{ "url": "https://www.jalan.net", "auditedAt": "2026-07-18T13:02:34.322Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete model-led audit of seven representative paths. Checkout/payment completion, authenticated account management, localized-language variants, and individual hotel detail pages were not covered; sampled archetypes represent their shared legacy/new template families.", "page": { "appType": "mpa", "framework": "mixed legacy server-rendered templates with newer responsive modules", "notes": "Large Japanese travel-commerce MPA. Several legacy desktop-width templates coexist with a responsive activity template." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "discoverability", "trace", "har", "headers", "cookies", "trackers", "secrets", "images", "lighthouse", "heap-summary comparison", "HTTP/robots probes", "Modern Web Guidance search/retrieve" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The dark-mode screenshot remains the same white/orange fixed palette, and the computed root colorScheme is normal.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark-reduced.png" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "medium", "method": "evaluate under prefers-reduced-motion: reduce", "evidence": "Reduced-motion emulation matched reduce and getAnimations() returned none.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-reduced-motion.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "medium", "method": "forced-colors screenshot review", "evidence": "Forced-colors capture retains visible text, controls, borders, and focus affordances.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-forced-contrast.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The page probe found no view-transition rules, and representative navigation is conventional full-document switching without continuity.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/CSS inspection for a relevant feature or user need.", "evidence": "No applicable feature or task was present in the representative scope.", "reason": "No scroll-linked animation was present to implement.", "pathIds": [ "home" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/CSS inspection for a relevant feature or user need.", "evidence": "No applicable feature or task was present in the representative scope.", "reason": "No gesture-driven interaction was present in the sampled booking and content surfaces.", "pathIds": [ "home" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Home and travel screenshots show long, dense pages with static chrome; probes found no container or transition treatment to reflect scroll state or guide in-page jumps.", "pathIds": [ "home", "travel" ], "artifacts": [ "evidence/home-mobile.png", "evidence/travel-mobile.png", "evidence/home-probe.json" ], "findingIds": [ "F06" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Home and travel screenshots show long, dense pages with static chrome; probes found no container or transition treatment to reflect scroll state or guide in-page jumps.", "pathIds": [ "home", "travel" ], "artifacts": [ "evidence/home-mobile.png", "evidence/travel-mobile.png", "evidence/home-probe.json" ], "findingIds": [ "F06" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Home and travel screenshots show long, dense pages with static chrome; probes found no container or transition treatment to reflect scroll state or guide in-page jumps.", "pathIds": [ "home", "travel" ], "artifacts": [ "evidence/home-mobile.png", "evidence/travel-mobile.png", "evidence/home-probe.json" ], "findingIds": [ "F06" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "medium", "method": "visual review across representative initial states", "evidence": "All sampled initial-load screenshots exposed page content without a blocking modal or consent wall.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/hokkaido-mobile.png", "evidence/travel-mobile.png", "evidence/login-mobile.png", "evidence/search-tokyo-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The homepage mobile capture is dominated by tiny banners, side rails, coupons, and repeated campaign tiles around the search form.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-desktop.png" ], "findingIds": [ "F07" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The homepage mobile capture is dominated by tiny banners, side rails, coupons, and repeated campaign tiles around the search form.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-desktop.png" ], "findingIds": [ "F07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "At a 360px viewport the homepage uses an effective 1146px layout; Hokkaido, travel, login, and results are visibly miniaturized. Only the activity template is meaningfully responsive.", "pathIds": [ "home", "travel", "login" ], "artifacts": [ "evidence/home-mobile.png", "evidence/hokkaido-mobile.png", "evidence/travel-mobile.png", "evidence/login-mobile.png", "evidence/search-tokyo-mobile.png" ], "findingIds": [ "F02" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The page probe found zero container rules, while the same global chrome and card/search modules are reused inside fixed-width shells.", "pathIds": [ "home", "travel", "login" ], "artifacts": [ "evidence/home-probe.json", "evidence/home-mobile.png", "evidence/hokkaido-mobile.png", "evidence/travel-mobile.png", "evidence/login-mobile.png", "evidence/search-tokyo-mobile.png" ], "findingIds": [ "F03" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The focus probe measured many primary links at 11 to 30px high, and Lighthouse target-size failed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-focus-targets.json" ], "findingIds": [ "F04" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "medium", "method": "first-viewport screenshot and heading review", "evidence": "Homepage and activity captures clearly identify accommodation/activity search and expose search controls prominently.