{ "url": "https://www.gov.br", "auditedAt": "2026-07-18T04:10:00.000Z", "mode": "report", "status": "completed", "statusDetail": "Atomic coverage complete across 58 checks and six representative paths. No source was supplied; critique only.", "page": { "appType": "mpa", "framework": "Plone / server-rendered MPA with legacy jQuery-era bundles", "notes": "Public Brazilian federal portal. Coverage includes home, services listing, service detail, search, editorial redirect and 404. Excludes authenticated post-login workflows, checkout/account management, and agency-specific subsite templates beyond the redirected news listing." }, "evidenceUsed": [ "screenshot", "dom/computed-style", "evaluate probes", "layout/CLS", "trace", "HAR", "Lighthouse", "discoverability/no-JS", "headers", "cookies", "trackers", "secrets", "images", "heap summaries", "robots/sitemap fetch", "Modern Web Guidance search" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "css", "brand-consistent-forms", "adapt-scrollbar-to-contrast-preferences", "accessibility", "directional-navigation-transitions", "carousel-slide-effects", "scrollytelling", "same-document-transitions", "cross-document-transitions", "consistent-cross-document-transitions", "group-element-transitions", "scroll-entry-exit-effects", "shrinking-header-on-scroll", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "stack-drill-down", "swipe-to-remove", "navigation-drawer", "scroll-position-aware-elements", "scrollability-affordance-hints", "scroll-target-on-load", "position-aware-tooltips", "interest-triggered-tooltips", "persistent-toast-notifications", "persistent-app-tours", "resilient-context-menus-and-nested-dropdowns", "carousel-snap-highlights", "pull-to-reveal", "highlight-text-ranges", "declarative-dialog-popover-control", "persistent-top-layer-ui", "search-hidden-content", "light-dismiss-a-dialog", "html", "animate-to-from-top-layer", "defer-rendering-heavy-content", "performance", "improve-text-layout-and-legibility", "efficient-background-processing", "css-layout", "size-aware-styling", "forms", "fluid-scaling", "interactive-content-reveal", "scroll-progress-indicator", "capture-location-agnostic-data", "passkey-reauthentication", "accessible-error-announcement", "required-field-feedback", "stabilize-reactive-state", "webmcp", "optimize-preload-priority", "identify-inp-causes", "optimize-image-priority", "visually-stable-mixed-fonts", "visually-stable-font-fallbacks", "calculate-with-intrinsic-sizes", "schedule-tasks-by-priority", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "reduce-style-repetition", "style-parent-with-has", "branded-select-styling", "precise-text-alignment", "autofill-sign-in-form", "security", "agentic-forms", "passkey-conditional-create", "validate-input-after-interaction", "deliver-optimized-decorative-images", "shaped-cutouts", "translator", "language-detection", "summarizer", "language-model", "passkey-management", "privacy", "passkey-authentication", "passkey-registration", "full-session-analytics", "passkeys", "physics-based-easing", "parallax-scroll-effects", "detect-initial-visibility-state", "batch-analytics-events", "support-global-calendar-systems", "calculate-event-differentials", "manage-recurring-intervals", "model-partial-time-concepts", "coordinate-global-events", "sequence-distributed-events", "select-menu-interaction", "autofill-payment-form", "autofill-address-form", "autofill-sign-up-form", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "agentic-javascript-tools", "faster-spa-view-transitions", "animate-to-intrinsic-sizes", "move-dom-element-without-losing-state" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [ "F04" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [ "F04", "F05", "F06", "F17" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-high-contrast.png", "caption": "home high contrast", "findingIds": [ "F02" ] }, { "type": "screenshot", "path": "evidence/services-mobile.png", "caption": "services mobile", "findingIds": [ "F07" ] }, { "type": "screenshot", "path": "evidence/service-detail-mobile.png", "caption": "service detail mobile", "findingIds": [ "F05", "F10" ] }, { "type": "screenshot", "path": "evidence/search-mobile.png", "caption": "search mobile", "findingIds": [ "F05" ] }, { "type": "screenshot", "path": "evidence/news-mobile.png", "caption": "news mobile", "findingIds": [] }, { "type": "screenshot", "path": "evidence/error-404-mobile.png", "caption": "error 404 mobile", "findingIds": [ "F11" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout", "findingIds": [ "F13" ] }, { "type": "layout", "path": "evidence/services-layout.json", "caption": "services layout", "findingIds": [ "F07" ] }, { "type": "layout", "path": "evidence/service-detail-layout.json", "caption": "service detail layout", "findingIds": [] }, { "type": "layout", "path": "evidence/search-layout.json", "caption": "search layout", "findingIds": [ "F13" ] }, { "type": "layout", "path": "evidence/news-layout.json", "caption": "news layout", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [] }, { "type": "dom", "path": "evidence/home-comprehensive-probe.json", "caption": "home comprehensive probe", "findingIds": [ "F03", "F06", "F08" ] }, { "type": "dom", "path": "evidence/home-css-resource-probe.json", "caption": "home css resource probe", "findingIds": [ "F02", "F03", "F04", "F08", "F14", "F15", "F18", "F24" ] }, { "type": "dom", "path": "evidence/home-accessibility-probe.json", "caption": "home accessibility probe", "findingIds": [ "F09", "F17" ] }, { "type": "dom", "path": "evidence/home-dark-probe.json", "caption": "home dark probe", "findingIds": [ "F01" ] }, { "type": "dom", "path": "evidence/home-motion-probe.json", "caption": "home motion probe", "findingIds": [] }, { "type": "dom", "path": "evidence/home-recon.json", "caption": "home recon", "findingIds": [] }, { "type": "dom", "path": "evidence/service-detail-flow-probe.json", "caption": "service detail flow probe", "findingIds": [ "F10" ] }, { "type": "dom", "path": "evidence/error-404-probe.json", "caption": "error 404 probe", "findingIds": [ "F11" ] }, { "type": "dom", "path": "evidence/home-buttons.json", "caption": "home buttons", "findingIds": [ "F16" ] }, { "type": "other", "path": "evidence/home-memory-metrics-baseline.json", "caption": "home memory metrics