:root{--ink: #15171b;--bg: #f4f6f9;--card: #ffffff;--line: #e2e7ee;--text: #17212f;--muted: #667389;--brand: #d40000;--accent: var(--brand);--accent-strong: #b00000;--accent-tint: #fdeceb;--warn: #a45a00;--warn-tint: #fff3df;--bad: #b3261e;--bad-tint: #fdeceb;--info: #1f5fbf;--info-tint: #e8f0fd;--ok: #1b7f4b;--ok-tint: #e3f5ea;--nav-text: #3b4556;--nav-faint: #8792a4;--nav-hover: rgba(23, 33, 47, .05);--nav-active: rgba(212, 0, 0, .07);--ring: 0 0 0 1px rgba(23, 33, 47, .08), 0 1px 2px rgba(23, 33, 47, .05);--radius: 10px;--shadow: 0 1px 2px rgba(15, 27, 45, .06);font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,sans-serif;font-size:15px;color:var(--text)}*{box-sizing:border-box}input[type=checkbox]{accent-color:var(--accent)}body{margin:0;background:var(--bg);line-height:1.45}h1,h2,h3{margin:0;line-height:1.2}h1{font-size:1.6rem;letter-spacing:-.01em}h3{font-size:1rem;margin-bottom:.75rem}h3.section{margin:1.75rem 0 .75rem}a{color:var(--text);font-weight:500;text-decoration:none}a:hover{color:var(--accent-strong);text-decoration:underline}.muted{color:var(--muted)}.small{font-size:.82rem}.mono{font-family:ui-monospace,SFMono-Regular,Menlo,monospace}.right{text-align:right;white-space:nowrap}.nowrap{white-space:nowrap}.num{text-align:right;white-space:nowrap}.warn-text{color:var(--warn)}.err-text{color:var(--bad)}.boot{min-height:100vh;display:grid;place-items:center;color:var(--muted)}.shell{display:grid;grid-template-columns:250px 1fr;min-height:100vh}.sidebar{background:var(--bg);color:var(--nav-text);border-right:1px solid var(--line);display:flex;flex-direction:column;padding:20px 14px;position:sticky;top:0;height:100vh;overflow-y:auto}.brand{display:flex;gap:10px;align-items:center;padding:0 8px 20px}.brand img,.login-brand img{border-radius:22%;display:block}.brand strong{display:block;color:var(--text);font-size:.95rem}.brand span{font-size:.75rem;color:var(--muted)}.sidebar nav{display:flex;flex-direction:column;gap:14px}.nav-group{display:flex;flex-direction:column;gap:2px}.nav-group h4{margin:0 0 4px;padding:0 12px;font-size:.68rem;font-weight:600;letter-spacing:.08em;text-transform:uppercase;color:var(--nav-faint)}.sidebar nav a{display:flex;justify-content:space-between;align-items:center;padding:8px 12px;border-radius:8px;color:var(--nav-text);font-weight:500}.sidebar nav a:hover{background:var(--nav-hover);color:var(--text);text-decoration:none}.sidebar nav a.active{background:var(--nav-active);color:var(--text);font-weight:600}.sidebar nav a:focus-visible{outline:2px solid var(--accent);outline-offset:-2px}.count{border-radius:99px;font-size:.72rem;font-weight:700;padding:1px 8px;font-variant-numeric:tabular-nums}.count.wait{background:var(--warn-tint);color:var(--warn)}.count.bad{background:var(--bad-tint);color:var(--bad)}.sidebar-foot{margin-top:auto;padding:12px 8px 0;border-top:1px solid var(--line);font-size:.82rem;display:grid;gap:10px}.connections{list-style:none;margin:0;padding:0;display:grid;gap:6px}.connections li{display:flex;justify-content:space-between;align-items:center;gap:8px}.conn-state{font-size:.72rem;font-weight:600;padding:1px 7px;border-radius:5px;white-space:nowrap}.conn-state.ro,.conn-state.sim{background:var(--warn-tint);color:var(--warn)}.conn-state.rw{background:var(--ok-tint);color:var(--ok)}.who{padding-top:10px;border-top:1px solid var(--line)}.who strong{display:block;color:var(--text);font-weight:600}.who span{color:var(--muted);word-break:break-all}.foot-actions{display:flex;gap:12px}.foot-actions button{background:none;border:0;color:var(--muted);padding:0;cursor:pointer;font:inherit}.foot-actions