{
  "url": "https://www.arbada.com",
  "auditedAt": "2026-07-19T13:04:51.441Z",
  "mode": "report",
  "status": "completed",
  "statusDetail": "Coverage complete: 58/58 checks judged across six representative public paths and one failure state.",
  "page": {
    "appType": "mpa",
    "framework": "Server-rendered multi-page site with jQuery/Fancybox",
    "notes": "Arabic adult-media catalog. Public catalog, search, category, album, video detail, sign-in and 404 surfaces were sampled."
  },
  "evidenceUsed": [
    "screenshot",
    "dom",
    "layout-metrics",
    "evaluate-probe",
    "trace",
    "har",
    "discoverability",
    "headers",
    "cookies",
    "trackers",
    "secrets",
    "images",
    "heap-summary",
    "lighthouse",
    "HTTP status probe",
    "Modern Web Guidance search/retrieve"
  ],
  "guidanceConsulted": [
    "dark-mode",
    "directional-navigation-transitions",
    "scroll-position-aware-elements",
    "privacy",
    "light-dismiss-a-dialog",
    "size-aware-styling",
    "accessibility",
    "performance",
    "optimize-image-priority",
    "identify-heavy-scripts",
    "html",
    "security",
    "search-hidden-content",
    "autofill-sign-in-form",
    "deprioritize-background-fetches",
    "improve-text-layout-and-legibility",
    "forms",
    "validate-input-after-interaction",
    "fluid-scaling"
  ],
  "artifacts": [
    {
      "type": "screenshot",
      "path": "evidence/albums-mobile.png",
      "caption": "albums mobile"
    },
    {
      "type": "screenshot",
      "path": "evidence/category-mobile.png",
      "caption": "category mobile"
    },
    {
      "type": "other",
      "path": "evidence/cookies.json",
      "caption": "cookies"
    },
    {
      "type": "screenshot",
      "path": "evidence/discoverability-crawler.png",
      "caption": "discoverability crawler"
    },
    {
      "type": "screenshot",
      "path": "evidence/discoverability-rendered.png",
      "caption": "discoverability rendered"
    },
    {
      "type": "discoverability",
      "path": "evidence/discoverability.json",
      "caption": "discoverability"
    },
    {
      "type": "other",
      "path": "evidence/error-state.json",
      "caption": "error state"
    },
    {
      "type": "other",
      "path": "evidence/guidance-list.json",
      "caption": "guidance list"
    },
    {
      "type": "other",
      "path": "evidence/guidance-retrieved.md",
      "caption": "guidance retrieved"
    },
    {
      "type": "other",
      "path": "evidence/guidance-searches.txt",
      "caption": "guidance searches"
    },
    {
      "type": "other",
      "path": "evidence/headers.json",
      "caption": "headers"
    },
    {
      "type": "heap",
      "path": "evidence/heap-baseline.json",
      "caption": "heap baseline"
    },
    {
      "type": "heap",
      "path": "evidence/heap-post-scroll.json",
      "caption": "heap post scroll"
    },
    {
      "type": "screenshot",
      "path": "evidence/home-dark.png",
      "caption": "home dark"
    },
    {
      "type": "screenshot",
      "path": "evidence/home-desktop.png",
      "caption": "home desktop"
    },
    {
      "type": "dom",
      "path": "evidence/home-dom.json",
      "caption": "home dom"
    },
    {
      "type": "screenshot",
      "path": "evidence/home-forced-colors.png",
      "caption": "home forced colors"
    },
    {
      "type": "layout",
      "path": "evidence/home-mobile-layout.json",
      "caption": "home mobile layout"
    },
    {
      "type": "screenshot",
      "path": "evidence/home-mobile.png",
      "caption": "home mobile"
    },
    {
      "type": "other",
      "path": "evidence/home-probe.json",
      "caption": "home probe"
    },
    {
      "type": "har-summary",
      "path": "evidence/home-summary.json",
      "caption": "home summary"
    },
    {
      "type": "trace-summary",
      "path": "evidence/home-trace-summary.json",
      "caption": "home trace summary"
    },
    {
      "type": "trace",
      "path": "evidence/home-trace.json",
      "caption": "home trace"
    },
    {
      "type": "har",
      "path": "evidence/home.har",
      "caption": "home"
    },
    {
      "type": "other",
      "path": "evidence/images.json",
      "caption": "images"
    },
    {
      "type": "lighthouse",
      "path": "evidence/lighthouse-home.json",
      "caption": "lighthouse home"
    },
    {
      "type": "lighthouse",
      "path": "evidence/lighthouse-summary.json",
      "caption": "lighthouse summary"
    },
    {
      "type": "screenshot",
      "path": "evidence/login-mobile.png",
      "caption": "login mobile"
    },
    {
      "type": "other",
      "path": "evidence/login-overlay.json",
      "caption": "login overlay"
    },
    {
      "type": "other",
      "path": "evidence/login-page.json",
      "caption": "login page"
    },
    {
      "type": "other",
      "path": "evidence/memory-metrics.json",
      "caption": "memory metrics"
    },
    {
      "type": "other",
      "path": "evidence/preferences-motion-css.json",
      "caption": "preferences motion css"
    },
    {
      "type": "other",
      "path": "evidence/recon.json",
      "caption": "recon"
    },
    {
      "type": "other",
      "path": "evidence/search-flow.json",
      "caption": "search flow"
    },
    {
      "type": "screenshot",
      "path": "evidence/search-mobile.png",
      "caption": "search mobile"
    },
    {
      "type": "other",
      "path": "evidence/secrets.json",
      "caption": "secrets"
    },
    {
      "type": "other",
      "path": "evidence/trackers.json",
      "caption": "trackers"
    },
    {
      "type": "other",
      "path": "evidence/video-captions.json",
      "caption": "video captions"
    },
    {
      "type": "screenshot",
      "path": "evidence/video-detail-mobile.png",
      "caption": "video detail mobile"
    },
    {
      "type": "other",
      "path": "evidence/video-detail-probe.json",
      "caption": "video detail probe"
    },
    {
      "type": "dom",
      "path": "evidence/video-dom.json",
      "caption": "video dom"
    },
    {
      "type": "layout",
      "path": "evidence/video-mobile-layout.json",
      "caption": "video mobile layout"
    },
    {
      "type": "screenshot",
      "path": "evidence/video-mobile.png",
      "caption": "video mobile"
    },
    {
      "type": "other",
      "path": "evidence/video-probe.json",
      "caption": "video probe"
    }
  ],
  "config": {
    "loaded": false
  },
  "coverage": {
    "catalogVersion": "modern-web-guidance@0.0.172",
    "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7",
    "expected": 58,
    "recorded": 58,
    "judged": 58,
    "blocked": 0,
    "notRun": 0,
    "missing": 0,
    "unknown": 0,
    "duplicates": 0,
    "complete": true
  },
  "checkOutcomes": [
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-color-scheme",
      "status": "issues",
      "confidence": "high",
      "method": "Default/dark screenshot comparison plus CSS/computed-style probe",
      "evidence": "Dark-emulation screenshot is pixel-identical to the default capture; computed color-scheme is normal and no prefers-color-scheme CSS was found. The dark UI is hard-coded rather than preference-driven.",
      "artifacts": [
        "evidence/home-desktop.png",
        "evidence/home-dark.png",
        "evidence/preferences-motion-css.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F01"
      ]
    },
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-reduced-motion",
      "status": "pass",
      "confidence": "high",
      "method": "Emulated prefers-reduced-motion evaluate probe",
      "evidence": "The reduced-motion probe matched the requested preference, found no running animations and no auto-advancing content.",
      "artifacts": [
        "evidence/preferences-motion-css.json"
      ],
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-contrast",
      "status": "pass",
      "confidence": "high",
      "method": "Forced-colors screenshot inspection",
      "evidence": "Forced-colors/prefers-contrast capture retained visible text, controls, boundaries and selected-state cues.",
      "artifacts": [
        "evidence/home-forced-colors.png"
      ],
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "view-transitions",
      "status": "issues",
      "confidence": "medium",
      "method": "Cross-path visual walkthrough plus CSS feature probe",
      "evidence": "Navigation between the long listing, category, search and detail pages is an abrupt full-document swap; no authored view-transition CSS was present.",
      "artifacts": [
        "evidence/home-mobile.png",
        "evidence/category-mobile.png",
