diff --git a/assets/js/main.js b/assets/js/main.js
index 01e5152..b23d5fd 100644
--- a/assets/js/main.js
+++ b/assets/js/main.js
@@ -1,4 +1,4 @@
-const pages = ['home','problem','why','how','roi','pricing','who','trust','roadmap','faq','signin','apply'];
+const pages = ['home','problem','why','how','roi','pricing','who','trust','roadmap','faq','signin','apply','forgot'];
 
 
 function openPage(pageId) {
diff --git a/index.php b/index.php
index 466b27d..db58419 100644
--- a/index.php
+++ b/index.php
@@ -635,7 +635,7 @@
             <section class="max-w-7xl mx-auto px-6 py-24 text-center"> <h2 class="text-3xl font-semibold mb-4"> Still have questions? </h2> <p class="text-gray-600 mb-8"> We’d rather answer them directly than hide behind marketing. </p> <div class="flex justify-center gap-4"> <a href="/apply.php" class="bg-black text-white px-8 py-4 rounded-xl"> Apply for access </a> <a href="/trust.php" class="border px-8 py-4 rounded-xl"> Security & Trust → </a> </div> </section>
         </section>
 
-<!-- SIGNIN PAGE (PART 1/2) --> <section id="page-signin" class="page fade hidden"> <section class="panel-strong p-8 lg:p-10"> <div class="grid lg:grid-cols-12 gap-10 items-start"> <!-- Left: Trust / context --> <div class="lg:col-span-5"> <div class="chip inline-flex px-3 py-1 text-xs">Account</div> <h1 class="mt-5 text-4xl font-extrabold tracking-tight"> Sign in to FinMox </h1> <p class="mt-5 text-gray-700"> Access your workspace to review hiring execution, decision trails, and audit-ready outputs. </p> <div class="mt-7 panel p-6"> <div class="text-sm font-semibold">What you can do inside</div> <ul class="mt-3 text-sm text-gray-700 space-y-2"> <li>✔ Review ranked candidates + structured scoring</li> <li>✔ See interview summaries + recommendations</li> <li>✔ Track movement + SLA nudges</li> <li>✔ Export decision logs for audits</li> </ul> <div class="mt-4 flex flex-wrap gap-2"> <span class="chip px-3 py-1 text-xs">Role-based access</span> <span class="chip px-3 py-1 text-xs">Least privilege</span> <span class="chip px-3 py-1 text-xs">Audit trail</span> </div> </div> <div class="mt-7 panel p-6"> <div class="text-sm font-semibold">Need access?</div> <p class="mt-2 text-sm text-gray-700"> FinMox is onboarding teams through private beta. Apply and we’ll confirm fit. </p> <div class="mt-4 flex flex-wrap gap-3"> <a href="#apply" onclick="openPage('apply'); return false;" class="bg-black text-white px-6 py-3 rounded-2xl text-sm hoverlift"> Apply for Access </a> <a href="#trust" onclick="openPage('trust'); return false;" class="chip px-6 py-3 rounded-2xl text-sm hoverlift"> Security & Trust → </a> </div> </div> </div><!-- SIGNIN PAGE (PART 2/2) --> <!-- Right: Sign in card --> <div class="lg:col-span-7"> <div class="panel p-7"> <div class="flex items-center justify-between gap-4"> <div> <div class="text-sm font-semibold">Welcome back</div> <div class="text-sm text-gray-600 mt-1">Sign in to continue.</div> </div> <span class="chip px-3 py-1 text-xs">Private beta</span> </div> <form class="mt-6 grid gap-3" onsubmit="return false;"> <div class="grid md:grid-cols-2 gap-3"> <input type="email" placeholder="Work email" class="panel-strong px-4 py-3 rounded-2xl" autocomplete="email" /> <input type="password" placeholder="Password" class="panel-strong px-4 py-3 rounded-2xl" autocomplete="current-password" /> </div> <div class="flex items-center justify-between gap-4 text-sm"> <label class="flex items-center gap-2 text-gray-700"> <input type="checkbox" class="accent-black" /> Remember me </label> <a href="#apply" onclick="openPage('apply'); return false;" class="underline text-gray-700"> Forgot access? </a> </div> <button type="button" class="bg-black text-white py-3 rounded-2xl hoverlift" > Sign In </button> <div class="text-xs text-gray-600"> Demo placeholder. Wire this to your auth later (AppWizzy auth, Supabase, Clerk, etc.). </div> </form> <div class="mt-6 grid md:grid-cols-3 gap-3"> <div class="panel-strong p-5"> <div class="text-xs text-gray-500">Access control</div> <div class="mt-2 text-sm text-gray-700">Role-based permissions supported.</div> </div> <div class="panel-strong p-5"> <div class="text-xs text-gray-500">Session security</div> <div class="mt-2 text-sm text-gray-700">Least-privilege by default.</div> </div> <div class="panel-strong p-5"> <div class="text-xs text-gray-500">Auditability</div> <div class="mt-2 text-sm text-gray-700">Actions map to decision trail.</div> </div> </div> <div class="mt-6 panel-strong p-6"> <div class="text-sm font-semibold">New here?</div> <div class="mt-2 text-sm text-gray-700"> Apply for beta access and we’ll onboard your team with a short process.</div></div></div></div></section></section>
