diff --git a/scripts/bench.sh b/scripts/bench.sh
new file mode 100755
index 0000000..af8676b
--- /dev/null
+++ b/scripts/bench.sh
@@ -0,0 +1,217 @@
+#!/usr/bin/env bash
+set -uo pipefail
+
+usage() {
+  cat >&2 <<'EOF'
+usage: bench.sh [--out PATH] [--runs N] [--binary PATH] [SECTION ...]
+
+Measure what the site publishes about this runtime, and write it as JSON the
+page reads at load time. Nothing is typed into the page by hand: a number that
+was not measured here stays absent, and the page renders it as a dash.
+
+This does NOT run the horizontal attack profile. That needs root, ftrace and a
+long serial run; scripts/hap-bench.sh owns it and prints its own table.
+
+Sections (default: all of them)
+  binary     size of the release binary
+  deps       direct and total crate count, the dependency surface
+  start      docker run to a container that has exited, through each runtime
+  caps       the effective capability set a container is left holding
+  validation the OCI runtime-spec assertions this build passes
+
+Environment
+  IMAGE      image the probe container runs, default alpine:3.20
+  RUNTIMES   space separated docker runtime names, default "mars runc"
+
+The start section needs a docker daemon with the runtimes registered; see
+scripts/install-docker-runtime.sh. Everything else reads the source tree.
+
+Requires: python3 and cargo; docker for the start and caps sections.
+EOF
+  exit 2
+}
+
+OUT=""
+RUNS=5
+BINARY=""
+SECTIONS=()
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --out) OUT="${2:-}"; shift 2 || usage ;;
+    --runs) RUNS="${2:-}"; shift 2 || usage ;;
+    --binary) BINARY="${2:-}"; shift 2 || usage ;;
+    -h|--help) usage ;;
+    -*) usage ;;
+    *) SECTIONS+=("$1"); shift ;;
+  esac
+done
+
+[ ${#SECTIONS[@]} -eq 0 ] && SECTIONS=(binary deps start caps validation)
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+TARGET_DIR="${CARGO_TARGET_DIR:-$ROOT/target}"
+[ -n "$BINARY" ] || BINARY="$TARGET_DIR/release/mars"
+IMAGE="${IMAGE:-alpine:3.20}"
+RUNTIMES="${RUNTIMES:-mars runc}"
+WORK="$(mktemp -d)"
+trap 'rm -rf "$WORK"' EXIT
+
+has() { for s in "${SECTIONS[@]}"; do [ "$s" = "$1" ] && return 0; done; return 1; }
+now_ms() { python3 -c 'import time;print(int(time.time()*1000))'; }
+note() { printf '%s\n' "$*" >&2; }
+emit() { printf '%s\t%s\n' "$1" "$2" >> "$WORK/pairs"; }
+
+stat_percentile() {
+  python3 - "$@" <<'PY'
+import sys, statistics
+vals = sorted(float(v) for v in sys.argv[2:])
+if not vals:
+    print("null"); sys.exit()
+q = float(sys.argv[1])
+if q == 50:
+    print(round(statistics.median(vals), 1)); sys.exit()
+k = (len(vals) - 1) * q / 100
+lo, hi = int(k), min(int(k) + 1, len(vals) - 1)
+print(round(vals[lo] + (vals[hi] - vals[lo]) * (k - lo), 1))
+PY
+}
+
+measure_binary() {
+  if [ ! -x "$BINARY" ]; then
+    note "binary: $BINARY is not there, run cargo build --release first"
+    return
+  fi
+  local bytes
+  bytes="$(python3 -c 'import os,sys;print(os.path.getsize(sys.argv[1]))' "$BINARY")"
+  emit binary_bytes "$bytes"
+  note "binary: $bytes bytes"
+}
+
+measure_deps() {
+  local direct total
+  direct="$(python3 - "$ROOT/Cargo.toml" <<'PY'
+import re, sys
+text = open(sys.argv[1]).read()
+m = re.search(r"^\[dependencies\](.*?)(^\[|\Z)", text, re.S | re.M)
+if not m:
+    print(0); sys.exit()
+print(sum(1 for line in m.group(1).splitlines()
+          if line.strip() and not line.strip().startswith("#") and "=" in line))
+PY
+)"
+  total="$(python3 - "$ROOT/Cargo.lock" <<'PY'
+import sys
+text = open(sys.argv[1]).read()
+print(max(text.count("[[package]]") - 1, 0))
+PY
+)"
+  [ -n "$direct" ] && emit deps_direct "$direct"
+  [ -n "$total" ] && emit deps_total "$total"
