@font-face{font-family:'Fira Code';font-style:normal;font-weight:700;font-display:swap;src:url('/assets/fonts/FiraCode-700.woff2') format('woff2')}
/* =====================================================================
   K0G — Sample proof of exploit (finding report)
   ===================================================================== */
:root{
  --bg:#05070a; --bg-1:#080b10; --bg-2:#0b0f15; --card:#0a0e14;
  --line:#161d26; --line-2:#212b37;
  --txt:#e8eef2; --txt-2:#98a7b4; --txt-3:#63727f;
  --acc:#a3e635; --acc-l:#ccf279;
  /* status palette — always paired with a text label, never colour alone */
  --crit:#ff3b30; --high:#ff8a3d; --med:#ffc53d; --low:#58a6ff; --ok:#a3e635;
  --mono:'JetBrains Mono',ui-monospace,Menlo,Consolas,monospace;
  --sans:'Inter',-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;
  --wrap:1120px;
}
*,*::before,*::after{box-sizing:border-box}
html{scroll-behavior:smooth}
body{margin:0;background:var(--bg);color:var(--txt);font-family:var(--sans);-webkit-font-smoothing:antialiased;overflow-x:hidden}
a{color:inherit;text-decoration:none}
h1,h2,h3,h4{margin:0;letter-spacing:-.022em;line-height:1.18}
::selection{background:rgba(163,230,53,.25)}
.wrap{max-width:var(--wrap);margin:0 auto;padding:0 28px;width:100%}
.skip{position:absolute;left:-9999px}
.skip:focus{left:12px;top:12px;z-index:99;background:var(--acc);color:#03130c;padding:10px 16px;border-radius:8px}
:focus-visible{outline:2px solid var(--acc);outline-offset:3px;border-radius:6px}
code{font-family:var(--mono)}

.k0glogo{width:auto;display:block;color:var(--acc);filter:drop-shadow(0 0 8px rgba(163,230,53,.3))}
.brand .k0glogo{height:28px}
.foot .k0glogo{height:28px}
.btn-solid{display:inline-flex;align-items:center;gap:8px;padding:9px 16px;border-radius:8px;
  background:var(--acc);color:#03130c;font-weight:600;font-size:13.5px;transition:.2s}
.btn-solid:hover{background:var(--acc-l)}
.btn-line{display:inline-flex;align-items:center;gap:7px;padding:9px 16px;border-radius:8px;
  border:1px solid var(--line-2);color:var(--txt-2);font-weight:600;font-size:13px;transition:.2s}
.btn-line:hover{border-color:var(--acc);color:var(--acc)}

/* nav */
.nav{position:sticky;top:0;z-index:50;background:rgba(5,7,10,.86);backdrop-filter:blur(16px);border-bottom:1px solid var(--line)}
.nav-in{max-width:var(--wrap);margin:0 auto;padding:14px 28px;display:flex;align-items:center;gap:24px}
.brand{display:inline-flex;align-items:center;gap:10px;color:var(--acc)}
.crumb{font-family:var(--mono);font-size:12.5px;color:var(--txt-3)}
.nav-links{display:flex;align-items:center;gap:20px;margin-left:auto}
.nav-links a{font-size:14px;color:var(--txt-2);font-weight:500;transition:color .2s}
.nav-links a:hover{color:var(--txt)}
.nav-links a.btn-solid{color:#03130c}

/* ---------- report header ---------- */
.rpt{padding:54px 0 40px;position:relative;overflow:hidden}
.rpt-bg{position:absolute;inset:0;pointer-events:none;
  background:radial-gradient(900px 460px at 15% -20%,rgba(255,59,48,.10),transparent 62%)}
.rpt-in{position:relative}
.eyebrow{display:inline-flex;align-items:center;gap:9px;font-family:var(--mono);font-size:11px;
  letter-spacing:.18em;text-transform:uppercase;color:var(--acc);
  border:1px solid rgba(163,230,53,.28);background:rgba(163,230,53,.06);
  padding:6px 13px;border-radius:100px;margin-bottom:20px}
.eyebrow::before{content:'';width:6px;height:6px;border-radius:50%;background:var(--acc);box-shadow:0 0 10px var(--acc)}
.rpt-id{font-family:var(--mono);font-size:12px;color:var(--txt-3);letter-spacing:.06em;margin-bottom:14px}
.rpt-h1{font-size:clamp(26px,3.5vw,42px);font-weight:800;letter-spacing:-.03em;max-width:900px;margin-bottom:20px}
.rpt-h1 code{font-size:.86em;color:var(--acc);font-weight:700}