baseline", "findingIds": [] }, { "type": "other", "path": "evidence/home-memory-metrics-post.json", "caption": "home memory metrics post", "findingIds": [] }, { "type": "other", "path": "evidence/sitemap-headers.txt", "caption": "sitemap headers", "findingIds": [ "F22" ] }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "home discoverability", "findingIds": [] }, { "type": "discoverability", "path": "evidence/home-discoverability-rendered.png", "caption": "home discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/home-discoverability-crawler.png", "caption": "home discoverability crawler", "findingIds": [] }, { "type": "discoverability", "path": "evidence/news-discoverability.json", "caption": "news discoverability", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "home", "findingIds": [ "F14", "F20", "F23" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F14", "F15", "F20", "F23", "F24" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace", "findingIds": [ "F12" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F12" ] }, { "type": "lighthouse", "path": "evidence/home-lighthouse.json", "caption": "home lighthouse", "findingIds": [ "F12", "F16", "F18" ] }, { "type": "other", "path": "evidence/home-lighthouse-summary.json", "caption": "home lighthouse summary", "findingIds": [ "F09", "F12", "F13", "F15", "F17", "F18" ] }, { "type": "other", "path": "evidence/home-headers.json", "caption": "home headers", "findingIds": [ "F19", "F21" ] }, { "type": "other", "path": "evidence/home-cookies.json", "caption": "home cookies", "findingIds": [ "F19" ] }, { "type": "other", "path": "evidence/home-trackers.json", "caption": "home trackers", "findingIds": [ "F20" ] }, { "type": "other", "path": "evidence/home-secrets.json", "caption": "home secrets", "findingIds": [ "F20" ] }, { "type": "other", "path": "evidence/home-images.json", "caption": "home images", "findingIds": [ "F23" ] }, { "type": "heap", "path": "evidence/home-heap-baseline.json", "caption": "home heap baseline", "findingIds": [] }, { "type": "heap", "path": "evidence/home-heap-post.json", "caption": "home heap post", "findingIds": [] }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots", "findingIds": [ "F22" ] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "sitemap", "findingIds": [ "F22" ] }, { "type": "other", "path": "evidence/guidance-searches.json", "caption": "guidance searches", "findingIds": [] }, { "type": "other", "path": "evidence/guidance-list.json", "caption": "guidance list", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "With prefers-color-scheme: dark emulated, the probe reported color-scheme “normal” and white body/header backgrounds; the dark-condition screenshot remained the light theme.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-dark-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "evaluate under prefers-reduced-motion: reduce found zero active animations and explicit CSS reducing transitions to 0–1 ms.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-motion-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "CSS inspection found zero forced-colors or prefers-contrast rules; the prefers-contrast screenshot was visually unchanged.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-high-contrast.png", "evidence/home-css-resource-probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "The browser exposes document.startViewTransition, but CSS inspection found no view-transition rules across the shared portal shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-comprehensive-probe.json", "evidence/home-css-resource-probe.json" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Stylesheet inspection found no animation-timeline and no main-thread scroll-linked animation; the carousel uses scroll snap rather than scroll handlers.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-css-resource-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Stylesheet inspection found three scroll-snap rules and sampled layouts retained native scrolling with no horizontal fighting on four of five templates.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-css-resource-probe.json", "evidence/home-mobile-layout.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Desktop/mobile screenshots and DOM show stable shared navigation and no jarring scroll-triggered chrome; no harmful JS scroll-state toggling was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "Load screenshots show a custom “Para começar” coachmark fixed beneath the login button; CSS inspection found zero anchor positioning or position-try usage.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-css-resource-probe.json" ], "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "The portal provides five skip links, breadcrumbs on detail/search pages, visible focus and descriptive navigation labels.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-recon.json", "evidence/service-detail-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "Desktop and mobile screenshots show a login coachmark plus a cookie layer dimming the page; on mobile the cookie panel occupies roughly the lower 40% and blocks the service task.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/service-detail-mobile.png", "evidence/search-mobile.png" ], "findingIds": [ "F05" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "DOM inspection found zero dialog, popover or details elements while screenshots show a modal-like cookie layer and coachmark.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-comprehensive-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "After consent UI, screenshots show content-led lists/cards with restrained borders and a clear service-information hierarchy.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/service-detail-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "The services layout primitive measured scrollWidth 364 versus clientWidth 360, a 4 px horizontal overflow; other sampled templates did not overflow.", "pathIds": [ "services" ], "artifacts": [ "evidence/services-layout.json", "evidence/services-mobile.png" ], "findingIds": [ "F07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "Computed-style and stylesheet inspection found no container-type declarations or @container rules despite cards and search components being reused across templates.