/* security.php — page-scoped tokens (do NOT touch global :root; mirrors the .pubnav/.pubfoot
   scoping pattern already used in public.css, since this page introduces its first dark band
   and a distinct type/spacing system that doesn't map cleanly onto the site-wide tokens). */
.sec-page{
  --sp-white:#FFFFFF; --sp-ink:#101312; --sp-body:#5C625F; --sp-muted:#8E938F;
  --sp-line:#E4E2DD; --sp-line-soft:#F0EEEA; --sp-tint:#F5F8F6; --sp-tint-body:#4A6155;
  --sp-dash:#C7D3CC; --sp-accent:#1F7A54;
  --sp-dark:#0C100E; --sp-terminal:#0A0D0B; --sp-dark-ink:#F4F3F0; --sp-dark-accent:#6EC79B;
  background:var(--sp-white); color:var(--sp-ink);
  font-family:'Instrument Sans',-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;
}
.sec-page .mono{font-family:'IBM Plex Mono',monospace}

/* ---------- hero (dark band) ---------- */
.sec-hero{background:var(--sp-dark);color:var(--sp-dark-ink)}
.sec-hero-in{max-width:1160px;margin:0 auto;padding:0 40px}
.sec-hero-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(360px,1fr));gap:64px;padding:88px 0;align-items:center}

.sec-eyebrow{display:inline-block;font-size:11px;letter-spacing:.18em;text-transform:uppercase;color:var(--sp-dark-accent);padding-bottom:14px}
.sec-eyebrow.on-light{color:var(--sp-muted)}

.sec-h1{font-size:clamp(32px,3.9vw,50px);line-height:1.1;font-weight:600;letter-spacing:-.032em;margin:0 0 22px;max-width:15ch;text-wrap:balance}
.sec-word-wrap{white-space:nowrap}
.sec-word-slot{position:relative;display:inline-block;padding:0 .1em}
.sec-word-ghost{visibility:hidden}
.sec-word-live{position:absolute;inset:0;display:flex;align-items:center;justify-content:center;overflow:hidden;color:var(--sp-dark-accent);letter-spacing:-.05em}
.sec-word-bar{position:absolute;left:0;right:0;bottom:.06em;height:2px;background:rgba(110,199,155,.42)}

.sec-sub{color:rgba(244,243,240,.66);font-size:17px;line-height:1.65;margin:0;max-width:46ch;text-wrap:pretty}

.sec-chips{display:flex;flex-wrap:wrap;gap:10px;margin-top:32px}
.sec-chip{font-family:'IBM Plex Mono',monospace;font-size:11.5px;color:rgba(244,243,240,.68);border:1px solid rgba(255,255,255,.16);border-radius:6px;padding:7px 12px}

/* ---------- terminal card ---------- */
.sec-terminal{border:1px solid rgba(255,255,255,.13);border-radius:10px;background:var(--sp-terminal);overflow:hidden}
.sec-term-head{display:flex;align-items:center;justify-content:space-between;gap:16px;padding:13px 18px;border-bottom:1px solid rgba(255,255,255,.09);font-family:'IBM Plex Mono',monospace;font-size:11px;letter-spacing:.06em;text-transform:uppercase;color:rgba(244,243,240,.45)}
.sec-term-status{display:flex;align-items:center;gap:7px;color:var(--sp-dark-accent)}
.sec-term-status svg{width:12px;height:12px;display:none}
.sec-term-status.done svg{display:block}
.sec-term-body{position:relative;padding:26px 20px;overflow:hidden}
.sec-term-line{font-family:'IBM Plex Mono',monospace;font-size:clamp(11px,1.1vw,14px);line-height:1.6;white-space:nowrap}
.sec-term-cipher{color:var(--sp-dark-accent)}
.sec-term-plain{color:rgba(244,243,240,.42)}
.sec-scan{position:absolute;top:0;bottom:0;width:1px;background:var(--sp-dark-accent);box-shadow:0 0 16px 2px rgba(110,199,155,.5);animation:secScanPulse 1.2s ease-in-out infinite;left:0}
.sec-term-foot{display:flex;align-items:center;gap:14px;padding:12px 18px;border-top:1px solid rgba(255,255,255,.09)}
.sec-term-track{flex:1;height:2px;background:rgba(255,255,255,.12)}
.sec-term-fill{height:100%;background:var(--sp-dark-accent);width:0}
.sec-term-statusline{font-family:'IBM Plex Mono',monospace;font-size:11px;color:rgba(244,243,240,.45);min-width:200px;text-align:right}
@keyframes secScanPulse{0%,100%{opacity:.5}50%{opacity:1}}

