:root{
 --ground:#F4F6F8;--surface:#FFF;--surface-2:#EBEFF2;--line:#D7DEE3;--line-2:#BFCAD1;
 --ink:#101619;--ink-2:#465158;--ink-3:#74838C;
 --accent:#037BAC;--accent-2:#037BAC14;--accent-3:#037BAC2E;
 --navy:#083C5C;--navy-2:#0E5074;--cis-blue:#037BAC;--cis-cyan:#00A3E0;
 --good:#0ca30c;--crit:#d03b3b;--warn:#b8790a;--neut:#65737B;--vio:#6535B8;
 --good-b:#0ca30c1F;--crit-b:#d03b3b1F;--warn-b:#fab2192E;--neut-b:#65737B1F;--vio-b:#6535B81F;
 --sh:0 1px 2px #1016190F,0 6px 18px #10161908;
}
@media (prefers-color-scheme:dark){:root{
 --ground:#0A0E11;--surface:#121A1E;--surface-2:#19242A;--line:#25333A;--line-2:#33454E;
 --ink:#E2EAEE;--ink-2:#9DAFB9;--ink-3:#6C818D;
 --accent:#4FB3DE;--accent-2:#4FB3DE1C;--accent-3:#4FB3DE33;
 --navy:#062A40;--navy-2:#0E5074;--cis-blue:#4FB3DE;--cis-cyan:#00A3E0;
 --good:#48C285;--crit:#F26D60;--warn:#DFA23E;--neut:#8896A1;--vio:#A489EC;
 --good-b:#48C28522;--crit-b:#F26D6022;--warn-b:#DFA23E22;--neut-b:#8896A122;--vio-b:#A489EC22;
 --sh:0 1px 2px #0007,0 6px 18px #0005;
}}
*{box-sizing:border-box}
body{margin:0;background:var(--ground);color:var(--ink);font-size:14px;line-height:1.5;
 font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;-webkit-font-smoothing:antialiased}
.mono{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-variant-numeric:tabular-nums}
h1,h2,h3{margin:0;text-wrap:balance}
.eyebrow{font-size:9.5px;font-weight:600;letter-spacing:.11em;text-transform:uppercase;color:var(--ink-3)}
.wrap{max-width:1400px;margin:0 auto;padding:22px 22px 60px}
.hdr{background:var(--navy);border-bottom:3px solid var(--cis-cyan);position:sticky;top:0;z-index:30}
.hdr h1,.hdr .org{color:#fff}
.hdr .org{opacity:.72}
.hdr .in{max-width:1400px;margin:0 auto;padding:13px 22px;display:flex;align-items:center;gap:15px;flex-wrap:wrap}
.mark{height:28px;padding:0 10px;border-radius:5px;background:#fff;color:var(--navy);
 display:grid;place-items:center;font-weight:800;font-size:12px;letter-spacing:.06em}
.hdr h1{font-size:15.5px;font-weight:600;letter-spacing:-.01em}
.org{font-size:11.5px;color:var(--ink-3)}
.tsw{display:flex;align-items:center;gap:8px;padding:5px 10px;border:1px solid rgba(255,255,255,.22);
 border-radius:8px;background:rgba(255,255,255,.1)}
.tsw .eyebrow{color:rgba(255,255,255,.7)}
.tsw select{color:#fff}
.tsw select option{color:var(--ink);background:var(--surface)}
.tsw select{font:inherit;font-size:12.5px;border:0;background:transparent;color:var(--ink);font-weight:600;cursor:pointer}
nav{display:flex;gap:2px;margin-left:auto;flex-wrap:wrap}
nav button{font:inherit;font-size:12.5px;font-weight:500;padding:7px 13px;border-radius:7px;
 border:1px solid transparent;background:transparent;color:rgba(255,255,255,.82);cursor:pointer}
nav button:hover{background:rgba(255,255,255,.12);color:#fff}
nav button[aria-current=page]{background:#fff;color:var(--navy);font-weight:700}
:focus-visible{outline:2px solid var(--accent);outline-offset:2px}
.kpi{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:1px;background:var(--line);
 border:1px solid var(--line);border-radius:11px;overflow:hidden}
.kpi.small{grid-template-columns:repeat(auto-fit,minmax(180px,1fr));max-width:520px;margin-bottom:16px}
.st{background:var(--surface);padding:15px 17px}
.st .n{font-size:28px;font-weight:600;letter-spacing:-.03em;line-height:1.05;font-variant-numeric:tabular-nums}
.st .l{font-size:10px;font-weight:600;letter-spacing:.08em;text-transform:uppercase;color:var(--ink-3);margin-top:4px}
.st .sub{font-size:11.5px;color:var(--ink-3);margin-top:5px}
.st.key{background:var(--accent-2)}
.crit{color:var(--crit)}.good{color:var(--good)}.warn{color:var(--warn)}
.grid2{display:grid;grid-template-columns:repeat(auto-fit,minmax(390px,1fr));gap:14px;margin-top:20px}
.card{background:var(--surface);border:1px solid var(--line);border-radius:11px;box-shadow:var(--sh);overflow:hidden}
.pad{padding:17px 19px}
.card h2{font-size:14px;font-weight:600}
.cap{font-size:11.5px;color:var(--ink-3);margin:4px 0 14px;max-width:64ch}
.sec{font-size:16px;font-weight:600;letter-spacing:-.01em}
.lead{font-size:12.5px;color:var(--ink-2);max-width:82ch;margin:5px 0 14px}
.hist{display:flex;align-items:flex-end;gap:3px;height:120px;margin-bottom:12px}
.hb{flex:1;display:flex;flex-direction:column;align-items:center;justify-content:flex-end;height:100%}
.hb i{display:block;width:100%;border-radius:4px 4px 0 0;min-height:2px}
.hv{font-size:10px;font-weight:600;color:var(--ink-2);height:14px}
.hx{font-size:10px;color:var(--ink-3);margin-top:4px}
.c-good{background:var(--good)}.c-crit{background:var(--crit)}.c-warn{background:var(--warn)}
.band{display:flex;height:20px;border-radius:4px;overflow:hidden;gap:2px;background:var(--surface-2)}
.band i{display:block}
.legend{display:flex;gap:14px;flex-wrap:wrap;font-size:11.5px;color:var(--ink-2);margin-top:10px}
.legend span{display:inline-flex;align-items:center;gap:6px}
.legend i{width:10px;height:10px;border-radius:2px;display:inline-block}
table{width:100%;border-collapse:collapse;font-size:12.5px}
thead th{background:var(--surface-2);text-align:left;padding:8px 12px;font-size:9.5px;font-weight:600;
 letter-spacing:.07em;text-transform:uppercase;color:var(--ink-3);border-bottom:1px solid var(--line);white-space:nowrap}
tbody td{padding:8px 12px;border-bottom:1px solid var(--line);vertical-align:middle}
tbody tr:last-child td{border-bottom:0}
tr.clickable{cursor:pointer}
tr.clickable:hover{background:var(--surface-2)}
table.tight tbody td{padding:6px 8px;border-bottom:1px solid var(--line)}
.ref{white-space:nowrap;color:var(--ink-2);font-size:11.5px}
.id{font-size:11px;color:var(--ink-2)}
.dim{color:var(--ink-3);font-size:11.5px}
.blast{display:flex;align-items:center;gap:9px;white-space:nowrap}
.blast i{height:9px;border-radius:3px;background:var(--crit);display:block}
.blast b{font-variant-numeric:tabular-nums;font-size:12px}
.score{font-weight:600}
.b-critical{color:var(--crit)}.b-at_risk{color:var(--warn)}.b-compliant{color:var(--good)}.b-none{color:var(--ink-3)}
.pill{display:inline-flex;align-items:center;gap:5px;font-size:11px;font-weight:600;padding:2.5px 8px;
 border-radius:4px;white-space:nowrap;text-transform:capitalize}
.pill::before{content:"";width:5px;height:5px;border-radius:50%;background:currentColor}
.s-pass,.s-reporting{color:var(--good);background:var(--good-b)}
.s-fail{color:var(--crit);background:var(--crit-b)}
.s-not-applicable,.s-never-reported,.s-agentless{color:var(--neut);background:var(--neut-b)}
.s-manual-review,.s-stale{color:var(--warn);background:var(--warn-b)}
.s-error{color:var(--vio);background:var(--vio-b)}
.s-managed-non-compliant,.s-externally-managed{color:var(--vio);background:var(--vio-b)}
.dir{font-size:11px;font-weight:600;padding:2.5px 8px;border-radius:4px}
.d-regressed{color:var(--crit);background:var(--crit-b)}
.d-fixed{color:var(--good);background:var(--good-b)}
.d-changed{color:var(--neut);background:var(--neut-b)}
.tbar{display:flex;gap:8px;align-items:center;flex-wrap:wrap;margin-bottom:12px}
.tbar input,.tbar select{font:inherit;font-size:12.5px;padding:7px 10px;border:1px solid var(--line-2);
 border-radius:7px;background:var(--surface);color:var(--ink)}
.tbar input{flex:1;min-width:200px;max-width:420px}
.resolve{font:inherit;font-size:11.5px;font-weight:600;padding:5px 11px;border-radius:6px;
 border:1px solid var(--accent);background:var(--accent);color:#fff;cursor:pointer}
.noresolve{font-size:11px;color:var(--ink-3)}
.back{font:inherit;font-size:12px;font-weight:600;padding:5px 11px;border-radius:7px;
 border:1px solid var(--line-2);background:var(--surface);color:var(--ink-2);cursor:pointer;margin-bottom:12px}
.empty{padding:36px 20px;text-align:center;color:var(--ink-3);font-size:12.5px;max-width:70ch;margin:0 auto}
.cust{display:grid;grid-template-columns:repeat(auto-fill,minmax(270px,1fr));gap:12px}
.cc{background:var(--surface);border:1px solid var(--line);border-radius:10px;padding:15px 17px}
.cc.on{border-color:var(--accent);box-shadow:0 0 0 1px var(--accent)}
.cc .nm{font-size:13.5px;font-weight:600}
.cc .dm{font-size:11.5px;color:var(--ink-3);margin-top:1px}
.cc .dm.sp{margin-top:9px}
.cc .row{display:flex;justify-content:space-between;align-items:baseline;margin-top:11px}
.cc .ra{text-align:right}
.cc .sc{font-size:21px;font-weight:600;letter-spacing:-.025em;font-variant-numeric:tabular-nums}
.cc.add{border-style:dashed;display:flex;flex-direction:column;gap:9px}
.cc.add h3{font-size:13px;font-weight:600;color:var(--accent)}
.cc.add label{display:block;font-size:11px;font-weight:600;color:var(--ink-2)}
.cc.add input,.cc.add select{width:100%;font:inherit;font-size:12.5px;padding:6px 9px;margin-top:3px;
 border:1px solid var(--line-2);border-radius:6px;background:var(--surface);color:var(--ink)}
.btn{font:inherit;font-size:12.5px;font-weight:600;padding:8px 14px;border-radius:7px;cursor:pointer;
 border:1px solid var(--line-2);background:var(--surface);color:var(--ink)}
.btn.pri{background:var(--accent);border-color:var(--accent);color:#fff}
.hint{font-size:11px;color:var(--ink-3);margin:0;line-height:1.45}
.note{border:1px solid var(--line);border-left:3px solid var(--warn);background:var(--surface);
 border-radius:9px;padding:14px 17px;margin-top:20px}
.note h3{font-size:12.5px;font-weight:600;margin-bottom:6px}
.note p{margin:0;font-size:12px;color:var(--ink-2);line-height:1.6;max-width:88ch}
code{font-family:ui-monospace,Menlo,monospace;font-size:11px;background:var(--surface-2);padding:1px 4px;border-radius:3px}
section{margin-top:22px}