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-comprehensive-probe.json", "evidence/home-css-resource-probe.json" ], "findingIds": [ "F08" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "Lighthouse failed target-size with seven items; the direct probe found the 28×28 menu trigger, 38×40 voice search and 42×42 carousel controls. Keyboard focus itself was visibly outlined.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-accessibility-probe.json" ], "findingIds": [ "F09" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Homepage H1, search field and service detail “Iniciar” CTA clearly communicate purpose and next action.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-comprehensive-probe.json", "evidence/service-detail-flow-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "On the Income Tax service detail, the green “Iniciar” action is clear but the cookie layer and login coachmark dim and intercept the first interaction until dismissed.", "pathIds": [ "service-detail" ], "artifacts": [ "evidence/service-detail-mobile.png", "evidence/service-detail-flow-probe.json" ], "findingIds": [ "F10" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "The synthetic missing route showed “Desculpe…” but document.title was empty and the main area offered only an Administration contact link, not search, home or back recovery.", "pathIds": [ "error-404" ], "artifacts": [ "evidence/error-404-mobile.png", "evidence/error-404-probe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "Lighthouse measured FCP 8.31 s, LCP 21.09 s and performance 0.47; the raw CDP trace corroborated LCP 6.56 s even under a different run.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json", "evidence/home-trace.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "Homepage mobile CLS was 0.212, Lighthouse CLS was 0.183, and search CLS reached 0.705; all exceed the good threshold of 0.1.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/search-layout.json", "evidence/home-lighthouse-summary.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Trace found one 84 ms long task and only 34 ms TBT; Lighthouse TBT was 40 ms, indicating low blocking despite slow loading.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "HAR captured 111 requests and 6.23 MB transferred, including 19 stylesheets and 34 scripts; DOM confirms many classic scripts have neither async nor defer and the HAR lists numerous VeryHigh parser-inserted stylesheets.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/home-css-resource-probe.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "The shell loads both Font Awesome 5.15.4 and 6.7.1, Swiper 3.4.2 and many page-wide Plone bundles; Lighthouse also reports missing source maps for three large first-party scripts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-css-resource-probe.json", "evidence/home-lighthouse-summary.json", "evidence/home-summary.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "Lighthouse failed button-name and label-content-name-mismatch; direct inspection showed the submit and clear search buttons have no text or aria-label.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-buttons.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Lighthouse accessibility score was 0.92 and did not report a colour-contrast failure; sampled light-theme text and controls remain visibly legible.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "DOM has one main plus nav/header/footer landmarks, a single H1 and ordered H2/H3s; keyboard focus on the first skip link showed a 2 px solid outline.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-comprehensive-probe.json" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Representative mobile and desktop screenshots show readable 16 px body text, clear headings and no clipping once interruption layers are excluded.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/service-detail-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "Lighthouse identified seven insufficiently sized/spaced targets, corroborated by direct measurements down to 28×28 px. Viewport scaling itself is not disabled.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-accessibility-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F17" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Lighthouse did not report runtime JavaScript errors or uncaught exceptions during the audited load.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Direct probe confirmed HTML doctype, UTF-8 charset and responsive viewport; image audit identified asset sizing defects recorded as F23.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-comprehensive-probe.json", "evidence/home-images.json" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "Lighthouse reports broken/missing source maps, two Inspector Issues and a BFCache blocker; the loaded Swiper 3.4.2 stack is also notably old.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-lighthouse-summary.json", "evidence/home-css-resource-probe.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Homepage has title “GOV.BR” and a descriptive Portuguese meta description; sampled service/news pages also expose titles.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-comprehensive-probe.json", "evidence/service-detail-flow-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Raw/rendered comparison retained 91% of homepage content, viewport meta is present, links use hrefs and robots permits ordinary public content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/robots.txt" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "robots.txt advertises sitemap.xml.gz, while a direct sitemap.xml request returned a 403 HTML error. Homepage canonical and indexing otherwise appear correct.", "pathIds": [ "home" ], "artifacts": [ "evidence/robots.txt", "evidence/sitemap.xml", "evidence/sitemap-headers.txt" ], "findingIds": [ "F22" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Homepage contains two JSON-LD blocks and seven Open Graph tags consistent with the visible government portal entity.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-comprehensive-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "The headers primitive found no CSP, HSTS, nosniff, frame protection, Referrer-Policy or Permissions-Policy. Two first-party cookies were not Secure and all three used SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "HAR measured 28 third-party requests and 1.28 MB across seven origins. No known tracker domains or exposed secrets were found, but third-party CDNs and widgets execute before user choice.