@font-face{font-family:"Archivo";font-style:normal;font-display:swap;font-weight:100 900;font-stretch:62% 125%;src:url(fonts/archivo-wdth.woff2) format("woff2-variations"),url(fonts/archivo-wdth.woff2) format("woff2")}
@font-face{font-family:"IBM Plex Sans";font-style:normal;font-display:swap;font-weight:400;src:url(fonts/plex-400.woff2) format("woff2")}
@font-face{font-family:"IBM Plex Sans";font-style:normal;font-display:swap;font-weight:500;src:url(fonts/plex-500.woff2) format("woff2")}
@font-face{font-family:"IBM Plex Sans";font-style:normal;font-display:swap;font-weight:600;src:url(fonts/plex-600.woff2) format("woff2")}
@font-face{font-family:"JetBrains Mono";font-style:normal;font-display:swap;font-weight:400;src:url(fonts/jbmono-400.woff2) format("woff2")}
@font-face{font-family:"JetBrains Mono";font-style:normal;font-display:swap;font-weight:500;src:url(fonts/jbmono-500.woff2) format("woff2")}
/* Layout: an analyst's case file. Profile-summary hero, then capabilities, sanitized cases tagged with ATT&CK IDs, toolbox, contact. */
:root{
  --paper:#f2f4f6; --sheet:#ffffff; --ink:#14202e; --muted:#566373; --rule:#d6dce3;
  --signal:#a14f06; --signal-soft:#fbeedd; --ok:#1f7a4d;
  --crit:#b42318; --crit-soft:#fdecea; --med:#8a5a00; --med-soft:#fdf3d7;
  --display:"Archivo","Arial Narrow",system-ui,sans-serif;
  --body:"IBM Plex Sans",system-ui,-apple-system,"Segoe UI",sans-serif;
  --mono:"JetBrains Mono",ui-monospace,"Cascadia Mono",Consolas,monospace;
}
@media (prefers-color-scheme:dark){:root:not([data-theme="light"]){
  --paper:#0f1620; --sheet:#16202c; --ink:#e4e9ef; --muted:#93a1b2; --rule:#273444;
  --signal:#f0953a; --signal-soft:#2c2116; --ok:#4fc28a;
  --crit:#ff8a7a; --crit-soft:#2e1715; --med:#e8c060; --med-soft:#2a2410; color-scheme:dark}}
:root[data-theme="dark"]{
  --paper:#0f1620; --sheet:#16202c; --ink:#e4e9ef; --muted:#93a1b2; --rule:#273444;
  --signal:#f0953a; --signal-soft:#2c2116; --ok:#4fc28a;
  --crit:#ff8a7a; --crit-soft:#2e1715; --med:#e8c060; --med-soft:#2a2410; color-scheme:dark}

*{box-sizing:border-box}
body{margin:0;background:var(--paper);color:var(--ink);font:400 16px/1.6 var(--body)}
.wrap{max-width:1080px;margin:0 auto;padding-inline:clamp(16px,4vw,40px)}
a{color:inherit;text-decoration-color:var(--signal);text-underline-offset:3px}
a:hover{color:var(--signal)}
:focus-visible{outline:2px solid var(--signal);outline-offset:3px;border-radius:2px}
.mono{font-family:var(--mono)}
.skip{position:absolute;left:16px;top:-48px;padding:8px 12px;background:var(--ink);color:var(--paper);border-radius:4px;z-index:10}
.skip:focus{top:12px}
h1,h2,h3{font-family:var(--display);text-wrap:balance;margin:0}
.eyebrow{font:500 12px/1.5 var(--mono);letter-spacing:.12em;text-transform:uppercase;color:var(--muted)}

/* nav */
nav{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:center;gap:12px;padding-block:22px;border-bottom:1px solid var(--rule)}
nav .mark{font:700 15px/1 var(--display);font-stretch:112%;letter-spacing:.02em}
nav ul{display:flex;flex-wrap:wrap;gap:6px 18px;list-style:none;margin:0;padding:0;font-size:14px}
nav a{text-decoration:none;color:var(--muted)}
nav a:hover{color:var(--ink)}

/* hero */
.hero{display:grid;grid-template-columns:1.15fr .85fr;gap:clamp(28px,5vw,64px);align-items:end;padding-block:clamp(48px,8vw,96px) clamp(40px,6vw,72px)}
.hero>*{min-width:0}
.hero h1{font-size:clamp(44px,8vw,96px);line-height:.92;font-weight:800;font-stretch:72%;letter-spacing:-.01em}
.hero h1 span{display:block;color:var(--signal);font-size:clamp(26px,3.8vw,44px);line-height:1.08;font-stretch:80%;font-weight:700;margin-top:16px;max-width:18em}
.hero .lede{max-width:34em;margin:24px 0 0;font-size:clamp(17px,2vw,19px);color:var(--muted)}
.hero .lede strong{color:var(--ink);font-weight:600}
.cta{display:flex;flex-wrap:wrap;gap:12px;margin-top:28px}
.btn{display:inline-flex;align-items:center;gap:8px;padding:11px 18px;border-radius:4px;font:600 14px/1 var(--body);text-decoration:none;border:1px solid var(--ink)}
.btn.primary{background:var(--ink);color:var(--paper)}
.btn.primary:hover{background:var(--signal);border-color:var(--signal);color:#fff}
.btn.ghost:hover{border-color:var(--signal)}

