/* Documenti pubblici: note tecniche, modelli di minaccia, scenari.
   Caricato solo dalle pagine /resources/, così le pagine già verificate non
   cambiano di una virgola. Eredita i token di site.css. */

.doc-shell{padding-bottom:96px}

/* ---------- intestazione del documento ---------- */
.doc-head{border-bottom:1px solid var(--rule);padding-bottom:34px;margin-bottom:40px}
.doc-kind{color:var(--amber);letter-spacing:.14em;text-transform:uppercase;font-size:12px}
.doc-head h1{font-family:var(--display);font-variation-settings:"wdth" 112;font-weight:660;
  font-size:clamp(30px,4.6vw,54px);line-height:1.04;letter-spacing:-.02em;margin:18px 0 12px;max-width:22ch}
.doc-sub{color:#B7C5D1;font-size:19px;line-height:1.5;max-width:60ch}

.doc-meta{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:18px 26px;
  margin-top:32px;font-size:13px}
.doc-meta div{border-top:1px solid var(--rule);padding-top:10px}
.doc-meta dt{color:var(--faint);letter-spacing:.08em;text-transform:uppercase;font-size:11px;margin-bottom:5px}
.doc-meta dd{font-family:var(--mono);font-size:12.5px;color:var(--text);word-break:break-word}

/* Marcatura di edizione: un fatto, non una decorazione di sicurezza. */
.doc-edition{display:inline-block;border:1px solid var(--rule-2);color:var(--faint);
  font-family:var(--mono);font-size:11px;letter-spacing:.12em;padding:4px 10px;margin-top:22px}

/* ---------- indice ---------- */
.doc-toc{border:1px solid var(--rule);background:var(--deck);padding:24px 26px;margin:0 0 48px}
.doc-toc h2{font-size:12px;letter-spacing:.12em;text-transform:uppercase;color:var(--faint);margin:0 0 14px}
.doc-toc ol{margin:0;padding-left:20px;columns:2;column-gap:40px}
.doc-toc li{margin:5px 0;break-inside:avoid}
.doc-toc a{color:#B7C5D1;border:0}
.doc-toc a:hover{color:var(--text)}

/* ---------- corpo ---------- */
.doc-body{max-width:74ch}
.doc-body section{margin-bottom:52px;scroll-margin-top:90px}
.doc-body h2{font-family:var(--display);font-size:clamp(22px,2.4vw,30px);font-weight:620;
  letter-spacing:-.01em;margin:0 0 16px;padding-top:8px}
.doc-body h3{font-size:17px;margin:30px 0 10px;color:var(--text)}
.doc-body h4{font-size:14px;letter-spacing:.06em;text-transform:uppercase;color:var(--faint);margin:24px 0 8px}
.doc-body p,.doc-body li{color:#B7C5D1;line-height:1.65}
.doc-body p+p{margin-top:14px}
.doc-body ul,.doc-body ol{margin:14px 0 0 22px}
.doc-body li{margin:7px 0}
.doc-body strong{color:var(--text);font-weight:600}
.doc-body code{font-family:var(--mono);font-size:13px;background:var(--deck);
  border:1px solid var(--rule);padding:2px 6px}
.doc-num{color:var(--faint);font-family:var(--mono);font-size:13px;margin-right:10px}

/* ---------- tabelle ---------- */
.doc-table{width:100%;overflow-x:auto;margin:22px 0;border:1px solid var(--rule)}
.doc-table table{width:100%;border-collapse:collapse;font-size:14px;min-width:560px}
.doc-table th{text-align:left;background:var(--deck);color:var(--faint);font-weight:600;
  letter-spacing:.06em;text-transform:uppercase;font-size:11px;padding:11px 14px;border-bottom:1px solid var(--rule)}
.doc-table td{padding:12px 14px;border-bottom:1px solid var(--rule);color:#B7C5D1;vertical-align:top}
.doc-table tr:last-child td{border-bottom:0}
.doc-table td:first-child{color:var(--text)}
.doc-table .mono{font-family:var(--mono);font-size:12.5px}