/* ---------- body wrap ---------- */
.sec-wrap{max-width:1160px;margin:0 auto;padding:0 40px 110px}
.sec-section{margin-top:104px}
.sec-h2{font-size:clamp(26px,2.6vw,34px);font-weight:600;letter-spacing:-.028em;line-height:1.15;margin:0 0 12px}
.sec-intro{color:var(--sp-body);font-size:15.5px;line-height:1.65;margin:0 0 30px;max-width:56ch}

/* ---------- hairline grid ---------- */
.sec-hgrid{display:grid;grid-template-columns:repeat(auto-fit,minmax(230px,1fr));gap:1px;background:var(--sp-line);border:1px solid var(--sp-line)}
.sec-hgrid.cols-3{grid-template-columns:repeat(auto-fit,minmax(260px,1fr))}
.sec-hgrid.cols-4{grid-template-columns:repeat(auto-fit,minmax(240px,1fr))}
.sec-hcell{background:var(--sp-white);padding:28px 26px}
.sec-hcell.tint{background:var(--sp-tint)}
.sec-hcell.dark{background:var(--sp-dark);color:var(--sp-dark-ink)}

/* pillars (index style) */
.sec-hcell .idx{font-family:'IBM Plex Mono',monospace;font-size:11px;letter-spacing:.16em;color:var(--sp-accent);margin-bottom:20px}
.sec-hcell h3{font-size:17px;font-weight:600;margin:0 0 10px;letter-spacing:-.018em}
.sec-hcell h3 + p, .sec-hcell strong + span{color:var(--sp-body);font-size:14.5px;line-height:1.65;margin:0}
.sec-hcell.tint strong + span{color:var(--sp-tint-body)}

/* architecture icon cells */
.sec-hcell .arch-icon{width:19px;height:19px;margin-bottom:18px;stroke:var(--sp-body);stroke-width:1.6}
.sec-hcell.tint .arch-icon{stroke:var(--sp-accent)}
.sec-hcell strong{display:block;font-size:15px;font-weight:600;margin-bottom:7px;letter-spacing:-.015em}
.sec-hcell span{display:block;font-size:13.5px;color:var(--sp-body);line-height:1.6}
.sec-hcell.tint span{color:var(--sp-tint-body)}
.sec-hcell.dark strong{color:var(--sp-dark-ink)}
.sec-hcell.dark span{color:rgba(244,243,240,.66)}
.sec-hcell.dark .arch-icon{stroke:var(--sp-dark-accent)}

/* access/audit cells reuse .sec-hcell strong/span defaults */

/* ---------- how-it-works two-col + steps ---------- */
.sec-two-col{display:grid;grid-template-columns:repeat(auto-fit,minmax(300px,1fr));gap:56px;align-items:start}
.sec-two-col .sec-h2{max-width:18ch}
.sec-steps .sec-step{display:grid;grid-template-columns:44px 1fr;gap:0 20px;padding:20px 0;border-top:1px solid var(--sp-line)}
.sec-steps .sec-step:last-child{border-bottom:1px solid var(--sp-line)}
.sec-step-num{font-family:'IBM Plex Mono',monospace;font-size:12px;color:var(--sp-accent);padding-top:2px}
.sec-step h4{font-size:16px;font-weight:600;margin:0 0 5px;letter-spacing:-.015em}
.sec-step p{color:var(--sp-body);font-size:14.5px;line-height:1.65;margin:0}

/* FAQ rows reuse .sec-step-like structure without the number column */
.sec-faq-row{padding:22px 0;border-top:1px solid var(--sp-line)}
.sec-faq-row:last-child{border-bottom:1px solid var(--sp-line)}
.sec-faq-row h4{font-size:15.5px;font-weight:600;margin:0 0 7px;letter-spacing:-.015em}
.sec-faq-row p{color:var(--sp-body);font-size:14.5px;line-height:1.65;margin:0}