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/home-trackers.json", "evidence/home-secrets.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "No notification/geolocation prompt appeared on load; the sampled public portal does not itself present a password form, and authentication is handed to the gov.br account service.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/service-detail-flow-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "The main response lacks HSTS, clickjacking protection, Referrer-Policy and Permissions-Policy, with no CSP frame-ancestors fallback.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-headers.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Discoverability comparison found 91% homepage and 100% news content in raw HTML, not JS shells; no-JS users receive a warning while core links/content remain.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/news-discoverability.json", "evidence/home-accessibility-probe.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Sampled listing/detail/search pages rendered stable complete DOM states; menus and consent controls remained within the mobile viewport, though intrusive size is separately reported.", "pathIds": [ "home" ], "artifacts": [ "evidence/services-mobile.png", "evidence/service-detail-mobile.png", "evidence/search-mobile.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-path recon.", "evidence": "The sampled public informational portal is an MPA, not an installable app; offline installation is not a required core task.", "reason": "The sampled public informational portal is an MPA, not an installable app; offline installation is not a required core task.", "pathIds": [ "home" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "A synthetic missing URL returned an explicit Portuguese error heading rather than a blank shell; weak recovery/title is recorded as F11.", "pathIds": [ "home" ], "artifacts": [ "evidence/error-404-probe.json", "evidence/error-404-mobile.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-path recon.", "evidence": "The audited portal is explicitly scoped to Brazilian Portuguese (html lang=pt-br) and no alternate-locale surface was offered in the representative paths.", "reason": "The audited portal is explicitly scoped to Brazilian Portuguese (html lang=pt-br) and no alternate-locale surface was offered in the representative paths.", "pathIds": [ "home" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-path recon.", "evidence": "The sampled public pages contain no user-entered locale-sensitive dates, currencies or calendar transactions to evaluate across locales.", "reason": "The sampled public pages contain no user-entered locale-sensitive dates, currencies or calendar transactions to evaluate across locales.", "pathIds": [ "home" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-path recon.", "evidence": "The sampled paths expose no scheduled cross-time-zone event or time-entry flow.", "reason": "The sampled paths expose no scheduled cross-time-zone event or time-entry flow.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Consent presents equally prominent Reject and Accept controls and a Manage option; no preselected paid continuity or disguised advertising appeared on sampled public paths.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-path recon.", "evidence": "The sampled search has no required fields and the service feedback survey is optional; no required-field validation flow applies.", "reason": "The sampled search has no required fields and the service feedback survey is optional; no required-field validation flow applies.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "The sampled site-level search is type=search and intentionally disables history autocomplete; service feedback radio/textarea controls have explicit labels.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-comprehensive-probe.json", "evidence/service-detail-flow-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-path recon.", "evidence": "No checkout, subscription or account-management flow is hosted on the sampled www.gov.br paths; service authentication is handed off to a separate identity system.", "reason": "No checkout, subscription or account-management flow is hosted on the sampled www.gov.br paths; service authentication is handed off to a separate identity system.", "pathIds": [ "home" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "Images transferred 3.72 MB. The image audit found 18 legacy-format images, 12 without dimensions, 10 without srcset, nine below-fold images not lazy-loaded and four oversized images.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json", "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "F23" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "pass", "confidence": "high", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Trace showed only one short long task and no continuous media/animation work; no known analytics tracker was detected, although network weight is reported separately.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-trackers.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct evidence review using the listed browser artifact(s).", "evidence": "The HAR transferred 1.43 MB of fonts and 1.28 MB from third parties before interaction, including duplicate Font Awesome generations.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-css-resource-probe.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-path recon.", "evidence": "No declared agent-facing scope or WebMCP capability exists; this emerging check is an opportunity rather than a requirement for the public portal run.", "reason": "No declared agent-facing scope or WebMCP capability exists; this emerging check is an opportunity rather than a requirement for the public portal run.", "pathIds": [ "home" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-path recon.", "evidence": "No user task in the sampled public portal calls for on-device language-model or summarisation inference.", "reason": "No user task in the sampled public portal calls for on-device language-model or summarisation inference.", "pathIds": [ "home" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Direct browser evidence and check-specific inspection.", "evidence": "After ten cookie-settings open/close cycles, heap self-size rose only 1.5% (28.81 MB to 29.24 MB) and a separate memory probe showed used heap lower post-interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-baseline.json", "evidence/home-heap-post.json", "evidence/home-memory-metrics-baseline.json", "evidence/home-memory-metrics-post.