/* ---------- figure ---------- */
.doc-fig{margin:30px 0;border:1px solid var(--rule);background:var(--ink)}
.doc-fig .doc-fig-body{overflow-x:auto;padding:26px}
.doc-fig svg{width:100%;height:auto;display:block}
.doc-fig figcaption{border-top:1px solid var(--rule);padding:12px 18px;color:var(--faint);
  font-size:13px;line-height:1.5}
.doc-fig figcaption b{color:var(--text);font-weight:600;margin-right:8px}

/* ---------- riquadri ---------- */
.doc-note{border-left:2px solid var(--rule-2);padding:4px 0 4px 20px;margin:24px 0;color:#B7C5D1}
.doc-note.is-limit{border-left-color:var(--amber)}
.doc-note p{margin:0}
.doc-note p+p{margin-top:12px}

.doc-principle{border:1px solid var(--rule-2);background:var(--deck);padding:26px 28px;margin:34px 0}
.doc-principle p{margin:0;font-size:18px;line-height:1.55;color:var(--text)}

/* ---------- interfaccia di rifiuto ---------- */
.doc-deny{border:1px solid var(--rule);background:var(--ink);margin:30px 0}
.doc-deny-head{border-bottom:1px solid var(--rule);padding:16px 20px;display:flex;
  align-items:center;gap:12px;flex-wrap:wrap}
.doc-deny-head b{font-family:var(--mono);letter-spacing:.1em;color:var(--amber);font-size:14px}
.doc-deny-body{padding:18px 20px}
.doc-deny-body ul{margin:0 0 0 20px}
.doc-deny-body li{color:#B7C5D1;margin:8px 0}
.doc-deny-facts{border-top:1px solid var(--rule);padding:14px 20px;display:grid;gap:8px;
  font-family:var(--mono);font-size:12.5px;color:var(--text)}

/* ---------- storico revisioni ---------- */
.doc-rev table{font-size:13.5px}
.doc-rev td:first-child{font-family:var(--mono);font-size:12.5px;white-space:nowrap}

/* ---------- indice risorse ---------- */
.res-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(300px,1fr));gap:1px;
  background:var(--rule);border:1px solid var(--rule);margin-top:40px}
.res-card{background:var(--ink);padding:30px 28px;display:flex;flex-direction:column;gap:12px}
.res-card h2{font-family:var(--display);font-size:22px;font-weight:620;margin:0;letter-spacing:-.01em}
.res-card h2 a{color:var(--text);border:0}
.res-card p{color:#B7C5D1;margin:0;flex:1;line-height:1.6}
.res-card .doc-meta{margin-top:6px;grid-template-columns:1fr 1fr;gap:12px}
.res-links{display:flex;gap:18px;flex-wrap:wrap;font-size:13px;margin-top:6px}

@media (max-width:760px){
  .doc-toc ol{columns:1}
  .doc-meta{grid-template-columns:1fr 1fr}
}


/* Stili che prima erano in linea: la CSP del sito (style-src 'self') blocca
   ogni attributo style, quindi vanno sempre espressi come classi. */
.doc-meta dd.doc-sha{font-size:10.5px;word-break:break-all}
.res-sha{color:var(--faint);font-size:10.5px;word-break:break-all}
.doc-narrow{max-width:74ch}
.doc-after{margin-top:56px}
.doc-colophon{color:var(--faint);font-size:12px;margin-top:22px}
.doc-faint{color:var(--faint)}


/* Marchio del documento: il simbolo ufficiale Tunnel Sovereign e il wordmark,
   identici a schermo e sulla copertina del PDF. */
.doc-brand{display:flex;align-items:center;gap:10px;font-family:var(--display);font-variation-settings:"wdth" 125;
  font-weight:700;letter-spacing:.14em;font-size:13px;margin-bottom:26px;color:var(--text)}
.doc-brand img{width:28px;height:28px;border-radius:22.37%;flex:none}
.doc-related{list-style:none;margin:0 0 22px!important;border-top:1px solid var(--rule)}
.doc-related li{margin:0!important;padding:10px 0;border-bottom:1px solid var(--rule)}
.doc-related a{color:var(--text);border-bottom:1px solid var(--rule-2)}
.doc-body a{color:var(--text);border-bottom:1px solid var(--rule-2)}
.res-h{font-size:clamp(20px,2vw,24px);margin:30px 0 10px}
.doc-shell .crumb{padding-top:40px}

