{ "url": "https://fe.afip.gob.ar", "auditedAt": "2026-07-18T19:25:36.611Z", "mode": "report", "status": "completed", "statusDetail": "All 58 catalog checks were judged across the exposed directory, its only linked page, and an HTTP failure state.", "page": { "appType": "mpa", "framework": "None", "notes": "A server-generated directory index linking to a six-byte diagnostic/status token. No other routes were discoverable; robots.txt and sitemap.xml return 404." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "performance-trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "lighthouse", "raw-http-fetch" ], "guidanceConsulted": [ "dark-mode", "accessibility", "directional-navigation-transitions", "scrollability-affordance-hints", "fluid-scaling", "performance", "html", "security", "privacy", "persistent-top-layer-ui", "translator", "deliver-optimized-decorative-images", "webmcp", "manage-recurring-intervals", "forms", "declarative-dialog-popover-control" ], "artifacts": [ { "type": "screenshot", "path": "evidence/desktop.png", "caption": "Homepage at 1440x1000", "condition": "desktop", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/mobile.png", "caption": "Homepage requested at 360x800", "condition": "viewport: 360x800", "findingIds": [ "F05" ] }, { "type": "screenshot", "path": "evidence/dark.png", "caption": "Homepage under dark preference", "condition": "prefers-color-scheme: dark", "findingIds": [ "F03" ] }, { "type": "screenshot", "path": "evidence/contrast.png", "caption": "Homepage under increased contrast", "condition": "prefers-contrast: more", "findingIds": [] }, { "type": "screenshot", "path": "evidence/a-mobile.png", "caption": "a.html at mobile viewport", "condition": "viewport: 360x800", "findingIds": [ "F02" ] }, { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "Generic 404 at mobile viewport", "condition": "viewport: 360x800", "findingIds": [ "F13" ] }, { "type": "dom", "path": "evidence/dom.json", "caption": "Homepage rendered DOM", "findingIds": [ "F03", "F04", "F09" ] }, { "type": "dom", "path": "evidence/a-dom.json", "caption": "a.html rendered DOM", "findingIds": [ "F02", "F04", "F06", "F09", "F14" ] }, { "type": "dom", "path": "evidence/404-dom.json", "caption": "Unknown-route DOM", "findingIds": [ "F13" ] }, { "type": "layout", "path": "evidence/layout-mobile.json", "caption": "Homepage mobile layout metrics", "findingIds": [ "F05" ] }, { "type": "layout", "path": "evidence/a-layout-mobile.json", "caption": "a.html mobile layout metrics", "findingIds": [ "F05" ] }, { "type": "trace", "path": "evidence/trace.json", "caption": "DevTools load trace", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/trace-summary.json", "caption": "Compact load trace summary", "findingIds": [] }, { "type": "har", "path": "evidence/network.har", "caption": "Load network archive", "findingIds": [] }, { "type": "har-summary", "path": "evidence/network-summary.json", "caption": "Compact network summary", "findingIds": [ "F07" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Homepage raw-vs-rendered comparison", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Homepage browser view", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Homepage crawler view", "findingIds": [] }, { "type": "discoverability", "path": "evidence/a-discoverability.json", "caption": "a.html raw-vs-rendered comparison", "findingIds": [] }, { "type": "screenshot", "path": "evidence/a-discoverability-rendered.png", "caption": "a.html browser view", "findingIds": [] }, { "type": "screenshot", "path": "evidence/a-discoverability-crawler.png", "caption": "a.html crawler view", "findingIds": [] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security header inspection", "findingIds": [ "F11", "F12" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie attribute inspection", "findingIds": [ "F11" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Tracker-origin inspection", "findingIds": [] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client secret scan", "findingIds": [] }, { "type": "other", "path": "evidence/images.json", "caption": "Image audit", "findingIds": [] }, { "type": "heap", "path": "evidence/heap.json", "caption": "V8 heap summary", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Full Lighthouse report", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-summary.json", "caption": "Compact Lighthouse findings", "findingIds": [ "F07", "F14" ] }, { "type": "other", "path": "evidence/probe.json", "caption": "Metadata and semantics probe", "findingIds": [ "F01", "F06", "F08", "F10", "F14" ] }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "Reduced-motion animation probe", "findingIds": [] }, { "type": "other", "path": "evidence/raw.html", "caption": "Raw homepage HTML", "findingIds": [ "F08" ] }, { "type": "other", "path": "evidence/a-raw.html", "caption": "Raw a.html response", "findingIds": [ "F08" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots.txt 404 response", "findingIds": [ "F10" ] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "sitemap.xml 404 response", "findingIds": [ "F10" ] }, { "type": "other", "path": "evidence/curl-headers.txt", "caption": "Homepage HTTP response headers", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Screenshot under prefers-color-scheme: dark plus DOM inspection", "evidence": "Dark-emulated screenshot is pixel-identical to the light capture: white canvas and black text; the DOM contains no CSS or color-scheme declaration.", "pathIds": [ "home" ], "artifacts": [ "evidence/dark.png", "evidence/dom.json" ], "findingIds": [ "F03" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Evaluate under prefers-reduced-motion: reduce", "evidence": "The reduced-motion probe confirmed the emulated preference and found zero active animations; the page has no scripts or styles.