/* library-page.css — extras for /library/, /glossary/, /guides/ pages.
 * Depends on tokens.css + components.css + subpages.css. Adds classes the
 * core marketing CSS doesn't ship with: data tables, sigma YAML blocks,
 * sources footer, glossary entries, guide TOC.
 *
 * IMPORTANT: All new selectors are namespaced under .lib-* / .glossary-* /
 * .guide-* so they cannot collide with the live homepage classes.
 */

/* ===== Generic prose width ===== */

.lib-prose {
  max-width: 720px;
  margin: 0 auto;
  /* Defense-in-depth against horizontal overflow on phones: any long
     URL, code token or unbroken string in the prose body breaks
     across lines rather than forcing the parent to grow past the
     viewport. Paired with grid-template-columns: minmax(0, 1fr) on
     .guide-layout so the grid track can actually shrink. */
  overflow-wrap: break-word;
}
.lib-prose--full {
  max-width: none;
  /* Pin the grid item to its grid area. `min-width: 0` alone was
     not enough on Chromium 148 + Safari 17.0 for this layout: the
     browser still expanded the item to the intrinsic min-content of
     the widest descendant (a wide <pre> block), making the prose
     534px wide inside a 327px grid track. Explicit `width: 100%`
     plus `min-width: 0` together force the item to size to the
     track (and exactly that), so children inherit a parent that
     fits the viewport. */
  width: 100%;
  min-width: 0;
}
.lib-prose--full > .lib-code-block,
.lib-prose--full > pre,
.lib-prose--full > table,
.lib-prose--full > img {
  /* Direct children that can have intrinsic widths larger than the
     prose track. max-width: 100% keeps them inside the container; the
     existing `.lib-code-block pre { overflow-x: auto }` rule handles
     scroll inside the wrapper. */
  max-width: 100%;
}
/* Belt-and-braces clip on the grid container itself so any descendant
   that escapes the prose item (a third-party embed, future widget,
   etc.) still cannot push the page past the viewport. The user-visible
   horizontal scroll is the bug; the inner code block keeps its own
   `overflow-x: auto` so wide listings still scroll inside their box. */
.guide-layout {
  overflow-x: clip;
}
.lib-prose p {
  font-size: var(--fs-16);
  line-height: 1.7;
  color: var(--fg-2);
  margin: 0 0 16px;
}
.lib-prose h2 {
  font-size: var(--fs-24);
  margin: 32px 0 12px;
  color: var(--fg-1);
}
.lib-prose h3 {
  font-size: var(--fs-20);
  margin: 24px 0 8px;
  color: var(--fg-1);
}
.lib-prose ul {
  margin: 0 0 16px 24px;
  padding: 0;
}
.lib-prose li {
  font-size: var(--fs-16);
  line-height: 1.7;
  color: var(--fg-2);
  margin: 0 0 8px;
}
.subpage-section-inner.is-narrow {
  max-width: 880px;
}
.lib-rule-heading,
.lib-rule-fallback,
.cta-row--spaced {
  margin-top: 24px;
}
.cta-row--compact {
  margin-top: 16px;
}
.cta-row--loose,
.research-post-rule {
  margin-top: 32px;
}
.lib-integrity-note {
  margin-top: 24px;
  font-size: var(--fs-13);
  color: var(--fg-3);
}

/* ===== Coverage matrix table ===== */

.lib-coverage-table {
  width: 100%;
  border-collapse: collapse;
  margin: 16px 0 24px;
  font-size: var(--fs-14);
}
.lib-coverage-table th,
.lib-coverage-table td {
  text-align: left;
  padding: 10px 14px;
  border-bottom: 1px solid var(--paper-3);
  vertical-align: top;
}
.lib-coverage-table th {
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--fg-3);
  background: var(--paper-2);
  font-weight: 600;
}
.lib-coverage-table td.lib-mono {
  font-family: var(--font-mono);
  font-size: var(--fs-13);
  color: var(--fg-1);
}
.lib-coverage-table td.lib-num,
.lib-coverage-table th.lib-num {
  text-align: right;
  font-variant-numeric: tabular-nums;
}
.lib-coverage-table td.lib-num {
  font-family: var(--font-mono);
  color: var(--fg-1);
}
.lib-coverage-table tbody tr:hover {
  background: rgba(198, 255, 61, 0.04);
}

/* Keep wide data tables from forcing horizontal scroll on the whole page.
   The wrapper owns horizontal overflow while the table keeps its columns. */
.lib-table-scroll {
  overflow-x: auto;
  max-width: 100%;
}