+  note "deps: $direct direct, $total crates locked"
+}
+
+docker_ready() {
+  command -v docker >/dev/null 2>&1 || { note "docker is not installed"; return 1; }
+  docker info >/dev/null 2>&1 || { note "the docker daemon cannot be reached"; return 1; }
+  docker image inspect "$IMAGE" >/dev/null 2>&1 || docker pull "$IMAGE" >/dev/null 2>&1
+  return 0
+}
+
+measure_start() {
+  docker_ready || return
+  local rt samples=() i t0 t1
+  for rt in $RUNTIMES; do
+    if ! docker info 2>/dev/null | grep -qE "(^| )$rt( |$)"; then
+      note "start: docker has no runtime called $rt, skipping"
+      continue
+    fi
+    docker run --rm --runtime="$rt" "$IMAGE" true >/dev/null 2>&1
+    samples=()
+    for i in $(seq 1 "$RUNS"); do
+      t0="$(now_ms)"
+      docker run --rm --runtime="$rt" "$IMAGE" true >/dev/null 2>&1 || continue
+      t1="$(now_ms)"
+      samples+=("$((t1 - t0))")
+    done
+    [ ${#samples[@]} -eq 0 ] && continue
+    emit "start_${rt}_ms" "$(stat_percentile 50 "${samples[@]}")"
+    note "start $rt: $(stat_percentile 50 "${samples[@]}") ms median over ${#samples[@]} runs"
+  done
+}
+
+measure_caps() {
+  docker_ready || return
+  local mask count
+  mask="$(docker run --rm --runtime=mars "$IMAGE" \
+    grep CapEff /proc/self/status 2>/dev/null | awk '{print $2}')"
+  [ -z "$mask" ] && { note "caps: could not read the capability set"; return; }
+  count="$(python3 -c "print(bin(int('$mask', 16)).count('1'))")"
+  emit cap_effective_hex "$mask"
+  emit cap_effective_count "$count"
+  note "caps: container keeps $count capabilities, mask $mask"
+}
+
+measure_validation() {
+  local passed
+  passed="$(grep -hoE '\*\*[0-9]+ passed\*\*|[0-9]+ passed' \
+    "$ROOT/README.md" "$ROOT/docs/05-hardening.md" 2>/dev/null \
+    | grep -oE '[0-9]+' | head -1)"
+  [ -z "$passed" ] && { note "validation: no recorded pass count found"; return; }
+  emit validation_passed "$passed"
+  note "validation: $passed assertions recorded as passing"
+}
+
+: > "$WORK/pairs"
+has binary && measure_binary
+has deps && measure_deps
+has start && measure_start
+has caps && measure_caps
+has validation && measure_validation
+
+HOST_OS="$(uname -s)"
+HOST_ARCH="$(uname -m)"
+HOST_KERNEL="$(uname -r)"
+HOST_CPU="$(awk -F': ' '/model name/{print $2; exit}' /proc/cpuinfo 2>/dev/null)"
+[ -n "$HOST_CPU" ] || {
+  VIRT="$(systemd-detect-virt 2>/dev/null)"
+  [ -n "$VIRT" ] && [ "$VIRT" != none ] && HOST_CPU="$HOST_ARCH guest under $VIRT"
+}
+[ -n "$HOST_CPU" ] || HOST_CPU="unknown"
+HOST_CORES="$(getconf _NPROCESSORS_ONLN 2>/dev/null || echo '?')"
+HOST_CPU="$HOST_CPU, $HOST_CORES cores"
+VERSION="$("$BINARY" --version 2>/dev/null | head -1 || echo unknown)"
+
+JSON="$(python3 - "$WORK/pairs" <<PY
+import json, sys, datetime
+values = {}
+with open(sys.argv[1]) as fh:
+    for line in fh:
+        if not line.strip():
+            continue
+        k, v = line.rstrip("\n").split("\t", 1)
+        try:
+            values[k] = int(v) if v.isdigit() else float(v)
+        except ValueError:
+            values[k] = v
+doc = {
+    "measured_at": datetime.datetime.now().astimezone().strftime("%Y-%m-%d"),
+    "method": {
+        "host": "$HOST_CPU".strip(),
+        "os": "$HOST_OS $HOST_KERNEL ($HOST_ARCH)",
+        "version": "$VERSION".strip(),
+        "runs": $RUNS,
+        "statistic": "median, fresh container per run, image already pulled",
+    },
+    "values": values,
+}
+print(json.dumps(doc, indent=2))
+PY
+)"
+
+if [ -n "$OUT" ]; then
+  printf '%s\n' "$JSON" > "$OUT"
+  note "wrote $OUT"
+else
+  printf '%s\n' "$JSON"
+fi
diff --git a/site/demo.cast b/site/demo.cast
new file mode 100644
index 0000000..fd6446f
--- /dev/null
