:root{
  --bg:#FFFFFF; --ink:#1A1F2B; --muted:#5E6675; --line:#E3E6EB; --soft:#F5F6F8;
  --head:#1C2B4A; --head-ink:#FFFFFF; --hover:#FFF4C2; --open:#FFF9DF; --focus:#2F6FDB;
  --exp-bg:#E6EEFC; --exp:#1F4FA8; --des-bg:#FCE8E6; --des:#A8261B; --both-bg:#F1E7F8; --both:#6B3597;
  --hi:#B42318; --med:#B25E09; --lo:#6B7280;
  --font:"IBM Plex Sans",system-ui,-apple-system,"Segoe UI",sans-serif;
  box-sizing:border-box;
  padding-top:env(safe-area-inset-top,0px); padding-bottom:env(safe-area-inset-bottom,0px);
}
@media (prefers-color-scheme:dark){:root:not([data-theme="light"]){
  --bg:#12161F; --ink:#E7EAF0; --muted:#98A1B0; --line:#262D3A; --soft:#191E29;
  --head:#243556; --head-ink:#F2F5FA; --hover:#3A3314; --open:#2C2812; --focus:#7AA7F5;
  --exp-bg:#1C2A45; --exp:#9DBBF3; --des-bg:#3A1D1A; --des:#F2A097; --both-bg:#2D2138; --both:#CFA8EC;
  --hi:#F28B82; --med:#F2B45E; --lo:#9CA3AF;}}
:root[data-theme="dark"]{
  --bg:#12161F; --ink:#E7EAF0; --muted:#98A1B0; --line:#262D3A; --soft:#191E29;
  --head:#243556; --head-ink:#F2F5FA; --hover:#3A3314; --open:#2C2812; --focus:#7AA7F5;
  --exp-bg:#1C2A45; --exp:#9DBBF3; --des-bg:#3A1D1A; --des:#F2A097; --both-bg:#2D2138; --both:#CFA8EC;
  --hi:#F28B82; --med:#F2B45E; --lo:#9CA3AF;}
*,*::before,*::after{box-sizing:inherit}
html{scroll-padding-top:env(safe-area-inset-top,0px)}
body{margin:0;background:var(--bg);color:var(--ink);font:15px/1.45 var(--font);-webkit-font-smoothing:antialiased}
a{color:inherit}
:focus-visible{outline:2px solid var(--focus);outline-offset:1px;border-radius:2px}
.wrap{max-width:1440px;margin:0 auto;padding:0 20px}
.top{border-bottom:1px solid var(--line)}
.top-in{display:flex;justify-content:space-between;align-items:center;height:52px}
.brand{font-weight:700;font-size:1.02rem;text-decoration:none;letter-spacing:-.01em}
.top nav{display:flex;gap:20px;font-size:.9rem}
.top nav a,.linkbtn{color:var(--muted);text-decoration:none;background:none;border:0;font:inherit;cursor:pointer;padding:0}
.top nav a:hover,.linkbtn:hover{color:var(--ink);text-decoration:underline}
.draft{font-size:.84rem;color:var(--med);margin:12px 0 0}

.stats{display:flex;flex-wrap:wrap;gap:6px 32px;margin:16px 0 14px}
.stats div{display:flex;flex-direction:column}
.stats dt{font-size:.8rem;color:var(--muted);order:2}
.stats dd{margin:0;font-weight:700;font-size:1.35rem;font-variant-numeric:tabular-nums;letter-spacing:-.01em}

