
 ....
 @startuml
 !include <C4/C4_Container.puml>
diff --git a/docs/arc42/src/05_building_block_view.adoc b/docs/arc42/src/05_building_block_view.adoc
index 92ab51c..8daf048 100644
--- a/docs/arc42/src/05_building_block_view.adoc
+++ b/docs/arc42/src/05_building_block_view.adoc
@@ -9,7 +9,7 @@ The orchestrator owns the sequence; four classes own one pipeline stage each.
 `build.groovy` loads them by file name through a `GroovyClassLoader` and passes each one the
 parsed configuration (`build.groovy:101-123`).
 
-[plantuml,05_level1,svg]
+[plantuml,05_level1,svg,opts=inline]
 ....
 @startuml
 !include <C4/C4_Component.puml>
@@ -97,7 +97,7 @@ There is no DTO and no schema; a renamed key fails at runtime. See <<TD-7>>.
 The format name decides the path. A four-way dispatch chain routes each conversion
 (`lib/Converter.groovy:60-71`).
 
-[plantuml,05_level2_converter,svg]
+[plantuml,05_level2_converter,svg,opts=inline]
 ....
 @startuml
 !include <C4/C4_Component.puml>
diff --git a/docs/arc42/src/06_runtime_view.adoc b/docs/arc42/src/06_runtime_view.adoc
index 02c1da5..df160bd 100644
--- a/docs/arc42/src/06_runtime_view.adoc
+++ b/docs/arc42/src/06_runtime_view.adoc
@@ -8,7 +8,7 @@ precedes every containerised run.
 
 === Full build
 
-[plantuml,06_full_build,svg]
+[plantuml,06_full_build,svg,opts=inline]
 ....
 @startuml
 actor Maintainer
@@ -49,7 +49,7 @@ Counters are incremented inside a `synchronized(this)` block (`:433`).
 
 === A conversion fails
 
-[plantuml,06_failure,svg]
+[plantuml,06_failure,svg,opts=inline]
 ....
 @startuml
 participant "Converter.convertAll" as A
@@ -80,7 +80,7 @@ The multi-page path is quieter still: a failing Pandoc call there only prints a
 
 === Submodule refresh
 
-[plantuml,06_submodule,svg]
+[plantuml,06_submodule,svg,opts=inline]
 ....
 @startuml
 participant "build-arc42.sh" as S
diff --git a/docs/arc42/src/07_deployment_view.adoc b/docs/arc42/src/07_deployment_view.adoc
index 2288ecf..a8de058 100644
--- a/docs/arc42/src/07_deployment_view.adoc
+++ b/docs/arc42/src/07_deployment_view.adoc
@@ -5,7 +5,7 @@ ifndef::imagesdir[:imagesdir: ../images]
 
 === Infrastructure Level 1
 
-[plantuml,07_deployment,svg]
+[plantuml,07_deployment,svg,opts=inline]
 ....
 @startuml
 !include <C4/C4_Deployment.puml>
diff --git a/docs/specs/use-cases-arc42-generator.adoc b/docs/specs/use-cases-arc42-generator.adoc
index 142988c..0ea38ba 100644
--- a/docs/specs/use-cases-arc42-generator.adoc
+++ b/docs/specs/use-cases-arc42-generator.adoc
@@ -188,7 +188,7 @@ build continues; both checks are non-fatal (`build-arc42.sh:109-111`, `:187-188`
 Risk R-2 — this violates goal G-4 of the PRD (`build.groovy:211-215`).
 |===
 
-[plantuml,uc1_activity,svg]
+[plantuml,uc1_activity,svg,opts=inline]
 ....
 @startuml
 start
@@ -678,7 +678,7 @@ and SHALL exit with code 1 afterwards.
 
 === Entity Model
 
-[plantuml,spec_entities,svg]
+[plantuml,spec_entities,svg,opts=inline]
 ....
 @startuml
 hide circle
@@ -728,7 +728,7 @@ QS-02.
 
 === State Machine: a single conversion
 
-[plantuml,spec_states,svg]
+[plantuml,spec_states,svg,opts=inline]
 ....
 @startuml
 [*] --> Dispatched