+++ b/site/demo.cast
@@ -0,0 +1,466 @@
+{"version": 3, "term": {"cols": 100, "rows": 24}, "timestamp": 1789298072, "command": "limactl shell mars-dev bash -lc 'sg docker -c ./site/demo.sh'", "env": {"SHELL": "/bin/zsh"}}
+[0.110, "o", "\u001b[H\u001b[2J\u001b[3J$ d"]
+[0.044, "o", "o"]
+[0.045, "o", "c"]
+[0.044, "o", "k"]
+[0.040, "o", "e"]
+[0.043, "o", "r"]
+[0.046, "o", " "]
+[0.038, "o", "i"]
+[0.039, "o", "n"]
+[0.041, "o", "f"]
+[0.044, "o", "o"]
+[0.047, "o", " "]
+[0.045, "o", "|"]
+[0.044, "o", " "]
+[0.044, "o", "g"]
+[0.047, "o", "r"]
+[0.042, "o", "e"]
+[0.040, "o", "p"]
+[0.047, "o", " "]
+[0.041, "o", "-"]
+[0.037, "o", "i"]
+[0.044, "o", " "]
+[0.041, "o", "'"]
+[0.037, "o", "r"]
+[0.040, "o", "u"]
+[0.036, "o", "n"]
+[0.041, "o", "t"]
+[0.038, "o", "i"]
+[0.044, "o", "m"]
+[0.037, "o", "e"]
+[0.047, "o", "s"]
+[0.039, "o", ":"]
+[0.040, "o", "'"]
+[0.046, "o", "\r\n"]
+[0.447, "o", " Runtimes: io.containerd.runc.v2 mars runc\r\n"]
+[0.001, "o", "\r\n"]
+[1.410, "o", "$ d"]
+[0.043, "o", "o"]
+[0.040, "o", "c"]
+[0.046, "o", "k"]
+[0.038, "o", "e"]
+[0.037, "o", "r"]
+[0.044, "o", " "]
+[0.040, "o", "r"]
+[0.039, "o", "u"]
+[0.038, "o", "n"]
+[0.044, "o", " "]
+[0.040, "o", "-"]
+[0.045, "o", "-"]
+[0.041, "o", "r"]
+[0.039, "o", "m"]
+[0.037, "o", " "]
+[0.045, "o", "-"]
+[0.039, "o", "-"]
+[0.047, "o", "r"]
+[0.038, "o", "u"]
+[0.038, "o", "n"]
+[0.047, "o", "t"]
+[0.044, "o", "i"]
+[0.046, "o", "m"]
+[0.039, "o", "e"]
+[0.038, "o", "="]
+[0.038, "o", "m"]
+[0.042, "o", "a"]
+[0.047, "o", "r"]
+[0.046, "o", "s"]
+[0.043, "o", " "]
+[0.045, "o", "a"]
+[0.041, "o", "l"]
+[0.046, "o", "p"]
+[0.047, "o", "i"]
+[0.044, "o", "n"]
+[0.039, "o", "e"]
+[0.037, "o", ":"]
+[0.037, "o", "3"]
+[0.038, "o", "."]
+[0.046, "o", "2"]
+[0.039, "o", "0"]
+[0.044, "o", " "]
+[0.047, "o", "e"]
+[0.038, "o", "c"]
+[0.038, "o", "h"]
+[0.038, "o", "o"]
+[0.039, "o", " "]
+[0.046, "o", "'"]
+[0.043, "o", "t"]
+[0.046, "o", "h"]
+[0.044, "o", "i"]
+[0.037, "o", "s"]
+[0.047, "o", " "]
+[0.046, "o", "c"]
+[0.046, "o", "o"]
+[0.047, "o", "n"]
+[0.039, "o", "t"]
+[0.043, "o", "a"]
+[0.043, "o", "i"]
+[0.044, "o", "n"]
+[0.039, "o", "e"]
+[0.038, "o", "r"]
+[0.039, "o", " "]
+[0.042, "o", "w"]
+[0.041, "o", "a"]
+[0.043, "o", "s"]
+[0.044, "o", " "]
+[0.045, "o", "c"]
+[0.038, "o", "r"]
+[0.040, "o", "e"]
+[0.046, "o", "a"]
+[0.037, "o", "t"]
+[0.038, "o", "e"]
+[0.044, "o", "d"]
+[0.047, "o", " "]
+[0.046, "o", "b"]
+[0.047, "o", "y"]
+[0.039, "o", " "]
+[0.039, "o", "m"]
+[0.038, "o", "a"]
+[0.039, "o", "r"]
+[0.038, "o", "s"]
+[0.045, "o", "'"]
+[0.044, "o", "\r\n"]
+[0.470, "o", "this container was created by mars\r\n"]
+[0.056, "o", "\r\n"]
+[1.409, "o", "$ d"]
+[0.043, "o", "o"]
+[0.045, "o", "c"]
+[0.045, "o", "k"]
+[0.039, "o", "e"]
+[0.043, "o", "r"]
+[0.047, "o", " "]
+[0.046, "o", "r"]
+[0.037, "o", "u"]
+[0.039, "o", "n"]
+[0.044, "o", " "]
+[0.037, "o", "-"]
+[0.046, "o", "-"]
+[0.039, "o", "r"]
+[0.046, "o", "m"]
+[0.038, "o", " "]
+[0.047, "o", "-"]
+[0.047, "o", "-"]
+[0.040, "o", "r"]
+[0.039, "o", "u"]
+[0.044, "o", "n"]
+[0.046, "o", "t"]
+[0.041, "o", "i"]
+[0.046, "o", "m"]
+[0.037, "o", "e"]
+[0.047, "o", "="]
+[0.042, "o", "m"]
+[0.045, "o", "a"]
+[0.045, "o", "r"]
+[0.039, "o", "s"]
+[0.046, "o", " "]
+[0.038, "o", "-"]
+[0.044, "o", "-"]
+[0.045, "o", "m"]
+[0.038, "o", "e"]
+[0.042, "o", "m"]
+[0.043, "o", "o"]
+[0.036, "o", "r"]
+[0.046, "o", "y"]
+[0.037, "o", "="]
+[0.043, "o", "6"]
+[0.044, "o", "4"]
+[0.046, "o", "m"]
+[0.039, "o", " "]
+[0.039, "o", "a"]
+[0.046, "o", "l"]
+[0.038, "o", "p"]
+[0.046, "o", "i"]
+[0.041, "o", "n"]
+[0.041, "o", "e"]
+[0.046, "o", ":"]
+[0.042, "o", "3"]
+[0.043, "o", "."]