/* --- report card, asset detail, shared bar chart ------------------------- */
.gradewrap{display:flex;align-items:center;gap:16px;flex-wrap:wrap}
.grade{width:60px;height:60px;border-radius:12px;display:grid;place-items:center;
 font-size:30px;font-weight:800;letter-spacing:-.03em;color:#fff}
.g-A{background:#0ca30c}.g-B{background:#5c9c1f}.g-C{background:#b8790a}
.g-D{background:#d2691e}.g-F{background:#c0392b}.g-none{background:var(--neut)}
.cardrows{display:flex;flex-direction:column;gap:7px;margin-top:4px}
.cr{display:grid;grid-template-columns:1fr 68px 108px 30px;gap:10px;align-items:center;font-size:12.5px}
.cr .track{height:9px;border-radius:3px;background:var(--surface-2);overflow:hidden;display:flex}
.cr .track i{display:block;height:100%}
.cr .pass{background:var(--good)}.cr .fail{background:var(--crit)}
.cr .g{font-weight:700;text-align:center;border-radius:4px;font-size:11px;padding:2px 0;color:#fff}
.bars{display:flex;flex-direction:column;gap:8px}
.bar-row{display:grid;grid-template-columns:190px 1fr 64px;gap:10px;align-items:center;font-size:12px}
.bar-track{height:11px;border-radius:3px;background:var(--surface-2);position:relative;overflow:hidden}
.bar-track i{position:absolute;left:0;top:0;height:100%;border-radius:3px}
.bar-total{background:var(--cis-blue);opacity:.32}
.bar-fail{background:var(--crit)}
.bar-val{text-align:right;font-variant-numeric:tabular-nums;font-size:11.5px;color:var(--ink-2)}
.tabs{display:flex;gap:3px;border-bottom:1px solid var(--line);margin:14px 0 0}
.tabs button{font:inherit;font-size:12.5px;font-weight:600;padding:8px 14px;border:0;background:transparent;
 color:var(--ink-3);cursor:pointer;border-bottom:2px solid transparent;margin-bottom:-1px}
.tabs button[aria-selected=true]{color:var(--accent);border-bottom-color:var(--accent)}
.tabpane{display:none}.tabpane.on{display:block}
.kv{display:grid;grid-template-columns:repeat(auto-fit,minmax(210px,1fr));gap:11px}
.kv div{background:var(--surface-2);border-radius:7px;padding:9px 11px}
.kv .k{font-size:9.5px;font-weight:600;letter-spacing:.08em;text-transform:uppercase;color:var(--ink-3)}
.kv .v{font-size:12.5px;margin-top:2px;word-break:break-word}
.chips{display:flex;flex-wrap:wrap;gap:6px}
.chip2{font-size:11px;padding:3px 8px;border-radius:5px;background:var(--surface-2);
 border:1px solid var(--line);font-family:ui-monospace,Menlo,monospace}
.partial{border-left:3px solid var(--warn);background:var(--warn-b);border-radius:7px;
 padding:9px 12px;font-size:11.5px;color:var(--ink-2);margin-bottom:12px}