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/activity-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "At a 360px viewport the homepage uses an effective 1146px layout; Hokkaido, travel, login, and results are visibly miniaturized. Only the activity template is meaningfully responsive.", "pathIds": [ "home", "travel", "login" ], "artifacts": [ "evidence/home-mobile.png", "evidence/hokkaido-mobile.png", "evidence/travel-mobile.png", "evidence/login-mobile.png", "evidence/search-tokyo-mobile.png" ], "findingIds": [ "F02" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "medium", "method": "404 screenshot and DOM probe", "evidence": "The tested 404 states that the page does not exist and provides Japanese and English links back to the homepage.", "pathIds": [ "home" ], "artifacts": [ "evidence/404-mobile.png", "evidence/404-probe.json", "evidence/http-probes.txt" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Trace measured FCP 7.18s, LCP 7.70s and 532ms TBT; Lighthouse under mobile throttling measured LCP 60.2s, CLS 0.184, and 3,350ms TBT with a performance score of 0.17.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-lighthouse.json", "evidence/home-summary.json", "evidence/home-mobile-layout.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Trace measured FCP 7.18s, LCP 7.70s and 532ms TBT; Lighthouse under mobile throttling measured LCP 60.2s, CLS 0.184, and 3,350ms TBT with a performance score of 0.17.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-lighthouse.json", "evidence/home-summary.json", "evidence/home-mobile-layout.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Trace measured FCP 7.18s, LCP 7.70s and 532ms TBT; Lighthouse under mobile throttling measured LCP 60.2s, CLS 0.184, and 3,350ms TBT with a performance score of 0.17.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-lighthouse.json", "evidence/home-summary.json", "evidence/home-mobile-layout.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "HAR recorded 481 requests and 5.84MB transferred, including 154 scripts; 276 third-party requests transferred 4.56MB and ten parser-inserted stylesheets were flagged as render-blocking candidates.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Lighthouse estimated 2,649 KiB of unused JavaScript and 37 KiB of unused CSS; HAR attributes 4.36MB to scripts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Image audit found 55 of 100 images missing alt; Lighthouse failed image-alt and identified unlabeled date/person controls, while activity/login probes found 12 and 3 unlabeled controls.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-images.json", "evidence/home-focus-targets.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Lighthouse reported multiple failures, including 3.35:1 placeholder text and 3.27:1 date text where 4.5:1 is required.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-forced-contrast.png" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The homepage contains many empty H2 elements, Lighthouse found a skipped heading level and unnamed links, and several controls are JavaScript anchors.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/home-lighthouse.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Lighthouse reported multiple failures, including 3.35:1 placeholder text and 3.27:1 date text where 4.5:1 is required.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-forced-contrast.png" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Fixed 1000 to 1146px shells are scaled into 360px viewports, login lacks viewport metadata, and Lighthouse target-size failed.", "pathIds": [ "home", "travel", "login" ], "artifacts": [ "evidence/home-mobile.png", "evidence/hokkaido-mobile.png", "evidence/travel-mobile.png", "evidence/login-mobile.png", "evidence/search-tokyo-mobile.png" ], "findingIds": [ "F14" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Lighthouse failed errors-in-console with nine captured items and reported an inspector issue plus invalid source maps.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse.json" ], "findingIds": [ "F15" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Image audit found 23 images without dimensions, 30 below-fold images not lazy-loaded, 38 without srcset, and 82 legacy-format images.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json" ], "findingIds": [ "F16" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Lighthouse failed errors-in-console with nine captured items and reported an inspector issue plus invalid source maps.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-lighthouse.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "medium", "method": "DOM probes and Lighthouse", "evidence": "All sampled public archetypes have descriptive titles and meta descriptions; Lighthouse title and meta-description audits passed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/home-lighthouse.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Lighthouse failed crawlable-anchors on javascript:void links, while several public templates are fixed-width on mobile.", "pathIds": [ "home", "travel", "login" ], "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-mobile.png", "evidence/hokkaido-mobile.png", "evidence/travel-mobile.png", "evidence/login-mobile.png", "evidence/search-tokyo-mobile.png" ], "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "medium", "method": "HTTP, robots, and DOM probes", "evidence": "Sampled public pages return 200, expose canonical URLs, and robots.txt lists multiple scoped sitemaps without blocking the sampled routes.", "pathIds": [ "home" ], "artifacts": [ "evidence/http-probes.txt", "evidence/home-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The homepage has Open Graph metadata but zero JSON-LD blocks; the activity page also has zero, despite organization, destination, and product-like content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/route-96df97d9-probe.