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Contrast screenshot plus Lighthouse", "evidence": "High-contrast emulation leaves the native heading/link legible, and Lighthouse reports no contrast failures.", "pathIds": [ "home" ], "artifacts": [ "evidence/contrast.png", "evidence/lighthouse-summary.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "DOM route inspection and source/CSS inspection", "evidence": "The only route change, from the directory to a.html, is a plain cross-document link with no CSS or view-transition styling, so it swaps abruptly.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/dom.json", "evidence/a-dom.json" ], "findingIds": [ "F04" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "Neither representative page has scroll-linked motion, parallax, scrollytelling, or reveal effects to implement.", "reason": "Neither representative page has scroll-linked motion, parallax, scrollytelling, or reveal effects to implement." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "Neither page exposes gesture-driven controls, carousels, swipe actions, or custom pointer interactions.", "reason": "Neither page exposes gesture-driven controls, carousels, swipe actions, or custom pointer interactions." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "The pages have no navigation chrome and no meaningful scroll journey; the short static content does not warrant scroll-aware chrome.", "reason": "The pages have no navigation chrome and no meaningful scroll journey; the short static content does not warrant scroll-aware chrome." }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No tooltip, menu, popover, or other anchored overlay exists on either page.", "reason": "No tooltip, menu, popover, or other anchored overlay exists on either page." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Homepage-to-destination walkthrough", "evidence": "The link is labelled only “a.html”; its destination is an unheaded token with no navigation cue, context, focus cue, or return path.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/desktop.png", "evidence/a-mobile.png", "evidence/a-dom.json" ], "findingIds": [ "F02" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Load screenshot and DOM inspection", "evidence": "Load screenshots and DOM show no popup, banner, interstitial, or overlay.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/desktop.png", "evidence/a-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No overlay, disclosure, select, picker, or rich control is present, so no dismissible primitive is required.", "reason": "No overlay, disclosure, select, picker, or rich control is present, so no dismissible primitive is required." }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Screenshots and DOM inspection", "evidence": "The pages contain only their bare content and native browser styling, with no decorative or application chrome.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/desktop.png", "evidence/a-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Mobile layout metrics and screenshot", "evidence": "At a requested 360px viewport Chrome lays the page out at 980 CSS px and scales it to 0.367 because meta viewport is absent. This is a desktop canvas scaled down, not responsive reflow.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/layout-mobile.json", "evidence/mobile.png", "evidence/a-layout-mobile.json" ], "findingIds": [ "F05" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "There are no reusable components or component containers; only an h1, list, link, and plain token are rendered.", "reason": "There are no reusable components or component containers; only an h1, list, link, and plain token are rendered." }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "pass", "confidence": "high", "method": "Lighthouse and native-control DOM inspection", "evidence": "The sole interactive element is a native anchor; Lighthouse target-size and link-name audits pass and browser-native keyboard focus remains available.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/dom.