        "evidence/video-detail-mobile.png",
        "evidence/preferences-motion-css.json"
      ],
      "pathIds": [
        "home",
        "category",
        "video-detail"
      ],
      "findingIds": [
        "F02"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "scroll-driven-animations",
      "status": "pass",
      "confidence": "high",
      "method": "CSS feature probe, scroll walkthrough and trace summary",
      "evidence": "No scroll-linked visual effects or scroll-event-driven animation were observed; scrolling remains native and the trace shows only one 56.65 ms task.",
      "artifacts": [
        "evidence/preferences-motion-css.json",
        "evidence/home-trace-summary.json"
      ],
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "physical-gestures",
      "status": "pass",
      "confidence": "medium",
      "method": "Mobile walkthrough and player DOM probe",
      "evidence": "The feed and player use native scrolling and native media controls; no custom pointer-drag behavior that fights platform gestures was observed.",
      "artifacts": [
        "evidence/home-mobile.png",
        "evidence/video-captions.json"
      ],
      "pathIds": [
        "home",
        "video-detail"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "scroll-state-aware-chrome",
      "status": "issues",
      "confidence": "high",
      "method": "Long-page layout plus mobile screenshot and CSS probe",
      "evidence": "The homepage is about 13,943 CSS px tall at mobile width, but screenshots and CSS probe show static chrome with no progress, back-to-top, shrinking header or scroll-state behavior.",
      "artifacts": [
        "evidence/home-mobile-layout.json",
        "evidence/home-mobile.png",
        "evidence/preferences-motion-css.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F03"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "anchored-positioning",
      "status": "pass",
      "confidence": "medium",
      "method": "Overlay and DOM surface inspection",
      "evidence": "No edge-attached tooltip or popover surface was found that requires anchored positioning; the sign-in surface is a centered modal.",
      "artifacts": [
        "evidence/login-overlay.json",
        "evidence/home-dom.json"
      ],
      "pathIds": [
        "home",
        "login"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "directs-attention",
      "status": "pass",
      "confidence": "medium",
      "method": "Representative mobile screenshot review",
      "evidence": "Prominent section headings, selected sort state and card hierarchy consistently direct attention across listing and search views.",
      "artifacts": [
        "evidence/home-mobile.png",
        "evidence/search-mobile.png",
        "evidence/category-mobile.png"
      ],
      "pathIds": [
        "home",
        "search",
        "category"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "no-intrusive-interruptions",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse notification-on-start audit",
      "evidence": "Lighthouse observed a third-party push SDK requesting notification permission on page load, interrupting users before an in-context action.",
      "artifacts": [
        "evidence/lighthouse-home.json",
        "evidence/lighthouse-summary.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F04"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "semantic-dismissible-primitives",
      "status": "issues",
      "confidence": "high",
      "method": "Active overlay interaction and semantic DOM probe",
      "evidence": "Opening sign-in creates .fancybox-overlay/.fancybox-wrap divs; the page contains zero dialog and zero popover elements, and focus remained on body rather than moving into the modal.",
      "artifacts": [
        "evidence/login-overlay.json",
        "evidence/home-probe.json"
      ],
      "pathIds": [
        "home",
        "login"
      ],
      "findingIds": [
        "F05"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "reduced-chrome",
      "status": "pass",
      "confidence": "medium",
      "method": "Desktop and mobile screenshot review",
      "evidence": "The first viewport gives most space to search and media cards; decoration and borders are restrained relative to content.",
      "artifacts": [
        "evidence/home-desktop.png",
        "evidence/home-mobile.png"
      ],
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "responsive-no-horizontal-scroll",
      "status": "pass",
      "confidence": "high",
      "method": "Mobile layout metrics",
      "evidence": "At 360x800, homepage and video detail both report scrollWidth 360, viewport meta present and 0 px horizontal overflow.",
      "artifacts": [
        "evidence/home-mobile-layout.json",
        "evidence/video-mobile-layout.json"
      ],
      "pathIds": [
        "home",
        "video-detail"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "component-level-responsiveness",
      "status": "issues",
      "confidence": "medium",
      "method": "Computed CSS and mobile/desktop component comparison",
      "evidence": "Cards reflow at viewport breakpoints, but computed container-type is normal and the stylesheet probe found no @container rules, so reusable components are viewport-coupled.",
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/preferences-motion-css.json",
        "evidence/home-desktop.png",
        "evidence/home-mobile.png"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F06"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "input-modality-aware",
      "status": "issues",
      "confidence": "high",
      "method": "Programmatic focus and target-size probe",
      "evidence": "The first focusable sign-up control computes outline:none and box-shadow:none; two category links are only 15 px high, below an adequate touch target.",
      "artifacts": [
        "evidence/home-probe.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F07"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "clear-purpose-and-primary-action",
      "status": "pass",
      "confidence": "high",
      "method": "First-viewport screenshot and heading/control probe",
      "evidence": "The Arabic tagline, search field, category shortcuts and media cards make the site purpose and next actions immediately apparent.",
      "artifacts": [
        "evidence/home-mobile.png",
        "evidence/home-probe.json"
      ],
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "primary-flow-completion",
      "status": "pass",
      "confidence": "high",
      "method": "Search-to-detail walkthrough",
      "evidence": "A search for arab returns 12 video links, and a selected canonical detail URL reaches a working video player with controls.",
      "artifacts": [
        "evidence/search-flow.json",
        "evidence/search-mobile.png",
        "evidence/video-detail-probe.json",
        "evidence/video-detail-mobile.png"
      ],
      "pathIds": [
        "search",
        "video-detail"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "clear-system-state-and-recovery",
      "status": "pass",
      "confidence": "high",
      "method": "HTTP status request and rendered error-state probe",
      "evidence": "A nonexistent route returns HTTP 404, displays an explicit Arabic not-found message, and retains search and related-content recovery routes.",
      "artifacts": [
        "evidence/error-state.json"
      ],
      "pathIds": [
        "error"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "good-core-web-vitals",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse plus CDP trace corroboration",
      "evidence": "Mobile Lighthouse measured LCP 7.6 s and TTI 7.6 s despite CLS 0 and TBT 70 ms; the LCP is well outside the good threshold.",
      "artifacts": [
        "evidence/lighthouse-home.json",
        "evidence/lighthouse-summary.json",
        "evidence/home-trace-summary.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F08"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "visual-stability",
      "status": "pass",
      "confidence": "high",
      "method": "Layout observers and image audit",
      "evidence": "Both mobile layout captures report CLS 0 with no shifts, and all 44 homepage images have explicit dimensions.",
      "artifacts": [
        "evidence/home-mobile-layout.json",
        "evidence/video-mobile-layout.json",
        "evidence/images.json"
      ],
      "pathIds": [
        "home",
        "video-detail"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "efficient-main-thread",
      "status": "pass",
      "confidence": "high",
      "method": "CDP trace and Lighthouse",