+[0.045, "o", "2"]
+[0.043, "o", "0"]
+[0.038, "o", " "]
+[0.038, "o", "c"]
+[0.046, "o", "a"]
+[0.038, "o", "t"]
+[0.046, "o", " "]
+[0.046, "o", "/"]
+[0.036, "o", "s"]
+[0.045, "o", "y"]
+[0.042, "o", "s"]
+[0.041, "o", "/"]
+[0.042, "o", "f"]
+[0.037, "o", "s"]
+[0.037, "o", "/"]
+[0.039, "o", "c"]
+[0.043, "o", "g"]
+[0.040, "o", "r"]
+[0.037, "o", "o"]
+[0.040, "o", "u"]
+[0.043, "o", "p"]
+[0.044, "o", "/"]
+[0.039, "o", "m"]
+[0.042, "o", "e"]
+[0.046, "o", "m"]
+[0.045, "o", "o"]
+[0.043, "o", "r"]
+[0.040, "o", "y"]
+[0.042, "o", "."]
+[0.047, "o", "m"]
+[0.044, "o", "a"]
+[0.041, "o", "x"]
+[0.042, "o", "\r\n"]
+[0.497, "o", "67108864\r\n"]
+[0.072, "o", "\r\n"]
+[1.403, "o", "$ d"]
+[0.044, "o", "o"]
+[0.042, "o", "c"]
+[0.038, "o", "k"]
+[0.037, "o", "e"]
+[0.038, "o", "r"]
+[0.044, "o", " "]
+[0.046, "o", "r"]
+[0.037, "o", "u"]
+[0.047, "o", "n"]
+[0.041, "o", " "]
+[0.040, "o", "-"]
+[0.042, "o", "-"]
+[0.041, "o", "r"]
+[0.041, "o", "m"]
+[0.040, "o", " "]
+[0.039, "o", "-"]
+[0.046, "o", "-"]
+[0.039, "o", "r"]
+[0.047, "o", "u"]
+[0.044, "o", "n"]
+[0.045, "o", "t"]
+[0.041, "o", "i"]
+[0.046, "o", "m"]
+[0.038, "o", "e"]
+[0.038, "o", "="]
+[0.038, "o", "m"]
+[0.046, "o", "a"]
+[0.043, "o", "r"]
+[0.041, "o", "s"]
+[0.038, "o", " "]
+[0.038, "o", "a"]
+[0.039, "o", "l"]
+[0.045, "o", "p"]
+[0.043, "o", "i"]
+[0.047, "o", "n"]
+[0.037, "o", "e"]
+[0.039, "o", ":"]
+[0.039, "o", "3"]
+[0.045, "o", "."]
+[0.037, "o", "2"]
+[0.046, "o", "0"]
+[0.046, "o", " "]
+[0.039, "o", "p"]
+[0.038, "o", "s"]
+[0.047, "o", " "]
+[0.043, "o", "-"]
+[0.046, "o", "o"]
+[0.040, "o", " "]
+[0.046, "o", "p"]
+[0.040, "o", "i"]
+[0.044, "o", "d"]
+[0.038, "o", ","]
+[0.043, "o", "c"]
+[0.040, "o", "o"]
+[0.039, "o", "m"]
+[0.044, "o", "m"]
+[0.045, "o", "\r\n"]
+[0.494, "o", "PID   COMMAND\r\n    1 ps\r\n"]
+[0.080, "o", "\r\n"]
+[1.408, "o", "$ d"]
+[0.038, "o", "o"]
+[0.043, "o", "c"]
+[0.043, "o", "k"]
+[0.044, "o", "e"]
+[0.044, "o", "r"]
+[0.047, "o", " "]
+[0.040, "o", "r"]
+[0.046, "o", "u"]
+[0.037, "o", "n"]
+[0.036, "o", " "]
+[0.037, "o", "-"]
+[0.046, "o", "-"]
+[0.043, "o", "r"]
+[0.040, "o", "m"]
+[0.037, "o", " "]
+[0.046, "o", "-"]
+[0.047, "o", "-"]
+[0.037, "o", "r"]
+[0.045, "o", "u"]
+[0.037, "o", "n"]
+[0.047, "o", "t"]
+[0.044, "o", "i"]
+[0.038, "o", "m"]
+[0.037, "o", "e"]
+[0.044, "o", "="]
+[0.043, "o", "m"]
+[0.039, "o", "a"]
+[0.037, "o", "r"]
+[0.046, "o", "s"]
+[0.045, "o", " "]
+[0.039, "o", "a"]
+[0.046, "o", "l"]
+[0.039, "o", "p"]
+[0.046, "o", "i"]
+[0.039, "o", "n"]
+[0.038, "o", "e"]
+[0.044, "o", ":"]
+[0.039, "o", "3"]
+[0.046, "o", "."]