.sevrow{display:flex;flex-wrap:wrap;gap:10px;margin-bottom:26px}
.pill{display:inline-flex;align-items:center;gap:8px;font-family:var(--mono);font-size:11.5px;
  letter-spacing:.08em;padding:7px 13px;border-radius:7px;border:1px solid var(--line-2);
  background:var(--card);color:var(--txt-2)}
.pill b{font-weight:700;letter-spacing:.1em}
.pill .ic{width:8px;height:8px;border-radius:2px;flex:0 0 auto}
.pill.crit{border-color:rgba(255,59,48,.45);background:rgba(255,59,48,.09);color:#ffb4ae}
.pill.crit .ic{background:var(--crit);box-shadow:0 0 9px rgba(255,59,48,.8)}
.pill.ok{border-color:rgba(163,230,53,.4);background:rgba(163,230,53,.08);color:var(--acc-l)}
.pill.ok .ic{background:var(--ok);box-shadow:0 0 9px rgba(163,230,53,.7)}

.facts{display:grid;grid-template-columns:repeat(auto-fit,minmax(190px,1fr));gap:1px;
  background:var(--line);border:1px solid var(--line);border-radius:12px;overflow:hidden}
.fact{background:var(--card);padding:16px 18px}
.fact dt{font-family:var(--mono);font-size:10px;letter-spacing:.14em;text-transform:uppercase;color:var(--txt-3);margin-bottom:7px}
.fact dd{margin:0;font-size:14px;color:var(--txt);font-weight:500;word-break:break-word}
.fact dd.mono{font-family:var(--mono);font-size:12.5px}

/* ---------- sections ---------- */
.sec{padding:44px 0;border-top:1px solid var(--line)}
.sec:first-of-type{border-top:0}
.sec-h{display:flex;align-items:baseline;gap:14px;margin-bottom:8px}
.sec-n{font-family:var(--mono);font-size:12px;color:var(--acc);letter-spacing:.1em;flex:0 0 auto}
.sec-t{font-size:23px;font-weight:750}
.sec-l{font-size:15.5px;color:var(--txt-2);font-weight:300;line-height:1.72;max-width:820px;margin:0 0 26px}
.sec-l + .sec-l{margin-top:-14px}
.body-p{font-size:15.5px;color:var(--txt-2);font-weight:300;line-height:1.75;max-width:820px;margin:0 0 16px}
.body-p b,.body-p strong{color:var(--txt);font-weight:600}

/* impact callout */
.callout{border:1px solid var(--line);border-left:3px solid var(--crit);border-radius:10px;
  background:linear-gradient(90deg,rgba(255,59,48,.07),transparent 60%);padding:20px 24px;margin:6px 0 26px}
.callout h4{font-size:14px;letter-spacing:.03em;margin-bottom:12px;color:#ffb4ae;font-family:var(--mono);text-transform:uppercase}
.callout ul{margin:0;padding-left:18px;display:flex;flex-direction:column;gap:9px}
.callout li{font-size:14.5px;color:var(--txt-2);line-height:1.6}
.callout li b{color:var(--txt);font-weight:600}
.callout.safe{border-left-color:var(--ok);background:linear-gradient(90deg,rgba(163,230,53,.07),transparent 60%)}
.callout.safe h4{color:var(--acc-l)}

/* attack chain */
.chain{display:flex;flex-direction:column;gap:0;margin:0 0 10px}
.hop{display:grid;grid-template-columns:44px 1fr;gap:18px;position:relative;padding-bottom:26px}
.hop:last-child{padding-bottom:0}
.hop::before{content:'';position:absolute;left:21px;top:38px;bottom:-4px;width:2px;
  background:linear-gradient(180deg,rgba(163,230,53,.5),rgba(163,230,53,.12))}
.hop:last-child::before{display:none}
.hop-n{width:44px;height:38px;border-radius:9px;border:1px solid rgba(163,230,53,.35);
  background:rgba(163,230,53,.07);color:var(--acc);font-family:var(--mono);font-size:13px;font-weight:700;
  display:grid;place-items:center;position:relative;z-index:1}
.hop.end .hop-n{border-color:rgba(255,59,48,.5);background:rgba(255,59,48,.1);color:#ff8a80}
.hop-b{padding-top:2px}
.hop-t{font-size:16.5px;font-weight:650;margin-bottom:6px}
.hop-d{font-size:14.5px;color:var(--txt-2);font-weight:300;line-height:1.62;margin:0 0 9px;max-width:760px}
.hop-m{display:flex;flex-wrap:wrap;gap:7px}
.tech{font-family:var(--mono);font-size:10.5px;letter-spacing:.05em;color:var(--txt-3);
  border:1px solid var(--line);border-radius:5px;padding:3px 8px;background:var(--bg-1)}
.tech b{color:var(--acc);font-weight:600}

