{ "url": "https://spankbang.party", "auditedAt": "2026-07-27T12:08:35.928Z", "mode": "report", "status": "blocked", "statusDetail": "Audit could not proceed beyond recon. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "page": { "appType": "unknown", "framework": "unknown", "notes": "Target page profile and templates are unknown because only Cloudflare challenge markup was reachable." }, "evidenceUsed": [ "desktop-screenshot", "mobile-screenshot", "dom", "headers", "cookies", "trackers", "discoverability", "secrets", "Modern Web Guidance 0.0.172 search/retrieve" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Desktop view shows the Cloudflare security-verification wall.", "condition": "desktop viewport", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Mobile view shows the same Cloudflare security-verification wall.", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Rendered DOM is Cloudflare challenge markup, not target-site content.", "condition": "default browser navigation", "findingIds": [] }, { "type": "other", "path": "evidence/headers.json", "caption": "Response-header inspection of the Cloudflare challenge response.", "condition": "HTTP 403 challenge response", "findingIds": [] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie inspection of the challenge response.", "condition": "HTTP 403 challenge response", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party origin inspection of the challenge response.", "condition": "HTTP 403 challenge response", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw fetch returned HTTP 403 and 0% target-content coverage.", "condition": "non-JavaScript crawler fetch", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Browser-view screenshot from discoverability capture.", "condition": "JavaScript enabled", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler-view screenshot from discoverability capture.", "condition": "JavaScript disabled", "findingIds": [] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Secret scan of challenge markup found no exposed secret, but could not reach target assets.", "condition": "HTTP 403 challenge response", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 0, "blocked": 58, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": false }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "blocked", "confidence": "high", "method": "Attempted planned a screenshot or computed background under an emulated prefers-color-scheme: dark condition will reveal whether surfaces re-tint; the page css / a color-scheme declaration is corroborating evidence after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "blocked", "confidence": "high", "method": "Attempted planned a transition video, or an in-page probe of getanimations()/computed animation under an emulated prefers-reduced-motion: reduce condition, can show whether motion stops after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "blocked", "confidence": "high", "method": "Attempted planned a screenshot under emulated prefers-contrast: more / forced-colors, or an axe/contrast probe, can show whether controls and text survive after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "blocked", "confidence": "high", "method": "Attempted planned a transition video of a route/state change shows whether it animates; the page source / ::view-transition usage corroborates after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "blocked", "confidence": "high", "method": "Attempted planned source/css inspection for animation-timeline: scroll()/view(); a long-task / scroll-handler probe can flag the main-thread anti-pattern after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "blocked", "confidence": "high", "method": "Attempted planned css inspection for scroll-snap / overscroll-behavior / physics-based easing vs custom pointermove listeners after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "blocked", "confidence": "high", "method": "Attempted planned a transition video of scrolling, or css inspection for scroll-state container queries after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "blocked", "confidence": "high", "method": "Attempted planned css inspection for anchor-name / position-anchor / position-try on overlays; a screenshot of an open overlay near a viewport edge can show drift after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "blocked", "confidence": "high", "method": "Attempted planned css inspection for ::highlight / scroll-marker; a transition video can show whether attention is cued after navigation after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "blocked", "confidence": "high", "method": "Attempted planned a screenshot on load, or a dom probe for full-viewport overlays present before interaction after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "blocked", "confidence": "high", "method": "Attempted planned dom/source inspection for popover / /
vs custom overlay divs with manual dismiss handling after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "blocked", "confidence": "high", "method": "Attempted planned a screenshot plus layout metrics can show the proportion of the viewport given to chrome vs content after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "blocked", "confidence": "high", "method": "Attempted planned layout metrics (scrollwidth vs innerwidth) and a screenshot at an emulated narrow mobile viewport reveal overflow after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "blocked", "confidence": "high", "method": "Attempted planned css inspection for @container / container-type; a computed-style probe of the same component in a wide vs narrow container shows whether it adapts after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "blocked", "confidence": "high", "method": "Attempted planned a focus probe (focus an element, read the computed outline) or an axe target-size check; a screenshot of a focused control corroborates after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "blocked", "confidence": "high", "method": "Attempted planned screenshot the first viewport and key scrolled states; inspect heading structure, nav labels, button text, and visual hierarchy; a task walkthrough can show whether the next action is obvious after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "blocked", "confidence": "high", "method": "Attempted planned run the flow manually with screenshots/dom snapshots at each step; compare expected vs actual path length; inspect form requirements, navigation continuity, and blockers after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "blocked", "confidence": "high", "method": "Attempted