{{define "content"}}
{{template "nav" .}}

<main id="main">

    <!-- Hero -->
    <section class="hero hero-page">
        <div class="hero-inner">
            <h1>Arcline <span class="hero-highlight">Cloud</span></h1>
            <p class="tagline">
                Minimal cloud images with a small attack surface — Falco runtime security
                and CIS benchmark scanning built in. Ready for AWS, GCP, Azure, or your
                own private cloud.
            </p>
            <div class="hero-actions">
                <a href="#get-started" class="cta">Get Early Access</a>
                <a href="/" class="cta-secondary">See all editions</a>
            </div>
        </div>
    </section>

    <!-- Overview -->
    <section class="section">
        <div class="section-inner">
            <div class="section-label">Overview</div>
            <h2>Small footprint. Tight posture.<br>Security-first from the image.</h2>
            <p class="section-desc">
                Arcline Cloud is built for workloads that need the smallest possible attack
                surface — a minimal hardened base with runtime and compliance watching built in.
            </p>
            <div class="principles-grid">
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <circle cx="12" cy="12" r="10"/>
                            <path d="M2 12h20"/>
                            <path d="M12 2a15.3 15.3 0 014 10 15.3 15.3 0 01-4 10"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Minimal attack surface</h3>
                        <p>Nothing installed that you didn't ask for. Less to run, less to exploit, less to patch.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <circle cx="12" cy="12" r="3"/>
                            <path d="M12 2L22 8.5v7L12 22 2 15.5v-7L12 2z"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Runtime security</h3>
                        <p>Falco watches for anomalous container and syscall behavior — in production, not just at install.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <rect x="3" y="3" width="18" height="18" rx="3"/>
                            <path d="M8 12l2.5 2.5L16 9"/>
                        </svg>
                    </div>
                    <div>
                        <h3>CIS scanning built in</h3>
                        <p>OpenSCAP with CIS Benchmark profiles, so posture checks are part of the image — not an afterthought.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <rect x="2" y="2" width="20" height="20" rx="3"/>
                            <rect x="6" y="6" width="12" height="12" rx="1.5" stroke-dasharray="3 2"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Hardened by default</h3>
                        <p>The same hardened Debian base — lockdown-mode kernel, seccomp, AppArmor — as every edition.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <circle cx="12" cy="12" r="10"/>
                            <path d="M2 12h20"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Zero telemetry</h3>
                        <p>No phone-home, no analytics, no cloud integration you didn't opt into.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <rect x="2" y="2" width="20" height="20" rx="3"/>
                            <path d="M12 2v20"/>
                            <path d="M2 12h20"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Cloud-ready images</h3>
                        <p>Minimal images ready for AWS, GCP, Azure, or your own private cloud.</p>
                    </div>
                </div>
            </div>
        </div>
    </section>

    <!-- What's Included -->
    <section class="section section-alt">
        <div class="section-inner">
            <div class="section-label">What's Included</div>
            <h2>A security posture you can ship.</h2>
            <p class="section-desc">
                Arcline Cloud images are built around a minimal footprint with runtime and
                compliance security in the image itself.
            </p>
            <div class="security-grid">
                <div class="stack-card">
                    <div class="stack-header">Base Image</div>
                    <ul>
                        <li>Minimal hardened Debian base</li>
                        <li>Small package footprint</li>
                        <li>btrfs root + snapshots</li>
                    </ul>
                </div>
                <div class="stack-card">
                    <div class="stack-header">Runtime Security</div>
                    <ul>
                        <li>Falco container / syscall detection</li>
                        <li>seccomp + AppArmor</li>
                        <li>Default-deny nftables</li>
                    </ul>
                </div>
                <div class="stack-card">
                    <div class="stack-header">Compliance</div>
                    <ul>
                        <li>OpenSCAP + CIS Benchmark profiles</li>
                        <li>syft + grype SBOM / CVE scanning</li>
                        <li>Lynis hardening score</li>
                    </ul>
                </div>
                <div class="stack-card">
                    <div class="stack-header">Platforms</div>
                    <ul>
                        <li>AWS</li>
                        <li>GCP</li>
                        <li>Azure</li>
                        <li>Private cloud</li>
                    </ul>
                </div>
            </div>
            <div class="compliance-callout">
                <div class="compliance-badge">Compliance-ready by default</div>
                <p>
                    Arcline Cloud images ship CIS Benchmark-aligned by default, with OpenSCAP
                    scanning mapped toward <strong>HIPAA</strong>, <strong>PCI-DSS</strong>, and
                    <strong>SOC 2</strong> control families. The images themselves aren't certified —
                    only audited deployments can be — but the defaults give you a running start.
                </p>
            </div>
        </div>
    </section>

    <!-- Other Editions -->
    <section class="section">
        <div class="section-inner">
            <div class="section-label">Other Editions</div>
            <h2>One hardened base. Three editions.</h2>
            <p class="section-desc">
                Every edition shares the same hardened Debian base and zero-telemetry guarantee.
            </p>
            <div class="edition-switcher">
                <a href="/server" class="card-btn card-btn-secondary">Server</a>
                <a href="/workstation" class="card-btn card-btn-secondary">Workstation</a>
                <a href="/cloud" class="card-btn card-btn-primary" aria-current="page">Cloud</a>
            </div>
        </div>
    </section>

    <!-- Get Started -->
    <section id="get-started" class="section section-alt">
        <div class="section-inner">
            <div class="section-label">Get Started</div>
            <h2>Arcline Cloud is in active development.<br>Be there at the start.</h2>
            <p class="section-desc">
                We're building the ISO pipeline and hardening the defaults.
                Sign up to receive early access and help shape the first release.
            </p>
            {{template "waitlistForm" .}}
        </div>
    </section>

</main>

{{template "footer" .}}
{{end}}