/* ===== Sigma YAML / code block ===== */

.lib-code-block {
  margin: 16px 0 24px;
  padding: 0;
  border: 1px solid var(--paper-3);
  border-radius: var(--r-2);
  overflow: hidden;
  background: var(--ink);
}
.lib-code-block .lib-code-header {
  display: flex;
  align-items: center;
  justify-content: space-between;
  padding: 8px 14px;
  background: var(--char, #15181f);
  border-bottom: 1px solid var(--slate-700);
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.04em;
  color: var(--slate-300);
}
.lib-code-block pre {
  margin: 0;
  padding: 16px 18px;
  background: var(--ink);
  color: var(--paper);
  font-family: var(--font-mono);
  font-size: var(--fs-13);
  line-height: 1.55;
  overflow-x: auto;
  white-space: pre;
}
.lib-code-block code { font-family: inherit; color: inherit; }

/* ===== Pill list (rule/technique/CVE chips) ===== */

.lib-pill-list {
  display: flex;
  flex-wrap: wrap;
  gap: 8px;
  list-style: none;
  margin: 0 0 16px;
  padding: 0;
}
.lib-pill-list li { margin: 0; }
.lib-pill {
  display: inline-flex;
  align-items: center;
  gap: 6px;
  padding: 4px 10px;
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.04em;
  color: var(--fg-2);
  background: var(--paper-2);
  border: 1px solid var(--paper-3);
  border-radius: var(--r-1);
  text-decoration: none;
  transition: color var(--dur-2) var(--ease-std), border-color var(--dur-2) var(--ease-std);
}
.lib-pill:hover { color: var(--fg-1); border-color: var(--fg-1); }
.lib-pill .lib-pill-count {
  font-variant-numeric: tabular-nums;
  color: var(--fg-3);
}

/* ===== Stat row (lightweight, paper) ===== */

.lib-statrow {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
  gap: 16px;
  margin: 16px 0 24px;
  padding: 18px 0;
  border-top: 1px solid var(--paper-3);
  border-bottom: 1px solid var(--paper-3);
}
.lib-statrow .lib-stat {
  text-align: left;
}
.lib-statrow .lib-stat-num {
  font-size: var(--fs-32, 32px);
  font-weight: 700;
  letter-spacing: -0.02em;
  color: var(--fg-1);
  line-height: 1.05;
  font-variant-numeric: tabular-nums;
}
.lib-statrow .lib-stat-label {
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--fg-3);
  margin-top: 4px;
}

/* ===== Sources & last-verified footer (the credibility block) ===== */

.lib-sources {
  margin-top: 24px;
  padding: 16px 18px;
  background: var(--paper-2);
  border: 1px dashed var(--paper-3);
  border-radius: var(--r-2);
  font-size: var(--fs-13);
}
.lib-sources .lib-sources-label {
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--fg-3);
  margin-bottom: 8px;
}
.lib-sources ul {
  list-style: none;
  margin: 0;
  padding: 0;
}
.lib-sources li {
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  color: var(--fg-2);
  margin: 0 0 6px;
  line-height: 1.5;
  word-break: break-all;
}
.lib-sources .lib-verified {
  margin-top: 10px;
  padding-top: 10px;
  border-top: 1px solid var(--paper-3);
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  color: var(--fg-3);
  letter-spacing: 0.04em;
}