.toolbar{display:flex;flex-wrap:wrap;gap:8px;align-items:center}
.search{flex:0 1 320px;min-width:200px;font:inherit;color:inherit;background:var(--bg);border:1px solid var(--line);border-radius:6px;padding:7px 11px}
.search:focus{border-color:var(--focus);outline:none;box-shadow:0 0 0 2px color-mix(in srgb,var(--focus) 25%,transparent)}
.filters{display:flex;flex-wrap:wrap;gap:6px}
.dd{position:relative}
.dd summary{list-style:none;cursor:pointer;font-size:.88rem;border:1px solid var(--line);border-radius:6px;padding:6px 10px;background:var(--bg);white-space:nowrap;user-select:none}
.dd summary::-webkit-details-marker{display:none}
.dd summary::after{content:"";display:inline-block;width:6px;height:6px;border-right:1.5px solid currentColor;border-bottom:1.5px solid currentColor;transform:rotate(45deg) translateY(-2px);margin-left:8px;opacity:.6}
.dd summary:hover,.dd[open] summary{border-color:var(--ink)}
.dd.active summary{background:var(--head);color:var(--head-ink);border-color:var(--head)}
.dd .badge{margin-left:6px;font-variant-numeric:tabular-nums}
.menu{position:absolute;z-index:20;top:calc(100% + 4px);left:0;min-width:230px;max-height:320px;overflow:auto;background:var(--bg);border:1px solid var(--line);border-radius:8px;box-shadow:0 8px 24px rgba(15,23,42,.14);padding:6px}
.menu label{display:flex;align-items:center;gap:8px;padding:5px 8px;border-radius:4px;cursor:pointer;font-size:.88rem}
.menu label:hover{background:var(--soft)}
.menu label.zero{color:var(--muted);opacity:.55}
.menu .n{margin-left:auto;color:var(--muted);font-variant-numeric:tabular-nums;padding-left:12px}
.menu input{accent-color:var(--head);margin:0}
.status-row{display:flex;flex-wrap:wrap;align-items:center;gap:8px 12px;margin:12px 0 10px;min-height:28px}
.count{font-size:.88rem;color:var(--muted);font-variant-numeric:tabular-nums}
.chips{display:flex;flex-wrap:wrap;gap:6px}
.chip{font:inherit;font-size:.8rem;color:var(--ink);background:var(--soft);border:1px solid var(--line);border-radius:999px;padding:2px 9px;cursor:pointer}
.chip:hover{border-color:var(--ink)}
.chip.clear{background:none;border-color:transparent;text-decoration:underline;color:var(--muted)}

.wrap-wide{max-width:1440px;margin:0 auto;padding:0 20px}
.tablewrap{overflow-x:auto;-webkit-overflow-scrolling:touch}
table{width:100%;border-collapse:separate;border-spacing:0;font-size:.88rem}
thead th{position:sticky;top:0;z-index:5;background:var(--head);color:var(--head-ink);text-align:left;font-weight:600;padding:0;white-space:nowrap}
thead th:first-child{border-top-left-radius:6px}thead th:last-child{border-top-right-radius:6px}
th button{font:inherit;color:inherit;background:none;border:0;padding:9px 10px;cursor:pointer;width:100%;text-align:left}
th[aria-sort="ascending"] button[data-sort]::after{content:" ▲";font-size:.7em}
th[aria-sort="descending"] button[data-sort]::after{content:" ▼";font-size:.7em}
th.num,td.num{text-align:right}
th.num button{text-align:right}
td{padding:8px 10px;border-bottom:1px solid var(--line);vertical-align:top;background:var(--bg)}
tr.row{cursor:pointer}
tr.row:hover td{background:var(--hover)}
tr.row[aria-expanded="true"] td{background:var(--open);border-bottom-color:transparent}
td.org,th.org{position:sticky;left:0;z-index:2}
thead th.org{z-index:6}
td.org{font-weight:600;min-width:150px;max-width:190px;box-shadow:1px 0 0 var(--line)}
td.date{white-space:nowrap;font-variant-numeric:tabular-nums;color:var(--muted)}
td.what{min-width:260px;max-width:400px}
td.vendor{white-space:nowrap}
.vendor-cell{display:inline-flex;align-items:center;gap:7px}
.vlogo{width:18px;height:18px;flex:0 0 18px;border-radius:4px;object-fit:contain}
.vlogo.mono{display:inline-grid;place-items:center;background:var(--soft);border:1px solid var(--line);font-size:.66rem;font-weight:700;color:var(--muted);letter-spacing:-.02em}
.vlogo.blank{border:1px dashed var(--line)}
td.surface{min-width:96px}
td.role{min-width:110px;max-width:150px}
td.num{font-variant-numeric:tabular-nums;white-space:nowrap}
td.src a{color:var(--muted);text-decoration:underline;text-decoration-color:var(--line);white-space:nowrap}
td.src a:hover{color:var(--ink)}
.none{color:var(--muted)}
.pill{display:inline-block;font-size:.78rem;font-weight:600;border-radius:4px;padding:1px 7px;white-space:nowrap}
.pill.exposure{background:var(--exp-bg);color:var(--exp)}
.pill.destruction{background:var(--des-bg);color:var(--des)}
.pill.both{background:var(--both-bg);color:var(--both)}
.sev{font-weight:600;white-space:nowrap}
.sev::before{content:"";display:inline-block;width:8px;height:8px;border-radius:50%;margin-right:6px;background:currentColor;vertical-align:1px}
.sev.high{color:var(--hi)}.sev.medium{color:var(--med)}.sev.low{color:var(--lo)}
tr.detail td{background:var(--open);padding:2px 10px 18px}
tr.detail td>div{position:sticky;left:10px;max-width:min(1100px,calc(100vw - 60px))}
.detail-grid{display:grid;grid-template-columns:minmax(0,1.4fr) minmax(0,1fr);gap:28px}
.detail p{margin:0 0 10px;max-width:70ch;font-size:.92rem}
.detail dl{display:grid;grid-template-columns:max-content 1fr;gap:3px 14px;margin:0;font-size:.85rem}
.detail dt{color:var(--muted)}
.detail dd{margin:0}
.detail ol{margin:0;padding-left:20px;font-size:.85rem}
.detail ol a{word-break:break-word}
.note{font-size:.82rem;color:var(--med);margin-top:10px}
.empty{padding:36px 10px;color:var(--muted);text-align:left}
.method{max-width:72ch;margin:36px 0 64px;font-size:.9rem;color:var(--muted)}
.method h2{font-size:1rem;color:var(--ink);margin:0 0 6px}