/* =======================================================================
   STAMPA E PDF
   I PDF nascono da queste stesse regole: Chromium applica @media print in
   page.pdf(). Nessun secondo impianto tipografico da tenere allineato.
   ======================================================================= */
@media print{
  @page{size:A4;margin:18mm 16mm 20mm}

  /* Su carta il fondo scuro è illeggibile e consuma toner senza motivo. */
  :root{--ink:#fff;--deck:#fff;--text:#111;--faint:#555;--rule:#bbb;--rule-2:#888;--amber:#8a5a00}
  html,body{background:#fff!important;color:#111!important;font-size:10pt}

  /* Cronologia del sito, navigazione e inviti all'azione non appartengono
     a un documento stampato. */
  .strip,nav[aria-label="Primary"],.foot,.doc-toc-skip,.btn,.menu,#toTop,
  canvas,.pgrid,video,.crumb,.skip{display:none!important}
  .doc-brand{color:#111!important;margin-bottom:14pt}

  main,.wrap,.doc-shell{margin:0!important;padding:0!important;max-width:none!important}
  .doc-body{max-width:none}

  a{color:#111!important;text-decoration:none;border:0!important}
  /* Un documento stampato deve restare verificabile senza lo schermo. */
  .doc-body a[href^="http"]::after{content:" (" attr(href) ")";font-size:8.5pt;color:#555;word-break:break-all}
  .doc-toc a::after{content:none!important}

  h1,h2,h3,h4{color:#111!important;break-after:avoid;page-break-after:avoid}
  p,li{color:#222!important;orphans:3;widows:3}

  .doc-head{border-bottom:1pt solid #333;padding-bottom:14pt;margin-bottom:16pt}
  .doc-head h1{font-size:26pt;margin:8pt 0 6pt}
  .doc-sub{font-size:12pt;color:#333!important}
  .doc-meta{grid-template-columns:repeat(5,1fr);margin-top:14pt;gap:8pt 14pt}
  .doc-edition{margin-top:12pt}
  .doc-toc{padding:12pt 16pt;margin:0 0 20pt}
  .doc-toc li{margin:2pt 0}
  .doc-kind{color:#8a5a00!important}
  .doc-edition{border-color:#888}
  .doc-meta div{border-top:.5pt solid #bbb}

  /* Nessun salto forzato dopo l'indice: quando non riempie il foglio lasciava
     una pagina con poche righe, e in un caso con una sola. */
  .doc-toc{border:.5pt solid #bbb;background:#fafafa;break-inside:avoid;page-break-inside:avoid}

  .doc-body section{page-break-inside:auto;margin-bottom:18pt}
  .doc-body h2{font-size:15pt;margin-bottom:8pt}
  .doc-body p+p{margin-top:8pt}
  .doc-body li{margin:3pt 0}
  .doc-table td,.doc-table td:first-child{color:#222!important;padding:5pt 8pt}
  .doc-table th{padding:5pt 8pt}
  .doc-table{margin:10pt 0}
  .doc-fig{margin:12pt 0}
  .doc-principle{margin:14pt 0;padding:12pt 16pt}
  .doc-principle p{font-size:12pt;color:#111!important}
  .doc-note{margin:12pt 0}
  .doc-deny-body li,.doc-deny-facts{color:#222!important}
  .doc-fig,.doc-deny,.doc-principle{page-break-inside:avoid;break-inside:avoid}
  .doc-table{overflow:visible}
  .doc-fig .doc-fig-body{overflow:visible;padding:10pt}
  .doc-fig svg{max-width:100%;height:auto}
  .doc-table table{min-width:0;font-size:9pt}
  .doc-table th{background:#f0f0f0;color:#333}

  .doc-deny-head b{color:#8a5a00!important}
  .doc-note.is-limit{border-left:2pt solid #8a5a00}

  /* Le tabelle lunghe ripetono l'intestazione a ogni pagina. */
  thead{display:table-header-group}
  tr{page-break-inside:avoid}

  /* Il checksum del PDF non compare nel PDF stesso: il file è generato da questa
     pagina, quindi stamparvi il proprio hash lo cambierebbe e invaliderebbe il
     valore pubblicato. Resta visibile a schermo e nel file .sha256 accanto. */
  .doc-sha, .doc-sha-row, .res-sha{display:none!important}
}