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "HTTPS is used, but CSP, HSTS, nosniff, frame protection, Referrer-Policy, and Permissions-Policy are absent. Of 42 cookies, 41 lacked Secure; session-like cookies were not HttpOnly and used SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json", "evidence/home-trackers.json", "evidence/home-secrets.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The tracker probe saw 56 third-party origins and 12 known tracker domains; HAR recorded 276 third-party requests and 4.56MB, including Google, TikTok, Facebook, DoubleClick, Criteo, Bing, and others.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The login probe found no WebAuthn/passkey code; username and password both set autocomplete=off and lack associated labels.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-mobile.png", "evidence/login-dom.json", "evidence/login-auth-probe.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "HTTPS is used, but CSP, HSTS, nosniff, frame protection, Referrer-Policy, and Permissions-Policy are absent. Of 42 cookies, 41 lacked Secure; session-like cookies were not HttpOnly and used SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json", "evidence/home-trackers.json", "evidence/home-secrets.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Crawler comparisons found 50% content overlap on activity and 64% on Hokkaido; raw responses did not preserve rendered title or H1 on sampled pages.", "pathIds": [ "home", "activity", "travel" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/home-discoverability-rendered.png", "evidence/home-discoverability-crawler.png", "evidence/activity-discoverability.json", "evidence/travel-discoverability.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "medium", "method": "representative screenshot and DOM review", "evidence": "Sampled menus/forms and pages rendered without clipped overlay failure or blank runtime shells.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/hokkaido-mobile.png", "evidence/travel-mobile.png", "evidence/login-mobile.png", "evidence/search-tokyo-mobile.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Representative probes found no manifest URL and no controlling service worker; the site is a repeat-use commerce service with extensive search forms.", "pathIds": [ "home", "activity" ], "artifacts": [ "evidence/home-probe.json", "evidence/activity-memory-metrics.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Crawler comparisons found 50% content overlap on activity and 64% on Hokkaido; raw responses did not preserve rendered title or H1 on sampled pages.", "pathIds": [ "home", "activity", "travel" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/home-discoverability-rendered.png", "evidence/home-discoverability-crawler.png", "evidence/activity-discoverability.json", "evidence/travel-discoverability.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The Hokkaido region and login probes returned an empty html lang, although the visible content is Japanese; the site advertises several localized variants.", "pathIds": [ "login" ], "artifacts": [ "evidence/route-de439633-probe.json", "evidence/login-auth-probe.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The Hokkaido region and login probes returned an empty html lang, although the visible content is Japanese; the site advertises several localized variants.", "pathIds": [ "login" ], "artifacts": [ "evidence/route-de439633-probe.json", "evidence/login-auth-probe.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/CSS inspection for a relevant feature or user need.", "evidence": "No applicable feature or task was present in the representative scope.", "reason": "Sampled flows use travel dates rather than displayed cross-zone event times; no time-zone calculation was present.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "medium", "method": "visual review of homepage, activity, and login", "evidence": "No forced consent wall, confirmshaming, preselected purchase, or forced continuity appeared in sampled entry and login states.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/activity-mobile.png", "evidence/login-mobile.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "medium", "method": "empty/error state screenshot and DOM review", "evidence": "The empty search state and 404 explain the problem and direct the user to change conditions or return home.", "pathIds": [ "home" ], "artifacts": [ "evidence/search-tokyo-mobile.png", "evidence/404-mobile.png" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Both email and password inputs use autocomplete=off and have no labels, despite being standard sign-in fields.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-mobile.png", "evidence/login-dom.json", "evidence/login-auth-probe.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The login probe found no WebAuthn/passkey code; username and password both set autocomplete=off and lack associated labels.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-mobile.png", "evidence/login-dom.json", "evidence/login-auth-probe.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The page transfers 5.84MB; image audit found 82 legacy images, 38 without responsive sources, and 30 below-fold images loaded eagerly.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-images.json", "evidence/home-summary.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Third parties account for 4.56MB of 5.84MB and 276 of 481 requests, dominated by analytics and advertising scripts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-trackers.