.record{background:var(--sheet);border:1px solid var(--rule);border-radius:6px;font:400 15px/1.45 var(--body);overflow:hidden}
.record header{display:flex;justify-content:space-between;gap:8px;padding:12px 18px;border-bottom:1px solid var(--rule);color:var(--muted);font:500 12px/1 var(--mono);letter-spacing:.12em;text-transform:uppercase}
.record dl{display:grid;grid-template-columns:max-content 1fr;gap:10px 20px;margin:0;padding:18px}
.record dt{color:var(--muted);font-size:14px}
.record dd{margin:0;min-width:0;overflow-wrap:anywhere}
.live{color:var(--ok)}
.live::before{content:"";display:inline-block;width:8px;height:8px;border-radius:50%;background:var(--ok);margin-right:8px;vertical-align:1px;animation:pulse 2.4s ease-in-out infinite}
@keyframes pulse{50%{opacity:.35}}

/* sections */
section{padding-block:clamp(48px,7vw,80px);border-top:1px solid var(--rule)}
.sec-head{display:flex;flex-wrap:wrap;justify-content:space-between;align-items:baseline;gap:8px 24px;margin-bottom:32px}
.sec-head h2{font-size:clamp(28px,4vw,40px);font-weight:700;font-stretch:85%}
.sec-head p{margin:0;max-width:36em;color:var(--muted)}

/* capabilities */
.caps{display:grid;grid-template-columns:repeat(3,1fr);gap:0;border-top:2px solid var(--ink)}
.cap{padding:22px 22px 26px 0;border-bottom:1px solid var(--rule)}
.cap:not(:nth-child(3n+1)){padding-left:22px;border-left:1px solid var(--rule)}
.cap h3{font-size:19px;font-weight:700;font-stretch:95%;margin-bottom:8px}
.cap p{margin:0;color:var(--muted);font-size:15px}

/* cases */
.cases{display:grid;gap:16px}
.case{display:grid;grid-template-columns:200px 1fr;gap:24px;background:var(--sheet);border:1px solid var(--rule);border-radius:6px;padding:24px}
.case>*{min-width:0}
.case .meta{display:flex;flex-direction:column;gap:10px;font:400 12px/1.4 var(--mono);color:var(--muted)}
.case .id{font-size:13px;color:var(--ink);font-weight:500}
.sev{align-self:flex-start;padding:3px 8px;border-radius:3px;font-weight:500;letter-spacing:.06em;text-transform:uppercase;background:var(--signal-soft);color:var(--signal)}
.sev.crit{background:var(--crit-soft);color:var(--crit)}
.sev.med{background:var(--med-soft);color:var(--med)}
.case h3{font-size:22px;font-weight:700;font-stretch:90%;margin-bottom:12px}
.case dl{display:grid;grid-template-columns:max-content 1fr;gap:6px 16px;margin:0}
.case dt{font:500 12px/1.9 var(--mono);text-transform:uppercase;letter-spacing:.08em;color:var(--muted)}
.case dd{margin:0}
.tags{display:flex;flex-wrap:wrap;gap:6px;margin-top:14px;padding:0;list-style:none}
.tags li{font:400 12px/1 var(--mono);padding:5px 8px;border:1px solid var(--rule);border-radius:3px;color:var(--muted)}

/* toolbox */
.tools{display:grid;grid-template-columns:repeat(4,1fr);gap:28px}
.tools>div{min-width:0}
.tools h3{font:500 12px/1 var(--mono);letter-spacing:.12em;text-transform:uppercase;color:var(--signal);padding-bottom:10px;border-bottom:1px solid var(--rule);margin-bottom:12px}
.tools ul{list-style:none;margin:0;padding:0;display:grid;gap:7px;font-size:15px}

/* writing */
.posts{list-style:none;margin:0;padding:0;border-top:2px solid var(--ink)}
.posts li{display:grid;grid-template-columns:120px 1fr auto;gap:20px;align-items:baseline;padding:16px 0;border-bottom:1px solid var(--rule)}
.posts li>*{min-width:0}
.posts .when{font:400 13px/1 var(--mono);color:var(--muted);font-variant-numeric:tabular-nums}
.posts .t{font-weight:500}
.posts .state{font:400 12px/1 var(--mono);color:var(--muted)}

