@import url('https://fonts.googleapis.com/css2?family=Source+Serif+4:opsz,wght@8..60,400;8..60,600;8..60,700&display=swap');

:root{
  /* ink on off-white; warm neutral, very low saturation */
  --paper:#fbfaf7;
  --ink:#1c1b18;
  --ink-2:#57544c;
  --ink-3:#6d6960;
  --rule:#e0dcd3;
  --rule-strong:#c8c3b8;
  --accent:#2c4f80;            /* links / selection only */
  /* semantic — used ONLY where the colour carries meaning */
  --allow:#2f6b3d;
  --deny:#a3291d;
  --modify:#8a5510;
  --serif:'Source Serif 4',Charter,'Bitstream Charter','Iowan Old Style',Georgia,serif;
  --mono:ui-monospace,'SF Mono',SFMono-Regular,Menlo,Consolas,'Liberation Mono',monospace;
}
*{box-sizing:border-box}
html{-webkit-text-size-adjust:100%}
body{
  margin:0;background:var(--paper);color:var(--ink);
  font-family:var(--serif);font-size:17px;line-height:1.6;
  font-variant-numeric:tabular-nums;
  -webkit-font-smoothing:antialiased;
}
.wrap{max-width:1180px;margin:0 auto;padding:0 40px}
.prose{max-width:68ch}

/* ---------- header ---------- */
header{padding:64px 0 30px}
h1{font-size:37px;line-height:1.15;font-weight:600;margin:0 0 6px;letter-spacing:-.012em}
.tagline{font-size:16.5px;font-style:italic;color:var(--ink-3);margin:0 0 16px}
.thesis{font-size:19px;line-height:1.5;color:var(--ink-2);margin:0;max-width:64ch}
.status{
  margin-top:22px;padding-top:16px;border-top:1px solid var(--rule);
  font-family:var(--mono);font-size:13.5px;line-height:1.7;color:var(--ink-2);
}
.status b{color:var(--ink);font-weight:600}
.status .fail{color:var(--deny);font-weight:600}
/* Tab strip: labels sitting on a rule, not chrome. Active takes ink and a
   heavier rule; nothing is boxed or filled. */
.tabs{display:flex;align-items:baseline;gap:30px;
      border-bottom:1px solid var(--rule-strong);margin-bottom:2px}
.tabs button{
  font-family:var(--serif);font-size:17px;line-height:1;background:transparent;
  border:0;border-bottom:2px solid transparent;color:var(--ink-3);
  padding:14px 1px 12px;margin-bottom:-1px;cursor:pointer;
}
.tabs button:hover{color:var(--ink)}
.tabs button[aria-selected="true"]{color:var(--ink);font-weight:600;border-bottom-color:var(--ink)}
.tabs .src{margin-left:auto;font-size:15px;color:var(--ink-3);text-decoration:none;
           border-bottom:1px solid var(--rule-strong);padding-bottom:1px}
.tabs .src:hover{color:var(--accent);border-color:var(--accent)}
[hidden]{display:none !important}
#panel-results section:first-of-type{padding-top:40px}

/* ---------- sections ---------- */
section{padding:48px 0;border-bottom:1px solid var(--rule)}
section:last-of-type{border-bottom:0}
h2{font-size:15px;font-weight:600;letter-spacing:.09em;text-transform:uppercase;
   color:var(--ink-3);margin:0 0 6px}
h3{font-size:25px;font-weight:600;line-height:1.25;margin:0 0 12px;letter-spacing:-.008em}
h4{font-size:18px;font-weight:600;margin:34px 0 8px}
p{margin:0 0 15px}
.lede{font-size:18px;color:var(--ink-2)}
.note{font-size:15px;color:var(--ink-3);margin:8px 0 0;max-width:66ch}
a{color:var(--accent)}
a:hover{color:#1d3a63}

/* ---------- tables: rules + whitespace, no boxes ---------- */
table{border-collapse:collapse;width:100%;margin:20px 0 4px;font-size:17px}
/* A 4-column table stretched to 1180px puts 600px of void between a row
   label and its first figure. Width follows column count instead. */
table.w-s{max-width:720px}
table.w-m{max-width:900px}
table.w-l{max-width:100%}
caption{text-align:left;font-size:15px;color:var(--ink-3);padding-bottom:10px}
th,td{padding:9px 16px 9px 0;text-align:right;border-bottom:1px solid var(--rule)}
th:first-child,td:first-child{text-align:left;padding-left:0}
thead th{
  font-family:var(--serif);font-size:14px;font-weight:600;color:var(--ink-3);
  border-bottom:1px solid var(--rule-strong);letter-spacing:.02em;
}
tbody tr:last-child td{border-bottom:1px solid var(--rule-strong)}
td.num,th.num{font-family:var(--mono);font-size:15.5px;font-variant-numeric:tabular-nums}
tr.lead td{font-weight:600}
tr.lead td.num{font-weight:600}
.allow{color:var(--allow)}.deny{color:var(--deny)}.modify{color:var(--modify)}
td.zero{color:var(--ink-2)}

