:root {
  --canvas:#f2f3ef; --surface:#fbfcf8; --surface-muted:#e9ece6;
  --border:#d4d9d2; --border-strong:#aeb8b1;
  --text:#17221f; --text-muted:#5f6c67;
  --accent:#166f63; --accent-strong:#0d594f; --accent-soft:#d9ece8;
  --focus:#b35c25;
  --critical:#b9383f; --high:#b96522; --medium:#8b7114; --low:#35705e;
  --bar:#166f63; --bar-crit:#b9383f;
  --serif:Newsreader,ui-serif,Georgia,serif;
  --sans:"IBM Plex Sans",ui-sans-serif,system-ui,-apple-system,"Segoe UI",sans-serif;
  --mono:"IBM Plex Mono",ui-monospace,SFMono-Regular,Menlo,monospace;
  color-scheme:light;
}
@media (prefers-color-scheme:dark) {
  :root:not([data-theme="light"]) {
    --canvas:#101614; --surface:#17201d; --surface-muted:#222f2b;
    --border:#33433d; --border-strong:#52645d;
    --text:#edf2ef; --text-muted:#a6b3ad;
    --accent:#6ac5b5; --accent-strong:#9bddd1; --accent-soft:#193a35;
    --focus:#efa36b;
    --critical:#ff858b; --high:#f4a361; --medium:#d9c26c; --low:#74bda7;
    /* Bar fills sit on a large area, so they are dimmer than the text accents. */
    --bar:#3f8b7e; --bar-crit:#b8636a;
    color-scheme:dark;
  }
}
*{box-sizing:border-box}
body{margin:0;background:var(--canvas);color:var(--text);font-family:var(--sans);
  font-size:20px;line-height:1.6;-webkit-font-smoothing:antialiased}
a{color:inherit}
:focus-visible{outline:2.5px solid var(--focus);outline-offset:3px;border-radius:2px}
h1,h2,h3{text-wrap:balance}
.wrap{max-width:48rem;margin:0 auto;padding:clamp(1.2rem,4vw,2.5rem) clamp(1.1rem,4vw,2rem) 5rem}

.nav{display:flex;flex-wrap:wrap;gap:.4rem 1.4rem;align-items:baseline;
  padding-bottom:.9rem;border-bottom:1px solid var(--border)}
.nav__brand{margin-right:auto;font-family:var(--serif);font-size:1.2rem;font-weight:600;text-decoration:none}
.nav a:not(.nav__brand){font-size:.9rem;color:var(--text-muted);text-decoration:none;padding-bottom:2px}
.nav a[aria-current]{color:var(--text);border-bottom:2px solid var(--accent)}
.nav a:hover{color:var(--text)}

.masthead{margin-top:2rem}
.kicker{margin:0;font-family:var(--mono);font-size:.8rem;letter-spacing:.08em;
  text-transform:uppercase;color:var(--text-muted)}
.masthead h1{font-family:var(--serif);font-weight:500;font-size:clamp(1.9rem,4.6vw,2.6rem);
  line-height:1.12;letter-spacing:-.015em;margin:.5rem 0 0}
.standfirst{font-family:var(--serif);font-size:clamp(1.08rem,2.3vw,1.25rem);line-height:1.5;margin:.9rem 0 0}
.weekfig{margin:1.4rem 0 0}
.weekfig svg{display:block;width:100%;max-width:34rem;height:auto}
.weekfig figcaption{margin:.5rem 0 0;font-size:.8rem;color:var(--text-muted)}
.k{font-weight:600;color:var(--text-muted)} .k--crit{color:var(--critical)} .k--m365{color:var(--accent)}
.postfig{margin:0 0 1.2rem;border-radius:4px;overflow:hidden;background:var(--surface)}
.postfig svg{display:block;width:100%;height:auto}