button:hover{color:var(--text);text-decoration:underline}.content{padding:32px 40px 64px;max-width:1200px;width:100%}.page-header{display:flex;justify-content:space-between;align-items:flex-start;gap:16px;margin-bottom:22px}.page-header .sub{margin:6px 0 0;color:var(--muted)}.page-header .actions{display:flex;gap:8px;flex-wrap:wrap}.crumb{margin:0 0 8px;font-size:.85rem}.card{background:var(--card);border:1px solid var(--line);border-radius:var(--radius);padding:18px 20px;margin-bottom:16px;box-shadow:var(--shadow)}.card.flush{padding:0;overflow-x:auto}.card.danger{border-color:#f0c4c0;background:snow}.grid-2{display:grid;grid-template-columns:1fr 1fr;gap:16px}.grid-2>.card{margin-bottom:0}.grid-2{margin-bottom:16px}.stats{display:grid;grid-template-columns:repeat(4,1fr);gap:16px;margin-bottom:16px}.stat{background:var(--card);border:1px solid var(--line);border-radius:var(--radius);padding:16px 18px;display:flex;flex-direction:column;gap:2px;color:inherit;box-shadow:var(--shadow)}a.stat:hover{text-decoration:none;border-color:var(--accent)}.stat-value{font-size:2rem;font-weight:700;letter-spacing:-.02em}.stat-label{color:var(--muted);font-size:.85rem}.stat.warn{border-color:#f0d09a;background:var(--warn-tint)}.stat.bad{border-color:#f0c4c0;background:var(--bad-tint)}.stat.bad .stat-value{color:var(--bad)}.bar{display:flex;height:12px;border-radius:99px;overflow:hidden;background:var(--line);gap:2px;margin:6px 0 14px}.seg.type-internal{background:#5b6b84}.seg.type-agency{background:#2f7be0}.seg.type-external{background:#d6892a}.seg.type-personal{background:#c9402f}.legend{list-style:none;padding:0;margin:0;display:flex;gap:18px;flex-wrap:wrap}ul.plain{list-style:none;padding:0;margin:0}ul.plain li{display:flex;justify-content:space-between;padding:8px 0;border-bottom:1px solid var(--line)}ul.plain li:last-child{border:0}.feed{list-style:none;padding:0;margin:0 0 8px;display:flex;flex-direction:column;gap:8px}.feed li{display:grid;grid-template-columns:124px 1fr;gap:10px;font-size:.9rem}.more{font-size:.85rem}.empty{border:1px dashed var(--line);border-radius:var(--radius);padding:36px;text-align:center;color:var(--muted);background:var(--card)}.loading{color:var(--muted);padding:24px 0}table{width:100%;border-collapse:collapse}td,th{text-align:left;padding:10px 14px;vertical-align:top}.card:not(.flush) td{padding-left:0;padding-right:12px;border-bottom:1px solid var(--line)}.card:not(.flush) tr:last-child td{border:0}table.rows th{font-size:.75rem;text-transform:uppercase;letter-spacing:.04em;color:var(--muted);border-bottom:1px solid var(--line);background:#fafbfc;font-weight:600}table.rows td{border-bottom:1px solid var(--line)}table.rows tr:last-child td{border-bottom:0}table.rows tbody tr:hover{background:#fafbfd}tr.dim{opacity:.55}td.detail{max-width:320px;word-break:break-word}.badge{display:inline-block;padding:2px 9px;border-radius:99px;font-size:.75rem;font-weight:600;white-space:nowrap;background:#e9edf3;color:#3b4759;margin-right:4px}.type-internal{background:#e9edf3;color:#3b4759}.type-agency{background:var(--info-tint);color:var(--info)}.type-personal{background:var(--bad-tint);color:var(--bad)}.type-external{background:var(--warn-tint);color:var(--warn)}.decision-allow,.status-active,.outcome-granted{background:var(--ok-tint);color:var(--ok)}.decision-review,.status-pending,.outcome-pending_approval{background:var(--warn-tint);color:var(--warn)}.decision-block,.status-failed,.outcome-blocked,.outcome-error,.status-rejected{background:var(--bad-tint);color:var(--bad)}.status-revoked,.status-expired,.status-offboarded,.status-suspended{background:#eceff3;color:#5a6678}.status-approved{background:var(--ok-tint);color:var(--ok)}.chips{display:flex;gap:6px;flex-wrap:wrap}.chip{font-size:.78rem;background:#eceff3;color:#3b4759;border-radius:6px;padding:2px 