@font-face{font-family:"Source Sans 3";font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/source-sans-3-latin.woff2)format("woff2");unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:"Source Sans 3";font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/source-sans-3-latin-ext.woff2)format("woff2");unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:"Source Sans 3";font-style:italic;font-weight:400;font-display:swap;src:url(/fonts/source-sans-3-italic-latin.woff2)format("woff2");unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:"Source Sans 3";font-style:italic;font-weight:400;font-display:swap;src:url(/fonts/source-sans-3-italic-latin-ext.woff2)format("woff2");unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:"Source Serif 4";font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/source-serif-4-latin.woff2)format("woff2");unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:"Source Serif 4";font-style:normal;font-weight:400 700;font-display:swap;src:url(/fonts/source-serif-4-latin-ext.woff2)format("woff2");unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:IBM Plex Mono;font-style:normal;font-weight:400;font-display:swap;src:url(/fonts/ibm-plex-mono-400-latin.woff2)format("woff2");unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:IBM Plex Mono;font-style:normal;font-weight:400;font-display:swap;src:url(/fonts/ibm-plex-mono-400-latin-ext.woff2)format("woff2");unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:IBM Plex Mono;font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/ibm-plex-mono-500-latin.woff2)format("woff2");unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:IBM Plex Mono;font-style:normal;font-weight:500;font-display:swap;src:url(/fonts/ibm-plex-mono-500-latin-ext.woff2)format("woff2");unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}:root{color-scheme:light;--paper:#fafaf9;--ink:#292524;--text:#57534e;--muted:#736e68;--line:#e7e5e4;color:var(--text);background:var(--paper);-webkit-font-smoothing:antialiased;font-family:"Source Sans 3",system-ui,sans-serif;font-size:16px;line-height:1.7}*,:before,:after{box-sizing:border-box}body{margin:0}::selection{color:var(--ink);background:#e7e5e4}a{color:var(--ink);text-underline-offset:.2em;text-decoration-thickness:1px}a:hover{text-decoration-color:var(--ink)}a,button{-webkit-tap-highlight-color:#e7e5e4}:focus-visible{outline:2px solid var(--ink);outline-offset:4px}button{font:inherit}[hidden]{display:none!important}img,svg{max-width:100%;height:auto}p{margin:0 0 1rem}h1,h2,h3,h4{color:var(--ink);margin:0 0 1rem;line-height:1.35}h1,h3{font-family:"Source Serif 4",Georgia,serif;font-weight:600}h1{letter-spacing:-.025em;font-size:clamp(1.85rem,4vw,2.65rem)}h2{letter-spacing:.07em;text-transform:uppercase;font-size:.8rem;font-weight:600}h3{font-size:1.16rem}h4{font-size:1rem}main,.site-header,.site-footer{width:min(100%,51rem);margin-inline:auto;padding-inline:1.5rem}main{min-height:55vh}main:focus{outline:none}main>section{margin-bottom:3.5rem}section>h2{margin-bottom:1.5rem}.site-header{border-bottom:1px solid var(--line);flex-wrap:wrap;align-items:center;gap:1.3rem;padding-block:1.25rem;display:flex}.brand{white-space:nowrap;font-family:"Source Serif 4",Georgia,serif;font-size:.95rem;font-weight:600;text-decoration:none}.site-header nav{flex-wrap:wrap;gap:.5rem 1.1rem;margin-left:auto;display:flex}.site-header nav a,.lang-link{color:var(--muted);font-size:.76rem;text-decoration:none}.site-header nav a[aria-current],.site-header nav a:hover{color:var(--ink);text-decoration:underline}.lang-link{font-size:.72rem}.skip-link{background:var(--ink);color:#fff;z-index:10;padding:.7rem 1rem;position:absolute;top:-10rem;left:1rem}.skip-link:focus{top:.5rem}.hero{padding-top:4rem;padding-bottom:.5rem}.hero h1{max-width:38rem}.eyebrow{text-transform:uppercase;letter-spacing:.09em;color:var(--muted);margin-bottom:1rem;font:.74rem IBM Plex Mono,monospace}.lead{max-width:42rem;font-size:1.1rem}.text-links{flex-wrap:wrap;gap:.5rem 1.5rem;margin-top:1.25rem;font-size:.9rem;display:flex}.page-heading{margin:3.5rem 0 2.5rem}.page-heading h1{margin-bottom:1rem}.section-intro{justify-content:space-between;align-items:baseline;gap:1rem;display:flex}.section-intro>a{font-size:.8rem}.post-list{margin:0;padding:0;list-style:none}.post-list>li{border-top:1px solid var(--line);grid-template-columns:6rem minmax(0,1fr);gap:1rem;padding:1.3rem 0;display:grid}.post-list