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "Third parties account for 4.56MB of 5.84MB and 276 of 481 requests, dominated by analytics and advertising scripts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-trackers.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The site has rich search and booking forms but probes found no WebMCP or agent-tool registration, leaving agents to infer legacy form behavior.", "pathIds": [ "home", "activity" ], "artifacts": [ "evidence/home-probe.json", "evidence/activity-dom.json" ], "findingIds": [ "F28" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/CSS inspection for a relevant feature or user need.", "evidence": "No applicable feature or task was present in the representative scope.", "reason": "No sampled task showed a clear need for on-device generative inference.", "pathIds": [ "home" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "baseline and post-interaction heap comparison", "evidence": "After ten full-page scroll cycles, heap nodes decreased from 1,052,755 to 1,048,822 and self size decreased from 61.36MB to 60.97MB.", "pathIds": [ "home" ], "artifacts": [ "evidence/activity-heap-baseline.heapsnapshot", "evidence/activity-heap-post.heapsnapshot", "evidence/activity-memory-metrics.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "issues", "confidence": "high", "method": "Direct artifact review and targeted browser probe across representative paths.", "evidence": "The baseline heap snapshot reported 1,052,755 heap nodes and 61.36MB self size; Performance memory reported 69.8MB used JS heap for a landing/search page.", "pathIds": [ "activity" ], "artifacts": [ "evidence/activity-heap-baseline.heapsnapshot", "evidence/activity-heap-post.heapsnapshot", "evidence/activity-memory-metrics.json" ], "findingIds": [ "F29" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "before/after heap totals comparison", "evidence": "Across the repeated-scroll comparison total heap nodes fell and edges changed by only about 0.14%, with no unbounded population signal.", "pathIds": [ "home" ], "artifacts": [ "evidence/activity-heap-baseline.heapsnapshot", "evidence/activity-heap-post.heapsnapshot", "evidence/activity-memory-metrics.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F05" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F06" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F07" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F02", "F03", "F04" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09", "F10" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12", "F13", "F14" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F15", "F16" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F17", "F18" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F19", "F20", "F21" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F22", "F23" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F24" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F25", "F21" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F26", "F27" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "issues", "findingIds": [ "F28" ] }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F29" ] } ], "paths": [ { "id": "home", "description": "Homepage and primary accommodation-search entry point; represents global chrome, promotions, and search forms.", "url": "https://www.jalan.net/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active", "keyboard focus" ], "result": "issues" }, { "id": "region-listing", "description": "Hokkaido accommodation region page; represents destination listings and deal cards.", "url": "https://www.jalan.net/ikisaki/map/hokkaido/", "conditions": [ "viewport: 360x800", "JavaScript disabled crawler view" ], "result": "issues" }, { "id": "activity", "description": "Activity booking landing page; represents a newer responsive booking/search template.", "url": "https://www.jalan.net/activity/", "conditions": [ "viewport: 360x800", "JavaScript disabled crawler view", "heap baseline and repeated scroll" ], "result": "issues" }, { "id": "travel", "description": "Travel guide index; represents editorial discovery content.", "url": "https://www.jalan.net/travel/", "conditions": [ "viewport: 360x800", "JavaScript disabled crawler view" ], "result": "issues" }, { "id": "login", "description": "Login screen; represents authentication and account input handling.", "url": "https://www.jalan.net/ji/pc/jit6001LoginBack.do?TEMP1=&TEMP4=LEVEL_K&TEMP5=https://www.jalan.net/", "conditions": [ "viewport: 360x800", "authentication field probe" ], "result": "issues" }, { "id": "search-results", "description": "Keyword search results/empty state; represents the primary accommodation search continuation.", "url": "https://www.jalan.net/uw/uwp2011/uww2011init.do?keyword=%E6%9D%B1%E4%BA%AC", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "not-found", "description": "Nonexistent route; represents HTTP and navigation recovery.", "url": "https://www.jalan.net/web-uplift-nonexistent-404", "conditions": [ "viewport: 360x800" ], "result": "pass" } ], "findings": [ { "id": "F01", "severity": "high", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "modern-web-guidance", "summary": "The site does not honor the user’s dark color preference.", "evidence": "The dark-mode screenshot remains the same white/orange fixed palette, and the computed root colorScheme is normal.", "suggestedFix": "Declare color-scheme and provide preference-driven surface, text, border, and image treatments.", "effort": "medium", "artifacts": [ "evidence/home-dark-reduced.png" ] }, { "id": "F02", "severity": "critical", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "css-layout", "guidanceCategory": "modern-web-guidance", "summary": "Core accommodation, destination, editorial, login, and result templates render as scaled desktop canvases on