/* ---------- data-at-rest 3-panel diagram ---------- */
.sec-data-diagram{display:flex;flex-wrap:wrap;align-items:stretch;border:1px solid var(--sp-line)}
.sec-data-left{flex:3 1 340px;min-width:290px;padding:28px 30px}
.sec-data-label{font-family:'IBM Plex Mono',monospace;font-size:11px;letter-spacing:.14em;text-transform:uppercase;color:var(--sp-muted);margin-bottom:18px}
.sec-data-table{display:grid;grid-template-columns:70px 1fr;font-family:'IBM Plex Mono',monospace;font-size:12px;border-top:1px solid var(--sp-line)}
.sec-data-table .h{padding:10px 0;color:var(--sp-muted);border-bottom:1px solid var(--sp-line)}
.sec-data-table .r-id{padding:10px 0;color:var(--sp-muted);border-bottom:1px solid var(--sp-line-soft)}
.sec-data-table .r-body{padding:10px 0;color:var(--sp-ink);border-bottom:1px solid var(--sp-line-soft);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
.sec-data-table .r-id.last, .sec-data-table .r-body.last{border-bottom:0}
.sec-data-note{display:flex;align-items:center;gap:9px;margin-top:18px;font-size:13.5px;color:var(--sp-body)}
.sec-data-note svg{width:14px;height:14px;flex:none;stroke:var(--sp-accent)}

.sec-data-mid{flex:1 1 120px;min-width:120px;border-left:1px dashed var(--sp-dash);border-right:1px dashed var(--sp-dash);display:flex;flex-wrap:wrap;align-items:center;justify-content:center;gap:12px;padding:22px 14px;text-align:center}
.sec-data-mid .lbl{font-family:'IBM Plex Mono',monospace;font-size:10px;letter-spacing:.14em;text-transform:uppercase;color:var(--sp-muted);line-height:1.5}
.sec-data-mid .req{display:flex;align-items:center;gap:7px;color:var(--sp-accent)}
.sec-data-mid .req svg{width:28px;height:13px}
.sec-data-mid .req span{font-family:'IBM Plex Mono',monospace;font-size:9.5px;color:var(--sp-body)}

.sec-data-right{flex:2 1 280px;min-width:260px;padding:28px 30px;background:var(--sp-dark);color:var(--sp-dark-ink);display:flex;flex-direction:column;justify-content:center}
.sec-data-right svg{width:19px;height:19px;margin-bottom:18px;stroke:var(--sp-dark-accent)}
.sec-data-right strong{display:block;font-size:15px;font-weight:600;margin-bottom:8px;letter-spacing:-.015em}
.sec-data-right span.desc{display:block;font-size:13.5px;line-height:1.65;color:rgba(244,243,240,.66)}
.sec-data-right .status{display:flex;align-items:center;gap:8px;margin-top:18px;font-family:'IBM Plex Mono',monospace;font-size:11px;color:var(--sp-dark-accent)}
.sec-data-right .status .dot{width:5px;height:5px;border-radius:50%;background:var(--sp-dark-accent)}

/* ---------- practices strip ---------- */
.sec-practices{display:grid;grid-template-columns:repeat(auto-fit,minmax(200px,1fr));gap:1px;background:var(--sp-line);border-top:1px solid var(--sp-line);border-bottom:1px solid var(--sp-line)}
.sec-practice{background:var(--sp-white);padding:22px 24px}
.sec-practice:first-child{padding-left:0}
.sec-practice .val{font-family:'IBM Plex Mono',monospace;font-size:12px;color:var(--sp-accent);margin-bottom:8px}
.sec-practice .desc{font-size:13.5px;color:var(--sp-body);line-height:1.6}

/* ---------- CTA (dark) ---------- */
.sec-cta{margin-top:104px;background:var(--sp-dark);color:var(--sp-dark-ink);padding:52px 48px;display:grid;grid-template-columns:repeat(auto-fit,minmax(280px,1fr));gap:36px;align-items:center}
.sec-cta h3{font-size:clamp(22px,2.2vw,28px);font-weight:600;letter-spacing:-.026em;margin:0 0 10px;max-width:20ch}
.sec-cta p{color:rgba(244,243,240,.66);font-size:15px;line-height:1.65;margin:0;max-width:48ch}
.sec-cta-actions{display:flex;flex-wrap:wrap;gap:12px;justify-content:flex-end}
.sec-btn{display:inline-flex;align-items:center;padding:13px 22px;font-size:14.5px;font-weight:600;border-radius:4px;text-decoration:none}
.sec-btn-primary{background:var(--sp-dark-ink);color:var(--sp-dark)}
.sec-btn-secondary{border:1px solid rgba(255,255,255,.24);color:var(--sp-dark-ink)}

