import Link from "next/link";
import { ArrowRight, Cookie, Fingerprint, Gauge, Lock, ScrollText, ShieldCheck } from "lucide-react";
import { Section, SectionHeading } from "./section";
import { Reveal } from "./reveal";
const ITEMS = [
{ icon: , title: "AES-256-GCM key encryption", body: "HKDF-derived data key, per-user authenticated data, decrypted in memory only for the outgoing request." },
{ icon: , title: "Argon2id passwords", body: "OWASP parameters (19 MiB, t=2, p=1). E-mail verification is required before the first sign-in." },
{ icon: , title: "HttpOnly cookies", body: "Sessions in HttpOnly, SameSite=Lax cookies, Secure in production. Nothing sensitive in localStorage." },
{ icon: , title: "Strict CSP and headers", body: "frame-ancestors 'none', connect-src 'self', HSTS for a year, no third-party scripts anywhere." },
{ icon: , title: "Rate limits per account", body: "Sign-in 8/min, sign-up 4/min, chat 60/min, key changes 12/min — every sensitive route is limited." },
{ icon: , title: "Audit log you can read", body: "Logins, key changes, exports and deletions recorded with IP and shown in your account settings." },
];
export function SecurityTeaser() {
return (
{ITEMS.map((item, i) => (
{item.icon}
))}
);
}