.ledger{display:grid;grid-template-columns:repeat(auto-fit,minmax(8.5rem,1fr));gap:.7rem;
  margin:1.6rem 0 0;font-variant-numeric:tabular-nums}
.tile{margin:0;padding:.8rem .9rem .9rem;border:1px solid var(--border);border-radius:4px;background:var(--surface);display:grid;gap:.25rem}
.tile__n{margin:0;font-family:var(--serif);font-size:1.7rem;font-weight:600;line-height:1}
.tile__k{margin:0;font-size:.8rem;color:var(--text-muted);line-height:1.3}
/* The three counts double as the only filter: a checked radio hides every item
   the tile does not count, and any section left with nothing in it. No script. */
.ledger input{position:absolute;width:1px;height:1px;opacity:0;margin:0}
label.tile{cursor:pointer}
.tile__act{font-size:.7rem;letter-spacing:.06em;text-transform:uppercase;color:var(--text-muted);opacity:0;transition:opacity .12s}
label.tile:hover .tile__act{opacity:.75}
.ledger input:checked+.tile{border-color:var(--accent);background:var(--surface-muted)}
.ledger input:checked+.tile .tile__act{opacity:1;color:var(--accent)}
.ledger input:focus-visible+.tile{outline:2px solid var(--accent);outline-offset:2px}
article:has(#view-kev:checked) [data-kev="0"],
article:has(#view-m365:checked) [data-m365="0"]{display:none}
article:has(#view-kev:checked) .tier:not(:has([data-kev="1"])),
article:has(#view-m365:checked) .tier:not(:has([data-m365="1"])),
article:has(#view-kev:checked) .block:has(.lead,.tier):not(:has([data-kev="1"])),
article:has(#view-m365:checked) .block:has(.lead,.tier):not(:has([data-m365="1"])){display:none}
.tile__bar{display:block;height:.4rem;margin-top:.35rem;background:var(--surface-muted);border-radius:2px;overflow:hidden}
.tile__bar i{display:block;height:100%;background:var(--accent);min-width:2px}
.tile--crit .tile__bar i{background:var(--critical)}

.block{margin-top:2.6rem}
.block > h2{font-family:var(--sans);font-size:.8rem;font-weight:600;letter-spacing:.1em;
  text-transform:uppercase;color:var(--accent-strong);margin:0 0 .3rem}
.block > p.intro{margin:0;font-size:.87rem;color:var(--text-muted)}

.lead{list-style:none;margin:.6rem 0 0;padding:0}
.lead > li{border-top:1px solid var(--border)}
.lead summary{display:grid;grid-template-columns:3px 2rem 1fr;gap:.8rem;padding:.8rem 0;cursor:pointer;list-style:none}
.lead summary::-webkit-details-marker{display:none}
.lead__rank{font-family:var(--serif);font-size:1.6rem;line-height:1;color:var(--text-muted)}
.lead__title{margin:0;font-family:var(--serif);font-size:1.3rem;font-weight:500;line-height:1.28}
.lead summary:hover .lead__title{color:var(--accent-strong)}
.lead__why{margin:.4rem 0 0;font-size:.93rem;line-height:1.55}
.lead__do{margin:.3rem 0 0;font-size:.93rem;line-height:1.55;color:var(--text-muted)}
.lead__meta{display:flex;flex-wrap:wrap;gap:.35rem .6rem;align-items:baseline;margin:.6rem 0 0;
  font-family:var(--mono);font-size:.8rem;color:var(--text-muted)}
.lead__hint{font-family:var(--mono);font-size:.8rem;color:var(--accent-strong);margin:.5rem 0 0;display:block}
.lead__hint::before{content:"+ "} details[open] .lead__hint::before{content:"\2212 "}
.lead .entry__body{padding:0 0 1.2rem 3.2rem}

.pattern{margin:.6rem 0 0;font-family:var(--serif);font-size:1.08rem;line-height:1.5}
.notes{margin:1.2rem 0 0;padding:0;list-style:none;display:grid;gap:.7rem}
.notes li{font-size:.86rem;line-height:1.55;color:var(--text-muted)}
.notes b{color:var(--text);font-weight:600}

.chip{font-family:var(--mono);font-size:.8rem;letter-spacing:.03em;padding:.12rem .4rem;
  border:1px solid var(--border-strong);border-radius:2px;color:var(--text-muted);white-space:nowrap}
.chip--exploit{color:var(--critical);border-color:currentColor}
.chip--workload{color:var(--accent-strong);background:var(--accent-soft);border-color:transparent}

.tier{margin-top:1.8rem}
.tier__head{display:flex;justify-content:space-between;gap:1rem;align-items:baseline;
  padding-bottom:.4rem;border-bottom:1px solid var(--border-strong)}
.tier__head h3{margin:0;font-family:var(--serif);font-size:1.05rem;font-weight:500}
.tier__count{font-family:var(--mono);font-size:.8rem;color:var(--text-muted)}