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Baseline heap was 28.81 MB with 455,601 snapshot nodes, proportionate for the large legacy portal shell though heavier than ideal.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Direct browser evidence and check-specific inspection.", "evidence": "Heap summaries exposed no top Detached* constructor and DOM count stayed 5,675 before/after the repeated cookie interaction; no accumulating visible state remained.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-baseline.json", "evidence/home-heap-post.json", "evidence/home-memory-metrics-post.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F05", "F06" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08", "F09" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F11" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F12", "F13", "F14", "F15" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F16", "F17" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F18" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F22" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F19", "F20", "F21" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "not-applicable", "reason": "The audited portal is explicitly scoped to Brazilian Portuguese (html lang=pt-br) and no alternate-locale surface was offered in the representative paths. The sampled public pages contain no user-entered locale-sensitive dates, currencies or calendar transactions to evaluate across locales. The sampled paths expose no scheduled cross-time-zone event or time-entry flow." }, { "principleId": "be-trustworthy", "expectation": "default", "status": "pass" }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F23", "F24" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No declared agent-facing scope or WebMCP capability exists; this emerging check is an opportunity rather than a requirement for the public portal run. No user task in the sampled public portal calls for on-device language-model or summarisation inference." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Homepage and global portal shell; represents navigation, service discovery, consent and shared chrome.", "url": "https://www.gov.br/pt-br", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "prefers-contrast: more", "keyboard focus" ], "result": "issues" }, { "id": "services", "description": "Services listing; represents category/listing templates and mobile browsing.", "url": "https://www.gov.br/pt-br/servicos", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "service-detail", "description": "Income-tax service detail; represents a high-value government task and its start handoff.", "url": "https://www.gov.br/pt-br/servicos/consultar-meu-imposto-de-renda", "conditions": [ "viewport: 360x800", "form and primary-action inspection" ], "result": "issues" }, { "id": "search", "description": "Search results for “imposto de renda”; represents query, results and service-finding flow.", "url": "https://www.gov.br/pt-br/search?SearchableText=imposto%20de%20renda", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "news", "description": "News listing redirect; represents editorial content and crawler-visible content.", "url": "https://www.gov.br/pt-br/noticias", "conditions": [ "viewport: 360x800", "JavaScript disabled crawler comparison" ], "result": "pass" }, { "id": "error-404", "description": "Synthetic missing route; represents HTTP failure and recovery state.", "url": "https://www.gov.br/pt-br/definitely-not-a-real-page-web-uplift", "conditions": [ "viewport: 360x800" ], "result": "issues" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "summary": "The portal ignores the user’s dark-colour preference.", "evidence": "With prefers-color-scheme: dark emulated, the probe reported color-scheme “normal” and white body/header backgrounds; the dark-condition screenshot remained the light theme.", "suggestedFix": "Declare color-scheme and provide preference-driven light/dark surface and text tokens using prefers-color-scheme or light-dark().", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-dark.png", "evidence/home-dark-probe.json" ] }, { "id": "F02", "severity": "low", "confidence": "high", "summary": "There is no explicit high-contrast or forced-colours adaptation.", "evidence": "CSS inspection found zero forced-colors or prefers-contrast rules; the prefers-contrast screenshot was visually unchanged.", "suggestedFix": "Add forced-colors and prefers-contrast adaptations for essential controls, focus indicators and scroll affordances.", "effort": "small", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "guidanceId": "adapt-scrollbar-to-contrast-preferences", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-high-contrast.png", "evidence/home-css-resource-probe.json" ] }, { "id": "F03", "severity": "low", "confidence": "high", "summary": "Route and major state changes do not use View Transitions.", "evidence": "The browser exposes document.startViewTransition, but CSS inspection found no view-transition rules across the shared portal shell.", "suggestedFix": "Progressively enhance same- and cross-document navigation with directional View Transitions while respecting reduced motion.", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "directional-navigation-transitions", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-comprehensive-probe.json", "evidence/home-css-resource-probe.json" ] }, { "id": "F04", "severity": "low", "confidence": "high", "summary": "The login coachmark is manually positioned instead of anchored and collision-aware.", "evidence": "Load screenshots show a custom “Para começar” coachmark fixed beneath the login button; CSS inspection found zero anchor positioning or position-try usage.", "suggestedFix": "Anchor the coachmark to its trigger with CSS anchor positioning and fallback positions, retaining a non-supporting-browser