planned exercise network delay/failure, invalid input, empty data and success states; screenshot the state messaging and recovery controls; inspect whether browser history and focus remain sensible after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "blocked", "confidence": "high", "method": "Attempted planned lighthouse reports lcp/cls/tbt directly and the model may run it; layout metrics + a layout-shift observer + a long-task observer (the evidence primitives) give the same signal first-party after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "blocked", "confidence": "high", "method": "Attempted planned the layout primitive's cls observer captures shifts; a transition video of the first seconds shows content jumping after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "blocked", "confidence": "high", "method": "Attempted planned the layout primitive records long tasks; a heap summary shows the object population; lighthouse reports tbt after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "blocked", "confidence": "high", "method": "Attempted planned a har summary can reveal cache headers, redirects, render-blocking candidates, weight offenders and dependency shape; a trace/lighthouse insight report can corroborate lcp discovery, render-blocking, font-display and document latency after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "blocked", "confidence": "high", "method": "Attempted planned lighthouse/trace/code-coverage style evidence can flag unused js/css, duplicated javascript and legacy code; a har summary shows third-party byte cost and request count after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "blocked", "confidence": "high", "method": "Attempted planned axe-core (injectable via the evaluate primitive) or lighthouse's a11y audits enumerate these; a dom probe of the accessibility-relevant attributes is a first-party alternative after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "blocked", "confidence": "high", "method": "Attempted planned axe contrast rules, a lighthouse contrast audit, or an in-page probe computing contrast ratios from computed colours after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "blocked", "confidence": "high", "method": "Attempted planned axe/lighthouse structural audits; a focus-walk probe (tab through, read activeelement + computed outline) is a first-party alternative after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "blocked", "confidence": "high", "method": "Attempted planned a screenshot of body and heading text, plus css inspection for text-wrap / text alignment / font fallback handling after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "blocked", "confidence": "high", "method": "Attempted planned lighthouse/axe target-size, meta-viewport and media-caption audits are useful signals; screenshots at narrow and zoomed conditions plus dom/media inspection can corroborate after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "blocked", "confidence": "high", "method": "Attempted planned capture runtime/log cdp events, or a probe that reads collected errors; lighthouse reports this too after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "blocked", "confidence": "high", "method": "Attempted planned a dom/source probe for doctype/charset/img dimensions; css inspection for repetition; lighthouse best-practices audits cover the rest after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "blocked", "confidence": "high", "method": "Attempted planned lighthouse best-practices audits and devtools inspector/deprecation signals can surface these; dom/source probes can verify paste handlers and prompt timing after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "blocked", "confidence": "high", "method": "Attempted planned a dom probe reads and meta[name=description]; lighthouse seo audits cover the same ground after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "blocked", "confidence": "high", "method": "Attempted planned a dom probe for anchor hrefs, viewport meta, and robots; lighthouse seo audits corroborate after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "blocked", "confidence": "high", "method": "Attempted planned inspect response status and headers, <link rel=canonical>, hreflang links, robots meta, robots after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "blocked", "confidence": "high", "method": "Attempted planned inspect json-ld/microdata and social preview tags against visible content; lighthouse has a manual structured-data audit, and ad-hoc probes can parse schema after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "blocked", "confidence": "high", "method": "Attempted planned inspect response headers / page protocol via an evaluate probe or the network layer; lighthouse best-practices flags https and csp issues after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "blocked", "confidence": "high", "method": "Attempted planned inspect network requests and third-party origins; a probe of analytics/beacon calls after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "blocked", "confidence": "high", "method": "Attempted planned a probe for permission requests fired on load; source inspection for passkey / webauthn / navigator after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "blocked", "confidence": "high", "method": "Attempted planned inspect response headers and browser security state; lighthouse/devtools security audits can corroborate hsts, clickjacking, trusted types, origin isolation and third-party cookie findings after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "blocked", "confidence": "high", "method": "Attempted planned load with scripting disabled or compare a no-js fetch of the html against the rendered page; check for baseline-aware fallbacks in source after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "blocked", "confidence": "high", "method": "Attempted planned exercise menus near viewport edges with a screenshot; a probe of async/visibility behaviour after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "blocked", "confidence": "high", "method": "Attempted planned a probe for a service worker registration and a web app manifest; test behaviour offline after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "blocked", "confidence": "high", "method": "Attempted planned simulate failed fetches/offline mode or inspect representative 404/500 routes; screenshots and dom snapshots of error/loading/empty states show whether recovery is possible after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "blocked", "confidence": "high", "method": "Attempted