+[0.042, "o", "2"]
+[0.037, "o", "0"]
+[0.047, "o", " "]
+[0.038, "o", "r"]
+[0.043, "o", "e"]
+[0.046, "o", "a"]
+[0.043, "o", "d"]
+[0.046, "o", "l"]
+[0.040, "o", "i"]
+[0.046, "o", "n"]
+[0.039, "o", "k"]
+[0.047, "o", " "]
+[0.046, "o", "/"]
+[0.043, "o", "p"]
+[0.042, "o", "r"]
+[0.046, "o", "o"]
+[0.047, "o", "c"]
+[0.047, "o", "/"]
+[0.043, "o", "s"]
+[0.043, "o", "e"]
+[0.045, "o", "l"]
+[0.046, "o", "f"]
+[0.046, "o", "/"]
+[0.046, "o", "n"]
+[0.037, "o", "s"]
+[0.041, "o", "/"]
+[0.039, "o", "p"]
+[0.043, "o", "i"]
+[0.039, "o", "d"]
+[0.043, "o", "\r\n"]
+[0.484, "o", "pid:[4026532481]\r\n"]
+[0.077, "o", "\r\n"]
+[1.404, "o", "$ r"]
+[0.046, "o", "e"]
+[0.038, "o", "a"]
+[0.047, "o", "d"]
+[0.044, "o", "l"]
+[0.047, "o", "i"]
+[0.047, "o", "n"]
+[0.039, "o", "k"]
+[0.046, "o", " "]
+[0.038, "o", "/"]
+[0.041, "o", "p"]
+[0.047, "o", "r"]
+[0.043, "o", "o"]
+[0.044, "o", "c"]
+[0.038, "o", "/"]
+[0.041, "o", "s"]
+[0.041, "o", "e"]
+[0.041, "o", "l"]
+[0.037, "o", "f"]
+[0.037, "o", "/"]
+[0.044, "o", "n"]
+[0.046, "o", "s"]
+[0.039, "o", "/"]
+[0.037, "o", "p"]
+[0.042, "o", "i"]
+[0.039, "o", "d"]
+[0.039, "o", "\r\n"]
+[0.403, "o", "pid:[4026531836]\r\n\r\n"]
+[1.399, "o", "$ d"]
+[0.039, "o", "o"]
+[0.046, "o", "c"]
+[0.044, "o", "k"]
+[0.047, "o", "e"]
+[0.042, "o", "r"]
+[0.038, "o", " "]
+[0.040, "o", "r"]
+[0.042, "o", "u"]
+[0.037, "o", "n"]
+[0.040, "o", " "]
+[0.040, "o", "-"]
+[0.037, "o", "-"]
+[0.042, "o", "r"]
+[0.041, "o", "m"]
+[0.048, "o", " "]
+[0.040, "o", "-"]
+[0.042, "o", "-"]
+[0.040, "o", "r"]
+[0.047, "o", "u"]
+[0.047, "o", "n"]
+[0.044, "o", "t"]
+[0.042, "o", "i"]
+[0.040, "o", "m"]
+[0.043, "o", "e"]
+[0.037, "o", "="]
+[0.046, "o", "m"]
+[0.047, "o", "a"]
+[0.039, "o", "r"]
+[0.040, "o", "s"]
+[0.046, "o", " "]
+[0.047, "o", "a"]
+[0.047, "o", "l"]
+[0.044, "o", "p"]
+[0.045, "o", "i"]
+[0.038, "o", "n"]
+[0.040, "o", "e"]
+[0.046, "o", ":"]
+[0.042, "o", "3"]
+[0.045, "o", "."]
