.security-blog{--sec-ink:#172b40;--sec-muted:#536477;--sec-line:#dce3e9;--sec-blue:#254d70;--sec-teal:#11766d;--sec-rust:#aa4c29}.security-blog .prose{color:var(--sec-ink);font-size:1.0625rem;line-height:1.72}.security-blog .prose>p{margin:1rem 0 1.25rem;max-width:78ch}.security-blog .prose>h2{border-top:2px solid var(--sec-ink);padding-top:1.5rem;margin-top:4rem;letter-spacing:-.025em;line-height:1.3}.security-blog .prose>h3{margin-top:2.7rem;letter-spacing:-.015em;line-height:1.35}.security-blog .prose>figure{margin:2rem 0 2.6rem}.security-blog .prose figure img{box-shadow:none;border:0;border-radius:0}.security-blog .prose figure figcaption{font-size:.85rem;line-height:1.55;color:var(--sec-muted);font-weight:400;text-align:left;border:0;padding:0;margin:.9rem 0 0}.security-blog .prose figure figcaption a{color:var(--sec-blue);text-decoration:underline;text-underline-offset:3px}.security-blog .sec-visual{font-size:.95rem;line-height:1.5;color:var(--sec-ink);container-type:inline-size}.security-blog .sec-visual *{box-sizing:border-box;min-width:0}.security-blog .sec-visual h4{font-size:1.35rem;line-height:1.3;font-weight:750;letter-spacing:-.025em;margin:.35rem 0 .6rem;color:var(--sec-ink)}.security-blog .sec-visual p{font:inherit;color:var(--sec-muted);margin:.4rem 0 0}.security-blog .sec-visual a{color:var(--sec-blue);text-decoration:underline;text-underline-offset:3px}.security-blog .sec-visual code{font-family:ui-monospace,SFMono-Regular,Consolas,monospace;font-size:.9em;line-height:inherit;background:0 0;padding:0;color:inherit;white-space:normal}.security-blog .sec-visual code::before,.security-blog .sec-visual code::after{content:none}.security-blog .sec-eyebrow{display:block;text-transform:uppercase;letter-spacing:.13em;font-weight:700;font-size:.7rem;line-height:1.5;color:var(--sec-blue)}.security-blog .sec-figure-heading{margin-bottom:1.3rem}.security-blog .sec-research-video .sec-eyebrow{display:flex;justify-content:space-between;gap:1rem;margin-bottom:.75rem}.security-blog .sec-research-video .sec-eyebrow span{color:var(--sec-muted);letter-spacing:.06em;font-weight:500;text-align:right}.security-blog .sec-research-preview{display:block;color:var(--sec-ink);text-decoration:none;border:1px solid var(--sec-line)}.security-blog .sec-research-preview img{display:block;width:100%;height:auto;aspect-ratio:16/9;margin:0;border-radius:0}.security-blog .sec-research-preview>span{display:block;padding:.8rem 1rem;background:#f3f4f6;font-weight:650}.security-blog .sec-research-preview small{display:block;margin-top:.2rem;color:var(--sec-muted);font-size:.75rem;font-weight:400}.security-blog .sec-research-preview:focus-visible{outline:3px solid #176286;outline-offset:4px}.security-blog .sec-research-results{border-top:1px solid var(--sec-line);border-bottom:1px solid var(--sec-line);padding:1.7rem 0}.security-blog .sec-result-chart{padding:1.1rem 0 1.8rem;margin-right:1.75rem}.security-blog .sec-model-result{display:grid;grid-template-columns:160px 1fr;gap:1rem;margin-bottom:1.2rem;align-items:center}.security-blog .sec-model-result>b{font-size:.88rem;line-height:1.3}.security-blog .sec-bar-pair{display:grid;gap:.55rem}.security-blog .sec-bar-line{display:grid;grid-template-columns:85px 1fr;align-items:center;gap:.7rem}.security-blog .sec-bar-line>span{font-size:.72rem;color:var(--sec-muted)}.security-blog .sec-track{position:relative;height:22px;border-left:1px solid #aab7c3;background:repeating-linear-gradient(to right,transparent 0,transparent calc(25% - 1px),#e3e8ed calc(25% - 1px),#e3e8ed 25%)}.security-blog .sec-track i{display:block;height:100%}.security-blog .sec-bar-complete{background:#aa4c29}.security-blog .sec-bar-refuse{background:repeating-linear-gradient(135deg,#255777 0,#255777 3px,#507a95 3px,#507a95 5px)}.security-blog .sec-track strong{position:absolute;top:1px;transform:translateX(7px);font-size:.77rem;line-height:20px;font-variant-numeric:tabular-nums;color:var(--sec-ink);font-weight:650}.security-blog .sec-chart-scale{display:grid;grid-template-columns:calc(160px + 1rem + 85px + .7rem)1fr;color:var(--sec-muted);font-size:.7rem}.security-blog .sec-chart-scale>div{display:flex;justify-content:space-between;margin-right:-1.8rem}.security-blog .sec-table-scroll{overflow-x:auto;width:100%;scrollbar-width:thin;scrollbar-color:#9ba9b6 #f1f4f6}.security-blog .sec-table-scroll:focus-visible,.security-blog .sec-chart-scroll:focus-visible{outline:2px solid #254d70;outline-offset:5px}.security-blog .sec-table{width:100%;border-collapse:collapse;font-size:.9rem;line-height:1.5;text-align:left;margin:0;color:var(--sec-ink);min-width:610px}.security-blog .sec-table caption{text-align:left;font-size:.77rem;line-height:1.5;color:var(--sec-muted);padding:0 