planned a dom probe for <html lang>/dir and css inspection for logical vs physical properties after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "blocked", "confidence": "high", "method": "Attempted planned source inspection for intl after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "blocked", "confidence": "high", "method": "Attempted planned source inspection for time-zone-aware date handling vs naive local date math after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "blocked", "confidence": "high", "method": "Attempted planned a screenshot of consent/upsell/cancel flows; source inspection for declarative button actions vs misleading controls after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "blocked", "confidence": "high", "method": "Attempted planned exercise a form, submit invalid input, and observe timing and clarity of errors via a screenshot or a :user-invalid / aria-invalid probe after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "blocked", "confidence": "high", "method": "Attempted planned source/dom inspection for autocomplete attributes on form fields; a probe of autofill affordances after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "blocked", "confidence": "high", "method": "Attempted planned walkthrough checkout/subscription/auth/account flows when present; screenshot pricing, confirmation, cancellation and reauthentication states; inspect passkey/autocomplete support for sign-in and payment after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "blocked", "confidence": "high", "method": "Attempted planned inspect transferred image bytes vs displayed size; source inspection for modern formats and resolution handling after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "blocked", "confidence": "high", "method": "Attempted planned a long-task / network probe for background fetches and processing while idle or backgrounded after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "blocked", "confidence": "high", "method": "Attempted planned a har summary shows third-party bytes, font/media weight and caching; screenshots/video reveal autoplay and decorative media; trace/layout evidence shows whether media/animation keeps work running after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "blocked", "confidence": "high", "method": "Attempted planned source inspection for webmcp / agentic-tool registration and agent-readable affordances after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "blocked", "confidence": "high", "method": "Attempted planned source inspection for built-in ai (language model / summariser) usage after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "blocked", "confidence": "high", "method": "Attempted planned compare heap snapshots for retained growth - a baseline, then one taken after repeating the interaction with `--interact` about 10x (the memory-tracer methodology: baseline -> repeat -> post -> compare) after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "blocked", "confidence": "high", "method": "Attempted planned a single `heap` summary's totals (nodecount, totalselfsizebytes, constructor population) plus performance after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "blocked", "confidence": "high", "method": "Attempted planned the `heap` summary by constructor (detached* nodes) compared across a before/after pair shows a growing detached-dom population; an `evaluate` probe can sample listener/timer counts (e after browser navigation; recon DOM, desktop/mobile screenshots, and raw fetch were captured.", "evidence": "The browser received only the Cloudflare challenge page titled “Just a moment...” rather than the target site's UI. Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "reason": "Cloudflare interactive bot verification returned an HTTP 403 challenge and remained on “Performing security verification”, preventing access to the site content, routes, and primary flows.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-dom.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "incomplete", "reason": "All 3 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "incomplete", "reason": "All 3 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "incomplete", "reason": "All 3 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "incomplete", "reason": "All 3 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "incomplete", "reason": "All 3 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "support-core-task-success", "expectation": "default", "status": "incomplete", "reason": "All 3 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "incomplete", "reason": "All 5 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "be-inclusive", "expectation": "default", "status": "incomplete", "reason": "All 5 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "follow-best-practices", "expectation": "default", "status": "incomplete", "reason": "All 3 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "be-discoverable", "expectation": "default", "status": "incomplete", "reason": "All 4 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "incomplete", "reason": "All 4 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "be-resilient", "expectation": "contextual", "status": "incomplete", "reason": "All 4 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "incomplete", "reason": "All 3 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "be-trustworthy", "expectation": "default", "status": "incomplete", "reason": "All 4 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "incomplete", "reason": "All 3 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "incomplete", "reason": "All 2 checks are blocked because the target content is behind Cloudflare interactive bot verification." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "incomplete", "reason": "All 3 checks are blocked because the target content is behind Cloudflare interactive bot verification." } ], "paths": [ { "id": "entry", "description": "Entry URL recon for the homepage archetype. Intended route discovery and representative-template selection could not occur because the response was a Cloudflare bot-verification wall. No additional routes were covered because internal navigation and sitemap signals from the target application were inaccessible.", "url": "https://spankbang.party", "conditions": [ "desktop viewport", "viewport: 360x800", "JavaScript-enabled browser", "non-JavaScript crawler fetch" ], "result": "failed" } ], "findings": [], "taskList": [], "budget": { "pathCount": 1, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-27T12-06-39-433Z" }