@font-face{font-family:jetbrains mono;font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/jetbrains-mono-latin-ext.woff2)format('woff2');unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:jetbrains mono;font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/jetbrains-mono-latin.woff2)format('woff2');unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:'source sans 3';font-style:normal;font-weight:200 900;font-display:swap;src:url(/fonts/source-sans-3-latin-ext.woff2)format('woff2');unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'source sans 3';font-style:normal;font-weight:200 900;font-display:swap;src:url(/fonts/source-sans-3-latin.woff2)format('woff2');unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}:root{--bg:#FAF6EF;--bg-tint:#F0E9DB;--ink:#171B3A;--ink-rgb:23, 27, 58;--paper:#F0E9DB;--paper-rgb:240, 233, 219;--accent:#C4813F;--accent-deep:#A63D28;--mono:'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace;--sans:'Source Sans 3', system-ui, sans-serif;--measure:680px;--shell:1144px}*,*::before,*::after{box-sizing:border-box}html,body{margin:0;padding:0;background:var(--bg)}body{color:var(--ink);font-family:var(--sans);overflow-x:clip}a{color:var(--accent);text-decoration:none}a:hover{color:var(--accent-deep)}::selection{background:var(--accent);color:var(--bg)}.bleed{position:relative;z-index:0}.bleed::before{content:'';position:absolute;inset:0 auto;top:0;bottom:0;left:50%;width:100vw;transform:translateX(-50%);z-index:-1}.shell{position:relative;max-width:var(--shell);margin:0 auto;padding:0 44px}.site-header{position:sticky;top:0;z-index:20;display:flex;align-items:center;justify-content:space-between;height:88px}.site-header::before{background:var(--bg);border-bottom:1px solid rgba(var(--ink-rgb),.14)}.brand{display:flex;align-items:center;gap:12px;color:var(--ink)}.brand__name{font-family:var(--mono);font-size:15px;font-weight:500;letter-spacing:-.01em}.nav{display:flex;align-items:center;gap:28px;font-family:var(--mono);font-size:12.5px;letter-spacing:.02em;white-space:nowrap}.nav__link{color:rgba(var(--ink-rgb),.66)}.nav__link[aria-current=page]{color:var(--ink);border-bottom:1px solid var(--accent);padding-bottom:3px}.nav__cta{border:1px solid var(--ink);padding:7px 14px;color:var(--ink);font:inherit;letter-spacing:inherit;white-space:nowrap}.nav__cta:disabled,.access__button:disabled{border-color:rgba(var(--ink-rgb),.18);background:rgba(var(--ink-rgb),.06);color:rgba(var(--ink-rgb),.55);cursor:not-allowed}.section{padding:72px 0}.section--tight{padding:0 0 72px}.section--tint::before{background:var(--bg-tint)}.kicker{font-family:var(--mono);font-size:12px;letter-spacing:.14em;color:rgba(var(--ink-rgb),.42);margin:0 auto 20px;max-width:var(--measure)}.measure{max-width:var(--measure);margin:0 auto}h1.title{margin:0 auto 28px;font-family:var(--mono);font-size:42px;line-height:1.14;letter-spacing:-.035em;font-weight:500;text-wrap:pretty;max-width:var(--measure)}h2.title{margin:0 auto 36px;font-family:var(--mono);font-size:34px;line-height:1.15;letter-spacing:-.03em;font-weight:500;max-width:var(--measure)}.lede{margin:0 auto;font-size:21px;line-height:1.55;color:rgba(var(--ink-rgb),.6);max-width:var(--measure);text-wrap:pretty}.prose{max-width:var(--measure);margin:0 