0 .75rem;caption-side:top}.security-blog .sec-table th,.security-blog .sec-table td{padding:.85rem .85rem .85rem 0;border-bottom:1px solid var(--sec-line);vertical-align:top}.security-blog .sec-table tr>*:last-child{padding-right:0}.security-blog .sec-table thead th{border-top:2px solid var(--sec-ink);border-bottom:1px solid #aebcc8;padding-top:.65rem;padding-bottom:.65rem;font-size:.75rem;letter-spacing:.01em;color:var(--sec-muted);font-weight:650}.security-blog .sec-table tbody th{font-weight:650;width:25%}.security-blog .sec-table tbody td{color:#3e5265}.security-blog .sec-table tbody tr:last-child>*{border-bottom:1px solid #aebcc8}.security-blog .sec-table tbody tr:hover{background:#f6f8fa}.security-blog .sec-table .sec-allow{color:#126c59;font-weight:700;white-space:nowrap}.security-blog .sec-table .sec-reject{color:#a44426;font-weight:700;white-space:nowrap}.security-blog .sec-results-table{font-variant-numeric:tabular-nums;font-size:.79rem;min-width:590px}.security-blog .sec-results-table td,.security-blog .sec-results-table thead th:not(:first-child){text-align:right}.security-blog .sec-results-table tbody th{width:28%}.security-blog .sec-contract-layout{display:grid;grid-template-columns:1.02fr 1fr;gap:1.7rem;align-items:start}.security-blog .sec-code-window{background:#102437;border:1px solid #254056;color:#d9e4ed;overflow:hidden}.security-blog .sec-code-header{padding:.75rem 1.1rem;border-bottom:1px solid #355065;display:flex;align-items:center;justify-content:space-between;gap:.5rem;font-family:ui-monospace,SFMono-Regular,Consolas,monospace;font-size:.75rem;color:#cfdae3}.security-blog .sec-code-header small{font:inherit;font-size:.64rem;color:#b1c4d4}.security-blog .sec-code-window pre{padding:1.2rem 1.1rem .7rem;margin:0;border:0;border-radius:0;background:0 0;color:#dce6ef;white-space:pre;overflow-x:auto;font-size:.86rem;line-height:1.85;box-shadow:none}.security-blog .sec-code-window pre code{font-size:inherit;white-space:pre}.security-blog .sec-code-window code span{color:#92c7eb}.security-blog .sec-code-window code em{color:#e8c38e;font-style:normal}.security-blog .sec-code-window code b{color:#99dacc;font-weight:400}.security-blog .sec-code-window p{padding:0 1.1rem 1.1rem;color:#bed0df;font-size:.76rem;line-height:1.6}.security-blog .sec-contract-notes{margin:0;display:grid;gap:.95rem}.security-blog .sec-contract-notes>div{border-bottom:1px solid var(--sec-line);padding-bottom:.8rem}.security-blog .sec-contract-notes>div:last-child{border:0;padding-bottom:0}.security-blog .sec-contract-notes dt{font-size:.88rem;font-weight:700;margin-bottom:.25rem}.security-blog .sec-contract-notes dd{font-size:.84rem;line-height:1.6;color:var(--sec-muted);margin:0}.security-blog .sec-chart-scroll{overflow-x:auto;scrollbar-width:thin}.security-blog .sec-chart-scroll svg{display:block;width:100%;min-width:690px;height:auto}.security-blog .sec-command-timing{border-top:1px solid var(--sec-line);padding-top:1.6rem}.security-blog .sec-scroll-hint{display:none;font-size:.75rem;color:var(--sec-muted);margin-top:.5rem}.security-blog .sec-working-life{padding:1.6rem 0;border-top:1px solid var(--sec-line);border-bottom:1px solid var(--sec-line)}.security-blog .sec-lifecycle{list-style:none;display:grid;grid-template-columns:repeat(4,1fr);padding:0;margin:1.9rem 0 .2rem;gap:0}.security-blog .sec-lifecycle li{position:relative;padding:0 1rem 0 0;margin:0}.security-blog .sec-lifecycle li::before{content:'';height:1px;background:#bac8d3;position:absolute;left:0;right:0;top:14px}.security-blog .sec-lifecycle li:last-child::before{right:calc(100% - 27px)}.security-blog .sec-lifecycle li>span{position:relative;display:inline-flex;align-items:center;justify-content:center;width:29px;height:29px;border:1px solid #879eb0;border-radius:50%;background:#fff;color:var(--sec-blue);font:600 .65rem ui-monospace,monospace}.security-blog .sec-lifecycle b{display:block;font-size:.9rem;margin:.9rem 0 .3rem}.security-blog .sec-lifecycle p{font-size:.8rem;line-height:1.7;margin:0}@container(max-width:650px){.security-blog .sec-model-result{grid-template-columns:1fr;gap:.6rem;margin-bottom:1.3rem}
 .security-blog .sec-chart-scale{grid-template-columns:calc(85px + .7rem) 1fr}
 .security-blog .sec-contract-layout{grid-template-columns:1fr;gap:1.2rem}
 .security-blog .sec-contract-notes{grid-template-columns:repeat(2,1fr);gap:1rem}
 .security-blog .sec-contract-notes>div{border-bottom:0;padding:0}
 .security-blog .sec-scroll-hint{display:block}
 .security-blog .sec-lifecycle{grid-template-columns:repeat(2,1fr);row-gap:1.4rem}
 .security-blog .sec-lifecycle li:nth-child(2)::before{right:calc(100% - 27px)}