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "issues", "confidence": "high", "method": "First-viewport screenshot and heading/link inspection", "evidence": "The first viewport says only “Index of /” and exposes a filename. It does not explain the AFIP-facing purpose, intended audience, or useful primary action.", "pathIds": [ "home" ], "artifacts": [ "evidence/desktop.png", "evidence/probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "End-to-end walkthrough of the only visible link", "evidence": "Following the only action reaches a page containing only the opaque token “fe010”, with no heading, explanation, next step, or return control.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/a-mobile.png", "evidence/a-dom.json" ], "findingIds": [ "F02" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Invalid-route recovery test", "evidence": "A nonexistent route returns a generic Apache 404 with no home link, search, retry guidance, or recovery action.", "pathIds": [ "error-page" ], "artifacts": [ "evidence/404-dom.json", "evidence/404-mobile.png" ], "findingIds": [ "F13" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "pass", "confidence": "high", "method": "Lighthouse plus performance trace", "evidence": "Lighthouse measured LCP 0.8s, CLS 0, and TBT 0ms; trace measured LCP 1262ms and no blocking tasks.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Layout observer plus Lighthouse", "evidence": "Mobile layout observer and Lighthouse both measured CLS 0 with no layout-shift entries.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/layout-mobile.json", "evidence/a-layout-mobile.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Trace, layout observer, and DOM inspection", "evidence": "Trace and layout observers found zero long tasks and 0ms total blocking time; the page ships no JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/trace-summary.json", "evidence/dom.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "pass", "confidence": "high", "method": "HAR summary confirmed against DOM", "evidence": "HAR records only two requests and 915 transferred bytes, with no render-blocking candidates; the only failed request is a tiny favicon and does not delay content.", "pathIds": [ "home" ], "artifacts": [ "evidence/network.har", "evidence/network-summary.json", "evidence/dom.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "pass", "confidence": "high", "method": "DOM and HAR inspection", "evidence": "DOM and HAR show no JavaScript, CSS, fonts, media, or third-party code, so there is no shipped unused or duplicate bundle.", "pathIds": [ "home" ], "artifacts": [ "evidence/dom.json", "evidence/network-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "pass", "confidence": "high", "method": "Lighthouse accessibility and DOM inspection", "evidence": "The only interactive element is a native anchor with a discernible name; there are no forms, images, canvas, or custom controls. Lighthouse link-name passes.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/probe.json" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Lighthouse and screenshots", "evidence": "Lighthouse color-contrast passes and screenshots show native black text/blue link on white with clear contrast.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Lighthouse and heading/landmark DOM probe", "evidence": "The homepage has an h1 but no landmarks or language declaration, while a.html has no heading at all. The destination therefore lacks a meaningful document structure.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/probe.json", "evidence/a-dom.json" ], "findingIds": [ "F06" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Desktop visual inspection", "evidence": "At desktop size the native heading and body text are unclipped and high contrast, with no custom fonts or mixed-font rendering problems.", "pathIds": [ "home" ], "artifacts": [ "evidence/desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Mobile layout metrics and screenshots", "evidence": "Both pages omit meta viewport; a 360px device receives a 980px layout scaled to 36.7%, making native text much smaller than intended despite no horizontal overflow.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/layout-mobile.json", "evidence/mobile.png", "evidence/a-mobile.png" ], "findingIds": [ "F05" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Lighthouse console audit and HAR", "evidence": "Lighthouse logs a 404 console/network error for /favicon.ico, which is also present in the HAR.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/network-summary.json" ], "findingIds": [ "F07" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Raw HTML, DOM compatibility-mode probe, and destination response inspection", "evidence": "The server emits an HTML 3.2 Final public doctype that Chrome treats as BackCompat/quirks mode; a.html is six bytes of text with no authored document structure.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/raw.html", "evidence/probe.json", "evidence/a-raw.html" ], "findingIds": [ "F08" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Lighthouse best-practices audits and DOM inspection", "evidence": "Lighthouse finds no BFCache blocker, deprecated permission prompt, paste prevention, source-map issue, or third-party-cookie problem; the page ships no script or input handlers.