+[0.039, "o", "2"]
+[0.039, "o", "0"]
+[0.041, "o", " "]
+[0.037, "o", "c"]
+[0.038, "o", "a"]
+[0.044, "o", "t"]
+[0.037, "o", " "]
+[0.047, "o", "/"]
+[0.040, "o", "p"]
+[0.043, "o", "r"]
+[0.040, "o", "o"]
+[0.038, "o", "c"]
+[0.037, "o", "/"]
+[0.046, "o", "s"]
+[0.039, "o", "e"]
+[0.045, "o", "l"]
+[0.046, "o", "f"]
+[0.043, "o", "/"]
+[0.038, "o", "s"]
+[0.043, "o", "t"]
+[0.044, "o", "a"]
+[0.043, "o", "t"]
+[0.045, "o", "u"]
+[0.037, "o", "s"]
+[0.039, "o", " "]
+[0.044, "o", "|"]
+[0.046, "o", " "]
+[0.037, "o", "g"]
+[0.044, "o", "r"]
+[0.043, "o", "e"]
+[0.047, "o", "p"]
+[0.045, "o", " "]
+[0.046, "o", "-"]
+[0.044, "o", "E"]
+[0.046, "o", " "]
+[0.040, "o", "'"]
+[0.046, "o", "C"]
+[0.039, "o", "a"]
+[0.045, "o", "p"]
+[0.039, "o", "E"]
+[0.046, "o", "f"]
+[0.043, "o", "f"]
+[0.039, "o", "|"]
+[0.042, "o", "C"]
+[0.038, "o", "a"]
+[0.046, "o", "p"]
+[0.042, "o", "B"]
+[0.046, "o", "n"]
+[0.042, "o", "d"]
+[0.042, "o", "'"]
+[0.045, "o", "\r\n"]
+[0.504, "o", "CapEff:\t00000000a80425fb\r\nCapBnd:\t00000000a80425fb\r\n"]
+[0.058, "o", "\r\n"]
+[3.417, "x", "0"]
diff --git a/site/demo.gif b/site/demo.gif
new file mode 100644
index 0000000..cb842ee
Binary files /dev/null and b/site/demo.gif differ
diff --git a/site/demo.sh b/site/demo.sh
new file mode 100755
index 0000000..ca15c01
--- /dev/null
+++ b/site/demo.sh
@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+set -uo pipefail
+
+export TERM="${TERM:-xterm-256color}"
+PROMPT="${PROMPT:-\$ }"
+SPEED="${SPEED:-0.035}"
+PAUSE="${PAUSE:-1.4}"
+
+type_out() {
+  local text="$1" i
+  printf '%s' "$PROMPT"
+  for ((i = 0; i < ${#text}; i++)); do
+    printf '%s' "${text:i:1}"
+    sleep "$SPEED"
+  done
+  printf '\n'
+}
+
+say() {
+  type_out "$*"
+  sleep 0.4
+  eval "$*"
+  printf '\n'
+  sleep "$PAUSE"
+}
+
+command -v docker >/dev/null || { echo "docker is not installed" >&2; exit 1; }
+docker info >/dev/null 2>&1 || { echo "cannot reach the docker daemon" >&2; exit 1; }
+docker info 2>/dev/null | grep -q ' mars' || {
+  echo "mars is not registered as a docker runtime; run scripts/install-docker-runtime.sh" >&2
+  exit 1
+}
+
+docker image inspect alpine:3.20 >/dev/null 2>&1 || docker pull alpine:3.20 >/dev/null 2>&1
+
+clear
+
+say "docker info | grep -i 'runtimes:'"
+
+say "docker run --rm --runtime=mars alpine:3.20 echo 'this container was created by mars'"
+
+say "docker run --rm --runtime=mars --memory=64m alpine:3.20 cat /sys/fs/cgroup/memory.max"
+
+say "docker run --rm --runtime=mars alpine:3.20 ps -o pid,comm"
+
+say "docker run --rm --runtime=mars alpine:3.20 readlink /proc/self/ns/pid"
+
+say "readlink /proc/self/ns/pid"
+
+say "docker run --rm --runtime=mars alpine:3.20 cat /proc/self/status | grep -E 'CapEff|CapBnd'"
+
+sleep 2
diff --git a/site/index.html b/site/index.html
index 069312b..7b39ed0 100644
--- a/site/index.html
+++ b/site/index.html
@@ -53,6 +53,7 @@ <h1>The layer Docker hides, written out and measured.</h1>
 <div class="page">
   <aside class="toc">
     <ol>
+      <li><a href="#demo">Watch it run</a></li>
       <li><a href="#what">What it is</a></li>
       <li><a href="#install">Install</a></li>
       <li><a href="#quickstart">First container</a></li>
@@ -62,6 +63,7 @@ <h1>The layer Docker hides, written out and measured.</h1>
       <li><a href="#hardening">Hardening</a></li>
       <li><a href="#docker">As a Docker runtime</a></li>
       <li><a href="#tracing">Startup traces</a></li>
+      <li><a href="#numbers">Numbers</a></li>
       <li><a href="#surface">Attack surface</a></li>
       <li><a href="#failures">Failure modes</a></li>
       <li><a href="#production">Before production</a></li>
@@ -71,6 +73,32 @@ <h1>The layer Docker hides, written out and measured.</h1>
 
   <main class="body">
 
+    <section id="demo">
+      <h2>Watch it run</h2>
+
+      <p>
+        Docker, driving <code>mars</code> instead of its usual runtime. A memory limit set on the
+        command line is read back out of the cgroup that <code>mars</code> created and wrote. The
+        container's init is PID 1 in a PID namespace of its own, and it is left holding a bounded
+        capability set rather than the full one it started with.