.entry{border-bottom:1px solid var(--border)}
.entry > summary{display:grid;grid-template-columns:3px 1fr;gap:.9rem;padding:.7rem 0;cursor:pointer;list-style:none}
.entry > summary::-webkit-details-marker{display:none}
.entry__rail{display:block;align-self:stretch;background:var(--low);border-radius:2px}
.entry--critical .entry__rail{background:var(--critical)}
.entry--high .entry__rail{background:var(--high)}
.entry--medium .entry__rail{background:var(--medium)}
.entry__main{display:block;min-width:0}
.entry__meta{display:flex;flex-wrap:wrap;align-items:baseline;gap:.3rem .7rem;
  font-family:var(--mono);font-size:.8rem;color:var(--text-muted)}
.score{font-weight:500;color:var(--text);font-variant-numeric:tabular-nums}
.cve{color:var(--accent-strong)}
.entry__title{display:block;margin:.25rem 0 0;font-size:1.05rem;font-weight:500;line-height:1.35}
.entry > summary:hover .entry__title{color:var(--accent-strong)}
.entry__summary{display:block;margin:.3rem 0 0;font-size:.88rem;line-height:1.55;color:var(--text-muted)}
.entry__chips{display:flex;flex-wrap:wrap;gap:.3rem;margin:.5rem 0 0}
.entry__hint{display:block;margin:.45rem 0 0;font-family:var(--mono);font-size:.8rem;color:var(--accent-strong)}
.entry__hint::before{content:"+ "} .entry[open] .entry__hint::before{content:"\2212 "}
.entry__body{padding:0 0 1.3rem 1rem;margin-left:3px}
.reading__urgency{margin:0 0 .8rem;padding-left:.75rem;border-left:2px solid var(--high);font-size:.9rem;line-height:1.55}
.reading__grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(14rem,1fr));gap:.8rem 1.4rem}
.reading__grid h4{margin:0 0 .2rem;font-family:var(--mono);font-size:.8rem;font-weight:500;
  letter-spacing:.08em;text-transform:uppercase;color:var(--accent-strong)}
.reading__grid p{margin:0;font-size:.88rem;line-height:1.55;color:var(--text-muted)}
.reading__source{margin:.8rem 0 0;padding:.65rem .8rem;background:var(--surface-muted);
  border-radius:2px;font-size:.87rem;line-height:1.55;color:var(--text-muted)}
.reading__source b{color:var(--text);font-weight:600}
.reading__out{margin:.9rem 0 0}
.reading__out a{display:inline-block;padding:.5rem .9rem;background:var(--accent);color:var(--canvas);
  border-radius:3px;text-decoration:none;font-size:.85rem;font-weight:600}
.reading__out a::after{content:" \2192"}
.reading__out a:hover{background:var(--accent-strong)}
.reading__caveat{margin:.7rem 0 0;font-size:.8rem;line-height:1.5;color:var(--text-muted);opacity:.85}

.tail{list-style:none;margin:0;padding:0}
.tail__item{display:grid;grid-template-columns:2.6rem 1fr auto;gap:.3rem .8rem;align-items:baseline;
  padding:.5rem 0;border-bottom:1px solid var(--border)}
.tail__score{font-family:var(--mono);font-size:.8rem;color:var(--text-muted);font-variant-numeric:tabular-nums}
.tail__item--critical .tail__score,.tail__item--high .tail__score{color:var(--high);font-weight:500}
.tail__item a{font-size:.92rem;line-height:1.4;text-decoration:none;border-bottom:1px solid var(--border-strong)}
.tail__item a:hover{border-color:var(--accent)}
.tail__cve{font-family:var(--mono);font-size:.8rem;color:var(--accent-strong)}
.tail__pub{font-family:var(--mono);font-size:.8rem;color:var(--text-muted);text-align:right}

.follow{display:grid;gap:1.4rem;margin-top:1rem}
.follow__band h3{margin:0;font-family:var(--mono);font-size:.8rem;font-weight:500;letter-spacing:.09em;text-transform:uppercase}
.follow__band > p{margin:.25rem 0 .5rem;font-size:.85rem;color:var(--text-muted)}
.follow__band ul{list-style:none;margin:0;padding:0;display:grid;gap:.1rem .9rem}
.follow__band li{display:flex;justify-content:space-between;gap:.8rem;align-items:baseline;
  padding:.3rem 0;border-bottom:1px dotted var(--border)}
.follow__name{font-size:.88rem}
.follow__count{font-family:var(--mono);font-size:.8rem;color:var(--accent-strong);white-space:nowrap}
.follow__count--quiet{color:var(--text-muted);opacity:.65}

.archive{list-style:none;margin:1rem 0 0;padding:0}
.archive li{padding:1rem 0;border-top:1px solid var(--border)}
.archive__meta{font-family:var(--mono);font-size:.8rem;letter-spacing:.06em;text-transform:uppercase;color:var(--text-muted);margin:0}
.archive__head{margin:.3rem 0 0;font-family:var(--serif);font-size:1.15rem;font-weight:500;line-height:1.3}
.archive__head a{text-decoration:none}
.archive__head a:hover{color:var(--accent-strong)}
.archive__stand{margin:.35rem 0 0;font-size:.9rem;color:var(--text-muted)}