mobile.", "evidence": "At a 360px viewport the homepage uses an effective 1146px layout; Hokkaido, travel, login, and results are visibly miniaturized. Only the activity template is meaningfully responsive.", "suggestedFix": "Replace fixed 1000/1146px shells with intrinsic grids, flexible sizing, and narrow-layout composition.", "effort": "large", "artifacts": [ "evidence/home-mobile.png", "evidence/hokkaido-mobile.png", "evidence/travel-mobile.png", "evidence/login-mobile.png", "evidence/search-tokyo-mobile.png" ] }, { "id": "F03", "severity": "medium", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "modern-web-guidance", "summary": "Shared components are not container responsive.", "evidence": "The page probe found zero container rules, while the same global chrome and card/search modules are reused inside fixed-width shells.", "suggestedFix": "Add container-type to reusable regions and use size-aware @container rules with intrinsic fallbacks.", "effort": "large", "artifacts": [ "evidence/home-probe.json", "evidence/home-mobile.png", "evidence/hokkaido-mobile.png", "evidence/travel-mobile.png", "evidence/login-mobile.png", "evidence/search-tokyo-mobile.png" ] }, { "id": "F04", "severity": "high", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Many controls are too small for touch even though keyboard outlines remain visible.", "evidence": "The focus probe measured many primary links at 11 to 30px high, and Lighthouse target-size failed.", "suggestedFix": "Increase interactive target boxes to at least 24 CSS px, preferably 44px for primary touch actions, without shrinking visible focus.", "effort": "medium", "artifacts": [ "evidence/home-focus-targets.json" ] }, { "id": "F05", "severity": "medium", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "guidanceCategory": "modern-web-guidance", "summary": "State and route changes use abrupt legacy navigation.", "evidence": "The page probe found no view-transition rules, and representative navigation is conventional full-document switching without continuity.", "suggestedFix": "Use cross-document View Transitions for same-origin archetype changes, with reduced-motion-safe fallbacks.", "effort": "medium", "artifacts": [ "evidence/home-probe.json" ] }, { "id": "F06", "severity": "medium", "confidence": "high", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "guidanceCategory": "modern-web-guidance", "summary": "Long pages provide little responsive navigation guidance.", "evidence": "Home and travel screenshots show long, dense pages with static chrome; probes found no container or transition treatment to reflect scroll state or guide in-page jumps.", "suggestedFix": "Use a compact scroll-aware header or progress/section cue and preserve clear attention after anchor navigation.", "effort": "medium", "artifacts": [ "evidence/home-mobile.png", "evidence/travel-mobile.png", "evidence/home-probe.json" ] }, { "id": "F07", "severity": "high", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "reduce-style-repetition", "guidanceCategory": "modern-web-guidance", "summary": "Promotional chrome and advertisements overwhelm the core booking task.", "evidence": "The homepage mobile capture is dominated by tiny banners, side rails, coupons, and repeated campaign tiles around the search form.", "suggestedFix": "Defer nonessential campaigns, cap promotional slots, and prioritize one clear search task in the first viewport.", "effort": "large", "artifacts": [ "evidence/home-mobile.png", "evidence/home-desktop.png" ] }, { "id": "F08", "severity": "critical", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "modern-web-guidance", "summary": "Load performance is far outside good ranges.", "evidence": "Trace measured FCP 7.18s, LCP 7.70s and 532ms TBT; Lighthouse under mobile throttling measured LCP 60.2s, CLS 0.184, and 3,350ms TBT with a performance score of 0.17.", "suggestedFix": "Set explicit performance budgets, prioritize the LCP resource, and remove or defer noncritical script and ad work.", "effort": "large", "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-lighthouse.json", "evidence/home-summary.json", "evidence/home-mobile-layout.json" ] }, { "id": "F09", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "guidanceCategory": "modern-web-guidance", "summary": "The network dependency surface is excessive.", "evidence": "HAR recorded 481 requests and 5.84MB transferred, including 154 scripts; 276 third-party requests transferred 4.56MB and ten parser-inserted stylesheets were flagged as render-blocking candidates.", "suggestedFix": "Consolidate critical CSS, defer noncritical scripts, gate tags on need/consent, and cache/compress reusable resources.", "effort": "large", "artifacts": [ "evidence/home.har", "evidence/home-summary.json" ] }, { "id": "F10", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "modern-web-guidance", "summary": "Large amounts of shipped JavaScript are unused.", "evidence": "Lighthouse estimated 2,649 KiB of unused JavaScript and 37 KiB of unused CSS; HAR attributes 4.36MB to scripts.", "suggestedFix": "Remove duplicate tag destinations, split code by task, and load third-party modules only after user intent.", "effort": "large", "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-summary.json" ] }, { "id": "F11", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Images and form controls lack accessible alternatives and labels.", "evidence": "Image audit found 55 of 100 images missing alt; Lighthouse failed image-alt and identified unlabeled date/person controls, while activity/login probes found 12 and 3 unlabeled controls.", "suggestedFix": "Add meaningful alt or empty alt for decoration, and associate every input with a visible label or accessible name.", "effort": "medium", "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-images.json", "evidence/home-focus-targets.json" ] }, { "id": "F12", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Text