      "evidence": "The trace found one 56.65 ms long task and only 6.65 ms total blocking time; Lighthouse TBT was 70 ms.",
      "artifacts": [
        "evidence/home-trace-summary.json",
        "evidence/lighthouse-summary.json"
      ],
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "efficient-resource-delivery",
      "status": "issues",
      "confidence": "high",
      "method": "Image audit, HAR summary and DOM script attributes",
      "evidence": "The page loads 41 below-fold images eagerly; all 44 images lack srcset, and the HAR identifies two render-blocking stylesheets plus an undeferred parser script.",
      "artifacts": [
        "evidence/images.json",
        "evidence/home-summary.json",
        "evidence/home-probe.json",
        "evidence/home.har"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F09"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "trim-unused-and-duplicate-code",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse code-coverage diagnostics",
      "evidence": "Lighthouse estimates 262 KiB unused JavaScript and 20 KiB unused CSS; main.min.js is 69% unused and the stylesheet is 84% unused.",
      "artifacts": [
        "evidence/lighthouse-home.json",
        "evidence/lighthouse-summary.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F10"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "names-roles-labels",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse accessibility audit and control-name probe",
      "evidence": "Lighthouse found the linked logo has no discernible name; the menu button also lacks an accessible name in the DOM probe.",
      "artifacts": [
        "evidence/lighthouse-home.json",
        "evidence/lighthouse-summary.json",
        "evidence/home-probe.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F11"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "sufficient-contrast",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse color-contrast audit",
      "evidence": "Lighthouse measured 2.26:1 on the active pagination state and 1.79:1 on footer text/links, below WCAG minimums.",
      "artifacts": [
        "evidence/lighthouse-home.json",
        "evidence/lighthouse-summary.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F12"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "structure-and-focus",
      "status": "issues",
      "confidence": "high",
      "method": "Active focus and modal-focus probes",
      "evidence": "Programmatically focusing the first control produces outline:none and no box shadow; opening sign-in leaves focus on body rather than in the modal.",
      "artifacts": [
        "evidence/home-probe.json",
        "evidence/login-overlay.json"
      ],
      "pathIds": [
        "home",
        "login"
      ],
      "findingIds": [
        "F13"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "legible-text",
      "status": "pass",
      "confidence": "medium",
      "method": "Mobile screenshot review",
      "evidence": "Primary card titles and headings are readable at mobile width without clipping; Arabic text wraps within cards and viewport.",
      "artifacts": [
        "evidence/home-mobile.png",
        "evidence/category-mobile.png",
        "evidence/video-detail-mobile.png"
      ],
      "pathIds": [
        "home",
        "category",
        "video-detail"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "zoom-reflow-targets-and-media",
      "status": "issues",
      "confidence": "high",
      "method": "Video track probe plus target-size and mobile reflow checks",
      "evidence": "The representative detail page exposes two video elements but neither contains a caption/subtitle track; the target probe also found two 15 px-high category links.",
      "artifacts": [
        "evidence/video-captions.json",
        "evidence/home-probe.json",
        "evidence/video-mobile-layout.json"
      ],
      "pathIds": [
        "video-detail",
        "home"
      ],
      "findingIds": [
        "F14"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "no-console-errors",
      "status": "pass",
      "confidence": "high",
      "method": "Lighthouse errors-in-console audit",
      "evidence": "Lighthouse recorded no browser console errors or uncaught exceptions during load.",
      "artifacts": [
        "evidence/lighthouse-summary.json"
      ],
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "sound-document-and-assets",
      "status": "pass",
      "confidence": "high",
      "method": "DOM metadata and image audit",
      "evidence": "The document has an HTML doctype, UTF-8 charset and viewport meta; all 44 audited images have dimensions and none is oversized beyond 2x display width.",
      "artifacts": [
        "evidence/home-probe.json",
        "evidence/images.json"
      ],
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "browser-platform-hygiene",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse best-practices diagnostics",
      "evidence": "Lighthouse found a notification request on load and three BFCache failure reasons caused by Cache-Control:no-store/cookie modification.",
      "artifacts": [
        "evidence/lighthouse-home.json",
        "evidence/lighthouse-summary.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F15"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "title-and-description",
      "status": "pass",
      "confidence": "high",
      "method": "DOM metadata probes",
      "evidence": "The homepage and representative video have descriptive titles and meta descriptions.",
      "artifacts": [
        "evidence/home-probe.json",
        "evidence/video-detail-probe.json"
      ],
      "pathIds": [
        "home",
        "video-detail"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "crawlable-and-mobile-friendly",
      "status": "issues",
      "confidence": "high",
      "method": "Discoverability primitive, robots recon and Lighthouse anchor audit",
      "evidence": "Raw content coverage is 100% and robots is valid, but Lighthouse found sign-in and five AJAX sort anchors without href, making those actions uncrawlable and non-progressive.",
      "artifacts": [
        "evidence/discoverability.json",
        "evidence/recon.json",
        "evidence/lighthouse-summary.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F16"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "canonical-and-indexing-signals",
      "status": "pass",
      "confidence": "high",
      "method": "Metadata, robots/sitemap and HTTP-status inspection",
      "evidence": "Homepage and detail canonical URLs are present, robots permits public content, sitemap indexes current content, and tested pages return appropriate 200/404 statuses.",
      "artifacts": [
        "evidence/home-probe.json",
        "evidence/video-detail-probe.json",
        "evidence/recon.json"
      ],
      "pathIds": [
        "home",
        "video-detail",
        "error"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "structured-and-shareable-metadata",
      "status": "issues",
      "confidence": "high",
      "method": "Rendered metadata probes",
      "evidence": "The video detail supplies Open Graph metadata but no JSON-LD VideoObject, while the homepage has neither Open Graph tags nor JSON-LD.",
      "artifacts": [
        "evidence/home-probe.json",
        "evidence/video-detail-probe.json"
      ],
      "pathIds": [
        "home",
        "video-detail"
      ],
      "findingIds": [
        "F17"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "secure-transport-and-headers",
      "status": "issues",
      "confidence": "high",
      "method": "Headers and cookie primitives",
      "evidence": "HTTPS is used, but CSP, HSTS and nosniff are absent; all five cookies lack Secure, use SameSite=None, and PHPSESSID is not HttpOnly.",
      "artifacts": [
        "evidence/headers.json",
        "evidence/cookies.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F18"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "data-minimisation-and-third-parties",
      "status": "issues",
      "confidence": "high",
      "method": "Tracker primitive and HAR summary",
      "evidence": "The tracker probe found seven third-party origins and active Google Tag Manager/Analytics; the HAR attributes 50 of 54 requests and 813,138 transferred bytes to third parties.",
      "artifacts": [
        "evidence/trackers.json",
        "evidence/home-summary.json",
        "evidence/home.har"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F19"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "in-context-permissions-and-modern-auth",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse permission audit and sign-in DOM inspection",