/* --- login ---------------------------------------------------------------- */
.loginbody{margin:0;min-height:100vh;background:
  radial-gradient(1200px 600px at 12% -10%, #1B3A63 0%, transparent 60%), var(--navy);
  color:#fff;display:grid;place-items:center;padding:32px 20px}
.loginwrap{display:grid;grid-template-columns:minmax(0,1.15fr) minmax(320px,384px);
  gap:56px;max-width:1080px;width:100%;align-items:center}
@media(max-width:900px){.loginwrap{grid-template-columns:1fr;gap:30px}}
.mark.big{height:38px;padding:0 13px;border-radius:6px;background:#fff;color:var(--navy);
  display:inline-grid;place-items:center;font-weight:800;font-size:15px;letter-spacing:.08em;margin-bottom:22px}
.loginpitch h1{font-size:34px;font-weight:700;letter-spacing:-.025em;line-height:1.15;max-width:17ch}
.loginpitch .tag{font-size:14.5px;line-height:1.6;color:rgba(255,255,255,.8);max-width:58ch;margin:14px 0 22px}
ul.pitch{list-style:none;padding:0;margin:0;display:flex;flex-direction:column;gap:11px}
ul.pitch li{position:relative;padding-left:26px;font-size:13.5px;line-height:1.55;
  color:rgba(255,255,255,.78);max-width:62ch}
ul.pitch li::before{content:"";position:absolute;left:0;top:7px;width:9px;height:9px;
  border-radius:2px;background:var(--cis-cyan)}
ul.pitch b{color:#fff;font-weight:600}
.loginpitch .fine{margin-top:24px;font-size:11.5px;color:rgba(255,255,255,.5);max-width:58ch}
.logincard{background:#fff;border-radius:14px;padding:30px 30px 24px;
  box-shadow:0 24px 60px rgba(0,0,0,.35);color:var(--ink)}
:root[data-theme="dark"] .logincard,
@media (prefers-color-scheme:dark){.logincard{background:#fff;color:#101619}}
.logincard h2{font-size:20px;font-weight:600;letter-spacing:-.01em;color:#101619}
.logincard .sub{font-size:12.5px;color:#5b6a73;margin:3px 0 20px}
.logincard label{display:block;font-size:11.5px;font-weight:600;color:#465158;margin:0 0 5px}
.logincard input{width:100%;font:inherit;font-size:14px;padding:10px 12px;margin-bottom:15px;
  border:1px solid #c7d0d6;border-radius:8px;background:#fff;color:#101619}
.logincard input:focus-visible{outline:2px solid var(--cis-blue);outline-offset:1px;border-color:var(--cis-blue)}
.btn.wide{width:100%;padding:11px;font-size:14px;background:var(--cis-blue);border-color:var(--cis-blue);color:#fff}
.logincard .fine{margin:16px 0 0;font-size:11px;color:#77868c;line-height:1.5}
.loginerr{background:#fdeaea;border:1px solid #f0b4b4;color:#8d2020;border-radius:8px;
  padding:9px 12px;font-size:12.5px;margin-bottom:15px}
.signout{font:inherit;font-size:12px;font-weight:500;padding:6px 11px;border-radius:7px;
  border:1px solid rgba(255,255,255,.25);background:transparent;color:rgba(255,255,255,.85);cursor:pointer}
.signout:hover{background:rgba(255,255,255,.12);color:#fff}

