/* Deep security-audit styling — extends audit.css.
   Linked into per-repo audit.html as ../_assets/audit-sec.css */

/* ---- Methodology / frameworks banner ---- */
.sec-method {
  background: linear-gradient(135deg, #0f172a 0%, #1e1b4b 100%);
  color: #e2e8f0;
  border-radius: 12px;
  padding: 24px 26px;
  margin-bottom: 20px;
}
.sec-method h2 { color: #fff; margin: 0 0 6px; }
.sec-method h2::before { background: #818cf8; }
.sec-method p { font-size: 14px; opacity: 0.9; margin: 0 0 14px; }
.sec-method .frameworks { display: flex; flex-wrap: wrap; gap: 8px; margin-bottom: 14px; }
.sec-method .fw {
  display: inline-block; padding: 4px 12px; border-radius: 999px;
  font-size: 12px; font-weight: 600;
  background: rgba(129,140,248,0.18); color: #c7d2fe; border: 1px solid rgba(129,140,248,0.3);
}
.sec-method .skills-applied {
  font-size: 12px; line-height: 1.7; color: #94a3b8;
  background: rgba(0,0,0,0.25); border-radius: 8px; padding: 12px 16px;
  font-family: "SF Mono", Menlo, monospace;
}
.sec-method .skills-applied code { background: rgba(129,140,248,0.15); color: #c7d2fe; padding: 1px 6px; border-radius: 4px; }

/* ---- Risk scorecard ---- */
.risk-scorecard {
  display: grid; grid-template-columns: 1.4fr 1fr; gap: 16px; margin-bottom: 20px;
}
@media (max-width: 760px) { .risk-scorecard { grid-template-columns: 1fr; } }
.risk-scorecard .narrative {
  background: var(--card); border: 1px solid var(--border); border-radius: 12px; padding: 22px 24px;
}
.risk-scorecard .narrative h3 { margin-top: 0; }
.risk-scorecard .narrative p { font-size: 14px; line-height: 1.6; color: #374151; }
.risk-gauge {
  border-radius: 12px; padding: 22px 24px; color: #fff; display: flex; flex-direction: column; justify-content: center;
}
.risk-gauge.critical { background: linear-gradient(135deg,#991b1b,#dc2626); }
.risk-gauge.high { background: linear-gradient(135deg,#9a3412,#ea580c); }
.risk-gauge.medium { background: linear-gradient(135deg,#854d0e,#ca8a04); }
.risk-gauge.low { background: linear-gradient(135deg,#166534,#16a34a); }
.risk-gauge .label { font-size: 12px; text-transform: uppercase; letter-spacing: 0.08em; opacity: 0.85; }
.risk-gauge .level { font-size: 34px; font-weight: 800; letter-spacing: -0.02em; line-height: 1.1; margin: 4px 0 10px; }
.risk-gauge .counts { display: flex; gap: 14px; font-size: 13px; }
.risk-gauge .counts b { font-size: 20px; display: block; }

/* ---- OWASP coverage matrix ---- */
.owasp-matrix { width: 100%; border-collapse: collapse; font-size: 13px; }
.owasp-matrix th, .owasp-matrix td { padding: 9px 12px; border-bottom: 1px solid var(--border); text-align: left; vertical-align: top; }
.owasp-matrix th { background: #f9fafb; font-size: 11px; text-transform: uppercase; letter-spacing: 0.04em; color: var(--muted); }
.owasp-matrix .cat { font-weight: 700; white-space: nowrap; }
.cov { display: inline-block; padding: 2px 9px; border-radius: 999px; font-size: 11px; font-weight: 700; }
.cov.vuln { background: #fee2e2; color: #991b1b; }
.cov.partial { background: #fef3c7; color: #92400e; }
.cov.clean { background: #dcfce7; color: #166534; }
.cov.na { background: #f3f4f6; color: #6b7280; }