/* code / transcript blocks */
.blk{border:1px solid var(--line);border-radius:11px;background:#070a0e;overflow:hidden;margin:0 0 20px}
.blk-h{display:flex;align-items:center;gap:10px;padding:10px 15px;background:var(--bg-1);
  border-bottom:1px solid var(--line);font-family:var(--mono);font-size:11px;color:var(--txt-3);letter-spacing:.06em}
.blk-h .dot{width:8px;height:8px;border-radius:50%;background:var(--line-2);flex:0 0 auto}
.blk-h .tag{margin-left:auto;color:var(--txt-3)}
.blk-h .tag.req{color:var(--low)}
.blk-h .tag.res{color:var(--acc)}
.blk pre{margin:0;padding:16px 18px;overflow-x:auto;font-family:var(--mono);font-size:12.5px;
  line-height:1.68;color:#cbd5e0;white-space:pre;-webkit-overflow-scrolling:touch}
.blk pre .k{color:#7dd3fc}      /* http verb / header key */
.blk pre .s{color:#a3e635}      /* string / ok */
.blk pre .r{color:#ff8a80}      /* payload / danger */
.blk pre .c{color:#5b6b7a}      /* comment */
.blk pre .w{color:#ffc53d}      /* warn */

/* steps */
.steps{counter-reset:st;display:flex;flex-direction:column;gap:24px;margin-bottom:8px}
.step{position:relative;padding-left:46px}
.step::before{counter-increment:st;content:counter(st);position:absolute;left:0;top:-2px;
  width:30px;height:30px;border-radius:8px;border:1px solid var(--line-2);background:var(--card);
  color:var(--acc);font-family:var(--mono);font-size:12.5px;font-weight:700;display:grid;place-items:center}
.step h4{font-size:15.5px;font-weight:650;margin-bottom:8px}
.step p{font-size:14.5px;color:var(--txt-2);font-weight:300;line-height:1.65;margin:0 0 14px;max-width:800px}

/* diff */
.diff pre .add{color:#a3e635;background:rgba(163,230,53,.08);display:block}
.diff pre .del{color:#ff8a80;background:rgba(255,59,48,.08);display:block}
.diff pre .ctx{color:#8b9aa8;display:block}

/* tables */
.tbl-wrap{overflow-x:auto;border:1px solid var(--line);border-radius:11px;margin-bottom:20px}
table.t{width:100%;border-collapse:collapse;font-size:13.5px;min-width:560px}
table.t th,table.t td{text-align:left;padding:12px 16px;border-bottom:1px solid var(--line)}
table.t thead th{background:var(--bg-1);font-family:var(--mono);font-size:10.5px;letter-spacing:.13em;
  text-transform:uppercase;color:var(--txt-3);font-weight:600}
table.t tbody tr:last-child td{border-bottom:0}
table.t td{color:var(--txt-2)}
table.t td b,table.t td strong{color:var(--txt);font-weight:600}
table.t td.mono,table.t th.mono{font-family:var(--mono);font-size:12.5px}
.ok-tick{color:var(--acc);font-weight:700}

/* retest */
.retest{display:grid;grid-template-columns:1fr 1fr;gap:16px;margin-bottom:8px}
.rt{border:1px solid var(--line);border-radius:11px;background:var(--card);padding:20px 22px}
.rt.before{border-left:3px solid var(--crit)}
.rt.after{border-left:3px solid var(--ok)}
.rt-l{font-family:var(--mono);font-size:10.5px;letter-spacing:.14em;text-transform:uppercase;color:var(--txt-3);margin-bottom:12px}
.rt-v{font-size:17px;font-weight:700;margin-bottom:8px}
.rt.before .rt-v{color:#ff8a80}
.rt.after .rt-v{color:var(--acc)}
.rt-d{font-size:13.5px;color:var(--txt-2);font-weight:300;line-height:1.6;margin:0}

/* footer */
.foot{border-top:1px solid var(--line);background:var(--bg-1);padding:34px 0;margin-top:20px}
.foot-in{display:flex;align-items:center;gap:18px;flex-wrap:wrap}
.foot-tag{color:var(--txt-3);font-size:14px}
.foot-links{margin-left:auto;display:flex;gap:18px}
.foot-links a{font-size:13px;color:var(--txt-3);transition:color .2s}
.foot-links a:hover{color:var(--acc)}

/* disclosure banner */
.fict{border:1px solid var(--line);border-left:3px solid var(--acc);border-radius:10px;
  background:var(--bg-1);padding:16px 20px;margin:0 0 34px;font-size:13.5px;color:var(--txt-2);line-height:1.68}
.fict b{color:var(--txt);font-weight:600}

@media (max-width:820px){
  .nav-links a:not(.btn-solid){display:none}
  .crumb{display:none}
  .retest{grid-template-columns:1fr}
  .hop{grid-template-columns:36px 1fr;gap:14px}
  .hop::before{left:17px}
  .hop-n{width:36px}
}
@media (prefers-reduced-motion:reduce){*{transition:none!important;animation:none!important;scroll-behavior:auto!important}}

@media print{
  .nav,.foot,.rpt-bg{display:none}
  body{background:#fff;color:#111}
  .blk{background:#f6f7f9}
  .blk pre{color:#111}
}