}@media(max-width:639px){.security-blog .prose{font-size:1rem;line-height:1.7}.security-blog .prose>h2{margin-top:3rem;padding-top:1.2rem}.security-blog .prose>h3{margin-top:2.2rem}.security-blog .prose>figure{margin:1.6rem 0 2.2rem}.security-blog .sec-visual h4{font-size:1.18rem}.security-blog .sec-visual{font-size:.9rem}.security-blog .sec-research-video .sec-eyebrow{font-size:.62rem}.security-blog .sec-table-scroll{border-right:1px solid #e2e8ef}.security-blog .sec-table{font-size:.84rem;min-width:570px}.security-blog .sec-code-window pre{font-size:.78rem}.security-blog .sec-bar-line{grid-template-columns:75px 1fr;gap:.5rem}.security-blog .sec-bar-line>span{font-size:.65rem}.security-blog .sec-chart-scale{grid-template-columns:calc(75px + .5rem)1fr}.security-blog .sec-contract-notes{grid-template-columns:1fr}}.security-blog .sec2-figure{container-type:inline-size;color:var(--sec-ink);font-size:.94rem;line-height:1.5;border-top:1px solid var(--sec-line);padding-top:1.4rem}.security-blog .sec2-figure *{box-sizing:border-box;min-width:0}.security-blog .sec2-heading{margin-bottom:1.25rem}.security-blog .sec2-kicker{display:block;color:var(--sec-blue);font-size:.7rem;font-weight:700;letter-spacing:.12em;text-transform:uppercase}.security-blog .sec2-figure h4{color:var(--sec-ink);font-size:1.3rem;line-height:1.3;font-weight:750;letter-spacing:-.02em;margin:.35rem 0 0}.security-blog .sec2-figure p{font:inherit;color:var(--sec-muted);margin:.3rem 0 0}.security-blog .sec2-figure strong,.security-blog .sec2-figure b{font-weight:650}.security-blog .sec2-figure code{font-family:ui-monospace,SFMono-Regular,Consolas,monospace;font-size:.92em;color:inherit;background:0 0;padding:0;overflow-wrap:anywhere}.security-blog .sec2-figure code::before,.security-blog .sec2-figure code::after{content:none}.security-blog .sec2-figure ul,.security-blog .sec2-figure ol{list-style:none;margin:0;padding:0}.security-blog .sec2-figure li{margin:0;padding:0}.security-blog .sec2-radio-note{border-left:3px solid var(--sec-blue);padding:.15rem 0 .15rem .9rem;margin-bottom:1.3rem}.security-blog .sec2-radio-note strong{display:block;font-size:.85rem;color:var(--sec-blue)}.security-blog .sec2-radio-note p{font-size:.81rem}.security-blog .sec2-trace{position:relative}.security-blog .sec2-trace::before{content:"";position:absolute;left:17px;top:18px;bottom:45px;width:1px;background:#8a9dad}.security-blog .sec2-trace li{position:relative;display:grid;grid-template-columns:36px 1fr;gap:1rem;padding:0 0 1.2rem}.security-blog .sec2-trace li:last-child{padding-bottom:0}.security-blog .sec2-step{z-index:1;display:grid;place-items:center;align-self:start;width:35px;height:35px;border:1px solid #8197a9;border-radius:50%;background:#fff;color:var(--sec-blue);font:600 .75rem ui-monospace,monospace}.security-blog .sec2-layer{display:block;font-size:.72rem;color:var(--sec-muted);margin-bottom:.2rem}.security-blog .sec2-trace strong{display:block;font-size:1rem}.security-blog .sec2-trace p{font-size:.86rem}.security-blog .sec2-trace .sec2-trace-gate>div,.security-blog .sec2-trace .sec2-trace-privilege>div{border-top:1px dashed #8ba0b1;padding-top:.65rem}.security-blog .sec2-trace .sec2-trace-gate .sec2-step,.security-blog .sec2-trace .sec2-trace-privilege .sec2-step{margin-top:.65rem}.security-blog .sec2-trace-gate .sec2-layer{color:var(--sec-rust);font-weight:600}.security-blog .sec2-trace-privilege .sec2-layer{color:var(--sec-rust);font-weight:600}.security-blog .sec2-offline-plate{--offline-blue:#345b73;--offline-rust:#a35634;padding-top:.5rem}.security-blog .sec2-offline-scene{position:relative;isolation:isolate;display:grid;grid-template-columns:26% 42% 26%;column-gap:3%;grid-template-rows:250px 250px}.security-blog .sec2-offline-routes{position:absolute;inset:0;z-index:2;display:block;width:100%;height:100%;pointer-events:none;overflow:visible}.security-blog .sec2-offline-links,.security-blog .sec2-offline-relay{fill:none;stroke:var(--offline-blue);stroke-width:1.8}.security-blog .sec2-offline-relay{stroke:var(--offline-rust);stroke-dasharray:5 4}.security-blog .sec2-offline-anchors,.security-blog .sec2-offline-relay-anchor{fill:#fff;stroke:var(--offline-blue);stroke-width:1.6}.security-blog .sec2-offline-relay-anchor{stroke:var(--offline-rust)}.security-blog .sec2-offline-source{position:relative;display:flex;flex-direction:column;align-items:center;justify-content:center;text-align:center;padding:.5rem;line-height:1.4}.security-blog .sec2-offline-source>strong{display:block;font-size:1rem;color:#203d53;margin-top:.55rem}.security-blog .sec2-offline-photo{display:flex;align-items:center;justify-content:center;flex:none;width:100%;height:145px}.security-blog .sec2-offline-photo img{display:block;max-width:100%;width:170px;height:100%;object-fit:contain;margin:0}.security-blog .sec2-offline-radio .sec2-offline-photo img{width:100px}.security-blog .sec2-offline-phone .sec2-offline-photo img{width:92px}.security-blog .sec2-offline-physical .sec2-offline-photo img{width:160px}.security-blog .sec2-offline-laptop{grid-column:1;grid-row:1}.security-blog .sec2-offline-radio{grid-column:1;grid-row:2}.security-blog .sec2-offline-phone{grid-column:3;grid-row:1}.security-blog .sec2-offline-physical{grid-column:3;grid-row:2}.security-blog .sec2-offline-index{position:absolute;z-index:3;right:-12px;top:calc(50% - 12px);display:grid;place-items:center;width:24px;height:24px;border:1px solid #6c91a6;border-radius:50%;background:#fff;color:#345b73;font:600 .75rem ui-monospace,monospace}.security-blog .sec2-offline-phone .sec2-offline-index,.security-blog .sec2-offline-physical .sec2-offline-index{right:auto;left:-12px}.security-blog .sec2-offline-phone .sec2-offline-index{border-color:#a35634;color:#954a2d}.security-blog .sec2-offline-source p.sec2-offline-flow{display:flex;flex-wrap:wrap;align-items:center;justify-content:center;gap:.2rem .4rem;margin:.4rem 0 0;color:#4b6477;font-size:.875rem;line-height:1.5}.security-blog .sec2-offline-flow b{font-weight:500;color:#6a8599}.security-blog .sec2-offline-conditional{display:block;color:#954a2d;font-size:.8125rem;margin-top:.35rem}.security-blog .sec2-offline-core{grid-column:2;grid-row:1/3;display:flex;flex-direction:column;align-items:center;justify-content:center;padding:1.1rem .75rem;border:2px solid #7399af;border-radius:12px;background:linear-gradient(155deg,#f7fbfd,#edf4f8);box-shadow:inset 0 0 0 5px #f9fcfd;text-align:center}.security-blog .sec2-offline-eyebrow{display:block;color:#345b73;font-size:.8125rem;line-height:1.5;letter-spacing:.06em;text-transform:uppercase}.security-blog .sec2-offline-core>strong{display:block;margin:.35rem 0 .75rem;font-size:1.25rem;line-height:1.4;color:#173c53}.security-blog .sec2-offline-core .sec2-offline-photo{height:265px;margin:0 0 .75rem}.security-blog .sec2-offline-core .sec2-offline-photo img{width:250px;height:auto;max-height:100%;mix-blend-mode:multiply;clip-path:polygon(5% 0,100% 0,100% 80%,92% 80%,92% 100%,0 100%,0 65%,5% 65%)}.security-blog .sec2-offline-isolation{display:flex;flex-direction:column;align-items:center;gap:.3rem;color:#345b73}.security-blog .sec2-offline-isolation svg{width:90px;height:21px;color:#547b93;margin-bottom:.2rem}.security-blog .sec2-offline-isolation b{font-size:.95rem;line-height:1.4}.security-blog .sec2-offline-isolation>span{font-size:.8125rem;line-height:1.5;color:#536b7d}.security-blog .sec2-offline-authority{display:flex;align-items:center;gap:1.3rem;margin-top:1.25rem;padding:1rem 0;border-top:1px solid #cbdbe5;border-bottom:1px solid #dce5eb}.security-blog .sec2-offline-authority>span{flex:none;color:#536b7d;font-size:.875rem}.security-blog .sec2-offline-authority ol{display:flex;flex:1;align-items:center;justify-content:space-between;gap:1.6rem}.security-blog .sec2-offline-authority li{position:relative;font-size:.875rem;line-height:1.5;color:#24485f}.security-blog .sec2-offline-authority li+li::before{content:"→";position:absolute;left:-1.2rem;color:#648399}.security-blog .sec2-figure .sec2-boundary-note{margin-top:1.1rem;padding-top:.8rem;border-top:1px solid var(--sec-line);font-size:.83rem}.security-blog .sec2-boundary-note b{color:var(--sec-ink)}.security-blog .sec2-figure .sec2-prevention{border-top-color:var(--sec-teal)}.security-blog .sec2-prevention b{color:var(--sec-teal)}.security-blog .sec2-session{display:grid;grid-template-columns:1fr 1fr;gap:.35rem 1rem;padding:.75rem 0 .85rem;border-top:2px solid var(--sec-blue);border-bottom:1px solid var(--sec-line)}.security-blog .sec2-session>span:first-child{grid-column:1/-1;color:var(--sec-muted);font-size:.72rem}.security-blog .sec2-session>strong,.security-blog .sec2-session>span:last-child{font-size:.86rem}.security-blog .sec2-session>span:last-child{color:var(--sec-muted);text-align:right}.security-blog .sec2-policy{position:relative;padding:1.2rem 0 1rem 2rem;border-bottom:2px solid var(--sec-ink)}.security-blog .sec2-policy-arrow{position:absolute;left:0;top:.7rem;color:var(--sec-blue);font-size:1.6rem}.security-blog .sec2-policy strong{display:block;font-size:.9rem}.security-blog .sec2-policy>span:last-child{display:block;color:var(--sec-muted);font-size:.8rem;margin-top:.15rem}.security-blog .sec2-decisions li{display:grid;grid-template-columns:minmax(0,1fr)auto;gap:.1rem 1rem;border-bottom:1px solid var(--sec-line);padding:.75rem 0}.security-blog .sec2-decisions code{font-size:.86rem;font-weight:600}.security-blog .sec2-decisions strong{font-size:.8rem}.security-blog .sec2-decisions