      "evidence": "Lighthouse reports notification permission requested on load, while the public sign-in page offers password-only authentication and no WebAuthn/passkey surface.",
      "artifacts": [
        "evidence/lighthouse-summary.json",
        "evidence/login-page.json"
      ],
      "pathIds": [
        "home",
        "login"
      ],
      "findingIds": [
        "F20"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "defensive-browser-policies",
      "status": "issues",
      "confidence": "high",
      "method": "Security-header primitive",
      "evidence": "CSP/frame-ancestors, HSTS, X-Frame-Options, Referrer-Policy and Permissions-Policy are all absent.",
      "artifacts": [
        "evidence/headers.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F21"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "progressive-enhancement",
      "status": "pass",
      "confidence": "high",
      "method": "No-JS discoverability comparison",
      "evidence": "The discoverability primitive found 100% raw/rendered content coverage, no empty SPA mount and useful crawler rendering without JavaScript.",
      "artifacts": [
        "evidence/discoverability.json",
        "evidence/discoverability-crawler.png"
      ],
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "resilient-runtime-behaviour",
      "status": "pass",
      "confidence": "medium",
      "method": "Cross-path walkthrough and Lighthouse console audit",
      "evidence": "Representative listing, search and detail routes render complete content without console errors; the native player and server navigation remain usable.",
      "artifacts": [
        "evidence/home-mobile.png",
        "evidence/search-mobile.png",
        "evidence/video-detail-mobile.png",
        "evidence/lighthouse-summary.json"
      ],
      "pathIds": [
        "home",
        "search",
        "video-detail"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "offline-and-installable",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement from site recon",
      "evidence": "This is a server-rendered streaming/catalog site whose core media is intrinsically network-dependent; installability and offline media playback are not a proportionate requirement.",
      "reason": "This is a server-rendered streaming/catalog site whose core media is intrinsically network-dependent; installability and offline media playback are not a proportionate requirement."
    },
    {
      "principleId": "be-resilient",
      "checkId": "network-and-http-failure-states",
      "status": "pass",
      "confidence": "high",
      "method": "HTTP and rendered 404 inspection",
      "evidence": "A missing route returns a real 404, explains that the page moved or is unavailable, and retains search plus related links for recovery.",
      "artifacts": [
        "evidence/error-state.json"
      ],
      "pathIds": [
        "error"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "lang-dir-and-logical-properties",
      "status": "issues",
      "confidence": "high",
      "method": "DOM language/direction probe",
      "evidence": "The Arabic-first RTL interface declares html lang=\"en\" and no dir attribute, giving assistive technology and bidi layout the wrong language/direction signals.",
      "artifacts": [
        "evidence/home-probe.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F22"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "locale-aware-data",
      "status": "pass",
      "confidence": "medium",
      "method": "Cross-template content inspection",
      "evidence": "Rendered dates and counts use Arabic labels and relative-age wording consistently across listing and detail templates.",
      "artifacts": [
        "evidence/home-mobile.png",
        "evidence/video-detail-mobile.png"
      ],
      "pathIds": [
        "home",
        "video-detail"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "time-zone-correctness",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement from site recon",
      "evidence": "The audited public surfaces show relative ages and durations only; they do not schedule or coordinate time-zone-sensitive events.",
      "reason": "The audited public surfaces show relative ages and durations only; they do not schedule or coordinate time-zone-sensitive events."
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "no-dark-patterns",
      "status": "issues",
      "confidence": "high",
      "method": "Search flow text probe and first-viewport screenshot",
      "evidence": "The search page places a block of unrelated external keyword-stuffed links above the genuine results, including arbadasex.com and hot-arab-films URLs, obscuring the result set and resembling disguised SEO content.",
      "artifacts": [
        "evidence/search-flow.json",
        "evidence/search-mobile.png"
      ],
      "pathIds": [
        "search"
      ],
      "findingIds": [
        "F23"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "humane-error-handling",
      "status": "pass",
      "confidence": "medium",
      "method": "Sign-in form DOM and screenshot inspection",
      "evidence": "The sign-in form has visible Arabic labels and prominent account creation and password/email recovery links; the public search requires no validation-sensitive data.",
      "artifacts": [
        "evidence/login-page.json",
        "evidence/login-mobile.png"
      ],
      "pathIds": [
        "login"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "trustworthy-input-assistance",
      "status": "issues",
      "confidence": "high",
      "method": "Form input attribute probes",
      "evidence": "Sign-in username and password inputs have empty autocomplete values instead of username and current-password; the search field also has no autocomplete token.",
      "artifacts": [
        "evidence/login-page.json",
        "evidence/home-probe.json"
      ],
      "pathIds": [
        "login",
        "home"
      ],
      "findingIds": [
        "F24"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "safe-commercial-and-account-flows",
      "status": "pass",
      "confidence": "medium",
      "method": "Account entry-path inspection",
      "evidence": "The public sign-in surface clearly labels credentials and exposes free registration plus password/email recovery; no purchase, subscription or forced-continuity flow is present on audited paths.",
      "artifacts": [
        "evidence/login-page.json",
        "evidence/login-mobile.png"
      ],
      "pathIds": [
        "login"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "optimised-assets",
      "status": "issues",
      "confidence": "high",
      "method": "Image primitive",
      "evidence": "All 44 homepage images are legacy JPG, none has srcset, and 41 below-fold images load eagerly.",
      "artifacts": [
        "evidence/images.json"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F25"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "no-wasteful-work",
      "status": "pass",
      "confidence": "high",
      "method": "Trace, memory metrics and player probe",
      "evidence": "The CDP trace reports only 6.65 ms total blocking time and the repeated-scroll probe adds no DOM nodes; no persistent autoplay media was observed.",
      "artifacts": [
        "evidence/home-trace-summary.json",
        "evidence/memory-metrics.json",
        "evidence/video-captions.json"
      ],
      "pathIds": [
        "home",
        "video-detail"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "third-party-and-media-budget",
      "status": "issues",
      "confidence": "high",
      "method": "HAR summary, tracker and image audits",
      "evidence": "Third parties account for 813,138 of 826,210 transferred bytes (98.4%); Google Tag Manager alone transfers 166,718 bytes and 41 below-fold images load eagerly.",
      "artifacts": [
        "evidence/home-summary.json",
        "evidence/trackers.json",
        "evidence/images.json",
        "evidence/home.har"
      ],
      "pathIds": [
        "home"
      ],
      "findingIds": [
        "F26"
      ]
    },
    {
      "principleId": "be-agent-ready",
      "checkId": "structured-agent-capabilities",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement from site recon",
      "evidence": "No developer intent indicates an agent-facing transaction surface; this public media catalog can be crawled fully without JavaScript, so WebMCP exposure is an optional emerging opportunity.",
      "reason": "No developer intent indicates an agent-facing transaction surface; this public media catalog can be crawled fully without JavaScript, so WebMCP exposure is an optional emerging opportunity."