/* --- CIS attribution -----------------------------------------------------
   The CIS logo identifies whose BENCHMARKS this measures against. It is never
   the product's own mark: putting it where ConfigShield's identity goes would
   read as "CIS built this", which is not true. Hence a labelled attribution
   chip, and the disclaimer beside it on the login page. */
/* The CIS mark is the product's own brand. It sits on a white chip because the
   official SVG is navy-on-transparent and would disappear into the navy header. */
.brandmark{display:inline-grid;place-items:center;background:#fff;border-radius:6px;
  padding:5px 9px;flex:none}
.brandmark img{height:30px;width:auto;display:block}
.brandmark.big{padding:11px 16px;border-radius:9px;margin-bottom:24px}
.brandmark.big img{height:62px}

/* --- section matrix ------------------------------------------------------
   Rows are top-level benchmark sections, columns their subsections. The layout
   follows the numbering rather than a curated taxonomy, so it stays correct when
   a benchmark edition adds or renumbers sections. */
.matwrap{overflow-x:auto}
.matgrid{display:flex;flex-direction:column;gap:5px;min-width:640px}
.matrow{display:grid;grid-template-columns:172px 1fr 56px;gap:10px;align-items:center}
.matlabel{font-size:11.5px;line-height:1.25;overflow:hidden}
.matlabel b{display:inline-block;min-width:20px;font-size:13px;font-weight:700;color:var(--ink)}
.matlabel span{color:var(--ink-3);display:block;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
.matcells{display:flex;flex-wrap:wrap;gap:3px}
.cell{width:52px;height:38px;border-radius:5px;display:flex;flex-direction:column;
  align-items:center;justify-content:center;gap:1px;cursor:default;color:#fff;
  transition:transform .1s}
.cell:hover{transform:scale(1.08)}
.cell b{font-size:10px;font-weight:700;letter-spacing:-.01em}
.cell i{font-size:9px;font-style:normal;opacity:.85}
.matscore{font-size:11.5px;font-weight:700;text-align:center;padding:5px 0;border-radius:5px;color:#fff}
/* Six steps, matching the report-card grade thresholds. */
.h-0{background:#b3261e}.h-1{background:#c9532a}.h-2{background:#c98a17}
.h-3{background:#9aa61c}.h-4{background:#4f9c2d}.h-5{background:#1a7a4c}
.h-none{background:var(--surface-2);color:var(--ink-3)}
.matkey{display:flex;align-items:center;gap:5px;margin-top:12px;font-size:11px;color:var(--ink-3)}
.matkey i{width:22px;height:10px;border-radius:2px;display:inline-block}
.matkey span:first-child{margin-right:3px}