+<!-- SIGNIN PAGE (PART 1/2) --> <section id="page-signin" class="page fade hidden"> <section class="panel-strong p-8 lg:p-10"> <div class="grid lg:grid-cols-12 gap-10 items-start"> <!-- Left: Trust / context --> <div class="lg:col-span-5"> <div class="chip inline-flex px-3 py-1 text-xs">Account</div> <h1 class="mt-5 text-4xl font-extrabold tracking-tight"> Sign in to FinMox </h1> <p class="mt-5 text-gray-700"> Access your workspace to review hiring execution, decision trails, and audit-ready outputs. </p> <div class="mt-7 panel p-6"> <div class="text-sm font-semibold">What you can do inside</div> <ul class="mt-3 text-sm text-gray-700 space-y-2"> <li>✔ Review ranked candidates + structured scoring</li> <li>✔ See interview summaries + recommendations</li> <li>✔ Track movement + SLA nudges</li> <li>✔ Export decision logs for audits</li> </ul> <div class="mt-4 flex flex-wrap gap-2"> <span class="chip px-3 py-1 text-xs">Role-based access</span> <span class="chip px-3 py-1 text-xs">Least privilege</span> <span class="chip px-3 py-1 text-xs">Audit trail</span> </div> </div> <div class="mt-7 panel p-6"> <div class="text-sm font-semibold">Need access?</div> <p class="mt-2 text-sm text-gray-700"> FinMox is onboarding teams through private beta. Apply and we’ll confirm fit. </p> <div class="mt-4 flex flex-wrap gap-3"> <a href="#apply" onclick="openPage('apply'); return false;" class="bg-black text-white px-6 py-3 rounded-2xl text-sm hoverlift"> Apply for Access </a> <a href="#trust" onclick="openPage('trust'); return false;" class="chip px-6 py-3 rounded-2xl text-sm hoverlift"> Security & Trust → </a> </div> </div> </div><!-- SIGNIN PAGE (PART 2/2) --> <!-- Right: Sign in card --> <div class="lg:col-span-7"> <div class="panel p-7"> <div class="flex items-center justify-between gap-4"> <div> <div class="text-sm font-semibold">Welcome back</div> <div class="text-sm text-gray-600 mt-1">Sign in to continue.</div> </div> <span class="chip px-3 py-1 text-xs">Private beta</span> </div> <form class="mt-6 grid gap-3" onsubmit="return false;"> <div class="grid md:grid-cols-2 gap-3"> <input type="email" placeholder="Work email" class="panel-strong px-4 py-3 rounded-2xl" autocomplete="email" /> <input type="password" placeholder="Password" class="panel-strong px-4 py-3 rounded-2xl" autocomplete="current-password" /> </div> <div class="flex items-center justify-between gap-4 text-sm"> <label class="flex items-center gap-2 text-gray-700"> <input type="checkbox" class="accent-black" /> Remember me </label> <a href="#forgot" onclick="openPage('forgot'); return false;" class="underline text-sm text-gray-700"> Forgot access? </a> </div> <button type="button" class="bg-black text-white py-3 rounded-2xl hoverlift" > Sign In </button> <div class="text-xs text-gray-600"> Demo placeholder. Wire this to your auth later (AppWizzy auth, Supabase, Clerk, etc.). </div> </form> <div class="mt-6 grid md:grid-cols-3 gap-3"> <div class="panel-strong p-5"> <div class="text-xs text-gray-500">Access control</div> <div class="mt-2 text-sm text-gray-700">Role-based permissions supported.</div> </div> <div class="panel-strong p-5"> <div class="text-xs text-gray-500">Session security</div> <div class="mt-2 text-sm text-gray-700">Least-privilege by default.</div> </div> <div class="panel-strong p-5"> <div class="text-xs text-gray-500">Auditability</div> <div class="mt-2 text-sm text-gray-700">Actions map to decision trail.</div> </div> </div> <div class="mt-6 panel-strong p-6"> <div class="text-sm font-semibold">New here?</div> <div class="mt-2 text-sm text-gray-700"> Apply for beta access and we’ll onboard your team with a short process.</div></div></div></div></section></section>
 
 <!-- APPLY PAGE (PART 1/3) -->
 <section id="page-apply" class="page fade hidden">
@@ -803,6 +803,7 @@
     <!-- /Grid -->
   </section>
 </section>