/* ---- Detailed finding cards ---- */
.sec-finding {
  border: 1px solid var(--border); border-left-width: 5px; border-radius: 10px;
  padding: 18px 20px; margin-bottom: 16px; background: #fff;
}
.sec-finding.p0 { border-left-color: var(--p0); }
.sec-finding.p1 { border-left-color: var(--p1); }
.sec-finding.p2 { border-left-color: var(--p2); }
.sec-finding.p3 { border-left-color: var(--p3); }
.sec-finding .fhead { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; margin-bottom: 4px; }
.sec-finding .fid { font-family: "SF Mono", Menlo, monospace; font-size: 12px; color: var(--muted); font-weight: 600; }
.sec-finding h4 { margin: 0; font-size: 16px; font-weight: 700; flex: 1 1 auto; }
.sec-finding .tags { display: flex; flex-wrap: wrap; gap: 6px; margin: 8px 0 12px; }
.tag {
  display: inline-flex; align-items: center; gap: 4px;
  padding: 2px 9px; border-radius: 6px; font-size: 11px; font-weight: 600; font-family: "SF Mono", Menlo, monospace;
}
.tag.sev-p0 { background: var(--p0); color: #fff; }
.tag.sev-p1 { background: var(--p1); color: #fff; }
.tag.sev-p2 { background: var(--p2); color: #fff; }
.tag.sev-p3 { background: var(--p3); color: #fff; }
.tag.owasp { background: #ede9fe; color: #5b21b6; }
.tag.cwe { background: #e0f2fe; color: #075985; }
.tag.cvss { background: #1e293b; color: #e2e8f0; }
.tag.cvss.crit { background: #7f1d1d; color: #fecaca; }
.tag.cvss.high { background: #9a3412; color: #fed7aa; }
.tag.cvss.med { background: #854d0e; color: #fde68a; }
.tag.cvss.low { background: #166534; color: #bbf7d0; }
.tag.epss { background: #fdf2f8; color: #9d174d; }
.tag.conf { background: #f1f5f9; color: #475569; }
.tag.conf.confirmed { background: #dcfce7; color: #166534; }
.tag.conf.likely { background: #fef3c7; color: #92400e; }
.tag.conf.theoretical { background: #f3f4f6; color: #6b7280; }

.sec-finding .block { margin: 10px 0; }
.sec-finding .block .blabel {
  font-size: 10px; text-transform: uppercase; letter-spacing: 0.06em; font-weight: 700; color: var(--muted);
  margin-bottom: 4px; display: flex; align-items: center; gap: 6px;
}
.sec-finding .block p { margin: 0; font-size: 14px; line-height: 1.55; color: #1f2937; }
.sec-finding .evidence {
  background: #0f172a; color: #e2e8f0; border-radius: 8px; padding: 12px 14px;
  font-family: "SF Mono", Menlo, monospace; font-size: 12.5px; line-height: 1.55; overflow-x: auto; white-space: pre-wrap;
}
.sec-finding .evidence .loc { color: #fcd34d; }
.sec-finding .attack {
  background: #fef2f2; border: 1px dashed #fca5a5; border-radius: 8px; padding: 12px 14px; font-size: 13.5px; color: #7f1d1d; line-height: 1.55;
}
.sec-finding .remediation {
  background: #f0fdf4; border: 1px solid #bbf7d0; border-radius: 8px; padding: 12px 14px; font-size: 13.5px; color: #14532d; line-height: 1.55;
}
.sec-finding .remediation code, .sec-finding .attack code { background: rgba(0,0,0,0.06); padding: 1px 5px; border-radius: 4px; }

/* ---- Severity legend / filter ---- */
.sev-legend { display: flex; gap: 8px; flex-wrap: wrap; margin-bottom: 16px; }
.sev-legend .lg { font-size: 12px; padding: 4px 12px; border-radius: 999px; font-weight: 600; }
.sev-legend .lg.p0 { background: #fee2e2; color: #991b1b; }
.sev-legend .lg.p1 { background: #ffedd5; color: #9a3412; }
.sev-legend .lg.p2 { background: #fef9c3; color: #854d0e; }
.sev-legend .lg.p3 { background: #dcfce7; color: #166534; }

/* ---- Remediation roadmap ---- */
.roadmap { counter-reset: step; }
.roadmap .phase { display: flex; gap: 14px; padding: 14px 0; border-bottom: 1px solid var(--border); }
.roadmap .phase:last-child { border-bottom: 0; }
.roadmap .phase .when {
  flex: 0 0 120px; font-size: 12px; font-weight: 700; color: var(--accent); text-transform: uppercase; letter-spacing: 0.04em; padding-top: 2px;
}
.roadmap .phase .what { font-size: 14px; line-height: 1.55; }
.roadmap .phase .what ul { margin: 6px 0 0; padding-left: 18px; }
.roadmap .phase .what li { margin-bottom: 4px; }