/* --- implementation groups ------------------------------------------------ */
.igrow{display:grid;grid-template-columns:repeat(auto-fit,minmax(232px,1fr));gap:12px;margin-bottom:22px}
.igcard{background:var(--surface);border:1px solid var(--line);border-radius:11px;
  padding:15px 17px;box-shadow:var(--sh);border-top:3px solid var(--blue,var(--accent))}
.igcard.ig-1{border-top-color:#1a7a4c}
.igcard.ig-2{border-top-color:#037BAC}
.igcard.ig-3{border-top-color:#083C5C}
:root[data-theme="dark"] .igcard.ig-3{border-top-color:#4FB3DE}
.igtop{display:flex;justify-content:space-between;align-items:baseline;gap:10px}
.igname{font-size:17px;font-weight:700;letter-spacing:-.02em}
.igscore{font-size:15px;font-weight:700;padding:2px 8px;border-radius:5px;color:#fff;
  font-variant-numeric:tabular-nums}
.igbar{display:flex;height:9px;border-radius:3px;overflow:hidden;background:var(--surface-2);margin:11px 0 7px}
.igbar i{display:block}.igbar .p{background:var(--good)}.igbar .f{background:var(--crit)}
.igmeta{font-size:11.5px;color:var(--ink-2);font-variant-numeric:tabular-nums}
.igwhat{font-size:11.5px;color:var(--ink-3);line-height:1.5;margin-top:7px}
.igtag{font-size:11px;font-weight:700;padding:2px 7px;border-radius:4px;color:#fff}
.igtag.ig-1{background:#1a7a4c}.igtag.ig-2{background:#037BAC}.igtag.ig-3{background:#083C5C}
h3.sub3{font-size:14px;font-weight:600;margin:22px 0 2px}

/* --- role views + print --------------------------------------------------- */
.vhead{display:flex;align-items:flex-start;gap:16px;flex-wrap:wrap;margin-bottom:6px}
.vhead .btn.print{margin-left:auto;background:var(--accent);border-color:var(--accent);color:#fff}
@media print{
  /* A report has to survive being printed to PDF: drop the chrome, force the
     light palette (a navy header wastes a page of toner and reads badly), and
     stop cards splitting across a page break. */
  :root{--ground:#fff;--surface:#fff;--surface-2:#f2f5f7;--line:#ccd5da;
        --ink:#101619;--ink-2:#404d55;--ink-3:#6b7a83;--sh:none}
  .hdr,nav,.tsw,.btn.print,.tbar,.pg,.signout{display:none!important}
  body{background:#fff}
  .wrap{max-width:100%;padding:0}
  .card,.kpi,.igcard{box-shadow:none;break-inside:avoid;page-break-inside:avoid}
  section{break-inside:auto}
  h2.sec{font-size:19px}
  a{text-decoration:none;color:inherit}
  .matwrap{overflow:visible}
  .matgrid{min-width:0}
}

/* --- schedules ------------------------------------------------------------ */
.schedform{display:flex;gap:12px;align-items:flex-end;flex-wrap:wrap;margin-top:12px}
.schedform label{display:block;font-size:11px;font-weight:600;color:var(--ink-2)}
.schedform input,.schedform select{display:block;margin-top:4px;font:inherit;font-size:12.5px;
  padding:7px 10px;border:1px solid var(--line-2);border-radius:7px;background:var(--surface);color:var(--ink)}
.schedform input{min-width:220px}
.btn.tiny{font-size:11px;padding:4px 9px;margin-left:4px}
.btn.tiny.danger{color:var(--crit);border-color:var(--crit)}

/* --- onboarding ----------------------------------------------------------- */
.tokrow{display:flex;align-items:center;gap:16px;flex-wrap:wrap}
.tok{font-size:14px;background:var(--surface-2);border:1px solid var(--line);border-radius:7px;
  padding:9px 13px;margin-top:4px;word-break:break-all;user-select:all}
.tokrow .btn{margin-left:auto}