li>span{grid-column:1/-1;color:var(--sec-muted);font-size:.79rem}.security-blog .sec2-allow{color:var(--sec-teal)}.security-blog .sec2-deny{color:var(--sec-rust)}.security-blog .sec2-gates{display:grid;grid-template-columns:1fr 1fr .82fr;gap:1.8rem}.security-blog .sec2-gates li{position:relative;padding-top:.1rem}.security-blog .sec2-gates li:not(:last-child)::after{content:"→";position:absolute;top:.1rem;right:-1.4rem;color:var(--sec-muted);font-size:1.25rem}.security-blog .sec2-gate-number{display:block;width:2.1rem;border-bottom:2px solid var(--sec-blue);padding-bottom:.4rem;margin-bottom:.7rem;font:600 .78rem ui-monospace,monospace;color:var(--sec-blue)}.security-blog .sec2-gates strong{display:block;font-size:.92rem}.security-blog .sec2-gate-input{display:block;color:var(--sec-blue);font-size:.79rem;font-weight:600;margin:.5rem 0}.security-blog .sec2-gates p{font-size:.81rem}.security-blog .sec2-gate-result .sec2-gate-number{color:var(--sec-teal);border-color:var(--sec-teal)}.security-blog .sec2-gate-result strong{color:var(--sec-teal)}.security-blog .sec2-runtime-boundary{display:grid;gap:.25rem;margin-top:1.35rem;border-top:1px dashed #a98372;padding:.9rem 0 0}.security-blog .sec2-runtime-boundary strong{color:var(--sec-rust);font-size:.86rem}.security-blog .sec2-runtime-boundary>span{color:var(--sec-muted);font-size:.81rem}@container(max-width:600px){.security-blog .sec2-session{grid-template-columns:1fr}
  .security-blog .sec2-session>span:last-child{text-align:left}
  .security-blog .sec2-gates{grid-template-columns:1fr;gap:1.15rem}
  .security-blog .sec2-gates li{padding:0 0 0 3rem}
  .security-blog .sec2-gate-number{position:absolute;left:0;top:.1rem;margin:0}
  .security-blog .sec2-gates li:not(:last-child)::after{content:"↓";left:.65rem;right:auto;top:2.1rem;font-size:1.1rem}
  .security-blog .sec2-gate-input{margin:.3rem 0}
}@container(max-width:650px){.security-blog .sec2-offline-scene{grid-template-columns:1fr 1fr;grid-template-rows:auto auto auto;gap:1.6rem .85rem}
  .security-blog .sec2-offline-routes{display:none}
  .security-blog .sec2-offline-source{justify-content:flex-start;padding:0 .1rem 1.1rem}
  .security-blog .sec2-offline-photo{height:125px}
  .security-blog .sec2-offline-photo img{width:145px}
  .security-blog .sec2-offline-radio .sec2-offline-photo img{width:86px}
  .security-blog .sec2-offline-phone .sec2-offline-photo img{width:80px}
  .security-blog .sec2-offline-physical .sec2-offline-photo img{width:130px}
  .security-blog .sec2-offline-source>strong{font-size:1rem;line-height:1.4}
  .security-blog .sec2-offline-source p.sec2-offline-flow{font-size:.875rem;gap:.1rem .3rem}
  .security-blog .sec2-offline-laptop{grid-column:1;grid-row:1}
  .security-blog .sec2-offline-radio{grid-column:2;grid-row:1}
  .security-blog .sec2-offline-core{grid-column:1/-1;grid-row:2;padding:1rem .75rem}
  .security-blog .sec2-offline-core .sec2-offline-photo{height:220px;margin:.25rem 0 .75rem}
  .security-blog .sec2-offline-core .sec2-offline-photo img{width:210px}
  .security-blog .sec2-offline-core>strong{font-size:1.3rem}
  .security-blog .sec2-offline-phone{grid-column:1;grid-row:3}
  .security-blog .sec2-offline-physical{grid-column:2;grid-row:3}
  .security-blog .sec2-offline-index{right:auto;left:calc(50% - 12px);top:auto;bottom:-12px}
  .security-blog .sec2-offline-phone .sec2-offline-index,.security-blog .sec2-offline-physical .sec2-offline-index{right:auto;left:calc(50% - 12px);top:-12px;bottom:auto}
  .security-blog .sec2-offline-laptop::after,.security-blog .sec2-offline-radio::after,.security-blog .sec2-offline-phone::before,.security-blog .sec2-offline-physical::before{content:"";position:absolute;left:50%;height:1.6rem;border-left:1px solid #5b7d93}
  .security-blog .sec2-offline-laptop::after,.security-blog .sec2-offline-radio::after{top:100%}
  .security-blog .sec2-offline-phone::before,.security-blog .sec2-offline-physical::before{bottom:100%}
  .security-blog .sec2-offline-phone::before{border-left:1px dashed #a35634}
  .security-blog .sec2-offline-authority{display:block;margin-top:1.3rem;padding:.9rem 0}
  .security-blog .sec2-offline-authority>span{display:block;margin-bottom:.65rem}
  .security-blog .sec2-offline-authority ol{display:grid;grid-template-columns:1fr;gap:1rem;padding-left:1.4rem}
  .security-blog .sec2-offline-authority li+li::before{content:"↓";top:-.95rem;left:-1.2rem}