@media (max-width:760px){
  .wrap,.wrap-wide{padding:0 12px}
  .stats{flex-wrap:nowrap;overflow-x:auto;gap:22px;margin:12px 0;padding-bottom:4px}
  .stats div{flex:0 0 auto}.stats dd{font-size:1.1rem}
  .filters{flex-wrap:nowrap;overflow-x:auto;padding-bottom:4px;width:100%}
  .top nav a[href="#method"]{display:none}
  .search{flex:1 1 100%}
  .menu{position:fixed;left:12px;right:12px;top:auto;bottom:calc(12px + env(safe-area-inset-bottom,0px));max-height:60vh}
  .detail-grid{grid-template-columns:1fr;gap:12px}
  td.org{min-width:120px;max-width:140px}
  td.what{min-width:240px}
}
@media (prefers-reduced-motion:reduce){*{transition:none!important}}
.brand .tag{font-weight:400;color:var(--muted);font-size:.85rem;margin-left:10px;letter-spacing:0}
@media (max-width:520px){.brand .tag{display:none}}

/* ---- vendor tally bar */
.stats{align-items:stretch}
.stats .vtile{cursor:pointer;border:1px solid var(--line);border-radius:8px;padding:6px 12px 5px;background:var(--bg);font:inherit;color:inherit;text-align:left;display:flex;flex-direction:column}
.stats .vtile:hover{border-color:var(--ink)}
.stats .vtile[aria-pressed="true"]{background:var(--head);color:var(--head-ink);border-color:var(--head)}
.stats .vtile[aria-pressed="true"] .vname{color:var(--head-ink)}
.stats .vtile .vnum{font-weight:700;font-size:1.35rem;font-variant-numeric:tabular-nums;line-height:1.2}
.stats .vtile .vname{font-size:.8rem;color:var(--muted);display:inline-flex;align-items:center;gap:6px}
.stats .total{padding:6px 16px 5px 0;display:flex;flex-direction:column;justify-content:center}
.stats-note{font-size:.78rem;color:var(--muted);margin:-6px 0 14px}

/* ---- column header filters */
thead th .th-in{display:flex;align-items:center}
thead th .th-in button[data-sort]{flex:1 1 auto;padding-right:4px}
.fbtn{flex:0 0 auto;background:none;border:0;color:var(--head-ink);opacity:.55;cursor:pointer;padding:6px 8px 6px 2px;display:inline-flex;align-items:center;gap:3px;font:inherit;font-size:.75rem}
.fbtn:hover,.fbtn[aria-expanded="true"]{opacity:1}
.fbtn.on{opacity:1;color:#FFD84D}
.fbtn svg{width:12px;height:12px}
.pop{position:fixed;z-index:50;min-width:220px;max-width:min(320px,calc(100vw - 24px));max-height:min(360px,60vh);overflow:auto;background:var(--bg);color:var(--ink);border:1px solid var(--line);border-radius:8px;box-shadow:0 10px 28px rgba(15,23,42,.18);padding:6px}
.pop .pop-h{display:flex;justify-content:space-between;align-items:center;padding:4px 8px 6px;font-size:.8rem;color:var(--muted)}
.pop .pop-h button{background:none;border:0;color:var(--muted);text-decoration:underline;cursor:pointer;font:inherit}
.pop label{display:flex;align-items:center;gap:8px;padding:5px 8px;border-radius:4px;cursor:pointer;font-size:.88rem}
.pop label:hover{background:var(--soft)}
.pop label.zero{color:var(--muted);opacity:.55}
.pop .n{margin-left:auto;color:var(--muted);font-variant-numeric:tabular-nums;padding-left:12px}
.pop input{accent-color:var(--head);margin:0}
thead th .th-in button{width:auto}
thead th .th-in button[data-sort],thead th .th-in button[disabled]{flex:1 1 auto;min-width:0}
td.what{min-width:230px;max-width:340px}
.fbtn{padding:6px 6px 6px 0}
th button{padding:9px 8px}
td{padding:8px 8px}
td.src a{display:inline-block;max-width:130px;overflow:hidden;text-overflow:ellipsis;vertical-align:top}
.pill.both{white-space:normal;max-width:110px}