/* Section grid, one block per benchmark. Section numbering is per-benchmark, so
   the heading is what tells the reader which document a row's number belongs to. */
.matbench { margin-bottom: 22px; }
.matbenchhead {
  display: flex; align-items: baseline; gap: 10px;
  padding: 0 0 6px; margin-bottom: 8px;
  border-bottom: 1px solid var(--line);
}
.matbenchhead b { font-size: 13px; letter-spacing: .01em; }
.matbenchhead .dim { font-size: 12px; }
.matlabel span i.dim { font-style: italic; }
/* Coverage badge: assessed / total recommendations in a section. Present only
   when they differ, so a fully covered section carries no visual noise. */
.matlabel .cov {
  font-style: normal; font-size: 10px; font-variant-numeric: tabular-nums;
  padding: 1px 4px; border-radius: 3px; margin-left: 6px;
  background: var(--surface-2); color: var(--ink-3); border: 1px solid var(--line);
}
/* A section the pack does not assess. Deliberately flat and uncoloured: it is an
   absence of evidence, and must not read as a score on the heat scale. */
.cell-none {
  font-size: 11px; color: var(--ink-3); font-style: italic;
  padding: 3px 8px; border: 1px dashed var(--line-2); border-radius: 4px;
  background: transparent;
}

/* Control identity. The recommendation number stays in its own monospace column
   for scanning; the title is what makes the row readable. */
.ctl { max-width: 46ch; }
.ctltitle { display: block; line-height: 1.35; }
.ctlsec { display: block; font-size: 11px; color: var(--ink-3); margin-top: 2px; }
.lvl {
  font-size: 11px; font-weight: 600; padding: 1px 5px; border-radius: 3px;
  background: var(--surface-2); border: 1px solid var(--line); white-space: nowrap;
}
/* Control metadata strip on the drill-down: identity, profile, IGs, benchmark. */
.ctlmeta {
  display: flex; flex-wrap: wrap; align-items: center; gap: 8px;
  margin: -4px 0 14px; padding-bottom: 12px; border-bottom: 1px solid var(--line);
}
.ctlmeta .dim { font-size: 12px; }

/* Marks a tenant whose fleet is generated rather than agent-reported. Kept
   deliberately: the alternative is synthetic findings that are indistinguishable
   from real ones, which is not a trade worth making for a tidier screenshot. */
.demo {
  font-size: 10px; font-weight: 600; letter-spacing: .04em; text-transform: uppercase;
  padding: 2px 6px; border-radius: 3px; margin-left: 8px; vertical-align: 2px;
  background: var(--surface-2); color: var(--ink-3); border: 1px solid var(--line);
}
/* Observed value on a device finding: often a long registry path or command
   output, so it is clamped rather than allowed to set the table's width. */
.obs { max-width: 22ch; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }

/* Two-level navigation. The group row is the console's structure; the second row
   is the pages within the group the reader is in. */
.nav1 { display: flex; gap: 2px; align-items: center; margin-left: auto; }
.nav2wrap { border-top: 1px solid var(--line); padding-top: 0; }
.nav2 { display: flex; gap: 2px; padding: 6px 0 0; flex-wrap: wrap; }
.nav2 button {
  font-size: 12px; padding: 5px 10px; border-radius: 5px 5px 0 0;
  border: 0; background: transparent; color: var(--ink-2); cursor: pointer;
}
.nav2 button:hover { background: var(--surface-2); color: var(--ink); }
.nav2 button[aria-current="page"] {
  color: var(--ink); font-weight: 600; background: var(--surface);
  box-shadow: inset 0 -2px 0 var(--accent, var(--ink));
}

/* Exception register and policy form. */
.exreason { max-width: 40ch; font-size: 12px; line-height: 1.4; }
.exgrid { display: grid; grid-template-columns: repeat(auto-fit, minmax(180px, 1fr)); gap: 12px; }
.exform textarea { width: 100%; font: inherit; padding: 6px 8px;
  border: 1px solid var(--line); border-radius: 5px;
  background: var(--surface); color: var(--ink); }

/* Compliance trend. */
.trend { position: relative; }
.trend svg { width: 100%; height: 120px; display: block; overflow: visible; }
.tline { fill: none; stroke: var(--ink); stroke-width: 2; vector-effect: non-scaling-stroke; }
.tarea { fill: color-mix(in srgb, var(--ink) 8%, transparent); stroke: none; }
.tdot  { fill: var(--ink); }
.tdot.last { fill: var(--ink); stroke: var(--surface); stroke-width: 2; }
.tgrid { stroke-width: 1; stroke-dasharray: 3 4; vector-effect: non-scaling-stroke; }
.tgrid.good { stroke: color-mix(in srgb, var(--good, #2E7D32) 55%, transparent); }
.tgrid.crit { stroke: color-mix(in srgb, var(--crit, #B3261E) 55%, transparent); }
.tscale, .taxis { display: flex; justify-content: space-between;
  font-size: 11px; color: var(--ink-3); margin-top: 4px; }
.tscale { position: absolute; top: 0; left: 0; right: 0;
  flex-direction: column-reverse; height: 120px; pointer-events: none; margin: 0; }
.delta { font-size: 12px; font-weight: 600; margin-left: 8px; padding: 2px 7px;
  border-radius: 10px; background: var(--surface-2); color: var(--ink-2); }
.delta.up   { color: var(--good, #2E7D32); }
.delta.down { color: var(--crit, #B3261E); }
.exc { font-size: 10px; font-weight: 600; text-transform: uppercase; letter-spacing: .04em;
  padding: 1px 5px; border-radius: 3px; margin-left: 6px;
  border: 1px solid var(--line-2); color: var(--ink-3); }