}@media(max-width:639px){.security-blog .sec2-figure h4{font-size:1.15rem}.security-blog .sec2-trace li{gap:.75rem}.security-blog .sec2-trace strong{font-size:.92rem}}.security-blog .sec3-visual{border-top:1px solid var(--sec-line);padding-top:1.35rem}.security-blog .sec3-heading{margin-bottom:1.25rem}.security-blog .sec3-eyebrow,.security-blog .sec3-label{display:block;font-size:.7rem;line-height:1.5;font-weight:700;letter-spacing:.07em;text-transform:uppercase;color:var(--sec-muted)}.security-blog .sec3-eyebrow{color:var(--sec-blue);letter-spacing:.12em}.security-blog .sec3-task{display:flex;flex-wrap:wrap;align-items:baseline;gap:.3rem 1rem;border-left:3px solid var(--sec-blue);padding:.65rem .85rem;background:#f0f4f7}.security-blog .sec3-task>span{font-size:.75rem;color:var(--sec-blue)}.security-blog .sec3-task>strong{font-size:.95rem;font-weight:650}.security-blog .sec3-input-paths{display:grid;grid-template-columns:minmax(0,.9fr)minmax(0,1.1fr);gap:1.8rem;align-items:center;margin:1.5rem 0}.security-blog .sec3-observation{text-align:center}.security-blog .sec3-package{display:flex;justify-content:center;align-items:center;gap:.65rem;margin:.55rem 0 .4rem}.security-blog .sec3-package svg{width:110px;flex:0 0 110px;color:var(--sec-blue);height:auto}.security-blog .sec3-package q{font-size:.95rem;line-height:1.45;max-width:9ch;font-weight:650;color:var(--sec-ink)}.security-blog .sec3-observation small{font-size:.72rem;color:var(--sec-muted)}.security-blog .sec3-interpretations{display:grid;gap:1.7rem;position:relative}.security-blog .sec3-interpretations::before{content:"";position:absolute;left:0;top:25%;bottom:25%;border-left:1px solid #a4b2bf}.security-blog .sec3-interpretation{display:grid;grid-template-columns:2.15rem 1fr;align-items:center;gap:.8rem;color:var(--sec-blue)}.security-blog .sec3-interpretation strong{display:block;font-size:.88rem;font-weight:700}.security-blog .sec3-interpretation p{font-size:.82rem;line-height:1.5;margin:.25rem 0 0}.security-blog .sec3-as-authority{color:var(--sec-rust)}.security-blog .sec3-path-arrow{position:relative;display:block;border-top:2px solid}.security-blog .sec3-path-arrow::after{content:"";position:absolute;right:0;top:-4.5px;width:7px;height:7px;border-top:2px solid;border-right:2px solid;transform:rotate(45deg)}.security-blog .sec3-as-authority .sec3-path-arrow{border-top-style:dashed}.security-blog .sec3-visual p.sec3-distinction{border-top:1px solid var(--sec-line);padding-top:.9rem;font-size:.82rem;line-height:1.65}.security-blog .sec3-distinction b{color:var(--sec-ink);font-weight:650}.security-blog .sec3-command-boundary{display:grid;grid-template-columns:1fr 2.5rem 1fr;gap:.75rem;align-items:center;margin-top:1.2rem;padding:1rem 0;border-top:1px solid var(--sec-line);border-bottom:1px solid var(--sec-line)}.security-blog .sec3-command-boundary strong{display:block;font-size:.83rem;font-weight:600;margin-top:.3rem}.security-blog .sec3-boundary-mark{font:1.6rem/1 ui-monospace,monospace;color:var(--sec-muted);text-align:center;border-right:2px solid var(--sec-blue);padding-right:.5rem}.security-blog .sec3-artifact{display:flex;gap:1rem;align-items:center;padding:0 0 1.1rem}.security-blog .sec3-artifact svg{width:41px;height:49px;flex:0 0 41px;color:var(--sec-blue)}.security-blog .sec3-artifact strong{font-size:.86rem;font-weight:650}.security-blog .sec3-artifact p{font-size:.8rem;margin:.25rem 0 0;line-height:1.55}.security-blog .sec3-inference{padding-top:.4rem}.security-blog .sec3-shared-weights{display:flex;align-items:center;gap:.7rem;color:var(--sec-muted);font-size:.73rem;line-height:1.4;text-align:center}.security-blog .sec3-shared-weights::before,.security-blog .sec3-shared-weights::after{content:"";height:.7rem;flex:1;border-top:1px solid #a4b2bf}.security-blog .sec3-shared-weights::before{border-left:1px solid #a4b2bf}.security-blog .sec3-shared-weights::after{border-right:1px solid #a4b2bf}.security-blog .sec3-trace{display:grid;grid-template-columns:minmax(0,1fr)minmax(3.5rem,1fr)minmax(0,1fr);gap:1.15rem;align-items:center;padding:1rem .8rem;color:var(--sec-blue)}.security-blog .sec3-trace+.sec3-trace{border-top:1px dashed var(--sec-line)}.security-blog .sec3-trace-input{display:flex;gap:.75rem;align-items:center}.security-blog .sec3-trace-input svg{width:51px;height:51px;flex:0 0 51px}.security-blog .sec3-trace strong{font-size:.86rem;line-height:1.4;font-weight:650}.security-blog .sec3-inference-path{position:relative;align-self:center;padding-bottom:.7rem;text-align:center}.security-blog .sec3-inference-path>span{font-size:.74rem;line-height:1.35;display:block;margin-bottom:.4rem}.security-blog .sec3-inference-path i{display:block;border-top:2px solid;position:relative}.security-blog .sec3-inference-path i::after{content:"";position:absolute;width:7px;height:7px;right:0;top:-4.5px;border-top:2px solid;border-right:2px solid;transform:rotate(45deg)}.security-blog .sec3-trigger-trace{color:var(--sec-rust)}.security-blog .sec3-trigger-trace .sec3-inference-path i{border-top-style:dashed}.security-blog .sec3-model-behavior .sec3-distinction{margin-top:.4rem}@container(max-width:520px){.security-blog .sec3-input-paths{grid-template-columns:1fr;gap:1.3rem;margin:1.2rem 0}