/* ===== Library hub cards (entry points) ===== */

.lib-hub-grid {
  display: grid;
  /* 220px min lets 5 cards sit on a 1280+ viewport row (the library
   * hub has exactly 5: ATT&CK / Sigma / CVE / Glossary / Guides).
   * auto-fit wraps to 2 or 1 columns at smaller viewports. */
  grid-template-columns: repeat(auto-fit, minmax(220px, 1fr));
  gap: 16px;
  margin: 16px 0 32px;
}
.lib-hub-card {
  /* Flex column so the count badge can pin to the bottom regardless
   * of description length, and grid auto-stretch makes every card in
   * the same row the same height. Net effect: every "N pages" badge
   * sits on the same horizontal baseline across the row. */
  display: flex;
  flex-direction: column;
  padding: 20px 18px 16px;
  background: var(--paper);
  border: 1px solid var(--paper-3);
  border-radius: var(--r-3);
  text-decoration: none;
  color: inherit;
  transition: border-color var(--dur-2) var(--ease-std), background-color var(--dur-2) var(--ease-std);
}
.lib-hub-card:hover {
  border-color: var(--ink);
  background: rgba(198, 255, 61, 0.04);
}
.lib-hub-card .lib-hub-num {
  font-family: var(--font-mono);
  font-size: 11px;
  letter-spacing: 0.12em;
  color: var(--fg-3);
  text-transform: uppercase;
}
.lib-hub-card h3 {
  margin: 6px 0 8px;
  font-size: var(--fs-18, 18px);
  letter-spacing: -0.005em;
  line-height: 1.25;
  color: var(--fg-1);
}
.lib-hub-card p {
  margin: 0 0 16px;
  font-size: 13px;
  line-height: 1.5;
  color: var(--fg-2);
}
.lib-hub-card .lib-hub-count {
  /* margin-top:auto pushes the count badge to the bottom of the flex
   * column. align-self:flex-start keeps it left-aligned (instead of
   * stretching to fill the row). Combined with grid row-stretch on the
   * cards, this means every badge sits on the same baseline. */
  margin-top: auto;
  align-self: flex-start;
  font-family: var(--font-mono);
  font-size: 11px;
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--accent, #C6FF3D);
  background: var(--ink);
  padding: 4px 10px;
  border-radius: var(--r-1);
}
.lib-card-link {
  color: inherit;
  text-decoration: none;
}
.lib-card-link:hover {
  text-decoration: underline;
}

/* ===== Glossary index list ===== */

.glossary-az {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(220px, 1fr));
  gap: 12px 24px;
  list-style: none;
  margin: 0;
  padding: 0;
}
/* Keep glossary rows aligned while making the link itself a large tap target. */
.glossary-az li {
  margin: 0;
  border-bottom: 1px dashed var(--paper-3);
  display: flex;
  align-items: center;
  min-height: 44px;
  gap: 6px;
}
.glossary-az a {
  color: var(--fg-1);
  text-decoration: none;
  font-size: var(--fs-15, 15px);
  display: inline-flex;
  align-items: center;
  justify-content: center;
  min-width: 44px;
  min-height: 44px;
  padding: 0.5rem 0.25rem;
}
.glossary-az a:hover { color: var(--ink); text-decoration: underline; }
.glossary-az .glossary-az-letter {
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.12em;
  color: var(--fg-3);
  margin-right: 6px;
}

/* ===== Guide TOC (sticky sidebar) ===== */

/* 2026-05-21 mobile UX follow-up: at narrow viewports the prose column
   was 534px wide inside a 327px container because `1fr` resolves to
   `minmax(auto, 1fr)`, which lets the track grow to the intrinsic
   min-content of the widest child. A long word, code token, or image
   in the body would then blow the column past the viewport and the
   page would scroll horizontally. `minmax(0, 1fr)` lets the track
   shrink below content size so children are forced to wrap or scroll
   inside themselves. The desktop column gets the same treatment so a
   wide leaf element on the prose side can never push the TOC sidebar
   off-screen either. */
.guide-layout {
  display: grid;
  grid-template-columns: 220px minmax(0, 1fr);
  gap: 48px;
  align-items: start;
}
.guide-toc {
  position: sticky;
  top: 24px;
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.04em;
}
/* IMPORTANT: this mobile override has to come AFTER the base
   `.guide-toc { position: sticky }` declaration above. CSS cascade is
   source-order-wins at equal specificity; if the media query lives
   above the base rule, the base wins on mobile too and the TOC keeps
   floating over the prose. */
@media (max-width: 880px) {
  .guide-layout { grid-template-columns: minmax(0, 1fr); }
  /* On single-column mobile the sticky TOC floated over the prose as
     the reader scrolled, obscuring headings ("CVSS has a job", "Write
     the triage note"). Static positioning makes the TOC sit inline
     above the body where scrolling past it is natural. */
  .guide-toc {
    position: static;
    margin-bottom: 24px;
  }
}
.guide-toc-label {
  text-transform: uppercase;
  color: var(--fg-3);
  letter-spacing: 0.12em;
  margin-bottom: 8px;
}
.guide-toc ul { list-style: none; margin: 0; padding: 0; }
.guide-toc li { margin: 0 0 6px; }
.guide-toc a {
  color: var(--fg-2);
  text-decoration: none;
  display: block;
  padding: 4px 0;
  border-left: 2px solid var(--paper-3);
  padding-left: 10px;
}
.guide-toc a:hover, .guide-toc a.active {
  color: var(--ink);
  border-left-color: var(--ink);
}