    },
    {
      "principleId": "be-agent-ready",
      "checkId": "on-device-inference",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement from site recon",
      "evidence": "The representative search and media-browsing tasks do not require on-device generative inference; absence is not a quality failure for this site.",
      "reason": "The representative search and media-browsing tasks do not require on-device generative inference; absence is not a quality failure for this site."
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "no-leak-under-repeated-interaction",
      "status": "pass",
      "confidence": "medium",
      "method": "Baseline/post heap comparison and same-session metrics",
      "evidence": "After ten full-page down/up scroll cycles, heap summary size rose only 59,903 bytes (8,554,048 to 8,613,951), DOM element count remained 867, and no unbounded trend was demonstrated.",
      "artifacts": [
        "evidence/heap-baseline.json",
        "evidence/heap-post-scroll.json",
        "evidence/memory-metrics.json"
      ],
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "bounded-footprint",
      "status": "pass",
      "confidence": "medium",
      "method": "Heap summary and DOM/heap metrics",
      "evidence": "The loaded media listing retained about 8.6 MB of heap-summary self size with 867 live DOM elements, proportionate to a 44-card image catalog.",
      "artifacts": [
        "evidence/heap-baseline.json",
        "evidence/memory-metrics.json"
      ],
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "no-detached-dom-or-unbounded-listeners",
      "status": "pass",
      "confidence": "medium",
      "method": "Before/after heap summary and DOM-count comparison",
      "evidence": "Repeated scrolling added zero DOM elements; detached-node constructors do not appear among the heap summaries’ largest constructors, and the post snapshot changed by only about 60 KB.",
      "artifacts": [
        "evidence/heap-baseline.json",
        "evidence/heap-post-scroll.json",
        "evidence/memory-metrics.json"
      ],
      "pathIds": [
        "home"
      ]
    }
  ],
  "principleOutcomes": [
    {
      "principleId": "respect-user-preferences",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F01"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F02"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F03"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F04",
        "F05"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F06",
        "F07"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "expectation": "default",
      "status": "pass"
    },
    {
      "principleId": "be-fast-and-stable",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F08",
        "F09",
        "F10"
      ]
    },
    {
      "principleId": "be-inclusive",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F11",
        "F12",
        "F13",
        "F14"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F15"
      ]
    },
    {
      "principleId": "be-discoverable",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F16",
        "F17"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F18",
        "F19",
        "F20",
        "F21"
      ]
    },
    {
      "principleId": "be-resilient",
      "expectation": "contextual",
      "status": "pass"
    },
    {
      "principleId": "be-internationalised",
      "expectation": "contextual",
      "status": "issues",
      "findingIds": [
        "F22"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F23",
        "F24"
      ]
    },
    {
      "principleId": "be-sustainable",
      "expectation": "contextual",
      "status": "issues",
      "findingIds": [
        "F25",
        "F26"
      ]
    },
    {
      "principleId": "be-agent-ready",
      "expectation": "contextual",
      "status": "not-applicable",
      "reason": "No developer intent indicates an agent-facing transaction surface; this public media catalog can be crawled fully without JavaScript, so WebMCP exposure is an optional emerging opportunity. The representative search and media-browsing tasks do not require on-device generative inference; absence is not a quality failure for this site."
    },
    {
      "principleId": "be-memory-efficient",
      "expectation": "default",
      "status": "pass"
    }
  ],
  "paths": [
    {
      "id": "home",
      "description": "Homepage and primary media listing: purpose, navigation, preferences, performance, responsive layout and global policies.",
      "url": "https://www.arbada.com",
      "conditions": [
        "desktop",
        "viewport: 360x800",
        "prefers-color-scheme: dark",
        "prefers-reduced-motion: reduce",
        "forced-colors: active",
        "keyboard focus",
        "no JavaScript crawler"
      ],
      "result": "issues"
    },
    {
      "id": "category",
      "description": "Arabic category listing, representing taxonomy/listing templates.",
      "url": "https://www.arbada.com/categories/arab-porn-sex-%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%B3%D9%83%D8%B3-%D8%B9%D8%B1%D8%A8%D9%8A/",
      "conditions": [
        "viewport: 360x800"
      ],
      "result": "issues"
    },
    {
      "id": "albums",
      "description": "Album index, representing image-collection listings.",
      "url": "https://www.arbada.com/albums/",
      "conditions": [
        "viewport: 360x800"
      ],
      "result": "issues"
    },
    {
      "id": "search",
      "description": "Search journey for “arab”, representing query results and content discovery.",
      "url": "https://www.arbada.com/search/?q=arab",
      "conditions": [
        "viewport: 360x800"
      ],
      "result": "issues"
    },
    {
      "id": "video-detail",
      "description": "Canonical video detail and player, representing the core media-consumption journey.",
      "url": "https://www.arbada.com/videos/7312/%D9%81%D8%B4%D8%AE-%D8%A7%D9%84%D8%A7%D8%A8%D9%86-%D9%84%D8%B2%D9%88%D8%AC%D8%A9-%D8%A7%D9%84%D8%A7%D8%A8-%D9%82%D8%A8%D9%84-%D8%A7%D9%84%D8%B2%D9%88%D8%AC/",
      "conditions": [
        "viewport: 360x800"
      ],
      "result": "issues"
    },
    {
      "id": "login",
      "description": "Public sign-in entry, representing account form semantics and recovery.",
      "url": "https://www.arbada.com/login/",
      "conditions": [
        "viewport: 360x800",
        "modal trigger"
      ],
      "result": "issues"
    },
    {
      "id": "error",
      "description": "Nonexistent route, representing HTTP and user-facing recovery.",
      "url": "https://www.arbada.com/this-definitely-does-not-exist-404",
      "conditions": [
        "HTTP status",
        "rendered recovery"
      ],
      "result": "pass"
    }
  ],
  "findings": [
    {
      "id": "F01",
      "severity": "low",
      "confidence": "high",
      "summary": "Hard-coded dark palette ignores the user theme preference",
      "evidence": "The default and dark-emulation captures are pixel-identical; color-scheme computes to normal and no theme media query exists.",
      "suggestedFix": "Declare color-scheme and use prefers-color-scheme or light-dark() so browser UI and site surfaces follow the user preference.",
      "principleId": "respect-user-preferences",