/* ---------- closing statements ---------- */
.sec-closing{margin-top:104px;display:grid;grid-template-columns:repeat(auto-fit,minmax(300px,1fr));gap:56px;padding-top:40px;border-top:1px solid var(--sp-line)}
.sec-closing h3{font-size:22px;font-weight:600;letter-spacing:-.024em;margin:0 0 12px}
.sec-closing p{color:var(--sp-body);font-size:15px;line-height:1.7;margin:0;max-width:48ch}

/* ---------- scroll reveal ---------- */
.sec-reveal{transition:opacity .6s cubic-bezier(.22,.9,.3,1), transform .6s cubic-bezier(.22,.9,.3,1)}
.sec-reveal.pending{opacity:0;transform:translateY(14px)}
@media (prefers-reduced-motion: reduce){
  .sec-reveal.pending{opacity:1;transform:none;transition:none}
  .sec-scan{animation:none}
}

/* ---------- responsive ---------- */
@media(max-width:860px){
  .sec-hero-in,.sec-wrap{padding-left:24px;padding-right:24px}
  .sec-hero-grid{gap:40px;padding:56px 0}
  .sec-section{margin-top:72px}
  .sec-cta{margin-top:72px}
  .sec-closing{margin-top:72px}
}

@media(max-width:700px){
  /* auto-fit + minmax() grids need an explicit floor override below their minmax px value,
     otherwise a single column still overflows the viewport instead of shrinking. */
  .sec-hero-grid,
  .sec-two-col,
  .sec-hgrid,
  .sec-hgrid.cols-3,
  .sec-hgrid.cols-4,
  .sec-practices,
  .sec-cta,
  .sec-closing{grid-template-columns:1fr}

  .sec-two-col{gap:32px}
  .sec-closing{gap:32px}

  .sec-cta{padding:32px 24px;gap:24px;text-align:left}
  .sec-cta-actions{justify-content:flex-start;flex-direction:column;align-items:stretch}
  .sec-btn{justify-content:center;text-align:center}

  .sec-practice:first-child{padding-left:24px}

  .sec-h1{max-width:none}
  .sec-sub{max-width:none}
  .sec-intro{max-width:none}

  /* terminal: keep the single-line reveal intact (breaking it would misrepresent the
     encrypt-in-progress metaphor) but contain it — scroll horizontally inside the fixed
     card instead of blowing out the page. */
  .sec-term-body{overflow-x:auto;-webkit-overflow-scrolling:touch}
  .sec-term-line{font-size:11px}
  .sec-term-head{font-size:10px;padding:12px 14px}
  .sec-term-body{padding:20px 14px}
  .sec-term-foot{padding:12px 14px}

  /* data-at-rest: once the middle "trust boundary" panel is a full-width row instead of a
     narrow column, side dashed borders read as a stray vertical line — flip to top/bottom. */
  .sec-data-mid{border-left:0;border-right:0;border-top:1px dashed var(--sp-dash);border-bottom:1px dashed var(--sp-dash)}
  .sec-data-left,.sec-data-right{min-width:0}
}

@media(max-width:900px){
  /* 3-item and 5-item auto-fit grids don't divide evenly into 2 columns at tablet widths —
     leaves a stray empty cell. Force 1-column here; 4-item grids (architecture, access) divide
     evenly into 2x2 and are left alone. */
  .sec-hgrid.cols-3,
  .sec-practices{grid-template-columns:1fr}
  .sec-practice:first-child{padding-left:24px}
}

@media(max-width:480px){
  .sec-hero-in,.sec-wrap{padding-left:18px;padding-right:18px}
  .sec-chip{font-size:11px;padding:6px 10px}
  .sec-term-line{font-size:10.5px}
  .sec-data-left,.sec-data-right{padding:22px 20px}
  .sec-hcell{padding:24px 20px}
  .sec-practice{padding:20px 18px}
  .sec-practice:first-child{padding-left:18px}
}