auto;display:flex;flex-direction:column;gap:24px;font-size:17.5px;line-height:1.68;color:rgba(var(--ink-rgb),.78)}.prose>p{margin:0;text-wrap:pretty}.byline{display:flex;align-items:center;gap:14px;margin:32px 0 0;padding-bottom:16px;border-bottom:1px solid rgba(var(--ink-rgb),.14);font-family:var(--mono);font-size:11.5px;letter-spacing:.02em;color:rgba(var(--ink-rgb),.44)}.card{background:var(--ink);border:1px solid var(--ink);margin:44px auto 0;max-width:var(--measure);font-family:var(--mono)}.card__head{padding:11px 24px;border-bottom:1px solid rgba(var(--paper-rgb),.14);font-size:12px;color:var(--accent)}.card__body{padding:28px 24px 30px}.card__grid{display:grid;grid-template-columns:180px minmax(0,1fr);column-gap:32px;row-gap:14px;align-items:baseline;font-size:13.5px}.card__grid--wide{grid-template-columns:200px minmax(0,1fr);row-gap:18px;line-height:1.6}.card__label{color:var(--accent)}.card__label--muted{color:rgba(var(--paper-rgb),.45)}.card__value{color:var(--paper)}.card__value--dim{color:rgba(var(--paper-rgb),.8)}.note{margin:18px auto 0;max-width:var(--measure);font-family:var(--mono);font-size:11.5px;color:rgba(var(--ink-rgb),.44)}.note--gap{margin-bottom:40px}.subscribe{display:flex;align-items:stretch;background:var(--ink);border:1px solid var(--ink)}.subscribe__input{flex:auto;min-width:0;border:none;outline:none;background:var(--ink);color:var(--paper);padding:14px 16px;font-family:var(--mono);font-size:13.5px}.subscribe__button{border:none;border-left:1px solid rgba(var(--paper-rgb),.18);background:rgba(var(--paper-rgb),.08);color:rgba(var(--paper-rgb),.42);font-family:var(--mono);font-size:12px;letter-spacing:.06em;padding:0 18px;cursor:default;pointer-events:none;white-space:nowrap}.site-footer{display:flex;align-items:center;justify-content:space-between;height:88px;border-top:1px solid rgba(var(--ink-rgb),.14);font-family:var(--mono);font-size:12px;color:rgba(var(--ink-rgb),.5)}.site-footer .brand{gap:10px;color:rgba(var(--ink-rgb),.5)}.footer__links{display:flex;gap:26px}.footer__links a{color:rgba(var(--ink-rgb),.5)}@media(max-width:720px){.shell{padding:0 20px}.site-header{height:auto;min-height:88px;padding-top:16px;padding-bottom:16px;flex-wrap:wrap;gap:16px}h1.title{font-size:32px}h2.title{font-size:26px}.lede{font-size:18px}.prose{font-size:16.5px}.nav{flex-wrap:wrap;gap:12px 16px;font-size:11.5px}.card__grid,.card__grid--wide{grid-template-columns:1fr;row-gap:6px}.card__grid>.card__value,.card__grid--wide>.card__value,.card__grid>.card__value--dim,.card__grid--wide>.card__value--dim{margin-bottom:12px}.site-footer{height:auto;padding:24px 0;flex-direction:column;gap:16px;align-items:flex-start}}.newsletter{max-width:var(--measure);margin:0 auto;display:flex;flex-direction:column;gap:24px}.newsletter__body{display:flex;flex-direction:column;gap:24px}.newsletter__copy{margin:0;font-size:17.5px;line-height:1.68;color:rgba(var(--ink-rgb),.78);text-wrap:pretty}h2.title--tight{margin:0 0 12px;max-width:none}.arrow-link{font-family:var(--mono);font-size:13.5px;letter-spacing:.04em}.visually-hidden{position:absolute;width:1px;height:1px;margin:-1px;padding:0;overflow:hidden;clip-path:inset(50%);white-space:nowrap;border:0}@keyframes bantayPulse{0%,100%{opacity:1}50%{opacity:.25}}@keyframes