      "principleCheckId": "respects-color-scheme",
      "guidanceId": "dark-mode",
      "guidanceCategory": "user-experience",
      "artifacts": [
        "evidence/home-desktop.png",
        "evidence/home-dark.png",
        "evidence/preferences-motion-css.json"
      ],
      "effort": "small",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F02",
      "severity": "low",
      "confidence": "high",
      "summary": "Route changes have no continuity cue",
      "evidence": "Representative MPA route changes are abrupt and no view-transition CSS is authored.",
      "suggestedFix": "Add same- or cross-document View Transitions for list-to-detail navigation, with reduced-motion handling.",
      "principleId": "implement-natural-interactions",
      "principleCheckId": "view-transitions",
      "guidanceId": "directional-navigation-transitions",
      "guidanceCategory": "user-experience",
      "artifacts": [
        "evidence/home-mobile.png",
        "evidence/video-detail-mobile.png"
      ],
      "effort": "medium",
      "pathId": "video-detail",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F03",
      "severity": "low",
      "confidence": "high",
      "summary": "Very long listings provide no scroll-state guidance",
      "evidence": "The mobile homepage is 13,943 CSS px tall but has no progress, back-to-top, shrinking header or scroll-state affordance.",
      "suggestedFix": "Add a lightweight progress/back-to-top affordance using scroll-state queries or a scroll-position-aware element.",
      "principleId": "provide-guided-navigation",
      "principleCheckId": "scroll-state-aware-chrome",
      "guidanceId": "scroll-position-aware-elements",
      "guidanceCategory": "user-experience",
      "artifacts": [
        "evidence/home-mobile-layout.json",
        "evidence/home-mobile.png"
      ],
      "effort": "small",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F04",
      "severity": "high",
      "confidence": "high",
      "summary": "Notification permission is requested on load",
      "evidence": "Lighthouse notification-on-start failed and identifies js.wpshsdk.com push code as the source.",
      "suggestedFix": "Remove the on-load request and ask only after a clear user action that explains the benefit.",
      "principleId": "maximize-content-reduce-noise",
      "principleCheckId": "no-intrusive-interruptions",
      "guidanceId": "privacy",
      "guidanceCategory": "privacy",
      "artifacts": [
        "evidence/lighthouse-home.json",
        "evidence/lighthouse-summary.json"
      ],
      "effort": "small",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F05",
      "severity": "medium",
      "confidence": "high",
      "summary": "Sign-in uses a custom, focus-unsafe overlay",
      "evidence": "The interaction creates Fancybox divs, no dialog/popover exists, and focus remains on body.",
      "suggestedFix": "Use a native dialog with a labelled heading, initial focus, Escape/light-dismiss policy and restored trigger focus.",
      "principleId": "maximize-content-reduce-noise",
      "principleCheckId": "semantic-dismissible-primitives",
      "guidanceId": "light-dismiss-a-dialog",
      "guidanceCategory": "user-experience",
      "artifacts": [
        "evidence/login-overlay.json",
        "evidence/home-probe.json"
      ],
      "effort": "medium",
      "pathId": "login",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F06",
      "severity": "low",
      "confidence": "high",
      "summary": "Cards are viewport-coupled rather than container-responsive",
      "evidence": "No @container rule exists and container-type computes to normal despite cards appearing in multiple layouts.",
      "suggestedFix": "Give reusable card/list wrappers container-type and move component breakpoints to @container rules.",
      "principleId": "adapt-to-the-form-factor",
      "principleCheckId": "component-level-responsiveness",
      "guidanceId": "size-aware-styling",
      "guidanceCategory": "user-experience",
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/preferences-motion-css.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F07",
      "severity": "medium",
      "confidence": "high",
      "summary": "Keyboard focus and touch targets are inadequate",
      "evidence": "The first focused control has no outline or box shadow; category links are 15 px high.",
      "suggestedFix": "Add a high-contrast :focus-visible indicator and enlarge compact controls to at least a comfortable 24x24 CSS px minimum, preferably 44x44.",
      "principleId": "adapt-to-the-form-factor",
      "principleCheckId": "input-modality-aware",
      "guidanceId": "accessibility",
      "guidanceCategory": "accessibility",
      "artifacts": [
        "evidence/home-probe.json"
      ],
      "effort": "small",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F08",
      "severity": "high",
      "confidence": "high",
      "summary": "Largest content paint is slow on mobile",
      "evidence": "Lighthouse measured LCP and TTI at 7.6 seconds; trace warm conditions were faster, so the throttled mobile result exposes the risk.",
      "suggestedFix": "Prioritise the LCP thumbnail, lazy-load below-fold cards, reduce blocking resources and remeasure under mobile throttling.",
      "principleId": "be-fast-and-stable",
      "principleCheckId": "good-core-web-vitals",
      "guidanceId": "performance",
      "guidanceCategory": "performance",
      "artifacts": [
        "evidence/lighthouse-home.json",
        "evidence/lighthouse-summary.json",
        "evidence/home-trace-summary.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F09",
      "severity": "medium",
      "confidence": "high",
      "summary": "Below-fold images and parser resources load inefficiently",
      "evidence": "41 below-fold images are eager, all 44 lack srcset, and the HAR shows blocking CSS and a parser-inserted undeferred main script.",
      "suggestedFix": "Lazy-load below-fold images, add responsive sources, prioritise only the LCP image and defer noncritical scripts/styles.",
      "principleId": "be-fast-and-stable",
      "principleCheckId": "efficient-resource-delivery",
      "guidanceId": "optimize-image-priority",
      "guidanceCategory": "performance",
      "artifacts": [
        "evidence/images.json",
        "evidence/home-summary.json",
        "evidence/home.har"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F10",
      "severity": "medium",
      "confidence": "high",
      "summary": "Most shipped JavaScript and CSS is unused",
      "evidence": "Lighthouse estimates 262 KiB unused JS and 20 KiB unused CSS, including 69% of main.min.js and 84% of the primary stylesheet.",
      "suggestedFix": "Split template-specific bundles, remove dead rules and load push/analytics code only after consent or intent.",
      "principleId": "be-fast-and-stable",
      "principleCheckId": "trim-unused-and-duplicate-code",
      "guidanceId": "identify-heavy-scripts",
      "guidanceCategory": "performance",
      "artifacts": [
        "evidence/lighthouse-home.json",
        "evidence/lighthouse-summary.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F11",
      "severity": "medium",
      "confidence": "high",
      "summary": "Logo and menu controls lack accessible names",