fallback.", "effort": "small", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "provide-guided-navigation", "principleCheckId": "anchored-positioning", "guidanceId": "position-aware-tooltips", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-css-resource-probe.json" ] }, { "id": "F05", "severity": "high", "confidence": "high", "summary": "Two simultaneous load-time interruptions obscure the primary content.", "evidence": "Desktop and mobile screenshots show a login coachmark plus a cookie layer dimming the page; on mobile the cookie panel occupies roughly the lower 40% and blocks the service task.", "suggestedFix": "Remove the automatic login coachmark and redesign consent as a compact, non-obscuring notice with equal choices and persistent preferences.", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-mobile.png", "evidence/service-detail-mobile.png", "evidence/search-mobile.png" ] }, { "id": "F06", "severity": "medium", "confidence": "high", "summary": "Transient overlays use custom elements rather than semantic platform primitives.", "evidence": "DOM inspection found zero dialog, popover or details elements while screenshots show a modal-like cookie layer and coachmark.", "suggestedFix": "Use dialog for modal consent and popover with declarative light-dismiss for the coachmark/menu, with correct focus handling.", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-comprehensive-probe.json", "evidence/home-mobile.png" ] }, { "id": "F07", "severity": "low", "confidence": "high", "summary": "The services listing overflows slightly at a 360 px viewport.", "evidence": "The services layout primitive measured scrollWidth 364 versus clientWidth 360, a 4 px horizontal overflow; other sampled templates did not overflow.", "suggestedFix": "Remove the overflowing fixed spacing/width and use intrinsic sizing so every shared listing component fits its viewport.", "effort": "small", "pathId": "services", "url": "https://www.gov.br/pt-br/servicos", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "css", "guidanceCategory": "css", "artifacts": [ "evidence/services-layout.json", "evidence/services-mobile.png" ] }, { "id": "F08", "severity": "low", "confidence": "high", "summary": "Shared components rely on viewport rules rather than container-level responsiveness.", "evidence": "Computed-style and stylesheet inspection found no container-type declarations or @container rules despite cards and search components being reused across templates.", "suggestedFix": "Introduce container queries for reusable cards, search and navigation modules, with viewport fallbacks where needed.", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-comprehensive-probe.json", "evidence/home-css-resource-probe.json" ] }, { "id": "F09", "severity": "medium", "confidence": "high", "summary": "Several controls and links are below the recommended touch target size.", "evidence": "Lighthouse failed target-size with seven items; the direct probe found the 28×28 menu trigger, 38×40 voice search and 42×42 carousel controls. Keyboard focus itself was visibly outlined.", "suggestedFix": "Increase interactive hit areas to at least 44×44 CSS px or provide equivalent spacing without changing visual icon size.", "effort": "small", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "css", "guidanceCategory": "css", "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-accessibility-probe.json" ] }, { "id": "F10", "severity": "medium", "confidence": "high", "summary": "The service start path is initially blocked by stacked overlays.", "evidence": "On the Income Tax service detail, the green “Iniciar” action is clear but the cookie layer and login coachmark dim and intercept the first interaction until dismissed.", "suggestedFix": "Ensure the primary service action is operable immediately, with consent presented without covering or trapping the task.", "effort": "medium", "pathId": "service-detail", "url": "https://www.gov.br/pt-br/servicos/consultar-meu-imposto-de-renda", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "forms", "artifacts": [ "evidence/service-detail-mobile.png", "evidence/service-detail-flow-probe.json" ] }, { "id": "F11", "severity": "medium", "confidence": "high", "summary": "The 404 state gives weak recovery and has an empty document title.", "evidence": "The synthetic missing route showed “Desculpe…” but document.title was empty and the main area offered only an Administration contact link, not search, home or back recovery.", "suggestedFix": "Set a descriptive 404 title and provide prominent search, homepage and back actions while preserving the requested context.", "effort": "small", "pathId": "error-404", "url": "https://www.gov.br/pt-br/definitely-not-a-real-page-web-uplift", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "user-experience", "artifacts": [ "evidence/error-404-mobile.png", "evidence/error-404-probe.json" ] }, { "id": "F12", "severity": "high", "confidence": "high", "summary": "Cold-load performance is poor, especially LCP.", "evidence": "Lighthouse measured FCP 8.31 s, LCP 21.09 s and performance 0.47; the raw CDP trace corroborated LCP 6.56 s even under a different run.", "suggestedFix": "Prioritise the actual LCP resource, reduce critical chains, defer nonessential code and test under representative mobile network conditions.", "effort": "large", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-lighthouse-summary.json", "evidence/home-trace-summary.json", "evidence/home-trace.json" ] }, { "id": "F13", "severity": "high", "confidence": "high", "summary": "Late content causes substantial layout movement.", "evidence": "Homepage mobile CLS was 0.212, Lighthouse CLS was 0.183, and search CLS reached 0.705; all exceed the good threshold of 0.1.", "suggestedFix": "Reserve space for banners, search results, consent/accessibility widgets, images and late fonts; trace the 0.53 search shift to its source.", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-fast-and-stable", "principleCheckId": "visual-stability", "guidanceId": "css", "guidanceCategory": "css", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/search-layout.json", "evidence/home-lighthouse-summary.json" ] }, { "id": "F14", "severity": "high", "confidence": "high", "summary": "The critical resource graph is large and parser-blocking.", "evidence": "HAR captured 111 requests and 6.23 MB transferred, including 19 