bantayDash12{to{background-position-x:12px}}@keyframes bantayDash10{to{background-position-x:10px}}.sec{padding:96px 0}.sec--anchor{scroll-margin-top:88px}.sec--tint::before{background:var(--bg-tint)}.kicker--flush{margin:0 0 20px;max-width:none}.sec__grid{display:grid;grid-template-columns:minmax(0,1fr)minmax(0,1fr);gap:44px;align-items:start}.sec__grid--lead{margin-bottom:44px}.sec__grid--wide{grid-template-columns:minmax(0,1fr)minmax(0,1.2fr)}.sec__h{margin:0;font-family:var(--mono);font-size:34px;line-height:1.15;letter-spacing:-.03em;font-weight:500}.sec__body{margin:0;font-size:17px;line-height:1.6;color:rgba(var(--ink-rgb),.72);max-width:46ch;text-wrap:pretty}.sec__body--wide{max-width:48ch}.sec__note{font-family:var(--mono);font-size:11.5px;color:rgba(var(--ink-rgb),.44)}.status-badge{display:inline-flex;margin:0 0 24px;border:1px solid rgba(var(--ink-rgb),.18);background:var(--bg-tint);padding:8px 12px;font-family:var(--mono);font-size:11.5px;line-height:1.4;letter-spacing:.04em;color:rgba(var(--ink-rgb),.72)}.hero__grid{display:grid;grid-template-columns:minmax(0,.82fr)minmax(0,1.18fr);gap:40px;align-items:start}.hero__title{margin:0;font-family:var(--mono);font-size:44px;line-height:1.12;letter-spacing:-.035em;font-weight:500;text-wrap:pretty}.hero__col{display:flex;flex-direction:column;gap:24px}.hero__specs{font-family:var(--mono);font-size:10.5px;letter-spacing:0;color:rgba(var(--ink-rgb),.48);white-space:nowrap}.hero__avail{font-family:var(--mono);font-size:11.5px;color:rgba(var(--ink-rgb),.72)}.cmd{display:flex;align-items:stretch;background:var(--ink);border:1px solid var(--ink)}.cmd__code{flex:1;display:flex;align-items:center;padding:14px 16px;font-family:var(--mono);font-size:13.5px;color:var(--paper);white-space:nowrap;overflow:auto}.cmd__code--roomy{padding:16px 18px}.cmd__tag{display:flex;align-items:center;border-left:1px solid rgba(var(--paper-rgb),.18);color:rgba(var(--paper-rgb),.4);font-family:var(--mono);font-size:12px;letter-spacing:.06em;padding:0 18px;cursor:default}.diagram{position:relative;margin:72px 0 0}.diagram__panel{position:relative;background:var(--ink);border:1px solid var(--ink);padding:40px;display:flex;flex-direction:column;gap:28px}.diagram__row{display:flex;align-items:center;gap:0}.diagram__col{position:relative;min-width:0;font-family:var(--mono)}.diagram__col--src{flex:0 1 200px}.diagram__col--hub{flex:0 1 200px;align-self:center}.diagram__col--dst{flex:0 1 420px;display:flex;flex-direction:column}.diagram__stack{position:relative;display:flex;flex-direction:column;gap:10px}.rule-v{position:absolute;width:1px;background-image:linear-gradient(to bottom,rgba(var(--paper-rgb),.45) 0 6px,transparent 6px 12px);background-size:1px 12px}.rule-v--right{right:0;top:27px;bottom:27px}.rule-v--left{left:0;top:27px;bottom:94px}.link-h{height:1px;background-image:linear-gradient(to left,rgba(var(--paper-rgb),.45) 0 5px,transparent 5px 10px);background-size:10px 1px;flex:1 1 35px;min-width:35px;animation:bantayDash10 1s linear infinite}.link-in{flex:0 0 35px;height:1px;background-image:linear-gradient(to right,#7FA85C 0 5px,transparent 5px 10px);background-size:10px 1px;animation:bantayDash10 1s linear infinite}.link-in--deny{background-image:linear-gradient(to