      "evidence": "Lighthouse flags the linked logo and the DOM probe shows an unlabeled icon-only menu button.",
      "suggestedFix": "Add concise accessible names and retain semantic button/link roles for every interactive control.",
      "principleId": "be-inclusive",
      "principleCheckId": "names-roles-labels",
      "guidanceId": "accessibility",
      "guidanceCategory": "accessibility",
      "artifacts": [
        "evidence/lighthouse-summary.json",
        "evidence/home-probe.json"
      ],
      "effort": "trivial",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F12",
      "severity": "medium",
      "confidence": "high",
      "summary": "Pagination and footer text fail contrast minimums",
      "evidence": "Lighthouse reports 2.26:1 for active pagination and 1.79:1 for footer text and links.",
      "suggestedFix": "Choose foreground/background pairs meeting at least 4.5:1 for normal text and verify all states.",
      "principleId": "be-inclusive",
      "principleCheckId": "sufficient-contrast",
      "guidanceId": "accessibility",
      "guidanceCategory": "accessibility",
      "artifacts": [
        "evidence/lighthouse-home.json",
        "evidence/lighthouse-summary.json"
      ],
      "effort": "small",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F13",
      "severity": "medium",
      "confidence": "high",
      "summary": "Focus is invisible and not moved into the modal",
      "evidence": "Focused controls show no indicator and opening sign-in leaves activeElement on body.",
      "suggestedFix": "Implement visible :focus-visible styles and native dialog focus management with trigger restoration.",
      "principleId": "be-inclusive",
      "principleCheckId": "structure-and-focus",
      "guidanceId": "accessibility",
      "guidanceCategory": "accessibility",
      "artifacts": [
        "evidence/home-probe.json",
        "evidence/login-overlay.json"
      ],
      "effort": "small",
      "pathId": "login",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F14",
      "severity": "high",
      "confidence": "high",
      "summary": "Video content has no caption track",
      "evidence": "Both video elements on the representative detail page contain zero track elements and no subtitle/caption surface.",
      "suggestedFix": "Provide WebVTT captions and a transcript or equivalent for spoken content, with a visible caption control.",
      "principleId": "be-inclusive",
      "principleCheckId": "zoom-reflow-targets-and-media",
      "guidanceId": "accessibility",
      "guidanceCategory": "accessibility",
      "artifacts": [
        "evidence/video-captions.json",
        "evidence/video-detail-mobile.png"
      ],
      "effort": "large",
      "pathId": "video-detail",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F15",
      "severity": "medium",
      "confidence": "high",
      "summary": "Push prompting and no-store policies harm platform behavior",
      "evidence": "Lighthouse finds an on-load notification request and three BFCache blockers tied to no-store/cookie modification.",
      "suggestedFix": "Remove unsolicited push code and scope no-store only to genuinely sensitive responses so public catalog pages can use BFCache.",
      "principleId": "follow-best-practices",
      "principleCheckId": "browser-platform-hygiene",
      "guidanceId": "html",
      "guidanceCategory": "html",
      "artifacts": [
        "evidence/lighthouse-home.json",
        "evidence/lighthouse-summary.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F16",
      "severity": "medium",
      "confidence": "high",
      "summary": "Important actions are not real links",
      "evidence": "Lighthouse finds sign-in and five AJAX sorting anchors without href even though raw content otherwise has 100% crawler coverage.",
      "suggestedFix": "Give every navigable action a real href and progressively enhance sorting/modal behavior with JavaScript.",
      "principleId": "be-discoverable",
      "principleCheckId": "crawlable-and-mobile-friendly",
      "guidanceId": "html",
      "guidanceCategory": "html",
      "artifacts": [
        "evidence/lighthouse-summary.json",
        "evidence/discoverability.json"
      ],
      "effort": "small",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F17",
      "severity": "medium",
      "confidence": "high",
      "summary": "Rich media metadata is incomplete",
      "evidence": "The detail page has Open Graph tags but no VideoObject JSON-LD; the homepage has no OG or JSON-LD.",
      "suggestedFix": "Add accurate VideoObject and Organization/WebSite JSON-LD plus complete social preview metadata.",
      "principleId": "be-discoverable",
      "principleCheckId": "structured-and-shareable-metadata",
      "guidanceId": "html",
      "guidanceCategory": "html",
      "artifacts": [
        "evidence/home-probe.json",
        "evidence/video-detail-probe.json"
      ],
      "effort": "small",
      "pathId": "video-detail",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F18",
      "severity": "high",
      "confidence": "high",
      "summary": "Session cookies and transport defenses are unsafe",
      "evidence": "CSP, HSTS and nosniff are absent; every cookie lacks Secure and uses SameSite=None, while PHPSESSID lacks HttpOnly.",
      "suggestedFix": "Set Secure, HttpOnly and appropriate SameSite attributes, then deploy HSTS, nosniff and a tested CSP.",
      "principleId": "be-private-and-secure",
      "principleCheckId": "secure-transport-and-headers",
      "guidanceId": "security",
      "guidanceCategory": "security",
      "artifacts": [
        "evidence/headers.json",
        "evidence/cookies.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F19",
      "severity": "medium",
      "confidence": "high",
      "summary": "Tracking and third-party traffic dominate the load",
      "evidence": "Seven third-party origins are active; 50 of 54 requests and 813,138 bytes are third-party, including Google analytics.",
      "suggestedFix": "Audit necessity, delay analytics until consent, batch events and self-host or remove nonessential dependencies.",
      "principleId": "be-private-and-secure",
      "principleCheckId": "data-minimisation-and-third-parties",
      "guidanceId": "privacy",
      "guidanceCategory": "privacy",
      "artifacts": [
        "evidence/trackers.json",
        "evidence/home-summary.json",
        "evidence/home.har"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F20",
      "severity": "high",
      "confidence": "high",
      "summary": "Permissions are not contextual and authentication is password-only",
      "evidence": "A push SDK requests notification permission on load; sign-in offers username/password with no passkey path.",
      "suggestedFix": "Gate notification requests behind explicit intent and add WebAuthn/passkey registration and authentication where accounts matter.",
      "principleId": "be-private-and-secure",
      "principleCheckId": "in-context-permissions-and-modern-auth",
      "guidanceId": "security",
      "guidanceCategory": "security",
      "artifacts": [
        "evidence/lighthouse-summary.json",
        "evidence/login-page.json"
      ],
      "effort": "large",
      "pathId": "login",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F21",