+    <!-- FORGOT ACCESS PAGE (PART 1/3) --> <section id="page-forgot" class="page fade hidden"> <section class="panel-strong p-8 lg:p-10"> <div class="grid lg:grid-cols-12 gap-10 items-start"> <!-- Left: Context --> <div class="lg:col-span-5"> <div class="chip inline-flex px-3 py-1 text-xs">Account</div> <h1 class="mt-5 text-4xl font-extrabold tracking-tight"> Forgot access? </h1> <p class="mt-5 text-gray-700"> Enter the email you used for FinMox and we’ll send a secure reset link. If your company is in private beta, we’ll also confirm your access status. </p> <div class="mt-7 panel p-6"> <div class="text-sm font-semibold">What happens next</div> <ol class="mt-3 text-sm text-gray-700 space-y-2"> <li><strong>1)</strong> You request a reset link</li> <li><strong>2)</strong> We verify the email + access</li> <li><strong>3)</strong> You set a new password</li> <li><strong>4)</strong> You’re back in your workspace</li> </ol> <div class="mt-4 flex flex-wrap gap-2"> <span class="chip px-3 py-1 text-xs">Least privilege</span> <span class="chip px-3 py-1 text-xs">Audit-friendly</span> <span class="chip px-3 py-1 text-xs">Secure links</span> </div> </div> <div class="mt-7 panel p-6"> <div class="text-sm font-semibold">Having trouble?</div> <div class="mt-2 text-sm text-gray-700"> If you don’t receive an email within a few minutes, check spam/junk and ensure you typed the correct address. </div> <div class="mt-3 text-xs text-gray-600"> Tip: If you’re not approved for beta yet, use the Apply page to request access. </div> </div> </div><!-- FORGOT ACCESS PAGE (PART 2/3) --> <!-- Right: Form --> <div class="lg:col-span-7"> <div class="panel p-7"> <div class="flex items-center justify-between gap-4"> <div> <div class="text-sm font-semibold">Reset your access</div> <div class="text-sm text-gray-600 mt-1">We’ll email a secure link if this account exists.</div> </div> <span class="chip px-3 py-1 text-xs">Private beta</span> </div> <form class="mt-6 grid gap-3" onsubmit="return false;"> <input id="forgotEmail" type="email" placeholder="Work email" class="panel-strong px-4 py-3 rounded-2xl" /> <div class="grid md:grid-cols-2 gap-3"> <input type="text" placeholder="Company name (optional)" class="panel-strong px-4 py-3 rounded-2xl" /> <input type="text" placeholder="Your role (optional)" class="panel-strong px-4 py-3 rounded-2xl" /> </div> <button type="button" class="bg-black text-white py-3 rounded-2xl hoverlift" onclick="forgotAccessSend();"> Send reset link </button> <div id="forgotMsg" class="text-sm text-gray-700 hidden"></div> <div class="text-xs text-gray-600"> Demo placeholder. Wire to your auth later (AppWizzy auth, Supabase, Clerk, etc.). For now, this simulates the flow without exposing whether a user exists. </div> <div class="mt-4 flex flex-wrap gap-3"> <a href="#signin" onclick="openPage('signin'); return false;" class="underline text-sm text-gray-700"> Back to Sign in → </a> <a href="#apply" onclick="openPage('apply'); return false;" class="underline text-sm text-gray-700"> Apply for access → </a> </div> </form> </div><!-- FORGOT ACCESS PAGE (PART 3/3) --> <div class="mt-6 grid md:grid-cols-3 gap-4"> <div class="panel p-6"> <div class="text-xs text-gray-500">Access control</div> <div class="mt-2 text-sm text-gray-700">Role-based permissions supported.</div> </div> <div class="panel p-6"> <div class="text-xs text-gray-500">Session security</div> <div class="mt-2 text-sm text-gray-700">Least-privilege by default.</div> </div> <div class="panel p-6"> <div class="text-xs text-gray-500">Auditability</div> <div class="mt-2 text-sm text-gray-700">Actions map to decision trail.</div> </div> </div> </div><!-- /Right --> </div><!-- /Grid --> </section> <script> // Safe demo behavior: doesn't break the site, doesn't reveal account existence. function forgotAccessSend(){ var emailEl = document.getElementById('forgotEmail'); var msgEl = document.getElementById('forgotMsg'); if(!emailEl || !msgEl) return; var email = (emailEl.value || '').trim(); msgEl.classList.remove('hidden'); if(!email || email.indexOf('@') === -1){ msgEl.innerHTML = "Please enter a valid email address."; return; } msgEl.innerHTML = "If this email is on file, you’ll receive a secure reset link shortly. " + "If you don’t see it, check spam/junk or apply for access."; } </script> </section>
     </main>