right,#A63D28 0 5px,transparent 5px 10px)}.link-in--top{margin-top:24px}.trunk{flex:auto;height:1px;min-width:16px;background-image:linear-gradient(to right,rgba(var(--paper-rgb),.45) 0 6px,transparent 6px 12px);background-size:12px 1px;animation:bantayDash12 1.2s linear infinite}.trunk-wrap{flex:auto;min-width:16px;align-self:stretch;position:relative}.trunk-wrap .trunk{position:absolute;left:0;right:0;top:50%}.node-line{display:flex;align-items:center}.node-line--top{align-items:flex-start}.node{flex:auto;min-width:0;height:54px;border:1px solid rgba(var(--paper-rgb),.28);padding:0 14px;display:flex;flex-direction:column;justify-content:center;font-size:12.5px;color:rgba(var(--paper-rgb),.86)}.node--deny{border-color:rgba(166,61,40,.75);color:#d4634a}.node--box{height:auto;padding:16px 14px}.node__name{font-size:12.5px;line-height:1.25;color:var(--paper)}.node__detail{font-size:11.5px;line-height:1.25;color:rgba(var(--paper-rgb),.5);margin-top:3px}.node__clip{line-height:1.25;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.node__sub{font-size:11px;line-height:1.25;color:rgba(var(--paper-rgb),.5);margin-top:3px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.node__sub--deny{letter-spacing:.08em;color:#a63d28}.hub{border:1px solid var(--accent);padding:16px;display:flex;align-items:center;gap:12px;white-space:nowrap;color:var(--accent)}.hub__name{font-size:13px;color:var(--paper)}.hub__detail{font-size:11.5px;color:rgba(var(--paper-rgb),.5);margin-top:5px}.egress__head{display:flex;align-items:baseline;justify-content:space-between;gap:12px;line-height:1.25}.egress__list{display:grid;grid-template-columns:13px minmax(0,1fr)auto;column-gap:10px;row-gap:7px;align-items:baseline;margin:12px 0 0 14px;font-size:11.5px}.egress__icon{display:flex;align-items:center}.egress__host{color:rgba(var(--paper-rgb),.72);min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.egress__verdict{font-size:11px;text-align:right;white-space:nowrap}.term{background:#10132e;border:1px solid var(--accent)}.term__head{display:flex;align-items:center;justify-content:space-between;padding:11px 18px;border-bottom:1px solid rgba(var(--paper-rgb),.14);font-family:var(--mono);font-size:12px}.term__title{color:var(--accent)}.term__pulse{color:rgba(var(--paper-rgb),.6);background:0 0;animation:bantayPulse 2.4s ease-in-out infinite}.term__body{padding:12px 18px 14px;display:flex;flex-direction:column;gap:8px;font-family:var(--mono);font-size:12.5px;white-space:nowrap;overflow:hidden}.term__foot{display:flex;align-items:center;justify-content:space-between;padding:10px 18px;border-top:1px solid rgba(var(--paper-rgb),.14);font-family:var(--mono);font-size:11.5px;color:rgba(var(--paper-rgb),.38)}.logrow{display:flex;gap:12px;align-items:baseline}.logrow__time{color:rgba(var(--paper-rgb),.42);flex:0 0 74px}.logrow__verdict{flex:0 0 82px;display:flex;align-items:baseline;gap:6px}.logrow__agent{color:rgba(var(--paper-rgb),.5);flex:0 0 118px}.logrow__kind{color:rgba(var(--paper-rgb),.42);flex:0 0 54px}.logrow__target{color:var(--paper);flex:0 0 200px}.logrow__note{color:rgba(var(--paper-rgb),.55);flex:auto;min-width:0;overflow:hidden;text-overflow:ellipsis}.icon{flex:none}.katok{background:var(--ink);border:1px solid var(--ink);padding:32px 