      "severity": "high",
      "confidence": "high",
      "summary": "Browser-enforced defensive policies are absent",
      "evidence": "CSP/frame-ancestors, HSTS, X-Frame-Options, Referrer-Policy and Permissions-Policy are all missing.",
      "suggestedFix": "Roll out a report-only CSP first, then enforce CSP/frame-ancestors, HSTS, Referrer-Policy and a least-privilege Permissions-Policy.",
      "principleId": "be-private-and-secure",
      "principleCheckId": "defensive-browser-policies",
      "guidanceId": "security",
      "guidanceCategory": "security",
      "artifacts": [
        "evidence/headers.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F22",
      "severity": "medium",
      "confidence": "high",
      "summary": "Arabic pages declare English language and no direction",
      "evidence": "The Arabic-first homepage has html lang=\"en\" and no dir attribute.",
      "suggestedFix": "Set lang=\"ar\" and dir=\"rtl\" at the document root, then use logical CSS properties and override language on embedded non-Arabic fragments.",
      "principleId": "be-internationalised",
      "principleCheckId": "lang-dir-and-logical-properties",
      "guidanceId": "accessibility",
      "guidanceCategory": "accessibility",
      "artifacts": [
        "evidence/home-probe.json"
      ],
      "effort": "trivial",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F23",
      "severity": "high",
      "confidence": "high",
      "summary": "Search results are preceded by disguised keyword links",
      "evidence": "The arab search displays unrelated external URLs and keyword-stuffed text above the actual result heading and cards.",
      "suggestedFix": "Remove injected/SEO link blocks and show only clearly labelled, relevant search results or sponsored content with provenance.",
      "principleId": "be-trustworthy",
      "principleCheckId": "no-dark-patterns",
      "guidanceId": "search-hidden-content",
      "guidanceCategory": "user-experience",
      "artifacts": [
        "evidence/search-flow.json",
        "evidence/search-mobile.png"
      ],
      "effort": "small",
      "pathId": "search",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F24",
      "severity": "medium",
      "confidence": "high",
      "summary": "Sign-in fields omit autofill semantics",
      "evidence": "Username and password inputs have empty autocomplete values; the search input is also unspecified.",
      "suggestedFix": "Use autocomplete=\"username\" and \"current-password\" on sign-in, plus appropriate search semantics.",
      "principleId": "be-trustworthy",
      "principleCheckId": "trustworthy-input-assistance",
      "guidanceId": "autofill-sign-in-form",
      "guidanceCategory": "forms",
      "artifacts": [
        "evidence/login-page.json",
        "evidence/home-probe.json"
      ],
      "effort": "trivial",
      "pathId": "login",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F25",
      "severity": "medium",
      "confidence": "high",
      "summary": "Image delivery wastes bytes and device resources",
      "evidence": "All 44 audited images are JPG, none has srcset, and 41 below-fold images load eagerly.",
      "suggestedFix": "Generate AVIF/WebP responsive variants, add srcset/sizes, preserve dimensions and lazy-load below-fold media.",
      "principleId": "be-sustainable",
      "principleCheckId": "optimised-assets",
      "guidanceId": "optimize-image-priority",
      "guidanceCategory": "performance",
      "artifacts": [
        "evidence/images.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.arbada.com"
    },
    {
      "id": "F26",
      "severity": "medium",
      "confidence": "high",
      "summary": "Third-party and eager-media cost is disproportionate",
      "evidence": "Third parties are 98.4% of transferred bytes and 41 below-fold thumbnails load without lazy loading.",
      "suggestedFix": "Set a third-party/media budget, remove or defer push/analytics, and lazy-load responsive thumbnails.",
      "principleId": "be-sustainable",
      "principleCheckId": "third-party-and-media-budget",
      "guidanceId": "deprioritize-background-fetches",
      "guidanceCategory": "performance",
      "artifacts": [
        "evidence/home-summary.json",
        "evidence/images.json",
        "evidence/trackers.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.arbada.com"
    }
  ],
  "taskList": [
    {
      "id": "T01",
      "title": "Secure cookies, headers and defensive browser policies",
      "priority": 1,
      "findingIds": [
        "F18",
        "F21"
      ],
      "guidanceId": "security",
      "status": "open"
    },
    {
      "id": "T02",
      "title": "Remove on-load push permission and gate tracking behind intent",
      "priority": 2,
      "findingIds": [
        "F04",
        "F15",
        "F19",
        "F20",
        "F26"
      ],
      "guidanceId": "privacy",
      "status": "open"
    },
    {
      "id": "T03",
      "title": "Fix mobile LCP and image/resource loading",
      "priority": 3,
      "findingIds": [
        "F08",
        "F09",
        "F10",
        "F25"
      ],
      "guidanceId": "optimize-image-priority",
      "status": "open"
    },
    {
      "id": "T04",
      "title": "Restore accessible names, contrast, focus and captions",
      "priority": 4,
      "findingIds": [
        "F07",
        "F11",
        "F12",
        "F13",
        "F14"
      ],
      "guidanceId": "accessibility",
      "status": "open"
    },
    {
      "id": "T05",
      "title": "Remove disguised keyword links from search",
      "priority": 5,
      "findingIds": [
        "F23"
      ],
      "guidanceId": "search-hidden-content",
      "status": "open"
    },
    {
      "id": "T06",
      "title": "Replace Fancybox sign-in with a semantic dialog",
      "priority": 6,
      "findingIds": [
        "F05"
      ],
      "guidanceId": "light-dismiss-a-dialog",
      "status": "open"
    },
    {
      "id": "T07",
      "title": "Correct Arabic language and direction metadata",
      "priority": 7,
      "findingIds": [
        "F22"
      ],
      "guidanceId": "accessibility",
      "status": "open"
    },
    {
      "id": "T08",
      "title": "Make links crawlable and add structured media metadata",
      "priority": 8,
      "findingIds": [
        "F16",
        "F17"
      ],
      "guidanceId": "html",
      "status": "open"
    },
    {
      "id": "T09",
      "title": "Add sign-in autocomplete and passkey support",
      "priority": 9,
      "findingIds": [
        "F20",
        "F24"
      ],
      "guidanceId": "autofill-sign-in-form",
      "status": "open"
    },
    {
      "id": "T10",
      "title": "Adopt preference-driven theming and modern navigation cues",
      "priority": 10,
      "findingIds": [
        "F01",
        "F02",
        "F03"
      ],
      "guidanceId": "dark-mode",
      "status": "open"
    },
    {
      "id": "T11",
      "title": "Move reusable card adaptation to container queries",
      "priority": 11,
      "findingIds": [
        "F06"
      ],
      "guidanceId": "size-aware-styling",
      "status": "open"
    }
  ],
  "budget": {
    "pathCount": 7,
    "auditPasses": 1
  },
  "agent": "pi",
  "runId": "2026-07-19T13-04-51-441Z"
}