stylesheets and 34 scripts; DOM confirms many classic scripts have neither async nor defer and the HAR lists numerous VeryHigh parser-inserted stylesheets.", "suggestedFix": "Bundle and remove legacy page-wide assets, defer noncritical scripts, trim stylesheet chains and apply useful caching.", "effort": "large", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "performance", "guidanceCategory": "performance", "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/home-css-resource-probe.json" ] }, { "id": "F15", "severity": "medium", "confidence": "high", "summary": "Legacy and duplicated libraries inflate every portal page.", "evidence": "The shell loads both Font Awesome 5.15.4 and 6.7.1, Swiper 3.4.2 and many page-wide Plone bundles; Lighthouse also reports missing source maps for three large first-party scripts.", "suggestedFix": "Inventory real route usage, remove duplicate icon/font stacks, code-split optional modules and modernise or eliminate legacy bundles.", "effort": "large", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "artifacts": [ "evidence/home-css-resource-probe.json", "evidence/home-lighthouse-summary.json", "evidence/home-summary.json" ] }, { "id": "F16", "severity": "medium", "confidence": "high", "summary": "At least one search button lacks an accessible name.", "evidence": "Lighthouse failed button-name and label-content-name-mismatch; direct inspection showed the submit and clear search buttons have no text or aria-label.", "suggestedFix": "Give icon-only controls stable accessible names and ensure visible labels match their computed accessible names.", "effort": "small", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-buttons.json" ] }, { "id": "F17", "severity": "medium", "confidence": "high", "summary": "Touch target sizing reduces inclusive operability.", "evidence": "Lighthouse identified seven insufficiently sized/spaced targets, corroborated by direct measurements down to 28×28 px. Viewport scaling itself is not disabled.", "suggestedFix": "Increase hit areas/spacing and verify at 200% zoom and narrow reflow without overlap.", "effort": "small", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-lighthouse-summary.json", "evidence/home-accessibility-probe.json", "evidence/home-mobile.png" ] }, { "id": "F18", "severity": "medium", "confidence": "high", "summary": "The page has browser-platform hygiene failures.", "evidence": "Lighthouse reports broken/missing source maps, two Inspector Issues and a BFCache blocker; the loaded Swiper 3.4.2 stack is also notably old.", "suggestedFix": "Resolve Inspector Issues, publish valid source maps, remove BFCache blockers and review old dependencies for supported versions and known vulnerabilities.", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "security", "guidanceCategory": "security", "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-lighthouse-summary.json", "evidence/home-css-resource-probe.json" ] }, { "id": "F19", "severity": "high", "confidence": "high", "summary": "Core transport defenses and cookie attributes are missing.", "evidence": "The headers primitive found no CSP, HSTS, nosniff, frame protection, Referrer-Policy or Permissions-Policy. Two first-party cookies were not Secure and all three used SameSite=None.", "suggestedFix": "Set a restrictive CSP, HSTS, nosniff, frame-ancestors, Referrer-Policy and Permissions-Policy; mark cookies Secure and use Lax/Strict unless cross-site use is essential.", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json" ] }, { "id": "F20", "severity": "medium", "confidence": "high", "summary": "The shared shell has a large third-party footprint.", "evidence": "HAR measured 28 third-party requests and 1.28 MB across seven origins. No known tracker domains or exposed secrets were found, but third-party CDNs and widgets execute before user choice.", "suggestedFix": "Self-host essential stable assets, defer optional widgets until needed/consented and document each third party’s data purpose.", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/home-trackers.json", "evidence/home-secrets.json" ] }, { "id": "F21", "severity": "medium", "confidence": "high", "summary": "Browser-enforced defensive policies are absent.", "evidence": "The main response lacks HSTS, clickjacking protection, Referrer-Policy and Permissions-Policy, with no CSP frame-ancestors fallback.", "suggestedFix": "Deploy HSTS and CSP frame-ancestors, then set least-privilege referrer and permissions policies; consider Trusted Types for XSS-sensitive surfaces.", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "artifacts": [ "evidence/home-headers.json" ] }, { "id": "F22", "severity": "low", "confidence": "high", "summary": "The sitemap advertised to crawlers is not directly retrievable at its plain URL.", "evidence": "robots.txt advertises sitemap.xml.gz, while a direct sitemap.xml request returned a 403 HTML error. Homepage canonical and indexing otherwise appear correct.", "suggestedFix": "Ensure the advertised compressed sitemap is consistently reachable and return a clear redirect or valid sitemap at sitemap.xml if it is publicly linked.", "effort": "small", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "html", "artifacts": [ "evidence/robots.txt", "evidence/sitemap.xml", "evidence/sitemap-headers.txt" ] }, { "id": "F23", "severity": "high", "confidence": "high", "summary": "Image delivery is disproportionately heavy for a portal homepage.", "evidence": "Images transferred 3.72 MB. The image audit found 18 legacy-format images, 12 without dimensions, 10 without srcset, nine below-fold images not lazy-loaded and four oversized images.", "suggestedFix": "Generate AVIF/WebP variants and responsive srcsets, lazy-load below-fold imagery, include dimensions and avoid loading hidden carousel candidates.", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "performance", "artifacts": [ "evidence/home-images.json", "evidence/home-summary.json", "evidence/home.har" ] }, { "id": "F24", "severity": "medium", "confidence": "high", "summary": "Fonts and third-party resources consume a large baseline budget.", "evidence": "The HAR transferred 1.43 MB of fonts and 1.28 MB from third parties before interaction, including duplicate Font Awesome generations.", "suggestedFix": "Subset/self-host fonts, remove duplicate icon families and defer optional accessibility/legacy-update