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/probe.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "DOM and raw-HTML metadata inspection", "evidence": "The homepage title is the generic “Index of /” and has no meta description; a.html has neither title nor description.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/dom.json", "evidence/a-dom.json", "evidence/probe.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "DOM probe, mobile layout, robots fetch, and Lighthouse", "evidence": "The anchor is technically crawlable but its text is only “a.html”; neither page has a viewport meta element, and /robots.txt returns 404.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/probe.json", "evidence/layout-mobile.json", "evidence/robots.txt", "evidence/lighthouse-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "HTTP fetch and indexing metadata probe", "evidence": "Pages return 200, but expose no canonical or hreflang signals; both robots.txt and sitemap.xml return 404, leaving no explicit crawl policy or inventory.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/probe.json", "evidence/robots.txt", "evidence/sitemap.xml", "evidence/curl-headers.txt" ], "findingIds": [ "F10" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "Neither page represents an article, product, organisation profile, event, place, or other rich entity; the exposed directory/token has no legitimate rich-result entity to encode.", "reason": "Neither page represents an article, product, organisation profile, event, place, or other rich entity; the exposed directory/token has no legitimate rich-result entity to encode." }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Security headers and cookie primitives", "evidence": "HTTPS is used, but CSP, HSTS, X-Content-Type-Options, Referrer-Policy and frame protection are absent. Both first-party cookies are set without Secure or HttpOnly and with SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "pass", "confidence": "high", "method": "HAR, trackers, and secrets scans", "evidence": "Tracker and HAR evidence shows zero third-party origins, zero known trackers, only two requests, and no exposed client secret.", "pathIds": [ "home" ], "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json", "evidence/secrets.json" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "high", "method": "Lighthouse permission audits and DOM flow inspection", "evidence": "Lighthouse confirms no geolocation or notification request on load. No login, account, or authentication flow exists, so WebAuthn is not relevant here.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Security-header primitive", "evidence": "No HSTS, clickjacking protection, Referrer-Policy, Permissions-Policy, or CSP frame-ancestors is configured.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Raw HTML and no-JS discoverability comparison", "evidence": "Both pages are fully present in raw server responses and render without JavaScript; discoverability evidence confirms they are not JS shells.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/raw.html", "evidence/a-raw.html", "evidence/discoverability.json", "evidence/a-discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "DOM, HAR, and source response inspection", "evidence": "No runtime scripts, async dependencies, overlays, menus, background work, or mutable DOM state exist that could become fragile.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/dom.json", "evidence/a-dom.json", "evidence/network-summary.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "This is a tiny static server directory/diagnostic surface, not an app-like experience; a manifest, service worker, and installability are not proportionate requirements.", "reason": "This is a tiny static server directory/diagnostic surface, not an app-like experience; a manifest, service worker, and installability are not proportionate requirements." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Invalid-route test", "evidence": "The tested 404 is a generic server page with no route back to the homepage or useful recovery action.", "pathIds": [ "error-page" ], "artifacts": [ "evidence/404-dom.json", "evidence/404-mobile.png" ], "findingIds": [ "F13" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Lighthouse and DOM language probe", "evidence": "Neither page declares html[lang] (Lighthouse confirms the failure), so assistive technology and translation tooling cannot reliably identify the content language.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/probe.json", "evidence/a-dom.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "The representative pages display no dates, numbers, currency, duration, calendar, address, or other locale-sensitive value.", "reason": "The representative pages display no dates, numbers, currency, duration, calendar, address, or other locale-sensitive value." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No date, event, schedule, timestamp, recurrence, or time-zone-dependent concept is exposed.", "reason": "No date, event, schedule, timestamp, recurrence, or time-zone-dependent concept is exposed." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Flow and screenshot inspection", "evidence": "There is no consent, upsell, subscription, advertising, destructive action, hidden offer, or deceptive choice; only one plain link is present.", "pathIds": [ "home", "a-page" ], "artifacts": [ "evidence/desktop.png", "evidence/a-mobile.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No form or user input exists on the representative pages. Generic HTTP recovery is judged separately under core-task and resilience checks.", "reason": "No form or user input exists on the representative pages. Generic HTTP recovery is judged separately under core-task and resilience checks." }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No input fields, sign-in, address, payment, or signup form exists.", "reason": "No input fields, sign-in, address, payment, or signup form exists." }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "No commercial, checkout, subscription, consent, authentication, or account-management flow exists.", "reason": "No commercial, checkout, subscription, consent, authentication, or account-management flow exists." }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "pass", "confidence": "high", "method": "Images primitive and HAR", "evidence": "The image audit found zero images and HAR shows no fonts, media, or decorative assets; only 915 bytes transferred.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/network-summary.json" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "pass", "confidence": "high", "method": "Trace, DOM, and HAR", "evidence": "The page has no scripts or background requests; trace found no long tasks and HAR recorded only the document and failed favicon.", "pathIds": [ "home" ], "artifacts": [ "evidence/trace-summary.json", "evidence/dom.json", "evidence/network-summary.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "pass", "confidence": "high", "method": "Trackers, HAR, images, and DOM", "evidence": "There are zero third-party origins and no scripts, fonts, image, video, audio, or animation payload.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json", "evidence/network-summary.json", "evidence/images.json" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "This exposed surface is a bare directory/diagnostic token with no safe user capability or transactional form for an agent to invoke; adding WebMCP tooling would not be meaningful.", "reason": "This exposed surface is a bare directory/diagnostic token with no safe user capability or transactional form for an agent to invoke; adding WebMCP tooling would not be meaningful." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "The surface performs no language, summarisation, classification, or other inference task where a built-in on-device model would improve the experience.", "reason": "The surface performs no language, summarisation, classification, or other inference task where a built-in on-device model would improve the experience." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from recon", "evidence": "Neither page has a real repeatable interaction beyond ordinary cross-document navigation; fabricating a synthetic loop would not represent the site.", "reason": "Neither page has a real repeatable interaction beyond ordinary cross-document navigation; fabricating a synthetic loop would not represent the site." }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Heap summary and DOM inspection", "evidence": "The heap summary reports 26,459 nodes and 763,644 self-size bytes, a small footprint proportionate to a two-element static page.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap.json", "evidence/dom.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Heap constructor summary and DOM/source inspection", "evidence": "The single-state heap summary contains no Detached* constructor among its reported populations, and the page ships no scripts, timers, observers, or event-listener registration code.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap.json", "evidence/dom.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues" }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "pass" }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F05" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "pass" }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F06" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F10" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F13" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F14" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "pass" }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "pass" }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "This exposed surface is a bare directory/diagnostic token with no safe user capability or transactional form for an agent to invoke; adding WebMCP tooling would not be meaningful. The surface performs no language, summarisation, classification, or other inference task where a built-in on-device model would improve the experience." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Public entry page and directory listing, representing the only index/template exposed by navigation.", "url": "https://fe.afip.gob.ar/", "conditions": [ "desktop 1440x1000", "mobile 360x800", "prefers-color-scheme: dark", "prefers-contrast: more", "prefers-reduced-motion: reduce", "raw/no-JS crawler" ], "result": "issues" }, { "id": "a-page", "description": "Only linked destination, representing the site’s sole visible primary journey and detail/status response.", "url": "https://fe.afip.gob.ar/a.html", "conditions": [ "mobile 360x800", "raw/no-JS crawler" ], "result": "issues" }, { "id": "error-page", "description": "Unknown-route failure state, selected to test HTTP error recovery.", "url": "https://fe.afip.gob.ar/does-not-exist", "conditions": [ "mobile 360x800" ], "result": "issues" } ], "findings": [ { "id": "F01", "severity": "high", "confidence": "high", "summary": "The public entry page does not explain its purpose or useful next action", "principleId": "support-core-task-success", "principleCheckId": "clear-purpose-and-primary-action", "guidanceId": "scrollability-affordance-hints", "guidanceCategory": "user-experience", "evidence": "The desktop screenshot contains only “Index of /” and a filename link; there is no AFIP service description or task-oriented CTA.", "suggestedFix": "Replace directory listing with a real landing/error page that names the service, audience, status, and primary next action.", "artifacts": [ "evidence/desktop.png", "evidence/probe.json" ], "effort": "medium", "pathId": "home" }, { "id": "F02", "severity": "high", "confidence": "high", "summary": "The only visible journey ends at an opaque, context-free token", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "directional-navigation-transitions", "guidanceCategory": "user-experience", "evidence": "Following a.html produces only “fe010”, with no heading, explanation, next step, or return link.", "suggestedFix": "Give the destination a semantic document, meaningful status explanation, navigation context, and a clear return or next action.", "artifacts": [ "evidence/a-mobile.png", "evidence/a-dom.json" ], "effort": "small", "pathId": "a-page" }, { "id": "F03", "severity": "medium", "confidence": "high", "summary": "The page ignores the user’s dark color-scheme preference", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "evidence": "The dark-emulated screenshot remains the same white/black light surface, and no CSS or color-scheme declaration exists.", "suggestedFix": "Declare color-scheme and define preference-driven light/dark surface and text colors with a safe fallback.", "artifacts": [ "evidence/dark.png", "evidence/dom.json" ], "effort": "small", "pathId": "home" }, { "id": "F04", "severity": "low", "confidence": "high", "summary": "The only route change is an abrupt cross-document swap", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "directional-navigation-transitions", "guidanceCategory": "user-experience", "evidence": "The link to a.html uses no view-transition CSS and the destination provides no continuity cue.", "suggestedFix": "After fixing destination semantics, add a subtle cross-document View Transition with reduced-motion handling.", "artifacts": [ "evidence/dom.json", "evidence/a-dom.json" ], "effort": "small", "pathId": "home" }, { "id": "F05", "severity": "high", "confidence": "high", "summary": "Mobile devices receive a scaled 980px layout instead of responsive reflow", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "css", "evidence": "At 360x800, layout metrics show clientWidth 980, scale 0.367, and hasViewportMeta false on both pages.", "suggestedFix": "Add a standards meta viewport and use fluid intrinsic layout/text sizing that reflows at the device width.", "artifacts": [ "evidence/layout-mobile.json", "evidence/mobile.png", "evidence/a-layout-mobile.json" ], "effort": "trivial", "pathId": "home" }, { "id": "F06", "severity": "medium", "confidence": "high", "summary": "Document structure is incomplete, especially on a.html", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "evidence": "The homepage exposes no landmarks, and a.html has no title, heading, landmark, or contextual navigation.", "suggestedFix": "Use semantic header/main/nav landmarks and give every page a descriptive h1 and logical reading/focus order.", "artifacts": [ "evidence/probe.json", "evidence/a-dom.json" ], "effort": "small", "pathId": "home" }, { "id": "F07", "severity": "low", "confidence": "high", "summary": "A missing favicon produces a console/network error on every load", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "guidanceId": "html", "guidanceCategory": "html", "evidence": "Lighthouse logs a 404 for /favicon.ico and the HAR records the failed request.", "suggestedFix": "Serve an intentional favicon or explicitly reference an existing icon so the page loads without a 404.