40px 36px;font-family:var(--mono);font-size:14.5px;line-height:1.85}.katok__head{display:flex;align-items:baseline;justify-content:space-between;gap:24px;margin-bottom:26px}.katok__warn{color:#d9a83a}.katok__agent{font-size:12.5px;color:rgba(var(--paper-rgb),.45)}.katok__lead{color:rgba(var(--paper-rgb),.6)}.katok__cmd{color:var(--paper);padding-left:28px;margin-bottom:26px}.katok__meta{display:grid;grid-template-columns:150px minmax(0,1fr);row-gap:4px;margin-bottom:30px}.katok__key{color:rgba(var(--paper-rgb),.5)}.katok__rule{color:#d4634a;display:flex;align-items:baseline;gap:8px}.katok__val{color:var(--paper)}.katok__actions{display:flex;align-items:center;gap:10px;flex-wrap:wrap;color:rgba(var(--paper-rgb),.86)}.katok__sep{color:rgba(var(--paper-rgb),.3)}.katok__allow{color:#7fa85c}.katok__deny{color:#d4634a}.katok__always{color:var(--accent)}.katok__caret{color:var(--accent);animation:bantayPulse 1.1s steps(1)infinite}.panel{background:var(--ink);border:1px solid var(--ink)}.panel__head{padding:11px 24px;border-bottom:1px solid rgba(var(--paper-rgb),.14);font-family:var(--mono);font-size:12px;color:rgba(var(--paper-rgb),.6)}.panel__body{padding:26px 24px 30px;font-family:var(--mono);font-size:14px;line-height:1.85;color:var(--paper);overflow:auto;display:flex;flex-direction:column}.panel__line{white-space:pre}.panel__gap{height:26px}.tok-key{color:var(--accent)}.tok-str{color:#d4634a}.tok-num{color:#d9a83a}.deflist{border-top:1px solid rgba(var(--ink-rgb),.14)}.deflist__row{display:grid;grid-template-columns:160px minmax(0,1fr);gap:32px;align-items:baseline;padding:22px 0;border-bottom:1px solid rgba(var(--ink-rgb),.14)}.deflist__name{font-family:var(--mono);font-size:17px;letter-spacing:-.01em}.deflist__detail{font-size:16px;line-height:1.45;color:rgba(var(--ink-rgb),.68)}.stats{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:44px;margin-top:56px;padding-top:36px;border-top:1px solid rgba(var(--ink-rgb),.14)}.stat{display:flex;flex-direction:column;gap:10px}.stat__value{font-family:var(--mono);font-size:40px;line-height:1;letter-spacing:-.04em;color:var(--ink)}.stat__label{font-family:var(--mono);font-size:12.5px;line-height:1.5;color:rgba(var(--ink-rgb),.52)}.dash{background:var(--ink);border:1px solid var(--ink);font-family:var(--mono)}.dash__head{display:flex;align-items:baseline;justify-content:space-between;gap:24px;padding:12px 24px;border-bottom:1px solid rgba(var(--paper-rgb),.14);font-size:12px}.dash__account{color:var(--accent)}.dash__scope{color:rgba(var(--paper-rgb),.5);white-space:nowrap}.dash__totals{display:flex;flex-wrap:wrap;gap:12px 22px;padding:16px 24px;border-bottom:1px solid rgba(var(--paper-rgb),.16);font-size:12.5px;color:rgba(var(--paper-rgb),.6);white-space:nowrap}.dash__dot{color:rgba(var(--paper-rgb),.28)}.dash__split{display:grid;grid-template-columns:minmax(0,1.05fr)minmax(0,1fr);border-bottom:1px solid rgba(var(--paper-rgb),.16)}.dash__pane{padding:26px 28px 30px}.dash__pane--divided{border-right:1px solid