and controls fail minimum contrast.", "evidence": "Lighthouse reported multiple failures, including 3.35:1 placeholder text and 3.27:1 date text where 4.5:1 is required.", "suggestedFix": "Adjust text/control tokens to meet WCAG contrast in every state and preserve forced-color behavior.", "effort": "small", "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-forced-contrast.png" ] }, { "id": "F13", "severity": "medium", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Document structure and control semantics are inconsistent.", "evidence": "The homepage contains many empty H2 elements, Lighthouse found a skipped heading level and unnamed links, and several controls are JavaScript anchors.", "suggestedFix": "Use semantic buttons for actions, remove empty headings, keep levels sequential, and name all links.", "effort": "medium", "artifacts": [ "evidence/home-probe.json", "evidence/home-lighthouse.json" ] }, { "id": "F14", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "modern-web-guidance", "summary": "Zoom/reflow and target sizing are not robust across major templates.", "evidence": "Fixed 1000 to 1146px shells are scaled into 360px viewports, login lacks viewport metadata, and Lighthouse target-size failed.", "suggestedFix": "Adopt responsive reflow, retain user scaling, and enlarge targets across legacy templates.", "effort": "large", "artifacts": [ "evidence/home-mobile.png", "evidence/hokkaido-mobile.png", "evidence/travel-mobile.png", "evidence/login-mobile.png", "evidence/search-tokyo-mobile.png" ] }, { "id": "F15", "severity": "medium", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "summary": "The homepage emits runtime errors and inspector issues.", "evidence": "Lighthouse failed errors-in-console with nine captured items and reported an inspector issue plus invalid source maps.", "suggestedFix": "Fix uncaught/network console failures, remove deprecated integrations, and publish valid source maps for owned production bundles.", "effort": "medium", "artifacts": [ "evidence/home-lighthouse.json" ] }, { "id": "F16", "severity": "medium", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "summary": "Asset markup is dated and destabilizing.", "evidence": "Image audit found 23 images without dimensions, 30 below-fold images not lazy-loaded, 38 without srcset, and 82 legacy-format images.", "suggestedFix": "Add intrinsic dimensions and responsive sources, lazy-load below-fold media, and migrate raster assets to modern formats where appropriate.", "effort": "medium", "artifacts": [ "evidence/home-images.json" ] }, { "id": "F17", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "summary": "Some links are JavaScript actions rather than crawlable navigation and mobile friendliness is inconsistent.", "evidence": "Lighthouse failed crawlable-anchors on javascript:void links, while several public templates are fixed-width on mobile.", "suggestedFix": "Use buttons for actions, real hrefs for navigation, and responsive viewport behavior on every public template.", "effort": "medium", "artifacts": [ "evidence/home-lighthouse.json", "evidence/home-mobile.png", "evidence/hokkaido-mobile.png", "evidence/travel-mobile.png", "evidence/login-mobile.png", "evidence/search-tokyo-mobile.png" ] }, { "id": "F18", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "summary": "Entity metadata coverage is inconsistent.", "evidence": "The homepage has Open Graph metadata but zero JSON-LD blocks; the activity page also has zero, despite organization, destination, and product-like content.", "suggestedFix": "Add accurate schema.org Organization/WebSite and relevant product/place/activity data that matches visible content.", "effort": "medium", "artifacts": [ "evidence/home-probe.json", "evidence/route-96df97d9-probe.json" ] }, { "id": "F19", "severity": "critical", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "summary": "Transport defenses and cookie attributes are unsafe.", "evidence": "HTTPS is used, but CSP, HSTS, nosniff, frame protection, Referrer-Policy, and Permissions-Policy are absent. Of 42 cookies, 41 lacked Secure; session-like cookies were not HttpOnly and used SameSite=None.", "suggestedFix": "Deploy a restrictive CSP and defensive headers, then mark all HTTPS cookies Secure with appropriate SameSite and HttpOnly for session credentials.", "effort": "medium", "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json", "evidence/home-trackers.json", "evidence/home-secrets.json" ] }, { "id": "F20", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "modern-web-guidance", "summary": "The default page load has an extreme tracking footprint.", "evidence": "The tracker probe saw 56 third-party origins and 12 known tracker domains; HAR recorded 276 third-party requests and 4.56MB, including Google, TikTok, Facebook, DoubleClick, Criteo, Bing, and others.", "suggestedFix": "Minimize tags, require contextual consent where needed, batch analytics, and load only vendors tied to demonstrated user value.", "effort": "large", "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json" ] }, { "id": "F21", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "modern-web-guidance", "summary": "Authentication is password-only and disables browser credential assistance.", "evidence": "The login probe found no WebAuthn/passkey code; username and password both set autocomplete=off and lack associated labels.", "suggestedFix": "Offer passkey sign-in and use username/current-password autocomplete as a fallback.", "effort": "large", "artifacts": [ "evidence/login-mobile.png", "evidence/login-dom.json", "evidence/login-auth-probe.json" ] }, { "id": "F22", "severity": "high", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "progressive-enhancement", "guidanceId": "stabilize-reactive-state", "guidanceCategory": "modern-web-guidance", "summary": "Important