.prose{margin-top:1.6rem;font-size:.95rem;line-height:1.65}
.prose h1{font-family:var(--serif);font-weight:500;font-size:2rem;line-height:1.15;margin:0}
.prose h2{font-family:var(--serif);font-weight:500;font-size:1.25rem;margin:1.8rem 0 .4rem}
.prose p{margin:0 0 .8rem}

.weekfoot{margin-top:3rem;padding-top:1rem;border-top:2px solid var(--text);font-size:.83rem;color:var(--text-muted)}
.weekfoot nav{display:flex;flex-wrap:wrap;gap:.4rem 1.4rem;margin-bottom:.8rem}
.weekfoot nav a{text-decoration:none;color:var(--accent-strong);font-weight:600}
.weekfoot p{margin:0 0 .5rem;line-height:1.55}
.sitefoot{margin-top:3rem;padding-top:.9rem;border-top:1px solid var(--border);font-size:.8rem;color:var(--text-muted)}
.bars{list-style:none;margin:.6rem 0 0;padding:0;display:grid;gap:.4rem}
.bars li{display:grid;grid-template-columns:3.4rem 1fr 6.5rem;gap:.7rem;align-items:center}
.bars__label{font-family:var(--mono);font-size:.8rem;color:var(--text-muted)}
.bars__track{height:.75rem;background:var(--surface-muted);border-radius:2px;overflow:hidden;
  box-shadow:inset 0 0 0 1px var(--border)}
.bars__bar{display:block;height:100%;background:var(--bar);min-width:2px}
.bars__bar--crit{background:var(--bar-crit)}
.bars__value{font-family:var(--mono);font-size:.8rem;text-align:right;font-variant-numeric:tabular-nums;color:var(--text-muted)}
.trend{margin-top:2.2rem}
.trend h2{font-family:var(--sans);font-size:.8rem;font-weight:600;letter-spacing:.1em;text-transform:uppercase;color:var(--accent-strong);margin:0}
.tablewrap{overflow-x:auto;margin-top:.6rem}
.mix{border-collapse:collapse;width:100%;font-size:.85rem;font-variant-numeric:tabular-nums}
.mix th,.mix td{padding:.4rem .5rem;border-bottom:1px solid var(--border);text-align:right;white-space:nowrap}
.mix th:first-child,.mix td:first-child{text-align:left}
.mix th{font-family:var(--mono);font-weight:500;font-size:.8rem;color:var(--text-muted)}
.prose ul,.prose ol{padding-left:1.4rem;margin:0 0 .8rem}
.prose li{margin:.2rem 0}
.prose code{font-family:var(--mono);font-size:.9em}
.prose pre{overflow-x:auto;padding:.8rem;background:var(--surface-muted);border-radius:4px}
.prose blockquote{margin:0 0 .8rem;padding-left:.9rem;border-left:3px solid var(--accent);color:var(--text-muted)}
.prose .kicker{margin-bottom:.5rem}
.chip--coding{color:var(--accent-strong);background:var(--accent-soft);border-color:transparent}
.chip--posture{color:var(--high);border-color:currentColor}
.reads{list-style:none;margin:.6rem 0 0;padding:0}
.reads li{padding:.8rem 0;border-top:1px solid var(--border);display:grid;grid-template-columns:1fr auto;gap:.2rem .7rem;align-items:baseline}
.reads li a{font-family:var(--serif);font-size:1.15rem;font-weight:500;line-height:1.3;text-decoration:none;border-bottom:1px solid var(--border-strong)}
.reads li a:hover{border-color:var(--accent)}
.reads li p{grid-column:1 / -1;margin:.2rem 0 0;font-size:.93rem;line-height:1.5;color:var(--text-muted)}
.reads__pub{grid-column:1 / -1;font-family:var(--mono);font-size:.8rem;color:var(--text-muted)}
.reading__record{margin-left:.6rem;font-size:.85rem;color:var(--accent-strong)}
.tail__cve{text-decoration:none;border-bottom:1px dotted var(--border-strong)}
.tags{display:flex;flex-wrap:wrap;gap:.3rem;margin:.4rem 0 0}
.byline{font-size:.85rem;color:var(--text-muted);margin:.6rem 0 1.2rem;padding-left:.8rem;border-left:3px solid var(--border-strong)}
.tags a{text-decoration:none}
.sources{margin-top:2.4rem;padding-top:1.2rem;border-top:1px solid var(--border-strong)}
@media (max-width:640px){
  .tail__item{grid-template-columns:2.6rem 1fr;grid-template-areas:"s t" ". c"}
  .tail__score{grid-area:s} .tail__item a{grid-area:t} .tail__pub{grid-area:c;text-align:left}
  .tail__cve{display:none}
  .lead .entry__body{padding-left:0}
}
@media (prefers-reduced-motion:reduce){*{animation:none!important;transition:none!important}}