/* eslint-disable */
// Governance & Trust — the premium differentiator the plan calls out:
// human-in-the-loop, data classification, audit trails, NIST AI RMF + OWASP LLM Top 10

const GOV_PILLARS = [
  {
    n: "01", k: "Human-in-the-loop", em: "loop",
    p: "AI drafts, summarizes, recommends, and automates the low-risk work. Humans approve anything that touches contracts, finance, HR, legal, or customer commitments. The line is drawn on day one and lives in the system."
  },
  {
    n: "02", k: "Data classification", em: "classification",
    p: "Every implementation ships with a written policy for what data can and cannot enter each AI tool. Customer PII, financials, regulated records — handled explicitly, not by accident."
  },
  {
    n: "03", k: "Role-based access", em: "access",
    p: "AI systems only see what each user or department is authorized to see. Permissions are designed before the build, not retrofitted after a leak."
  },
  {
    n: "04", k: "Audit trails", em: "trails",
    p: "High-stakes workflows log what happened, when, and who approved it. You always have the receipts — for compliance, for QA, for the awkward conversations."
  },
  {
    n: "05", k: "Security testing", em: "testing",
    p: "Chatbots, assistants, and automations are tested for prompt injection, sensitive-data exposure, bad-output handling, and unauthorized actions before they touch production."
  },
  {
    n: "06", k: "Vendor review", em: "review",
    p: "Before any third-party AI tool gets connected, we review where data goes, how it is stored, whether it trains models, and what controls are available. No mystery pipes."
  },
];

function Governance() {
  return (
    <section className="gov section-pad" id="governance">
      <div className="container">
        <div className="section-hd">
          <Reveal><Eyebrow>Governance & trust</Eyebrow></Reveal>
          <Reveal delay={80}>
            <h2>Built with <em>control.</em><br/>Not just speed.</h2>
          </Reveal>
          <Reveal delay={160}>
            <p className="lede">
              Most low-end AI shops skip governance entirely. We treat it as the spine of the build —
              aligned with the <strong>NIST AI Risk Management Framework</strong> and the
              <strong> OWASP Top 10 for LLM Applications</strong>. Your data stays where it should.
              Your people stay in charge of the decisions that matter.
            </p>
          </Reveal>
        </div>

        <Reveal>
          <div className="gov-grid">
            {GOV_PILLARS.map((g) => (
              <div className="gov-card" key={g.n}>
                <div className="lbl">PRINCIPLE · {g.n}</div>
                <h4>{g.k.split(g.em)[0]}<em>{g.em}</em>{g.k.split(g.em)[1]}</h4>
                <p>{g.p}</p>
              </div>
            ))}
          </div>
        </Reveal>

        <Reveal delay={120}>
          <div className="gov-foot">
            <div className="gov-foot-item">
              <span className="lbl">▌Frameworks we align with</span>
              <span className="v">NIST AI RMF · OWASP LLM Top 10</span>
            </div>
            <div className="gov-foot-item">
              <span className="lbl">▌Policy deliverable</span>
              <span className="v">AI usage policy · approved-tool list · incident process</span>
            </div>
            <div className="gov-foot-item">
              <span className="lbl">▌Insurance posture</span>
              <span className="v">Cyber liability · Tech E&amp;O · Professional liability</span>
            </div>
          </div>
        </Reveal>
      </div>
    </section>
  );
}

window.Governance = Governance;