/* ===== Breadcrumb on subpages ===== */

.lib-breadcrumb {
  display: block;
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.06em;
  color: var(--fg-3);
  margin-bottom: 8px;
}
/* Make breadcrumb links large enough to tap without changing the text size. */
.lib-breadcrumb a {
  color: var(--fg-3);
  text-decoration: none;
  display: inline-flex;
  align-items: center;
  justify-content: center;
  min-width: 44px;
  min-height: 44px;
}
.lib-breadcrumb a:hover { color: var(--ink); text-decoration: underline; }
.lib-breadcrumb span[aria-hidden="true"] { padding: 0 6px; color: var(--paper-3); }

/* ===== Library section sub-nav ===== */

/* Sits directly under the global site-nav. Sticky on desktop so it
 * stays visible while scrolling a long technique page. Horizontally
 * scrollable on narrow viewports (mobile) so it never wraps to a
 * second line. */
.lib-section-nav {
  background: var(--paper-2);
  border-bottom: 1px solid var(--paper-3);
  position: sticky;
  top: 0;
  z-index: 50;
  -webkit-backdrop-filter: saturate(120%) blur(8px);
  backdrop-filter: saturate(120%) blur(8px);
}
.lib-section-nav-inner {
  display: flex;
  gap: 4px;
  max-width: 1280px;
  margin: 0 auto;
  padding: 8px 24px;
  overflow-x: auto;
  -webkit-overflow-scrolling: touch;
  scrollbar-width: none;
}
.lib-section-nav-inner::-webkit-scrollbar { display: none; }
/* Keep section sub-nav links finger-sized while preserving compact spacing. */
.lib-section-nav a {
  display: inline-flex;
  align-items: center;
  flex-shrink: 0;
  min-height: 44px;
  padding: 8px 14px;
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--fg-3);
  text-decoration: none;
  border-radius: var(--r-1);
  transition: background-color var(--dur-2) var(--ease-std), color var(--dur-2) var(--ease-std);
  white-space: nowrap;
}
.lib-section-nav a:hover {
  color: var(--ink);
  background: var(--paper);
}
.lib-section-nav-active {
  color: var(--paper) !important;
  background: var(--ink);
}
.lib-section-nav-active:hover {
  color: var(--paper) !important;
  background: var(--ink);
}
@media (max-width: 768px) {
  /* Drop the sticky-at-top behaviour on phones + portrait tablets.
     Two sticky bars (.site-nav and .lib-section-nav) competing for
     `top: 0` covered ~134px of viewport as the reader scrolled, hiding
     headings ("CVSS has a job", "Start with exploit telemetry") behind
     the bar. On desktop the sticky sub-nav is a useful jump shortcut;
     on mobile, where the bar's horizontal scroll already makes it a
     poor navigation surface, letting it scroll away with the page is
     the better trade. Reported on 2026-05-21. */
  .lib-section-nav { position: static; }
  .lib-section-nav-inner { padding: 8px 16px; }
  .lib-section-nav a { padding: 6px 12px; font-size: 11px; }
}

/* Hint that the section sub-nav can scroll horizontally on small phones. */
@media (max-width: 480px) {
  .lib-section-nav-inner {
    -webkit-mask-image: linear-gradient(to right, black calc(100% - 24px), transparent);
    mask-image: linear-gradient(to right, black calc(100% - 24px), transparent);
  }
}

/* ===== Integrity badge ===== */

.lib-integrity {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: 10px;
  margin: 8px 0 12px;
  padding: 10px 14px;
  background: var(--paper-2);
  border: 1px dashed var(--paper-3);
  border-radius: var(--r-2);
  font-family: var(--font-mono);
  font-size: var(--fs-12);
}
.lib-integrity-pill {
  display: inline-flex;
  align-items: center;
  padding: 4px 10px;
  border-radius: var(--r-1);
  letter-spacing: 0.06em;
  text-transform: uppercase;
  font-weight: 600;
  font-size: 11px;
}
.lib-integrity-production {
  background: rgba(61, 176, 126, 0.15);
  color: #1a6f4a;
  border: 1px solid rgba(61, 176, 126, 0.35);
}
.lib-integrity-experimental {
  background: rgba(228, 161, 27, 0.18);
  color: #7a4f00;
  border: 1px solid rgba(228, 161, 27, 0.4);
}
.lib-integrity-canonicalized {
  /* Plan 2 publication contract: HMAC-signed sidecar with two-reasoner
     accept, gated by the validate-canonicalization CI workflow. */
  background: rgba(35, 119, 200, 0.12);
  color: #1a4d7a;
  border: 1px solid rgba(35, 119, 200, 0.35);
}
.lib-integrity-meta {
  color: var(--fg-3);
  letter-spacing: 0.04em;
}
.lib-integrity-manifest,
.lib-integrity-verify {
  color: var(--fg-2);
  text-decoration: none;
  border-bottom: 1px dashed var(--paper-3);
  padding-bottom: 1px;
}
.lib-integrity-manifest:hover,
.lib-integrity-verify:hover {
  color: var(--ink);
  border-bottom-color: var(--ink);
}
.lib-integrity-verify {
  margin-left: auto;
  color: var(--ink);
  font-weight: 600;
}