/* Integrations. */
.intgrid{display:grid;grid-template-columns:repeat(auto-fit,minmax(340px,1fr));gap:14px;margin-bottom:14px}
.intcard{margin:0}
.inthead{display:flex;align-items:center;justify-content:space-between;gap:10px;margin-bottom:2px}
.istat{font-size:11px;font-weight:600;padding:2px 8px;border-radius:11px;
  background:var(--surface-2);color:var(--ink-3);border:1px solid var(--line);white-space:nowrap}
.istat.s-connected{color:var(--good);border-color:color-mix(in srgb,var(--good) 40%,transparent)}
.istat.s-error{color:var(--crit);border-color:color-mix(in srgb,var(--crit) 40%,transparent)}
.istat.s-configured{color:var(--warn);border-color:color-mix(in srgb,var(--warn) 40%,transparent)}
.ierr{border-left:3px solid var(--crit);background:color-mix(in srgb,var(--crit) 8%,transparent);
  border-radius:0 6px 6px 0;padding:8px 12px;margin:10px 0;font-size:12px}
.ierr b{display:block;color:var(--crit);font-size:11px;margin-bottom:2px}
.ierr span{color:var(--ink-2);word-break:break-word}
.scopes{margin:6px 0 0;padding-left:18px;font-size:12px;color:var(--ink-2)}
.scopes li{margin-bottom:2px}
.intform{margin-top:14px;padding-top:14px;border-top:1px solid var(--line);
  display:flex;flex-direction:column;gap:9px}
.introw{display:flex;gap:8px}
.route{font-size:11px;font-weight:600;padding:2px 8px;border-radius:4px;
  background:var(--surface-2);border:1px solid var(--line);white-space:nowrap}
.route.r-intune,.route.r-gpo,.route.r-jamf{color:var(--warn);
  border-color:color-mix(in srgb,var(--warn) 40%,transparent)}
.route.r-endpoint{color:var(--good);border-color:color-mix(in srgb,var(--good) 40%,transparent)}
.flag2{margin-top:12px;padding:10px 13px;border-left:3px solid var(--line-2);
  background:var(--surface-2);border-radius:0 6px 6px 0;font-size:12.5px;color:var(--ink-2)}
/* .nav2 sets display:flex, which would otherwise defeat the hidden attribute. */
.nav2[hidden]{display:none}

/* Remediation jobs. */
.jstate{font-size:11px;font-weight:600;padding:2px 8px;border-radius:4px;white-space:nowrap;
  background:var(--surface-2);border:1px solid var(--line)}
.jstate.j-applied{color:var(--good);border-color:color-mix(in srgb,var(--good) 45%,transparent)}
.jstate.j-rolled_back{color:var(--warn);border-color:color-mix(in srgb,var(--warn) 45%,transparent)}
.jstate.j-rollback_failed,.jstate.j-failed{color:var(--crit);
  border-color:color-mix(in srgb,var(--crit) 45%,transparent)}
.jstate.j-pending,.jstate.j-claimed{color:var(--ink-3)}
.arrow{margin:0 4px;color:var(--ink-3)}
.joblog{background:var(--surface-2);padding:14px 16px}
.ba{display:grid;grid-template-columns:repeat(auto-fit,minmax(240px,1fr));gap:16px}
.chlog{background:var(--surface);border:1px solid var(--line);border-radius:6px;padding:10px 12px;
  font-size:11.5px;line-height:1.6;overflow-x:auto;margin:4px 0 0;white-space:pre-wrap}

/* Group policy editing. */
.mini{width:88px;font:inherit;font-size:12px;padding:4px 6px;border:1px solid var(--line);
  border-radius:5px;background:var(--surface);color:var(--ink)}
.sw{display:inline-flex;align-items:center;gap:6px;font-size:12px;color:var(--ink-2);cursor:pointer}
.route.r-ip_range,.route.r-tag,.route.r-platform,.route.r-site{color:var(--ink-2)}
.scopelbl{display:inline-flex;align-items:center;gap:8px;font-size:12px;color:var(--ink-3)}

/* Device count on a benchmark heading: a way in, not a caption. */
.benchcount{
  font:inherit;font-size:13px;color:var(--ink-2);cursor:pointer;
  background:var(--surface-2);border:1px solid var(--line);border-radius:14px;
  padding:3px 12px;line-height:1.4;white-space:nowrap;
}
.benchcount b{font-size:15px;color:var(--ink);font-variant-numeric:tabular-nums}
.benchcount:hover{border-color:var(--line-2);background:var(--surface)}
.benchcount:focus-visible{outline:2px solid var(--blue,#037BAC);outline-offset:2px}
/* Banner naming the active scope on a filtered list. */
.scopebar{
  display:flex;align-items:center;gap:12px;flex-wrap:wrap;
  background:var(--surface-2);border:1px solid var(--line);border-radius:8px;
  padding:8px 14px;margin:0 0 12px;font-size:13px;color:var(--ink-2);
}
.route.r-revert{color:var(--warn);border-color:color-mix(in srgb,var(--warn) 45%,transparent)}
/* Fleet-level surfaces have no single device to act on, so they state that a fix
   exists and where to apply it rather than offering a button with no target. */
.canfix{font-size:11px;font-weight:600;padding:2px 8px;border-radius:4px;white-space:nowrap;
  color:var(--good);background:var(--good-b,transparent);
  border:1px solid color-mix(in srgb,var(--good) 40%,transparent)}
/* Queued-but-not-yet-run work. Amber, not red: nothing is wrong, it is waiting. */
.waiting{border-left:3px solid var(--warn)}