time{color:var(--muted);padding-top:.15rem;font-size:.78rem}.post-list h2{text-transform:none;letter-spacing:0;margin-bottom:.5rem;font-family:"Source Serif 4",Georgia,serif;font-size:1.1rem;font-weight:600;line-height:1.4}.post-list h2 a{text-decoration:none}.post-list h2 a:hover{text-decoration:underline}.post-list p{margin-bottom:.45rem;font-size:.94rem}.focus-grid{grid-template-columns:1fr 1fr;gap:1.5rem 2rem;display:grid}.focus-grid p{font-size:.94rem}.research-list>article{border-bottom:1px solid var(--line);padding:1.5rem 0}.research-list>article:first-child{padding-top:.5rem}dl{margin:1rem 0}dt{color:var(--muted);margin:.75rem 0 .25rem;font-size:.78rem}dd{margin:0}.muted,figcaption{color:var(--muted);font-size:.88rem}.table-wrap{overflow-x:auto}table{border-collapse:collapse;text-align:left;width:100%}caption{text-align:left;color:var(--muted);margin-bottom:1rem;font-size:.82rem}th{color:var(--muted);font-size:.76rem;font-weight:500}td,th{vertical-align:top;border-bottom:1px solid var(--line);padding:.85rem .7rem}td:first-child,th:first-child{padding-left:0}td:last-child,th:last-child{padding-right:0}.disclosures{font-size:.92rem}.disclosures td:first-child{width:10.5rem}.cve-link{white-space:nowrap;font:.76rem IBM Plex Mono,monospace}.package-name,.disclosures small{color:var(--muted);margin-top:.3rem;font-size:.78rem;display:block}.severity{color:var(--text);font-size:.73rem;font-weight:600;line-height:1.4;display:inline-block}.severity-critical{color:var(--ink)}.severity-high{color:#8a3636}.severity-medium{color:#765315}.timeline{margin:2rem 0}.timeline ul{border-left:1px solid var(--line);margin:0;padding-left:1.25rem;list-style:none}.timeline li{margin-bottom:1.75rem}.timeline p,.timeline h4{margin-bottom:.3rem}.contacts{overflow-wrap:anywhere;grid-template-columns:1fr 1fr;gap:.75rem 1.5rem;display:grid}.article-heading h1{font-size:clamp(1.65rem,3vw,2.2rem)}.back-link{margin-bottom:1.7rem;font-size:.85rem;display:inline-block}.article-meta{color:var(--muted);flex-wrap:wrap;align-items:baseline;gap:.5rem 1rem;font-size:.8rem;display:flex}.prose{overflow-wrap:anywhere;font-size:1.04rem;line-height:1.8}.prose h2{margin:2.5rem 0 1rem;font-size:.82rem}.prose h3{margin-top:2rem}.prose ul,.prose ol{padding-left:1.5rem}.prose li{margin-bottom:.4rem}.prose strong{color:var(--ink)}.prose blockquote{border-left:2px solid var(--line);margin-left:0;padding-left:1.25rem}.prose img{margin-block:1.5rem;display:block}.prose table{margin-block:1.5rem;font-size:.87rem;line-height:1.65;display:block;overflow-x:auto}.prose table td:first-child{color:var(--muted)}code,pre{font-family:IBM Plex Mono,monospace}code{background:#f0eeeb;padding:.1em .25em;font-size:.84em}pre{border:1px solid var(--line);background:#f5f5f4;margin-block:1.5rem;padding:1.1rem;font-size:.82rem;line-height:1.65;overflow-x:auto}pre code{font-size:inherit;white-space:pre;background:0 0;padding:0}.prose figure{margin:1.5rem 0}.prose .architecture-flow{flex-wrap:wrap;gap:.6rem;padding:0;list-style:none;display:flex}.architecture-flow li{border:1px solid var(--line);padding:.75rem;font-size:.85rem}.architecture-flow li:not(:last-child):after{content:" →"}.blog-filters{flex-wrap:wrap;gap:.5rem 1rem;margin:1.5rem 0;display:flex}.blog-filters button{color:var(--muted);cursor:pointer;background:0 0;border:0;border-bottom:1px solid #0000;padding:.35rem 0;font-size:.85rem}.blog-filters button[aria-pressed=true]{color:var(--ink);border-bottom-color:currentColor}.site-footer{border-top:1px solid var(--line);flex-wrap:wrap;justify-content:space-between;gap:.5rem 1rem;margin-top:5rem;padding-block:1.75rem 2.5rem;font-size:.8rem;display:flex}.site-footer p{margin:0}.footer-links{flex-wrap:wrap;gap:1rem;display:flex}.pgp{overflow-wrap:anywhere;color:var(--muted);flex-basis:100%;font-size:.72rem}@media (width<=640px){.site-header{gap:.7rem 1rem;padding-top:1rem}.site-header nav{flex-basis:100%;order:3;gap:.4rem 1.1rem;margin:0}.lang-link{margin-left:auto}.hero{padding-top:2.5rem}.page-heading{margin-top:2.5rem}.focus-grid,.contacts{grid-template-columns:1fr}.post-list>li{grid-template-columns:1fr;gap:.4rem}.post-list time{font-size:.75rem}.disclosures td:first-child{width:8.75rem}.disclosures{font-size:.87rem}.section-intro{flex-wrap:wrap;gap:0 .7rem;margin-bottom:.75rem}.section-intro h2{margin-bottom:.4rem}}@media print{.site-header,.site-footer,.back-link,.blog-filters{display:none}:root{color:#000;background:#fff}main{width:100%;padding:0}pre{white-space:pre-wrap}}