/* ---------- audit explorer: forensic ---------- */
#audit{font-size:16px}
.controls{display:flex;flex-wrap:wrap;gap:10px 18px;align-items:baseline;margin:22px 0 6px}
.controls select{
  font-family:var(--serif);font-size:15px;color:var(--ink);background:transparent;
  border:0;border-bottom:1px solid var(--rule-strong);padding:3px 2px;cursor:pointer;
}
.filters{display:flex;gap:2px;font-family:var(--mono);font-size:13px}
.filters button{
  font-family:inherit;font-size:inherit;background:transparent;border:0;
  border-bottom:2px solid transparent;color:var(--ink-3);padding:3px 9px;cursor:pointer;letter-spacing:.02em;
}
.filters button:hover{color:var(--ink)}
.filters button.on{color:var(--ink);border-bottom-color:var(--ink)}
.filters button.on[data-d="DENY"]{color:var(--deny);border-bottom-color:var(--deny)}
.filters button.on[data-d="MODIFY"]{color:var(--modify);border-bottom-color:var(--modify)}
.filters button.on[data-d="ALLOW"]{color:var(--allow);border-bottom-color:var(--allow)}
.ds-note{font-size:15px;color:var(--ink-3);margin:2px 0 0;max-width:74ch}

.explorer{display:grid;grid-template-columns:330px 1fr;gap:0;margin-top:20px;
  border-top:1px solid var(--rule-strong)}
.list{border-right:1px solid var(--rule);max-height:calc(100vh - 250px);overflow-y:auto}
.row{
  font-family:var(--mono);font-size:12.5px;line-height:1.5;
  padding:9px 18px 9px 0;border-bottom:1px solid var(--rule);cursor:pointer;
}
.row:hover{background:#f3f1ec}
.row[aria-selected="true"]{background:#eeebe4;box-shadow:inset 2px 0 0 var(--ink)}
.row .top{display:flex;gap:9px;align-items:baseline}
.row .disp{font-weight:600;letter-spacing:.04em;min-width:56px}
.row .act{color:var(--ink)}
.row .meta{color:var(--ink-3);font-size:11.5px;margin-top:2px}
.row .taint{color:var(--deny)}

.detail{padding:0 0 0 26px;min-height:420px;max-height:calc(100vh - 250px);overflow-y:auto}
.detail .empty{color:var(--ink-3);padding:64px 0;font-size:16px}
.dh{font-family:var(--serif);font-size:13px;font-weight:600;letter-spacing:.08em;
    text-transform:uppercase;color:var(--ink-3);margin:26px 0 8px;
    padding-bottom:5px;border-bottom:1px solid var(--rule)}
.dh:first-child{margin-top:22px}
.kv{font-family:var(--mono);font-size:13.5px;line-height:1.75;margin:0}
.kv div{display:flex;gap:14px;border-bottom:1px solid #efece5;padding:2px 0}
.kv dt{color:var(--ink-3);min-width:210px;flex:none}
.kv dd{margin:0;color:var(--ink)}
.quote{font-family:var(--serif);font-size:16.5px;line-height:1.55;color:var(--ink);
  border-left:2px solid var(--rule-strong);padding:2px 0 2px 16px;margin:10px 0;max-width:70ch}
.quote.untrusted{border-left-color:var(--deny)}

/* dotted leaders: rule ....... PASS */
.rules{font-family:var(--mono);font-size:13.5px;margin:6px 0 0}
.rules .r{display:flex;align-items:baseline;gap:8px;padding:3px 0}
.rules .nm{color:var(--ink)}
.rules .dots{flex:1;border-bottom:1px dotted var(--rule-strong);transform:translateY(-4px)}
.rules .vd{font-weight:600;letter-spacing:.04em}
.rules .vd.pass{color:var(--ink-3);font-weight:400}
.rules .vd.fail{color:var(--deny)}
.rules .dt{color:var(--ink-3);font-size:12.5px;padding:0 0 5px 0;max-width:78ch}

.chips{display:flex;flex-wrap:wrap;gap:6px;font-family:var(--mono);font-size:12.5px;margin-top:4px}
.chip{border-bottom:1px solid var(--rule-strong);padding:1px 2px;color:var(--ink-2)}
.chip.u{color:var(--deny);border-bottom-color:var(--deny);font-weight:600}

.err{font-family:var(--mono);font-size:14px;color:var(--deny);border:1px solid var(--deny);
     padding:14px 16px;margin:20px 0;max-width:70ch;background:#fdf6f5}
footer{padding:36px 0 64px;font-size:15px;color:var(--ink-3)}
footer a{color:var(--ink-2)}

@media (max-width:900px){
  .wrap{padding:0 22px}
  .explorer{grid-template-columns:1fr}
  .list{border-right:0;border-bottom:1px solid var(--rule-strong);max-height:44vh}
  .detail{padding:0}
  h1{font-size:30px}
}