.lib-experimental-callout {
  margin: 8px 0 12px;
  padding: 12px 16px;
  background: rgba(228, 161, 27, 0.08);
  border-left: 3px solid #E4A11B;
  border-radius: 0 var(--r-2) var(--r-2) 0;
  font-size: var(--fs-14);
  line-height: 1.55;
  color: var(--fg-2);
}

@media (max-width: 640px) {
  .lib-integrity { font-size: 11px; gap: 6px; padding: 8px 10px; }
  .lib-integrity-verify { margin-left: 0; width: 100%; }
}

/* ===== Equalise feature-card CTAs to a shared baseline ===== */

/* The .feature-card from subpages.css is already display:flex column.
 * .lib-card-cta pins the button to the bottom of the card so cards
 * with longer summaries don't push the button down — every "View
 * coverage" / "Open →" sits on the same horizontal line across a row. */
.feature-card .lib-card-cta {
  margin-top: auto;
  align-self: flex-start;
}

/* ===== Guides catalogue section labels ===== */

/* The guide hub groups cards by catalogue category. Keep those labels
 * quieter than the card titles: a small mono chip, sitting on a light
 * divider, matches the rest of the library furniture without making
 * "Start here" / "Cloud platforms" feel like oversized article heads. */
.guide-catalogue-section {
  margin: 30px 0 0;
  padding-top: 18px;
  border-top: 1px solid var(--paper-3);
}
.guide-catalogue-section:first-of-type {
  margin-top: 0;
}
.guide-catalogue-heading {
  display: inline-flex;
  align-items: center;
  gap: 8px;
  margin: 0 0 16px;
  padding: 4px 10px;
  border: 1px solid var(--paper-3);
  border-radius: var(--r-1);
  background: var(--paper-2);
  color: var(--fg-2);
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  font-weight: 600;
  letter-spacing: 0.08em;
  line-height: 1.4;
  text-transform: uppercase;
}
.guide-catalogue-heading::before {
  content: "";
  width: 6px;
  height: 6px;
  border-radius: 999px;
  background: var(--ink);
  box-shadow: 0 0 0 3px rgba(198, 255, 61, 0.08);
}

/* ===== Per-tactic cloud-scope explainer (attack hub) ===== */

.lib-cloud-scope {
  margin: 0 0 18px;
  padding: 12px 16px;
  background: var(--paper-2);
  border-left: 3px solid var(--ink);
  border-radius: 0 var(--r-2) var(--r-2) 0;
  font-size: var(--fs-14);
  line-height: 1.55;
  color: var(--fg-2);
  max-width: 920px;
}
.lib-cloud-scope-label {
  display: inline-block;
  margin-right: 8px;
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--ink);
  font-weight: 600;
}

/* ===== Cross-section footer (hub pages) ===== */

/* Surfaces every other library section plus the library hub. Sits at
 * the bottom of each hub so visitors can move laterally to a peer
 * section without scrolling back to the top sticky nav. */
.lib-section-footer {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: 10px 14px;
  margin: 24px 0 0;
  padding: 16px 0 0;
  border-top: 1px solid var(--paper-3);
}
.lib-section-footer-label {
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.08em;
  text-transform: uppercase;
  color: var(--fg-3);
  margin-right: 6px;
}
.lib-section-footer-link {
  display: inline-flex;
  align-items: center;
  padding: 4px 10px;
  font-family: var(--font-mono);
  font-size: var(--fs-12);
  letter-spacing: 0.04em;
  color: var(--fg-1);
  background: var(--paper-2);
  border: 1px solid var(--paper-3);
  border-radius: var(--r-1);
  text-decoration: none;
  transition: color var(--dur-2) var(--ease-std), border-color var(--dur-2) var(--ease-std);
}
.lib-section-footer-link:hover {
  color: var(--ink);
  border-color: var(--ink);
}