metadata and content are only partially preserved without JavaScript.", "evidence": "Crawler comparisons found 50% content overlap on activity and 64% on Hokkaido; raw responses did not preserve rendered title or H1 on sampled pages.", "suggestedFix": "Server-render stable title, H1, core search/listing content, and functional form actions before enhancing with JavaScript.", "effort": "large", "artifacts": [ "evidence/home-discoverability.json", "evidence/home-discoverability-rendered.png", "evidence/home-discoverability-crawler.png", "evidence/activity-discoverability.json", "evidence/travel-discoverability.json" ] }, { "id": "F23", "severity": "medium", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "offline-and-installable", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "summary": "The booking experience has no install or offline fallback surface.", "evidence": "Representative probes found no manifest URL and no controlling service worker; the site is a repeat-use commerce service with extensive search forms.", "suggestedFix": "Provide a manifest and a conservative offline/error fallback for previously visited and interrupted journeys.", "effort": "large", "artifacts": [ "evidence/home-probe.json", "evidence/activity-memory-metrics.json" ] }, { "id": "F24", "severity": "high", "confidence": "high", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "guidanceCategory": "modern-web-guidance", "summary": "Language metadata is missing on important Japanese pages.", "evidence": "The Hokkaido region and login probes returned an empty html lang, although the visible content is Japanese; the site advertises several localized variants.", "suggestedFix": "Set correct lang on every template and audit logical properties and localized alternates.", "effort": "small", "artifacts": [ "evidence/route-de439633-probe.json", "evidence/login-auth-probe.json" ] }, { "id": "F25", "severity": "high", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "guidanceCategory": "modern-web-guidance", "summary": "The login form obstructs browser autofill.", "evidence": "Both email and password inputs use autocomplete=off and have no labels, despite being standard sign-in fields.", "suggestedFix": "Use autocomplete=username and current-password, visible labels, and passkey-friendly conditional authentication.", "effort": "small", "artifacts": [ "evidence/login-mobile.png", "evidence/login-dom.json", "evidence/login-auth-probe.json" ] }, { "id": "F26", "severity": "high", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "modern-web-guidance", "summary": "Asset delivery is wasteful for the primarily transactional page.", "evidence": "The page transfers 5.84MB; image audit found 82 legacy images, 38 without responsive sources, and 30 below-fold images loaded eagerly.", "suggestedFix": "Convert and right-size imagery, use srcset/sizes, and lazy-load noncritical campaign media.", "effort": "medium", "artifacts": [ "evidence/home-images.json", "evidence/home-summary.json" ] }, { "id": "F27", "severity": "high", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "modern-web-guidance", "summary": "Third-party scripts consume most transferred bytes before user intent.", "evidence": "Third parties account for 4.56MB of 5.84MB and 276 of 481 requests, dominated by analytics and advertising scripts.", "suggestedFix": "Set a third-party byte/request budget and defer background measurement and advertising until justified.", "effort": "large", "artifacts": [ "evidence/home-summary.json", "evidence/home-trackers.json" ] }, { "id": "F28", "severity": "medium", "confidence": "high", "principleId": "be-agent-ready", "principleCheckId": "structured-agent-capabilities", "guidanceId": "agentic-forms", "guidanceCategory": "modern-web-guidance", "summary": "Booking capabilities are not exposed as structured agent tools.", "evidence": "The site has rich search and booking forms but probes found no WebMCP or agent-tool registration, leaving agents to infer legacy form behavior.", "suggestedFix": "Expose narrowly scoped, confirmable search and booking-assistance tools with clear schemas and user control.", "effort": "large", "artifacts": [ "evidence/home-probe.json", "evidence/activity-dom.json" ] }, { "id": "F29", "severity": "medium", "confidence": "high", "principleId": "be-memory-efficient", "principleCheckId": "bounded-footprint", "guidanceId": "performance", "guidanceCategory": "modern-web-guidance", "summary": "The activity landing page has a large baseline memory footprint.", "evidence": "The baseline heap snapshot reported 1,052,755 heap nodes and 61.36MB self size; Performance memory reported 69.8MB used JS heap for a landing/search page.", "suggestedFix": "Reduce script/tag populations and release data structures that are not needed for the current task.", "effort": "large", "artifacts": [ "evidence/activity-heap-baseline.heapsnapshot", "evidence/activity-heap-post.heapsnapshot", "evidence/activity-memory-metrics.json" ] } ], "taskList": [ { "id": "T1", "title": "Make every core template genuinely responsive and touch-usable", "priority": 1, "findingIds": [ "F02" ], "guidanceId": "css-layout", "status": "open" }, { "id": "T2", "title": "Cut and defer third-party scripts to restore load performance and privacy", "priority": 2, "findingIds": [ "F08" ], "guidanceId": "performance", "status": "open" }, { "id": "T3", "title": "Deploy defensive headers and secure cookie attributes", "priority": 3, "findingIds": [ "F19" ], "guidanceId": "security", "status": "open" }, { "id": "T4", "title": "Repair labels, alt text, contrast, headings, and target sizes", "priority": 4, "findingIds": [ "F11" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T5", "title": "Reduce promotional chrome around the