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/network-summary.json" ], "effort": "trivial", "pathId": "home" }, { "id": "F08", "severity": "medium", "confidence": "high", "summary": "The responses use quirks-mode or no authored HTML structure", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "html", "evidence": "The homepage uses an HTML 3.2 doctype and reports BackCompat; a.html is a six-byte text response.", "suggestedFix": "Serve HTML5 documents with , UTF-8 metadata, semantic head/body structure, and standards mode.", "artifacts": [ "evidence/raw.html", "evidence/probe.json", "evidence/a-raw.html" ], "effort": "small", "pathId": "home" }, { "id": "F09", "severity": "high", "confidence": "high", "summary": "Pages lack descriptive search/share metadata", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "guidanceCategory": "seo", "evidence": "The homepage title is “Index of /” with no description; a.html has no title or description.", "suggestedFix": "Add unique descriptive titles and concise meta descriptions that match each page’s visible purpose.", "artifacts": [ "evidence/dom.json", "evidence/a-dom.json" ], "effort": "trivial", "pathId": "home" }, { "id": "F10", "severity": "medium", "confidence": "high", "summary": "Crawl and indexing signals are incomplete", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "seo", "evidence": "robots.txt and sitemap.xml both return 404; no canonical/hreflang is present, the link text is only a filename, and viewport metadata is absent.", "suggestedFix": "Publish a deliberate robots policy and sitemap if public indexing is intended, add canonicals, descriptive link text, and viewport metadata.", "artifacts": [ "evidence/robots.txt", "evidence/sitemap.xml", "evidence/probe.json" ], "effort": "small", "pathId": "home" }, { "id": "F11", "severity": "high", "confidence": "high", "summary": "Security headers and first-party cookie attributes are unsafe", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "evidence": "Headers evidence shows no CSP, HSTS, or nosniff; both cookies lack Secure and HttpOnly and use SameSite=None.", "suggestedFix": "Set Secure, HttpOnly where script access is unnecessary, and Lax/Strict where cross-site use is unnecessary; deploy CSP, HSTS, and nosniff.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "effort": "small", "pathId": "home" }, { "id": "F12", "severity": "high", "confidence": "high", "summary": "Browser-enforced defensive policies are absent", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "evidence": "No clickjacking protection, Referrer-Policy, Permissions-Policy, HSTS, or CSP frame-ancestors is present.", "suggestedFix": "Define restrictive frame-ancestors (or X-Frame-Options fallback), Referrer-Policy and Permissions-Policy, plus HSTS and an enforcing CSP.", "artifacts": [ "evidence/headers.json" ], "effort": "small", "pathId": "home" }, { "id": "F13", "severity": "medium", "confidence": "high", "summary": "HTTP failures provide no recovery route", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "guidanceId": "persistent-top-layer-ui", "guidanceCategory": "user-experience", "evidence": "A tested unknown URL returns a generic Apache 404 with no home link, search, retry, contact, or status guidance.", "suggestedFix": "Serve a branded 404 with a plain link to the safe entry point and concise recovery/status guidance.", "artifacts": [ "evidence/404-dom.json", "evidence/404-mobile.png" ], "effort": "small", "pathId": "error-page" }, { "id": "F14", "severity": "medium", "confidence": "high", "summary": "The document language is undeclared", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "guidanceCategory": "internationalization", "evidence": "Both rendered documents have an empty html lang value; Lighthouse fails html-has-lang.", "suggestedFix": "Set an accurate BCP 47 lang value on every HTML document and use dir when content direction requires it.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/probe.json", "evidence/a-dom.json" ], "effort": "trivial", "pathId": "home" } ], "taskList": [ { "id": "T1", "title": "Replace the exposed directory/token journey with purposeful semantic pages and recovery navigation", "priority": 1, "findingIds": [ "F01", "F02", "F06", "F13" ], "guidanceId": "scrollability-affordance-hints", "status": "open" }, { "id": "T2", "title": "Deploy security headers and safe cookie attributes", "priority": 2, "findingIds": [ "F11", "F12" ], "guidanceId": "security", "status": "open" }, { "id": "T3", "title": "Move both responses to standards-mode responsive HTML5", "priority": 3, "findingIds": [ "F05", "F08", "F14" ], "guidanceId": "html", "status": "open" }, { "id": "T4", "title": "Add descriptive metadata and deliberate indexing signals", "priority": 4, "findingIds": [ "F09", "F10" ], "guidanceId": "html", "status": "open" }, { "id": "T5", "title": "Respect dark mode and add subtle navigation continuity", "priority": 5, "findingIds": [ "F03", "F04" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T6", "title": "Serve a valid favicon without console errors", "priority": 6, "findingIds": [ "F07" ], "guidanceId": "html", "status": "open" } ], "budget": { "pathCount": 3, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-18T19-23-39-635Z" }