Project X-Wing implements a Purdue-model industrial network architecture with strict IT/OT segmentation across five hierarchical levels, enforcing zero-trust access controls and deny-by-default filtering at every boundary. Data flows from Internet through dual-redundant firewalls (FW1 HA cluster) into the enterprise IT zone (SIE), then through an industrial DMZ (FW2) to production systems (SII) running 3D printers and SCADA supervision, with blockchain-based immutable traceability for aerospace and medical device compliance. The design combines Active/Passive firewall failover, ZTNA gateways with MFA, bastion hosts with session logging, and micro-segmentation via FW4 to enforce least-privilege access and exhaustive audit trails across all zones. This architecture demonstrates ISA/IEC 62443 hardening practices critical for high-availability industrial environments handling regulated manufacturing. Fork this diagram on Diagrams.so to customize firewall rules, add site-specific VLANs, or integrate your own OT protocols and compliance frameworks.