core search task", "priority": 5, "findingIds": [ "F07" ], "guidanceId": "reduce-style-repetition", "status": "open" }, { "id": "T6", "title": "Modernize responsive image and asset delivery", "priority": 6, "findingIds": [ "F26" ], "guidanceId": "deliver-optimized-decorative-images", "status": "open" }, { "id": "T7", "title": "Provide passkeys and standards-based autofill on login", "priority": 7, "findingIds": [ "F21" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T8", "title": "Server-render stable metadata and core content", "priority": 8, "findingIds": [ "F22" ], "guidanceId": "stabilize-reactive-state", "status": "open" }, { "id": "T9", "title": "Add language metadata across legacy localized templates", "priority": 9, "findingIds": [ "F24" ], "guidanceId": "translator", "status": "open" }, { "id": "T10", "title": "Expose safe structured agent search capabilities", "priority": 10, "findingIds": [ "F28" ], "guidanceId": "agentic-forms", "status": "open" } ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-dark-reduced.png", "caption": "home dark reduced.png", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile.png", "findingIds": [ "F02", "F03", "F06", "F07", "F14", "F17" ] }, { "type": "screenshot", "path": "evidence/hokkaido-mobile.png", "caption": "hokkaido mobile.png", "findingIds": [ "F02", "F03", "F14", "F17" ] }, { "type": "screenshot", "path": "evidence/travel-mobile.png", "caption": "travel mobile.png", "findingIds": [ "F02", "F03", "F06", "F14", "F17" ] }, { "type": "screenshot", "path": "evidence/login-mobile.png", "caption": "login mobile.png", "findingIds": [ "F02", "F03", "F14", "F17", "F21", "F25" ] }, { "type": "screenshot", "path": "evidence/search-tokyo-mobile.png", "caption": "search tokyo mobile.png", "findingIds": [ "F02", "F03", "F14", "F17" ] }, { "type": "other", "path": "evidence/home-probe.json", "caption": "home probe.json", "findingIds": [ "F03", "F05", "F06", "F13", "F18", "F23", "F28" ] }, { "type": "other", "path": "evidence/home-focus-targets.json", "caption": "home focus targets.json", "findingIds": [ "F04", "F11" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop.png", "findingIds": [ "F07" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary.json", "findingIds": [ "F08" ] }, { "type": "lighthouse", "path": "evidence/home-lighthouse.json", "caption": "home lighthouse.json", "findingIds": [ "F08", "F10", "F11", "F12", "F13", "F15", "F17" ] }, { "type": "other", "path": "evidence/home-summary.json", "caption": "home summary.json", "findingIds": [ "F08", "F09", "F10", "F20", "F26", "F27" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout.json", "findingIds": [ "F08" ] }, { "type": "har", "path": "evidence/home.har", "caption": "home.har", "findingIds": [ "F09" ] }, { "type": "other", "path": "evidence/home-images.json", "caption": "home images.json", "findingIds": [ "F11", "F16", "F26" ] }, { "type": "screenshot", "path": "evidence/home-forced-contrast.png", "caption": "home forced contrast.png", "findingIds": [ "F12" ] }, { "type": "other", "path": "evidence/route-96df97d9-probe.json", "caption": "route 96df97d9 probe.json", "findingIds": [ "F18" ] }, { "type": "other", "path": "evidence/home-headers.json", "caption": "home headers.json", "findingIds": [ "F19" ] }, { "type": "other", "path": "evidence/home-cookies.json", "caption": "home cookies.json", "findingIds": [ "F19" ] }, { "type": "other", "path": "evidence/home-trackers.json", "caption": "home trackers.json", "findingIds": [ "F19", "F20", "F27" ] }, { "type": "other", "path": "evidence/home-secrets.json", "caption": "home secrets.json", "findingIds": [ "F19" ] }, { "type": "dom", "path": "evidence/login-dom.json", "caption": "login dom.json", "findingIds": [ "F21", "F25" ] }, { "type": "other", "path": "evidence/login-auth-probe.json", "caption": "login auth probe.json", "findingIds": [ "F21", "F24", "F25" ] }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "home discoverability.json", "findingIds": [ "F22" ] }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "home discoverability rendered.png", "findingIds": [ "F22" ] }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "home discoverability crawler.png", "findingIds": [ "F22" ] }, { "type": "discoverability", "path": "evidence/activity-discoverability.json", "caption": "activity discoverability.json", "findingIds": [ "F22" ] }, { "type": "discoverability", "path": "evidence/travel-discoverability.json", "caption": "travel discoverability.json", "findingIds": [ "F22" ] }, { "type": "other", "path": "evidence/activity-memory-metrics.json", "caption": "activity memory metrics.json", "findingIds": [ "F23", "F29" ] }, { "type": "other", "path": "evidence/route-de439633-probe.json", "caption": "route de439633 probe.json", "findingIds": [ "F24" ] }, { "type": "dom", "path": "evidence/activity-dom.json", "caption": "activity dom.json", "findingIds": [ "F28" ] }, { "type": "heap", "path": "evidence/activity-heap-baseline.heapsnapshot", "caption": "activity heap baseline.heapsnapshot", "findingIds": [ "F29" ] }, { "type": "heap", "path": "evidence/activity-heap-post.heapsnapshot", "caption": "activity heap post.heapsnapshot", "findingIds": [ "F29" ] }, { "type": "other", "path": "evidence/home-reduced-motion.json", "caption": "home reduced motion.json", "findingIds": [] }, { "type": "screenshot", "path": "evidence/activity-mobile.png", "caption": "activity mobile.png", "findingIds": [] }, { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "404 mobile.png", "findingIds": [] }, { "type": "other", "path": "evidence/404-probe.json", "caption": "404 probe.json", "findingIds": [] }, { "type": "other", "path": "evidence/http-probes.txt", "caption": "http probes.txt", "findingIds": [] } ], "budget": { "pathCount": 7, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-18T13-02-34-322Z" }