{{define "content"}}
{{template "nav" .}}

<main id="main">

    <!-- Hero -->
    <section class="hero hero-page">
        <div class="hero-inner">
            <p class="hero-sigil">// edition · workstation</p>
            <h1>Arcline <span class="hero-highlight">Workstation</span></h1>
            <p class="tagline">
                A security analyst / blue-team workstation — KDE Plasma, pre-configured
                dev toolchains, a privacy-hardened browser, forensics-friendly tooling,
                and secrets scanning.
            </p>
            <div class="hero-actions">
                <a href="#get-started" class="cta">Get Early Access</a>
                <a href="/" class="cta-secondary">See all editions</a>
            </div>
        </div>
    </section>

    <!-- Overview -->
    <section class="section">
        <div class="section-inner">
            <div class="section-label">Overview</div>
            <h2>Built for the people on<br>the front line.</h2>
            <p class="section-desc">
                Arcline Workstation pairs a hardened base with the tools analysts and
                security-minded developers use every day — without the telemetry that
                most desktops quietly ship.
            </p>
            <div class="principles-grid">
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <rect x="2" y="3" width="20" height="14" rx="2"/>
                            <path d="M8 21h8"/>
                            <path d="M12 17v4"/>
                        </svg>
                    </div>
                    <div>
                        <h3>KDE Plasma desktop</h3>
                        <p>A lightweight, fully configurable desktop — tuned for long working sessions.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <circle cx="12" cy="12" r="10"/>
                            <path d="M2 12h20"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Privacy-hardened browser</h3>
                        <p>A browser profile locked down out of the box — no tracking, no telemetry, no surprises.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <rect x="3" y="3" width="18" height="18" rx="3"/>
                            <path d="M8 12l2.5 2.5L16 9"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Secrets scanning</h3>
                        <p>gitleaks and trufflehog pre-configured — catch leaked keys before they ship.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <path d="M4 7h16v12H4V7z"/>
                            <path d="M8 3v4"/>
                            <path d="M16 3v4"/>
                            <path d="M4 13h16" stroke-dasharray="2 1"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Dev toolchains ready</h3>
                        <p>Go, Rust, Python, and Node.js toolchains pre-configured. Git, Make, and LLVM/Clang included.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <circle cx="12" cy="12" r="3"/>
                            <path d="M12 2L22 8.5v7L12 22 2 15.5v-7L12 2z"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Forensics-friendly</h3>
                        <p>Tooling and a disk layout that make analysis and evidence handling straightforward.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <rect x="3" y="3" width="18" height="18" rx="3"/>
                            <path d="M8 12l2.5 2.5L16 9"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Hardened base</h3>
                        <p>The same hardened Debian base, btrfs snapshots, and default-deny firewall as every edition.</p>
                    </div>
                </div>
            </div>
        </div>
    </section>

    <!-- What's Included -->
    <section class="section section-alt">
        <div class="section-inner">
            <div class="section-label">What's Included</div>
            <h2>An analyst's desk, pre-configured.</h2>
            <p class="section-desc">
                Everything a blue-team or security-conscious developer needs to be productive on day one.
            </p>
            <div class="security-grid">
                <div class="stack-card">
                    <div class="stack-header">Desktop</div>
                    <ul>
                        <li>KDE Plasma</li>
                        <li>Privacy-hardened browser profile</li>
                        <li>Forensics-friendly tooling</li>
                    </ul>
                </div>
                <div class="stack-card">
                    <div class="stack-header">Development</div>
                    <ul>
                        <li>Go, Rust, Python, Node.js</li>
                        <li>Git, Make, CMake, LLVM/Clang</li>
                        <li>VS Code / Helix / Vim configs</li>
                        <li>Docker / Podman</li>
                    </ul>
                </div>
                <div class="stack-card">
                    <div class="stack-header">Security</div>
                    <ul>
                        <li>gitleaks + trufflehog secrets scanning</li>
                        <li>ClamAV baseline scanning</li>
                        <li>Lynis hardening score</li>
                        <li>OpenSCAP + CIS profiles</li>
                    </ul>
                </div>
                <div class="stack-card">
                    <div class="stack-header">Base System</div>
                    <ul>
                        <li>Hardened Debian base</li>
                        <li>Lockdown-mode kernel + seccomp</li>
                        <li>btrfs root + snapshot rollback</li>
                        <li>Zero telemetry</li>
                    </ul>
                </div>
            </div>
            <div class="compliance-callout">
                <div class="compliance-badge">Compliance-ready by default</div>
                <p>
                    Arcline Workstation ships CIS Benchmark-aligned by default, with OpenSCAP
                    scanning mapped toward <strong>HIPAA</strong>, <strong>PCI-DSS</strong>, and
                    <strong>SOC 2</strong> control families. The OS itself isn't certified —
                    only audited deployments can be — but the defaults give you a running start.
                </p>
            </div>
        </div>
    </section>

    <!-- Other Editions -->
    <section class="section">
        <div class="section-inner">
            <div class="section-label">Other Editions</div>
            <h2>One hardened base. Three editions.</h2>
            <p class="section-desc">
                Every edition shares the same hardened Debian base and zero-telemetry guarantee.
            </p>
            <div class="edition-switcher">
                <a href="/server" class="card-btn card-btn-secondary">Server</a>
                <a href="/workstation" class="card-btn card-btn-primary" aria-current="page">Workstation</a>
                <a href="/cloud" class="card-btn card-btn-secondary">Cloud</a>
            </div>
        </div>
    </section>

    <!-- Get Started -->
    <section id="get-started" class="section section-alt">
        <div class="section-inner">
            <div class="section-label">Get Started</div>
            <h2>Arcline Workstation is in active development.<br>Be there at the start.</h2>
            <p class="section-desc">
                We're building the ISO pipeline and hardening the defaults.
                Sign up to receive early access and help shape the first release.
            </p>
            {{template "waitlistForm" .}}
        </div>
    </section>

</main>

{{template "footer" .}}
{{end}}