/* ===== Guide definition list (lib-deflist) =====
 * Used in guides where each bullet is a {term, body} pair (e.g. the
 * integrity-levels section). The term column is fixed width so every
 * row aligns the body text to the same x-coordinate. */
.lib-prose dl.lib-deflist {
  display: grid;
  grid-template-columns: max-content 1fr;
  column-gap: 16px;
  row-gap: 12px;
  margin: 16px 0 24px;
  padding: 0;
}
.lib-prose dl.lib-deflist dt {
  font-family: var(--font-mono);
  font-size: var(--fs-13);
  font-weight: 600;
  letter-spacing: 0.02em;
  color: var(--ink);
  white-space: nowrap;
  padding-top: 1px; /* nudge to baseline-align with dd prose */
}
.lib-prose dl.lib-deflist dd {
  margin: 0;
  color: var(--fg-1);
}
@media (max-width: 640px) {
  .lib-prose dl.lib-deflist {
    grid-template-columns: 1fr;
    row-gap: 4px;
  }
  .lib-prose dl.lib-deflist dd {
    margin-bottom: 8px;
  }
}

/* Visible "Last reviewed: YYYY-MM-DD" beneath the H1 in the page hero.
   Provides the recency cue AI-shape validators look for in the hero
   (the same date is mirrored in TechArticle.dateModified JSON-LD). */
.page-hero .page-hero-modified {
  margin-top: 8px;
  font-size: var(--fs-13);
  color: var(--fg-3);
  letter-spacing: 0.01em;
}
.page-hero .page-hero-modified time {
  color: var(--fg-2);
  font-variant-numeric: tabular-nums;
}

/* ===== Semantic heading reset for subsection-heading =====
 *
 * .subsection-heading is the numbered "01 What is ..." stripe used
 * across library/glossary/guides pages. It's defined in subpages.css
 * as a flex row of mono text. Originally a <div>; on attack-technique
 * pages it now ships as <h2 class="subsection-heading"> so the page
 * has real H2 chunks for AI-search engines + accessibility tools.
 * This block neutralises browser-default H2 margin/weight so the
 * visual matches the original <div>.
 *
 * Same treatment for <h3> inside FAQ <summary> below.
 */
h2.subsection-heading,
h3.subsection-heading {
  margin-top: 0;
  font-weight: 500;
  font-size: var(--fs-12);
  line-height: inherit;
}

/* ===== FAQ accordion (per-technique pages) =====
 *
 * Mirrors the FAQPage JSON-LD emitted in the page head. Same Q+A text
 * in both surfaces — required for Google structured-data eligibility.
 *
 * Default-open first <details> so the answer is visible without a
 * click (helps the "page reviewed" signal AI-shape validators look
 * for, and gives a content-rich first paint without forcing the
 * visitor to interact).
 */
.lib-faq {
  margin: 16px 0 24px;
  display: flex;
  flex-direction: column;
  gap: 0;
}
.lib-faq details {
  border-bottom: 1px solid var(--paper-3);
  padding: 14px 0;
}
.lib-faq details:first-child {
  border-top: 1px solid var(--paper-3);
}
.lib-faq summary {
  cursor: pointer;
  list-style: none;
  display: flex;
  align-items: center;
  justify-content: space-between;
  gap: 16px;
  padding: 4px 0;
}
.lib-faq summary::-webkit-details-marker { display: none; }
/* Each FAQ question is a real <h3> inside the summary so extractive
 * engines + AI-search engines see the Q+A as a heading-paragraph
 * chunk. Reset browser-default h3 margin/font so it lays out as
 * the summary text it visually is. */
.lib-faq summary h3 {
  margin: 0;
  font-size: var(--fs-16, 16px);
  font-weight: 600;
  color: var(--fg-1);
  line-height: 1.4;
  flex: 1;
}
.lib-faq summary::after {
  content: "+";
  font-family: var(--font-mono);
  font-size: 18px;
  color: var(--fg-3);
  transition: transform var(--dur-2) var(--ease-std);
  flex-shrink: 0;
}
.lib-faq details[open] summary::after {
  content: "−";
  color: var(--ink);
}
.lib-faq summary:hover { color: var(--ink); }
.lib-faq details p {
  margin: 12px 0 4px;
  font-size: var(--fs-15, 15px);
  line-height: 1.65;
  color: var(--fg-2);
}