+      </p>
+
+      <figure class="demo">
+        <img src="demo.gif" alt="A terminal session running containers through docker with the mars runtime, reading back the cgroup memory limit, the PID namespace and the capability set"
+             width="921" height="525" loading="lazy">
+        <figcaption>
+          Recorded by
+          <a href="https://github.com/MarStack-Labs/marstack-container/blob/main/site/demo.sh">site/demo.sh</a>
+          into <a href="demo.cast">demo.cast</a>, an asciinema recording that is plain text you can
+          read line by line. Every line reads kernel state back out rather than trusting what the
+          runtime says it did.
+        </figcaption>
+        <pre><code>asciinema rec --command ./site/demo.sh site/demo.cast
+agg site/demo.cast site/demo.gif</code></pre>
+      </figure>
+    </section>
+
+
     <section id="what">
       <h2>What it is</h2>
       <p>
@@ -288,6 +316,62 @@ <h2>Startup traces</h2>
       </p>
     </section>
 
+    <section id="numbers">
+      <h2>Numbers</h2>
+
+      <p>
+        These are measured by <code>scripts/bench.sh</code> and read from
+        <a href="metrics.json">metrics.json</a> when the page loads, so a figure that has not been
+        measured on the current build shows a dash rather than a number somebody remembered. The
+        attack profile below is the exception and is measured separately, by
+        <code>scripts/hap-bench.sh</code>, because it needs root and ftrace.
+      </p>
+
+      <div class="stats">
+        <dl class="ms-stat" style="--ms-stat-hue: var(--ms-accent)">
+          <dt>Binary</dt>
+          <dd data-metric="binary_bytes" data-unit="mib">&mdash;</dd>
+          <dd class="foot">the whole runtime, statically linked against nothing exotic</dd>
+        </dl>
+        <dl class="ms-stat" style="--ms-stat-hue: var(--ms-ok)">
+          <dt>Direct dependencies</dt>
+          <dd data-metric="deps_direct">&mdash;</dd>
+          <dd class="foot"><span data-metric="deps_total">&mdash;</span> crates in the lock file</dd>
+        </dl>
+        <dl class="ms-stat" style="--ms-stat-hue: var(--ms-info)">
+          <dt>Container start</dt>
+          <dd data-metric="start_mars_ms" data-unit="ms">&mdash;</dd>
+          <dd class="foot">through docker, to a container that has already exited</dd>
+        </dl>
+        <dl class="ms-stat" style="--ms-stat-hue: var(--ms-violet)">
+          <dt>Capabilities kept</dt>
+          <dd data-metric="cap_effective_count">&mdash;</dd>
+          <dd class="foot">read out of <code>/proc/self/status</code> inside the container</dd>
+        </dl>
+        <dl class="ms-stat" style="--ms-stat-hue: var(--ms-cyan)">
+          <dt>OCI assertions passing</dt>
+          <dd data-metric="validation_passed">&mdash;</dd>
+          <dd class="foot">from the runtime-spec validation suite</dd>
+        </dl>
+      </div>
+
+      <p class="method" data-method>
+        Measured on <b data-method-host>&mdash;</b>, <span data-method-os>&mdash;</span>, build
+        <span data-method-version>&mdash;</span>. <span data-method-statistic>&mdash;</span>,
+        <span data-method-runs>&mdash;</span> runs per figure. Last measured
+        <span data-method-date>&mdash;</span>.
+      </p>
+
+      <div class="note" data-tone="warn">
+        <p>
+          <strong>Start latency is the least interesting number on this page.</strong> It is
+          dominated by docker and by image setup, it moves with whatever else the machine is doing,
+          and it says nothing about the thing that actually matters for a runtime. That is the
+          attack profile below, which is why this project measures that instead.