/* ---- how it happened: family pills */
:root{--f1-bg:#FDEBD3;--f1:#8F4300;--f2-bg:#DDF2EE;--f2:#0B6358;--f3-bg:#FBE3EF;--f3:#961A55;--f4-bg:#E4F2E0;--f4:#2C6526;--f5-bg:#F1ECD9;--f5:#6A5510;--f6-bg:#ECEEF1;--f6:#5E6675}
@media (prefers-color-scheme:dark){:root:not([data-theme="light"]){--f1-bg:#3A2A14;--f1:#F4B870;--f2-bg:#123430;--f2:#7FD6C9;--f3-bg:#3A1A2A;--f3:#F3A0C8;--f4-bg:#1B3219;--f4:#9AD68F;--f5-bg:#33301C;--f5:#E0CD83;--f6-bg:#262D3A;--f6:#A5AEBB}}
:root[data-theme="dark"]{--f1-bg:#3A2A14;--f1:#F4B870;--f2-bg:#123430;--f2:#7FD6C9;--f3-bg:#3A1A2A;--f3:#F3A0C8;--f4-bg:#1B3219;--f4:#9AD68F;--f5-bg:#33301C;--f5:#E0CD83;--f6-bg:#262D3A;--f6:#A5AEBB}
.pill.fam-agent_misbehaviour{background:var(--f1-bg);color:var(--f1)}
.pill.fam-manipulated_ai{background:var(--f2-bg);color:var(--f2)}
.pill.fam-ai_run_attack{background:var(--f3-bg);color:var(--f3)}
.pill.fam-leaky_ai_product{background:var(--f4-bg);color:var(--f4)}
.pill.fam-supply_chain_access{background:var(--f5-bg);color:var(--f5)}
.pill.fam-unknown{background:var(--f6-bg);color:var(--f6)}
td.how{min-width:150px}
td.how .mech{display:block;font-size:.78rem;color:var(--muted);margin-top:3px;white-space:nowrap}
td.how{min-width:0;max-width:150px}
td.how .mech{white-space:normal}
td.what{min-width:210px;max-width:320px}
td.src a{max-width:105px}
td.org{min-width:130px;max-width:160px}
td.surface{min-width:84px}
td.role{min-width:90px;max-width:120px}
.brand-h{margin:0;font-size:inherit;font-weight:inherit}
.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}
.lede{margin:14px 0 2px;max-width:75ch;color:var(--ink);font-size:.95rem}
a.tlink{text-decoration:none}
a.tlink:hover{text-decoration:underline}
/* static sub-pages */
.page{max-width:900px;margin:0 auto;padding:0 20px 64px}
.page h1{font-size:1.6rem;line-height:1.25;letter-spacing:-.015em;margin:28px 0 8px}
.page .meta{color:var(--muted);font-size:.9rem;margin:0 0 18px}
.page .summary{font-size:1.02rem;max-width:70ch}
.page dl.facts{display:grid;grid-template-columns:max-content 1fr;gap:6px 18px;margin:22px 0;font-size:.92rem}
.page dl.facts dt{color:var(--muted)}.page dl.facts dd{margin:0}
.page h2{font-size:1.05rem;margin:28px 0 8px}
.page ol,.page ul{padding-left:20px}.page li{margin:4px 0}
.page .crumbs{font-size:.85rem;color:var(--muted);margin-top:18px}
.page .crumbs a{color:var(--muted)}
.page table{font-size:.9rem}.page td{vertical-align:top}
.page .navlinks{display:flex;flex-wrap:wrap;gap:8px 16px;font-size:.9rem;margin:18px 0}
.stats .tnum{font-weight:700;font-size:1.35rem;font-variant-numeric:tabular-nums;letter-spacing:-.01em}
.stats .tlabel{font-size:.8rem;color:var(--muted)}
a.vtile{text-decoration:none}
.browse{margin:32px 0 0;font-size:.9rem}.browse h2{font-size:1rem;margin:0 0 6px}
.browse .navlinks{display:flex;flex-wrap:wrap;gap:6px 14px;margin:6px 0;color:var(--muted)}
td.vendor .prod{display:block;font-size:.78rem;color:var(--muted);margin-top:3px;white-space:normal;max-width:150px}
.ostag{display:inline-block;margin-left:5px;font-size:.68rem;font-weight:600;border:1px solid var(--line);border-radius:3px;padding:0 4px;color:var(--muted);vertical-align:1px}
.prod .ostag:first-child{margin-left:0}
td.how .pill{white-space:normal}
td.what{max-width:300px}