:root{--bg:#f5f7fb;--card:#fff;--text:#172033;--muted:#657089;--line:#dfe5ef;--primary:#145da0;--danger:#b42318;--warn:#b54708;--ok:#067647;--info:#175cd3}
*{box-sizing:border-box}body{margin:0;font-family:system-ui,-apple-system,"Segoe UI",Roboto,Arial,sans-serif;background:var(--bg);color:var(--text);font-size:14px}.topbar{height:58px;background:#0f3557;color:#fff;display:flex;align-items:center;justify-content:space-between;padding:0 22px;position:sticky;top:0;z-index:20}.topbar a{color:#fff;text-decoration:none}.brand{font-weight:800;font-size:18px}.shell{display:grid;grid-template-columns:230px minmax(0,1fr);min-height:calc(100vh - 58px)}.sidebar{background:#fff;border-right:1px solid var(--line);padding:16px 10px}.sidebar a{display:block;padding:10px 12px;border-radius:8px;color:#344054;text-decoration:none;margin:2px 0}.sidebar a:hover,.sidebar a.active{background:#edf4fb;color:#0f4c81;font-weight:700}.main{padding:22px;min-width:0}.grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:14px}.grid.two{grid-template-columns:repeat(2,minmax(0,1fr))}.card{background:var(--card);border:1px solid var(--line);border-radius:12px;padding:16px;box-shadow:0 1px 2px rgba(16,24,40,.04);margin-bottom:16px}.metric{font-size:30px;font-weight:800;margin-top:4px}.muted{color:var(--muted)}h1{font-size:24px;margin:0 0 18px}h2{font-size:18px;margin:0 0 12px}.toolbar{display:flex;gap:8px;align-items:center;justify-content:space-between;margin-bottom:12px}.btn{border:0;border-radius:8px;padding:9px 12px;background:#e8edf4;color:#25324a;cursor:pointer;text-decoration:none;display:inline-block;font-weight:650}.btn.primary{background:var(--primary);color:#fff}.btn.danger{background:#fee4e2;color:#912018}.btn.small{padding:6px 9px;font-size:12px}.badge{display:inline-block;padding:3px 8px;border-radius:999px;font-size:12px;font-weight:700}.badge.ok{background:#dcfae6;color:#067647}.badge.warn{background:#fef0c7;color:#93370d}.badge.danger{background:#fee4e2;color:#b42318}.badge.info{background:#dbeafe;color:#175cd3}.badge.muted{background:#eaecf0;color:#475467}table{width:100%;border-collapse:collapse;background:#fff}th,td{border-bottom:1px solid var(--line);padding:10px 8px;text-align:left;vertical-align:top}th{background:#f8fafc;font-size:12px;color:#475467;position:static!important;top:auto!important;z-index:auto!important}tr:last-child td{border-bottom:0}.table-wrap{overflow:auto;border:1px solid var(--line);border-radius:10px;background:#fff}.form-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:12px}.form-group label{display:block;font-weight:700;font-size:12px;margin-bottom:5px;color:#344054}.form-group input,.form-group select,.form-group textarea{width:100%;border:1px solid #cfd7e5;border-radius:8px;padding:9px;background:#fff}.form-group textarea{min-height:90px;resize:vertical}.full{grid-column:1/-1}.notice{border-radius:9px;padding:11px 12px;margin:10px 0;border:1px solid}.notice.ok{background:#ecfdf3;border-color:#abefc6;color:#067647}.notice.warn{background:#fffaeb;border-color:#fedf89;color:#93370d}.notice.danger{background:#fef3f2;border-color:#fecdca;color:#b42318}.notice.info{background:#eff8ff;border-color:#b2ddff;color:#175cd3}.items{display:grid;gap:8px}.item{padding:10px;border:1px solid var(--line);border-radius:8px;background:#fff}.item.fail{border-left:4px solid #d92d20}.item.warn{border-left:4px solid #f79009}.item.pass{border-left:4px solid #12b76a}.flash{padding:10px 12px;border-radius:8px;margin-bottom:12px}.flash.success{background:#dcfae6}.flash.error{background:#fee4e2}.flash.warning{background:#fef0c7}.login-wrap{max-width:430px;margin:9vh auto;padding:0 16px}.login-card{background:#fff;border:1px solid var(--line);border-radius:14px;padding:24px}.kpi-label{font-size:12px;color:#667085;font-weight:700}.risk-critical{color:#b42318;font-weight:800}.risk-high{color:#b54708;font-weight:800}.nowrap{white-space:nowrap}.legal-note{font-size:12px;color:#667085;line-height:1.5}.actions{display:flex;gap:6px;flex-wrap:wrap}.checks{display:flex;gap:14px;align-items:center;flex-wrap:wrap}.checks label{font-weight:600}.checks input{width:auto}.footer-note{font-size:12px;color:#667085;margin-top:30px;padding-bottom:20px}
@media(max-width:1050px){.grid{grid-template-columns:repeat(2,1fr)}.form-grid{grid-template-columns:repeat(2,1fr)}}@media(max-width:760px){.shell{grid-template-columns:1fr}.sidebar{display:flex;overflow:auto;border-right:0;border-bottom:1px solid var(--line);padding:8px}.sidebar a{white-space:nowrap}.main{padding:14px}.grid,.grid.two,.form-grid{grid-template-columns:1fr}.topbar{padding:0 12px}.brand{font-size:15px}th{top:58px}.full{grid-column:auto}}

/* V3: nhiều module hơn nên sidebar cần cuộn độc lập trên desktop. */
@media(min-width:761px){.sidebar{position:sticky;top:58px;height:calc(100vh - 58px);overflow-y:auto;align-self:start}}
.item.na{border-left:4px solid #98a2b3;background:#f9fafb}.checkline{display:flex!important;gap:8px;align-items:center;font-weight:600!important}.checkline input{width:auto!important}
code{background:#f2f4f7;border-radius:5px;padding:2px 5px}

/* FIX 2026-08-28: disable sticky table headers to prevent the first data row being covered. */
.table-wrap thead,.table-wrap thead tr,.table-wrap thead th{position:static!important;top:auto!important;z-index:auto!important;transform:none!important}