rgba(var(--paper-rgb),.16)}.dash__label{font-size:11.5px;letter-spacing:.12em;color:rgba(var(--paper-rgb),.4);margin-bottom:26px}.dash__label--legend{color:inherit}.dash__label--tight{margin-bottom:24px}.legend-held{color:#d9a83a}.legend-blocked{color:#d4634a}.legend-sep{color:rgba(var(--paper-rgb),.4)}.bars{display:flex;align-items:flex-end;gap:5px;height:132px}.bar{flex:1;display:flex;flex-direction:column;justify-content:flex-end;gap:2px}.bar__held{background:#d9a83a}.bar__blocked{background:#a63d28}.reaches{display:flex;flex-direction:column;gap:16px}.reach{display:flex;flex-direction:column;gap:6px;min-width:0}.reach__head{display:flex;align-items:baseline;justify-content:space-between;gap:16px;font-size:12px;white-space:nowrap}.reach__count{color:rgba(var(--paper-rgb),.72)}.reach__track{height:6px;background:rgba(var(--paper-rgb),.08)}.reach__fill{display:block;height:6px}.dash__rules{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));column-gap:44px;row-gap:13px;font-size:12.5px}.dash__rule{display:flex;align-items:baseline;gap:14px}.dash__rule-name{color:rgba(var(--paper-rgb),.72);flex:auto}.dash__rule-name--muted{color:rgba(var(--paper-rgb),.35)}.dash__rule-count{display:flex;align-items:baseline;gap:7px}.dash__rule-count--muted{color:rgba(var(--paper-rgb),.35);gap:10px}.dash__rule-never{font-size:11px}.dash__source{margin-top:28px;text-align:right;font-size:11px;color:rgba(var(--paper-rgb),.35)}.qs__col{display:flex;flex-direction:column;gap:26px}.tabs{display:flex;gap:0;width:fit-content;border:1px solid rgba(var(--ink-rgb),.14);border-bottom:none}.tab{border:none;border-right:1px solid rgba(var(--ink-rgb),.14);background:0 0;color:rgba(var(--ink-rgb),.55);font-family:var(--mono);font-size:12.5px;letter-spacing:.02em;padding:12px 20px;cursor:pointer}.tab:last-child{border-right:none}.tab.is-active{background:var(--bg-tint);color:var(--ink)}.cmdlist{display:grid;grid-template-columns:200px minmax(0,1fr);row-gap:12px;align-items:baseline;font-size:15.5px;color:rgba(var(--ink-rgb),.72)}.cmdlist__code{font-family:var(--mono);font-size:13.5px;color:var(--ink)}.access{display:flex;flex-direction:column;align-items:flex-start;gap:20px}.access__button{border:1px solid var(--ink);padding:13px 24px;font-family:var(--mono);font-size:13px;line-height:1.4;letter-spacing:.04em}@media(max-width:900px){.hero__grid,.sec__grid,.sec__grid--wide{grid-template-columns:minmax(0,1fr);gap:28px}.dash__split{grid-template-columns:minmax(0,1fr)}.dash__pane--divided{border-right:none;border-bottom:1px solid rgba(var(--paper-rgb),.16)}.stats{grid-template-columns:minmax(0,1fr);gap:28px}.diagram__row{flex-direction:column;align-items:stretch;gap:20px}.diagram__col--src,.diagram__col--hub,.diagram__col--dst{flex:auto}.rule-v,.link-h,.link-in,.trunk,.trunk-wrap{display:none}.diagram__panel{padding:24px}.term__body{overflow-x:auto}.dash__rules{grid-template-columns:minmax(0,1fr)}.katok{padding:24px 20px 28px;font-size:13px}.hero__title{font-size:32px}.hero__specs{white-space:normal;line-height:1.6}.sec__h{font-size:26px}.cmdlist{grid-template-columns:minmax(0,1fr);row-gap:4px}}@media(max-width:720px){.sec--anchor{scroll-margin-top:152px}.tab{padding:12px 14px}.katok__meta{grid-template-columns:minmax(0,1fr)}}.diagram__footnote{margin-top:20px;font-family:var(--mono);font-size:11px;line-height:1.7;color:rgba(var(--ink-rgb),.44);text-wrap:pretty}.accountability__rule{margin-top:44px}@media(prefers-reduced-motion:reduce){.trunk,.link-h,.link-in,.term__pulse,.katok__caret{animation:none}}