+        </p>
+      </div>
+    </section>
+
     <section id="surface">
       <h2>Attack surface</h2>
       <p>
@@ -413,5 +497,7 @@ <h2>Out of scope</h2>
   <a href="https://github.com/MarStack-Labs/marstack-container">MarStack-Labs/marstack-container</a>
 </footer>
 
+<script src="metrics.js"></script>
+
 </body>
 </html>
diff --git a/site/metrics.js b/site/metrics.js
new file mode 100644
index 0000000..75a44ed
--- /dev/null
+++ b/site/metrics.js
@@ -0,0 +1,76 @@
+(function () {
+  var format = {
+    mib: function (v) {
+      return (v / 1048576).toFixed(1) + " MiB";
+    },
+    "mib-from-kib": function (v) {
+      return (v / 1024).toFixed(0) + " MiB";
+    },
+    duration: function (v) {
+      if (v < 60) return v + " s";
+      var m = v / 60;
+      return (m % 1 === 0 ? m : m.toFixed(1)) + " min";
+    },
+    ms: function (v) {
+      return v >= 1000 ? (v / 1000).toFixed(2) + " s" : Math.round(v) + " ms";
+    },
+    s: function (v) {
+      return v >= 1000 ? (v / 1000).toFixed(2) + " s" : Math.round(v) + " ms";
+    },
+  };
+
+  function paint(doc) {
+    var values = doc.values || {};
+    document.querySelectorAll("[data-metric]").forEach(function (el) {
+      var raw = values[el.getAttribute("data-metric")];
+      if (raw === undefined || raw === null) {
+        el.textContent = "—";
+        el.setAttribute("title", "not measured on this build");
+        return;
+      }
+      var fn = format[el.getAttribute("data-unit")];
+      el.textContent = fn ? fn(raw) : String(raw);
+      el.removeAttribute("title");
+    });
+
+    var method = doc.method || {};
+    var fields = {
+      "[data-method-host]": method.host,
+      "[data-method-os]": method.os,
+      "[data-method-version]": method.version,
+      "[data-method-statistic]": method.statistic,
+      "[data-method-runs]": method.runs,
+      "[data-method-date]": doc.measured_at,
+    };
+    Object.keys(fields).forEach(function (sel) {
+      var el = document.querySelector(sel);
+      if (el) el.textContent = fields[sel] === undefined ? "—" : String(fields[sel]);
+    });
+  }
+
+  fetch("metrics.json", { cache: "no-cache" })
+    .then(function (r) {
+      if (!r.ok) throw new Error(r.status);
+      return r.json();
+    })
+    .then(paint)
+    .catch(function () {
+      var note = document.querySelector("[data-method]");
+      if (note) note.textContent = "No measurements have been published for this build yet.";
+    });
+
+  var shot = document.querySelector(".demo img");
+  if (shot) {
+    shot.addEventListener("error", function () {
+      var fig = shot.closest("figure");
+      if (!fig) return;
+      var box = document.createElement("pre");
+      box.className = "ms-term";
+      box.textContent =
+        "The recording has not been generated for this build.\n" +
+        "Run  asciinema rec --command ./site/demo.sh site/demo.cast\n" +
+        "then  agg site/demo.cast site/demo.gif";
+      fig.replaceChild(box, shot);
+    });
+  }
+})();
diff --git a/site/metrics.json b/site/metrics.json
new file mode 100644
index 0000000..fc001dc
--- /dev/null
+++ b/site/metrics.json
@@ -0,0 +1,20 @@
+{
+  "measured_at": "2026-09-13",
+  "method": {
+    "host": "aarch64 guest under apple, 4 cores",
+    "os": "Linux 6.8.0-134-generic (aarch64)",
+    "version": "mars 0.1.0",
+    "runs": 5,
+    "statistic": "median, fresh container per run, image already pulled"
+  },
+  "values": {
+    "binary_bytes": 3480376,
+    "deps_direct": 12,
+    "deps_total": 80,
+    "start_mars_ms": 117.0,
+    "start_runc_ms": 134.0,
+    "cap_effective_hex": "00000000a80425fb",
+    "cap_effective_count": 14,
+    "validation_passed": 26
+  }
+}
diff --git a/site/site.css b/site/site.css
index 7bf0106..3cd2257 100644
--- a/site/site.css
+++ b/site/site.css
@@ -237,6 +237,61 @@ pre code {
   border-left-color: var(--ms-info);
 }
 
+.demo {
+  margin: var(--ms-sp-5) 0;
+}
+
+.demo img {
+  display: block;
+  width: 100%;
+  height: auto;
+  border: 1px solid var(--ms-border);
+  border-radius: var(--ms-r-md);
+  background: var(--ms-term-bg);
+}
+
+.demo figcaption {
+  margin-top: var(--ms-sp-3);
+  color: var(--ms-fg-faint);
+  font-size: var(--ms-fs-sm);
+}
+
+.stats {
+  display: grid;
+  gap: var(--ms-sp-3);
+  grid-template-columns: repeat(auto-fit, minmax(13rem, 1fr));
+  margin: var(--ms-sp-5) 0;
+}
+
+.stats .ms-stat dd.foot {
+  margin-top: var(--ms-sp-2);
+  color: var(--ms-fg-faint);
+  font-family: var(--ms-font);
+  font-size: var(--ms-fs-xs);
+  font-weight: 400;
+  line-height: 1.5;
+}
+
+.stats .ms-stat dd.foot code {
+  font-size: 0.95em;
+}
+
+.method {
+  margin: var(--ms-sp-4) 0;
+  padding: var(--ms-sp-3) var(--ms-sp-4);
+  border-radius: var(--ms-r-md);
+  background: var(--ms-bg-sunken);
+  color: var(--ms-fg-faint);
+  font-family: var(--ms-font-mono);
+  font-size: var(--ms-fs-xs);
+  line-height: 1.7;
+}
+
+.method b {
+  color: var(--ms-fg-muted);
+  font-weight: 700;
+}
+
 footer.site {
   max-width: 62rem;
   margin: 0 auto;