/* contact */
.contact{display:grid;grid-template-columns:1fr 1fr;gap:40px;align-items:start}
.contact>*{min-width:0}
.contact h2{font-size:clamp(32px,5vw,52px);font-weight:800;font-stretch:75%;line-height:1}
.contact-note{color:var(--muted);max-width:30em;margin:16px 0 0}
.links{display:grid;gap:0;border-top:2px solid var(--ink)}
.links div{display:grid;grid-template-columns:110px 1fr;gap:16px;padding:14px 0;border-bottom:1px solid var(--rule)}
.links dt{font:400 13px/1.6 var(--mono);color:var(--muted)}
.links dd{margin:0;overflow-wrap:anywhere}
footer{padding-block:28px 40px;border-top:1px solid var(--rule);display:flex;flex-wrap:wrap;justify-content:space-between;gap:8px;font:400 12px/1.4 var(--mono);color:var(--muted)}

.avatar{width:88px;height:88px;border-radius:50%;display:grid;place-items:center;margin-bottom:22px;background:var(--sheet);color:var(--signal);font:700 30px/1 var(--display);font-stretch:90%;overflow:hidden;border:2px solid var(--signal);box-shadow:0 0 0 4px var(--signal-soft)}
.avatar img{width:100%;height:100%;object-fit:cover}
.certs{display:flex;flex-wrap:wrap;gap:8px;list-style:none;margin:22px 0 0;padding:0}
.certs li{font:500 12px/1 var(--mono);padding:7px 10px;border:1px solid var(--rule);border-radius:3px;background:var(--sheet)}
.projects{display:grid;grid-template-columns:repeat(3,1fr);gap:16px}
.proj{display:flex;flex-direction:column;gap:8px;min-width:0;padding:22px;background:var(--sheet);border:1px solid var(--rule);border-radius:6px;text-decoration:none;color:var(--ink);transition:border-color .15s}

.proj .lang{font:500 12px/1 var(--mono);color:var(--signal);letter-spacing:.06em}
.proj h3{font:500 18px/1.2 var(--mono)}
.proj p{margin:0;color:var(--muted);font-size:15px;flex:1}
.proj .state{font:400 12px/1 var(--mono);color:var(--muted)}
footer a{color:inherit}
.disclaimer{flex-basis:100%;margin:0 0 6px;max-width:70ch;font:400 13px/1.5 var(--body)}

.autos{display:grid;grid-template-columns:repeat(3,1fr);gap:16px}
.auto{display:flex;flex-direction:column;gap:10px;min-width:0;padding:22px;background:var(--sheet);border:1px solid var(--rule);border-radius:6px}
.auto .lang{font:500 12px/1.3 var(--mono);color:var(--signal);letter-spacing:.06em}
.auto h3{font-size:21px;font-weight:700;font-stretch:90%}
.auto p{margin:0;color:var(--muted);font-size:15px;flex:1}
.metric{display:flex;flex-wrap:wrap;align-items:baseline;gap:4px 10px;padding-top:14px;margin-top:4px;border-top:1px solid var(--rule)}
.metric .before{font:500 15px/1 var(--mono);color:var(--muted);text-decoration:line-through;text-decoration-color:var(--rule)}
.metric .arrow{color:var(--muted)}
.metric .after{font:800 26px/1 var(--display);font-stretch:85%;color:var(--signal)}
.metric .per{flex-basis:100%;font:400 12px/1.4 var(--mono);color:var(--muted)}
@media (max-width:860px){
  .autos{grid-template-columns:1fr}
  .projects{grid-template-columns:1fr}
  .hero,.contact{grid-template-columns:1fr}
  .caps{grid-template-columns:1fr 1fr}
  .cap,.cap:not(:nth-child(3n+1)){padding:20px 16px 22px 0;border-left:0}
  .cap:nth-child(2n){padding-left:16px;border-left:1px solid var(--rule)}
  .tools{grid-template-columns:1fr 1fr}
  .case{grid-template-columns:1fr;gap:14px}
  .case .meta{flex-direction:row;flex-wrap:wrap;align-items:center;gap:8px 14px}
}
@media (max-width:520px){
  .caps,.tools{grid-template-columns:1fr}
  .cap:nth-child(2n){padding-left:0;border-left:0}
  .posts li{grid-template-columns:1fr;gap:4px}
  .case dl{grid-template-columns:1fr;gap:2px}
  .case dd{margin-bottom:8px}
}
@media (prefers-reduced-motion:reduce){.live::before{animation:none}}
.notfound{padding-block:18vh;display:grid;gap:16px}
.notfound h1{font-size:clamp(40px,7vw,72px);font-weight:800;font-stretch:72%;line-height:1}