 .security-blog .sec3-observation{width:100%}
 .security-blog .sec3-package svg{width:100px;flex-basis:100px}
 .security-blog .sec3-interpretations{gap:1.05rem;padding-left:.65rem}
 .security-blog .sec3-interpretations::before{left:.65rem}
 .security-blog .sec3-interpretation{grid-template-columns:1.7rem 1fr;gap:.8rem}
 .security-blog .sec3-command-boundary{grid-template-columns:1fr;gap:.6rem}
 .security-blog .sec3-boundary-mark{justify-self:start;transform:rotate(90deg);width:2.3rem;margin:.2rem 0 .1rem .1rem}
 .security-blog .sec3-trace{grid-template-columns:minmax(0,1fr) minmax(3rem,.8fr) minmax(0,1fr);gap:.6rem;padding:1rem 0}
 .security-blog .sec3-trace-input{flex-direction:column;align-items:flex-start;gap:.45rem}
 .security-blog .sec3-trace-input svg{width:43px;height:43px;flex-basis:43px}
 .security-blog .sec3-trace strong{font-size:.8rem}
 .security-blog .sec3-inference-path>span{font-size:.7rem}
 .security-blog .sec3-trace-result{overflow-wrap:normal;hyphens:manual}
}.security-blog .sec4-visual{border-top:1px solid var(--sec-line);padding-top:1.4rem}.security-blog .sec4-controls{min-width:580px;font-size:.87rem}.security-blog .sec4-controls tbody th{width:29%}.security-blog .sec4-controls td{width:36%}.security-blog .sec4-controls td:last-child{width:35%}.security-blog .sec4-route{display:block;font:500 .75rem/1.5 ui-monospace,monospace;color:var(--sec-teal);margin-bottom:.35rem}.security-blog .sec4-evidence-sources{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:1.3rem}.security-blog .sec4-evidence-sources>div{border-top:2px solid var(--sec-blue);padding:.85rem .2rem .7rem;position:relative}.security-blog .sec4-evidence-sources>div:after{content:"";position:absolute;bottom:-18px;left:50%;height:18px;border-left:1px solid #90a9bc}.security-blog .sec4-evidence-sources b{font-size:.92rem;line-height:1.4}.security-blog .sec4-evidence-sources p{font-size:.8rem;line-height:1.6}.security-blog .sec4-evidence-join{height:27px;position:relative;margin:17px 16.66% 0;border-top:1px solid #90a9bc}.security-blog .sec4-evidence-join:after{content:"";position:absolute;left:50%;top:0;height:26px;border-left:1px solid #90a9bc}.security-blog .sec4-evidence-timeline{text-align:center;background:#f1f5f8;border-top:2px solid var(--sec-blue);padding:1rem}.security-blog .sec4-evidence-timeline>span{display:block;color:var(--sec-blue);font-size:.7rem;text-transform:uppercase;letter-spacing:.08em;font-weight:700;margin-bottom:.4rem}.security-blog .sec4-evidence-timeline>b{font-size:.95rem;line-height:1.5}.security-blog .sec4-evidence-timeline p{font-size:.8rem;line-height:1.6}.security-blog dl.sec4-negative-tests{margin:0;border-top:2px solid var(--sec-ink)}.security-blog dl.sec4-negative-tests>div{display:grid;grid-template-columns:1fr 1.4fr;gap:2rem;padding:1rem 0;border-bottom:1px solid var(--sec-line);align-items:center}.security-blog dl.sec4-negative-tests dt{font-size:.9rem;font-weight:650;position:relative;padding-left:1.4rem}.security-blog dl.sec4-negative-tests dt:before{content:"×";position:absolute;left:0;color:var(--sec-rust);font-size:1.1rem;line-height:1.2}.security-blog dl.sec4-negative-tests dd{margin:0;color:var(--sec-teal);font-size:.86rem;line-height:1.5}.security-blog .sec4-workbench{border-top:2px solid var(--sec-ink)}.security-blog .sec4-tool-row{display:grid;grid-template-columns:minmax(0,1.45fr)minmax(0,1fr);gap:1.5rem;padding:1.1rem 0;border-bottom:1px solid var(--sec-line);align-items:center}.security-blog .sec4-terminal{background:#102437;color:#e5eef6;overflow:hidden;border-radius:5px}.security-blog .sec4-terminal-bar{display:flex;align-items:center;justify-content:space-between;gap:.7rem;padding:.65rem .9rem;border-bottom:1px solid #365066;font-size:.73rem;line-height:1.5}.security-blog .prose .sec4-terminal .sec4-terminal-bar a{color:#c5e7f4!important;text-decoration:underline;text-underline-offset:3px}.security-blog .sec4-terminal-bar>span{color:#b9cbda;font-size:.65rem;margin-left:auto}.security-blog .sec4-copy{position:relative;display:inline-flex;align-items:center;justify-content:center;flex:0 0 36px;width:36px;height:36px;padding:7px;border:1px solid #547187;border-radius:5px;background:0 0;color:#d7eaf5;cursor:pointer}.security-blog .sec4-copy:hover{background:#24445c;border-color:#8bb2cb;color:#fff}.security-blog .sec4-copy:focus-visible{outline:2px solid #8dd5ed;outline-offset:3px}.security-blog .sec4-copy svg{display:block;width:20px;height:20px;fill:none;stroke:currentColor;stroke-width:1.7;stroke-linecap:round;stroke-linejoin:round}.security-blog .sec4-copy .sec4-copy-check{display:none}.security-blog .sec4-copy[data-state=copied]{color:#a4ebd6;border-color:#67b99f}.security-blog .sec4-copy[data-state=copied] .sec4-copy-icon{display:none}.security-blog .sec4-copy[data-state=copied] .sec4-copy-check{display:block}.security-blog .sec4-copy-status{position:absolute;right:calc(100% + .45rem);top:50%;transform:translateY(-50%);padding:4px 8px;border-radius:4px;background:#24445c;color:#f0f6fa;font:500 .72rem/1.5 system-ui,sans-serif;white-space:nowrap;pointer-events:none}.security-blog .sec4-copy-status:empty{display:none}.security-blog .sec4-copy[data-state=error] .sec4-copy-status{background:#67351f}.security-blog .sec4-terminal pre{background:0 0;box-shadow:none;border:0;border-radius:0;margin:0;padding:1.1rem .9rem;color:#f0f6fa;font-size:.8rem;line-height:1.9;overflow-x:auto;scrollbar-width:thin}.security-blog .sec4-terminal pre code{font:inherit;white-space:pre;background:0 0;color:inherit;padding:0}.security-blog .sec4-terminal pre:focus-visible{outline:2px solid #8dd5ed;outline-offset:-3px}.security-blog .sec4-tool-evidence{border-left:2px solid var(--sec-teal);padding-left:.9rem}.security-blog .sec4-tool-evidence b{display:block;font-size:.9rem;line-height:1.4}.security-blog .sec4-tool-evidence p{font-size:.82rem;line-height:1.6;margin:.35rem 0 0}.security-blog .sec4-recovery{border:1px solid #cbd7df;border-radius:8px;overflow:hidden}.security-blog .sec4-contain{display:flex;align-items:center;gap:1rem;padding:1rem 1.2rem;background:#f7f1ed;border-bottom:1px solid #e3d6cc}.security-blog .sec4-state-mark{display:flex;align-items:center;justify-content:center;flex:0 0 38px;height:38px;border:1.5px solid var(--sec-rust);border-radius:50%;font-size:1rem;font-weight:750;color:var(--sec-rust)}.security-blog .sec4-contain b,.security-blog .sec4-resume b{display:block;font-size:.95rem;line-height:1.5}.security-blog .sec4-contain p,.security-blog .sec4-resume p{font-size:.82rem;line-height:1.6;margin:.2rem 0 0}.security-blog .sec4-recovery-lanes{display:grid;grid-template-columns:1fr 1fr;padding:1.4rem 1.2rem;gap:1.8rem}.security-blog .sec4-lane-label{display:block;text-transform:uppercase;letter-spacing:.1em;font-size:.7rem;font-weight:700;color:var(--sec-blue);margin-bottom:1rem}.security-blog .sec4-lane ol{list-style:none;position:relative;margin:0;padding:0;display:grid;gap:1.3rem}.security-blog .sec4-lane ol:before{content:"";position:absolute;top:15px;bottom:35px;left:14px;border-left:1px solid #9db5c5}.security-blog .sec4-lane li{position:relative;padding-left:2.7rem;margin:0;min-height:55px}.security-blog .sec4-lane li>span{position:absolute;top:0;left:0;display:flex;align-items:center;justify-content:center;width:29px;height:29px;background:#fff;border:1px solid #88a6b9;border-radius:50%;font:600 .65rem/1 ui-monospace,monospace;color:var(--sec-blue)}.security-blog .sec4-lane b{display:block;font-size:.9rem;line-height:1.4}.security-blog .sec4-lane small{display:block;font-size:.8rem;line-height:1.6;color:var(--sec-muted);margin-top:.35rem}.security-blog .sec4-resume{display:flex;align-items:center;gap:1rem;padding:1rem 1.2rem;background:#edf5f3;border-top:1px solid #c5dcd5}.security-blog .sec4-resume svg{flex:0 0 38px;width:38px;height:38px;padding:6px;fill:none;stroke:var(--sec-teal);stroke-width:1.8;border:1.5px solid var(--sec-teal);border-radius:50%}@container(max-width:620px){.security-blog .sec4-tool-row{grid-template-columns:1fr;gap:.8rem;padding:1rem 0}
 .security-blog .sec4-tool-evidence{padding:.25rem 0 .25rem .8rem}
 .security-blog .sec4-recovery-lanes{gap:1rem;padding:1.2rem .8rem}
 .security-blog .sec4-contain,.security-blog .sec4-resume{padding:1rem .8rem;gap:.8rem}
 .security-blog .sec4-terminal pre{font-size:.74rem;padding:1rem .8rem}
}@container(max-width:400px){.security-blog .sec4-evidence-sources{grid-template-columns:1fr;gap:.65rem;border-left:1px solid #90a9bc;padding-left:1rem}
 .security-blog .sec4-evidence-sources>div{border-top:0;padding:.25rem 0 .45rem}
 .security-blog .sec4-evidence-sources>div:after{left:-1rem;top:1rem;bottom:auto;width:.7rem;height:0;border-left:0;border-top:1px solid #90a9bc}
 .security-blog .sec4-evidence-join{margin:0 50% 0 0;border-top:0;border-left:1px solid #90a9bc}
 .security-blog .sec4-evidence-join:after{left:0;right:0;top:0;height:27px;border-left:0;border-bottom:1px solid #90a9bc}
 .security-blog dl.sec4-negative-tests>div{grid-template-columns:1fr;gap:.35rem}
 .security-blog dl.sec4-negative-tests dd{padding-left:1.4rem}
 .security-blog .sec4-recovery-lanes{grid-template-columns:1fr;gap:1.4rem}
 .security-blog .sec4-lane+.sec4-lane{border-top:1px solid var(--sec-line);padding-top:1.2rem}
}