8px;font-weight:500}.chip.pending{background:var(--warn-tint);color:var(--warn)}input,select,textarea{font:inherit;color:inherit;background:#fff;border:1px solid #cdd5e0;border-radius:8px;padding:8px 10px;width:100%;min-width:0}input:focus-visible,select:focus-visible,textarea:focus-visible,.btn:focus-visible,button:focus-visible,a:focus-visible{outline:2px solid var(--accent);outline-offset:1px}textarea{resize:vertical}input[type=checkbox]{width:auto}td select,td input[type=date]{width:auto;padding:5px 8px}.field{display:block;margin-bottom:14px;flex:1}.field-label{display:block;font-weight:600;font-size:.85rem;margin-bottom:5px}.hint{display:block;color:var(--muted);font-size:.8rem;margin-top:4px}.form-row{display:flex;gap:14px}.check{display:flex;gap:8px;align-items:center;margin:6px 0;font-size:.92rem}.plain-fieldset{border:0;padding:0;margin:0;min-width:0}.btn{font:inherit;font-weight:600;font-size:.88rem;border-radius:8px;padding:7px 14px;border:1px solid #cdd5e0;background:#fff;color:var(--text);cursor:pointer}.btn:hover:not(:disabled){background:#f3f5f8}.btn:disabled{opacity:.5;cursor:not-allowed}.btn.primary{background:var(--accent);border-color:var(--accent);color:#fff}.btn.primary:hover:not(:disabled){background:var(--accent-strong)}.btn.danger{color:var(--bad);border-color:#efc2be}.btn.danger:hover:not(:disabled){background:var(--bad-tint)}.btn.ghost{border-color:transparent;background:none;color:var(--muted)}.btn.ghost:hover:not(:disabled){background:#eef1f5;color:var(--text)}.push-left{margin-right:auto}button.link{background:none;border:0;padding:0;color:var(--accent-strong);cursor:pointer;font:inherit;text-decoration:underline}.icon-btn{background:none;border:0;font-size:1.4rem;line-height:1;color:var(--muted);cursor:pointer;padding:4px 8px;border-radius:6px;width:auto}.icon-btn:hover:not(:disabled){background:#eef1f5;color:var(--text)}.icon-btn:disabled{opacity:.3}.filters{display:flex;gap:10px;margin-bottom:14px;flex-wrap:wrap}.filters input[type=search]{flex:1;min-width:220px}.filters select{width:auto}.pager{display:flex;justify-content:space-between;align-items:center;padding:12px 14px;border-top:1px solid var(--line);font-size:.85rem;color:var(--muted)}.tabs{display:flex;gap:4px;border-bottom:1px solid var(--line);margin-bottom:18px}.tabs button{font:inherit;font-weight:600;background:none;border:0;padding:10px 16px;cursor:pointer;color:var(--muted);border-bottom:3px solid transparent;margin-bottom:-1px}.tabs button.on{color:var(--text);border-bottom-color:var(--accent)}.section-head{display:flex;justify-content:space-between;align-items:center;flex-wrap:wrap;gap:10px}.section-head .check{margin:0}.alert{border-radius:8px;padding:10px 14px;margin-bottom:14px;font-size:.9rem}.alert.err{background:var(--bad-tint);color:var(--bad)}.alert.warn{background:var(--warn-tint);color:var(--warn)}.alert.info{background:var(--info-tint);color:var(--info)}.toasts{position:fixed;right:20px;bottom:20px;display:flex;flex-direction:column;gap:8px;z-index:100}.toast{background:var(--ink);color:#fff;border-radius:8px;padding:10px 16px;max-width:380px;box-shadow:0 6px 20px #0f1b2d40}.toast.err{background:var(--bad)}.overlay{position:fixed;inset:0;background:#0f1b2d80;display:grid;place-items:start center;padding:6vh 16px;overflow-y:auto;z-index:50}.modal{background:#fff;border-radius:12px;width:100%;max-width:520px;box-shadow:0 20px 60px #0f1b2d59}.modal.wide{max-width:760px}.modal header{display:flex;justify-content:space-between;align-items:center;padding:16px 20px;border-bottom:1px solid var(--line)}.modal h2{font-size:1.15rem}.modal-body{padding:20px}.modal-actions{display:flex;justify-content:flex-end;gap:8px;margin-top:18px}.checks{list-style:none;padding:0;margin:-4px 0 14px;display:flex;flex-direction:column;gap:6px;max-height:180px;overflow-y:auto;font-size:.88rem}.checks li{display:flex;gap:8px;align-items:center;flex-wrap:wrap}.grant-row{display:grid;grid-template-columns:1.1fr 1.4fr 1fr 130px 36px;gap:8px;margin-bottom:8px;align-items:center}.meta-row{display:flex;gap:32px;flex-wrap:wrap}.meta-row>div{display:flex;flex-direction:column;gap:4px;font-size:.9rem}.meta-label{font-size:.72rem;text-transform:uppercase;letter-spacing:.05em;color:var(--muted);font-weight:600}.inline-edit{display:flex;gap:6px}.reasons{margin:14px 0 0;padding-left:18px;color:var(--muted);font-size:.88rem}.reasons+.alert{margin-top:14px;margin-bottom:0}.approval-head{display:flex;justify-content:space-between;align-items:flex-start}.big-link{font-size:1.05rem;font-weight:600}.approval-foot{display:flex;gap:8px;margin-top:12px;padding-top:12px;border-top:1px solid var(--line)}.approval-foot input{flex:1}.role-help{list-style:none;padding:0;margin:16px 0 0;color:var(--muted);font-size:.88rem}.login{min-height:100vh;display:grid;place-items:center;padding:16px;background:linear-gradient(180deg,var(--brand) 0 38%,var(--bg) 38% 100%)}.login-card{background:#fff;border-radius:14px;padding:32px;width:100%;max-width:400px;box-shadow:0 20px 60px #0f1b2d4d;display:flex;flex-direction:column;gap:4px}.login-brand{display:flex;gap:12px;align-items:center;margin-bottom:20px}.login-brand h1{font-size:1.25rem}.login-brand p{margin:2px 0 0;color:var(--muted);font-size:.85rem}@media(max-width:900px){.shell{grid-template-columns:minmax(0,1fr)}.sidebar{position:static;height:auto;border-right:0;border-bottom:1px solid var(--line);padding:12px 12px 10px;overflow:visible}.brand{padding:0 4px 10px}.sidebar nav{flex-direction:row;gap:4px;overflow-x:auto;scrollbar-width:none}.nav-group{flex-direction:row;gap:4px}.nav-group h4,.connections{display:none}.sidebar nav a{flex:none;border-radius:99px;padding:6px 12px;gap:6px}.sidebar-foot{margin-top:10px;grid-template-columns:1fr auto;align-items:center}.who{padding-top:0;border-top:0}.content{padding:20px 16px 48px}.stats{grid-template-columns:1fr 1fr}.grid-2{grid-template-columns:1fr}.grant-row{grid-template-columns:1fr 1fr}.form-row{flex-direction:column;gap:0}}.facts{display:grid;grid-template-columns:160px 1fr;gap:8px 16px;margin:0 0 14px;font-size:.9rem}.facts dt{color:var(--muted);font-weight:600;font-size:.82rem}.facts dd{margin:0;word-break:break-all}.staff-home{min-height:100vh}.staff-bar{background:var(--bg);border-bottom:1px solid var(--line);display:flex;justify-content:space-between;align-items:center;padding:14px 40px}.staff-bar .brand{padding:0}.staff-content{padding:32px 40px 64px;max-width:1200px;margin:0 auto}.impersonation{background:var(--card);box-shadow:var(--ring);border-radius:8px;padding:10px 12px;margin:0 0 16px;display:flex;flex-direction:column;gap:2px;font-size:.72rem;color:var(--muted)}.impersonation strong{color:var(--text);font-size:.92rem}.impersonation button{align-self:flex-start;margin-top:4px;background:none;border:0;padding:0;color:var(--accent);font:inherit;font-size:.78rem;font-weight:600;cursor:pointer}.impersonation button:hover{text-decoration:underline}@media(max-width:900px){.staff-bar,.staff-content{padding-left:16px;padding-right:16px}}