widgets without reducing essential accessibility.", "effort": "medium", "pathId": "home", "url": "https://www.gov.br/pt-br", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "artifacts": [ "evidence/home-summary.json", "evidence/home-css-resource-probe.json" ] } ], "taskList": [ { "id": "T01", "title": "Bundle and remove legacy page-wide assets, defer noncritical scripts, trim stylesheet chains and apply useful caching.", "priority": 1, "findingIds": [ "F14" ], "guidanceId": "performance", "status": "open" }, { "id": "T02", "title": "Reserve space for banners, search results, consent/accessibility widgets, images and late fonts; trace the 0.53 search shift to its source.", "priority": 2, "findingIds": [ "F13" ], "guidanceId": "css", "status": "open" }, { "id": "T03", "title": "Set a restrictive CSP, HSTS, nosniff, frame-ancestors, Referrer-Policy and Permissions-Policy; mark cookies Secure and use Lax/Strict unless cross-site use is essential.", "priority": 3, "findingIds": [ "F19" ], "guidanceId": "security", "status": "open" }, { "id": "T04", "title": "Prioritise the actual LCP resource, reduce critical chains, defer nonessential code and test under representative mobile network conditions.", "priority": 4, "findingIds": [ "F12" ], "guidanceId": "performance", "status": "open" }, { "id": "T05", "title": "Remove the automatic login coachmark and redesign consent as a compact, non-obscuring notice with equal choices and persistent preferences.", "priority": 5, "findingIds": [ "F05" ], "guidanceId": "light-dismiss-a-dialog", "status": "open" }, { "id": "T06", "title": "Generate AVIF/WebP variants and responsive srcsets, lazy-load below-fold imagery, include dimensions and avoid loading hidden carousel candidates.", "priority": 6, "findingIds": [ "F23" ], "guidanceId": "deliver-optimized-decorative-images", "status": "open" }, { "id": "T07", "title": "Inventory real route usage, remove duplicate icon/font stacks, code-split optional modules and modernise or eliminate legacy bundles.", "priority": 7, "findingIds": [ "F15" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T08", "title": "Self-host essential stable assets, defer optional widgets until needed/consented and document each third party’s data purpose.", "priority": 8, "findingIds": [ "F20" ], "guidanceId": "privacy", "status": "open" }, { "id": "T09", "title": "Deploy HSTS and CSP frame-ancestors, then set least-privilege referrer and permissions policies; consider Trusted Types for XSS-sensitive surfaces.", "priority": 9, "findingIds": [ "F21" ], "guidanceId": "security", "status": "open" }, { "id": "T10", "title": "Give icon-only controls stable accessible names and ensure visible labels match their computed accessible names.", "priority": 10, "findingIds": [ "F16" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T11", "title": "Increase hit areas/spacing and verify at 200% zoom and narrow reflow without overlap.", "priority": 11, "findingIds": [ "F17" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T12", "title": "Ensure the primary service action is operable immediately, with consent presented without covering or trapping the task.", "priority": 12, "findingIds": [ "F10" ], "guidanceId": "forms", "status": "open" }, { "id": "T13", "title": "Set a descriptive 404 title and provide prominent search, homepage and back actions while preserving the requested context.", "priority": 13, "findingIds": [ "F11" ], "guidanceId": "persistent-toast-notifications", "status": "open" }, { "id": "T14", "title": "Resolve Inspector Issues, publish valid source maps, remove BFCache blockers and review old dependencies for supported versions and known vulnerabilities.", "priority": 14, "findingIds": [ "F18" ], "guidanceId": "security", "status": "open" }, { "id": "T15", "title": "Use dialog for modal consent and popover with declarative light-dismiss for the coachmark/menu, with correct focus handling.", "priority": 15, "findingIds": [ "F06" ], "guidanceId": "light-dismiss-a-dialog", "status": "open" }, { "id": "T16", "title": "Subset/self-host fonts, remove duplicate icon families and defer optional accessibility/legacy-update widgets without reducing essential accessibility.", "priority": 16, "findingIds": [ "F24" ], "guidanceId": "deprioritize-background-fetches", "status": "open" }, { "id": "T17", "title": "Declare color-scheme and provide preference-driven light/dark surface and text tokens using prefers-color-scheme or light-dark().", "priority": 17, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T18", "title": "Increase interactive hit areas to at least 44×44 CSS px or provide equivalent spacing without changing visual icon size.", "priority": 18, "findingIds": [ "F09" ], "guidanceId": "css", "status": "open" }, { "id": "T19", "title": "Remove the overflowing fixed spacing/width and use intrinsic sizing so every shared listing component fits its viewport.", "priority": 19, "findingIds": [ "F07" ], "guidanceId": "css", "status": "open" }, { "id": "T20", "title": "Introduce container queries for reusable cards, search and navigation modules, with viewport fallbacks where needed.", "priority": 20, "findingIds": [ "F08" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T21", "title": "Ensure the advertised compressed sitemap is consistently reachable and return a clear redirect or valid sitemap at sitemap.xml if it is publicly linked.", "priority": 21, "findingIds": [ "F22" ], "guidanceId": "html", "status": "open" }, { "id": "T22", "title": "Add forced-colors and prefers-contrast adaptations for essential controls, focus indicators and scroll affordances.", "priority": 22, "findingIds": [ "F02" ], "guidanceId": "adapt-scrollbar-to-contrast-preferences", "status": "open" }, { "id": "T23", "title": "Progressively enhance same- and cross-document navigation with directional View Transitions while respecting reduced motion.", "priority": 23, "findingIds": [ "F03" ], "guidanceId": "directional-navigation-transitions", "status": "open" }, { "id": "T24", "title": "Anchor the coachmark to its trigger with CSS anchor positioning and fallback positions, retaining a non-supporting-browser fallback.", "priority": 24, "findingIds": [ "F04" ], "guidanceId": "position-aware-tooltips", "status": "open" } ], "budget": { "wallClockSeconds": 900, "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-18T03-58-57-364Z" }