/* Toasts. Fixed so they are visible wherever the reader has scrolled to. */
.toasts{position:fixed;right:18px;bottom:18px;z-index:60;
  display:flex;flex-direction:column;gap:8px;max-width:min(380px,calc(100vw - 36px))}
.toast{background:var(--surface);border:1px solid var(--line);border-left:3px solid var(--ink-3);
  border-radius:9px;box-shadow:0 6px 22px #0f151826;padding:10px 14px;font-size:13px;
  animation:toastin .18s ease-out, toastout .3s ease-in 6s forwards}
.toast b{display:block;font-size:13px;margin-bottom:2px}
.toast span{color:var(--ink-2);font-size:12.5px;line-height:1.45}
.toast.t-ok{border-left-color:var(--good)}
.toast.t-warn{border-left-color:var(--warn)}
.toast.t-err{border-left-color:var(--crit)}
@keyframes toastin{from{opacity:0;transform:translateY(6px)}to{opacity:1;transform:none}}
@keyframes toastout{to{opacity:0;transform:translateY(6px);height:0;padding:0;margin:0;border:0}}
@media (prefers-reduced-motion:reduce){.toast{animation:none}}

/* Device page actions and bulk selection. */
.assetacts{display:flex;gap:8px;align-items:center;margin-left:18px}
.bulkbar{display:flex;align-items:center;gap:14px;flex-wrap:wrap;
  padding:9px 12px;margin:0 0 10px;border:1px solid var(--line);border-radius:8px;
  background:var(--surface-2)}
.bulkbar .dim{font-size:12px;font-variant-numeric:tabular-nums}
.pick{width:15px;height:15px;cursor:pointer}
.reflink{color:inherit;text-decoration:none;border-bottom:1px dotted var(--line-2)}
.reflink:hover{border-bottom-style:solid}

/* Benchmark-ordered grouping. */
.benchgroup{padding:16px 18px}
.secgroup{border:0;background:transparent;margin:0 0 4px}
.secgroup>summary{padding:9px 4px;font-size:13.5px;border-bottom:1px solid var(--line)}
.secgroup>summary::before{content:"▸";width:auto;height:auto;border:0;background:none;
  color:var(--ink-3);font-size:11px;transition:transform .12s}
.secgroup[open]>summary::before{transform:rotate(90deg)}
.secnum{font-family:"IBM Plex Mono",ui-monospace,monospace;font-weight:600;
  background:var(--surface-2);border:1px solid var(--line);border-radius:4px;
  padding:1px 6px;margin-right:8px;font-size:12px}
.secgroup>summary .dim{font-weight:400;font-size:12px}

/* Benchmark source panel. */
.srcpanel{position:fixed;top:0;right:0;height:100vh;width:min(560px,92vw);z-index:70;
  background:var(--surface);border-left:1px solid var(--line);
  box-shadow:-10px 0 40px #0f151820;overflow-y:auto;padding:20px 24px 60px;
  transform:translateX(100%);transition:transform .18s ease-out;visibility:hidden}
.srcpanel.open{transform:none;visibility:visible}
@media (prefers-reduced-motion:reduce){.srcpanel{transition:none}}
.srchead{display:flex;align-items:flex-start;justify-content:space-between;gap:12px;
  position:sticky;top:0;background:var(--surface);padding-bottom:10px;margin:-4px 0 6px}
.srchead h2{font-size:20px;font-family:"IBM Plex Mono",ui-monospace,monospace}
.srcclose{background:none;border:0;font-size:26px;line-height:1;color:var(--ink-3);
  cursor:pointer;padding:0 4px}
.srcclose:hover{color:var(--ink)}
.srctitle{font-size:15px;font-weight:600;line-height:1.4;margin:0 0 12px}
.srccite{background:var(--surface-2);border:1px solid var(--line);border-radius:8px;
  padding:10px 13px;margin:0 0 12px;font-size:13px;display:flex;gap:8px;flex-wrap:wrap;
  align-items:baseline}
.srccite b{font-size:14px}
.srcmeta{display:flex;gap:8px;flex-wrap:wrap;align-items:center;margin:0 0 16px}
.srcpanel h3{font-size:11px;letter-spacing:.08em;text-transform:uppercase;color:var(--ink-3);
  margin:18px 0 5px}
.srctext{font-size:13.5px;line-height:1.55;white-space:pre-wrap;margin:0}
.srcpre{background:var(--surface-2);border:1px solid var(--line);border-radius:7px;
  padding:10px 12px;font-size:12px;line-height:1.55;white-space:pre-wrap;overflow-x:auto;margin:0}
.srcfoot{margin-top:22px;padding-top:12px;border-top:1px solid var(--line);
  font-size:11.5px;color:var(--ink-3)}