{ "url": "https://xhaccess.com", "auditedAt": "2026-07-20T01:12:14.157Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit of five representative public templates and flows. Authenticated, paid, upload, and third-party live flows were excluded because they require credentials, payment, user content, or leave the origin.", "page": { "appType": "hybrid", "framework": "Server-rendered application with client hydration and PWA service worker", "notes": "Adult media catalogue. Public content is substantially server rendered. Desktop markup is forced to 1024 CSS pixels even in a 360 pixel visual viewport." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "headers", "cookies", "trackers", "secrets", "images", "discoverability", "lighthouse", "heap-summary", "curl HTTP probes", "Modern Web Guidance 0.0.172" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "other", "path": "evidence/404-status.txt", "caption": "404 status", "findingIds": [] }, { "type": "other", "path": "evidence/404.html", "caption": "404", "findingIds": [] }, { "type": "screenshot", "path": "evidence/404.png", "caption": "404", "findingIds": [] }, { "type": "other", "path": "evidence/arabic-locale-probe.json", "caption": "arabic locale probe", "findingIds": [] }, { "type": "screenshot", "path": "evidence/category-desktop.png", "caption": "category desktop", "findingIds": [] }, { "type": "screenshot", "path": "evidence/category-discoverability-crawler.png", "caption": "category discoverability crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/category-discoverability-rendered.png", "caption": "category discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/category-discoverability.json", "caption": "category discoverability", "findingIds": [] }, { "type": "layout", "path": "evidence/category-layout.json", "caption": "category layout", "findingIds": [ "F-11", "F-16" ] }, { "type": "screenshot", "path": "evidence/category-mobile.png", "caption": "category mobile", "findingIds": [] }, { "type": "other", "path": "evidence/category-probe.json", "caption": "category probe", "findingIds": [ "F-19", "F-25", "F-26" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies", "findingIds": [ "F-27" ] }, { "type": "screenshot", "path": "evidence/detail-desktop.png", "caption": "detail desktop", "findingIds": [] }, { "type": "screenshot", "path": "evidence/detail-discoverability-crawler.png", "caption": "detail discoverability crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/detail-discoverability-rendered.png", "caption": "detail discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/detail-discoverability.json", "caption": "detail discoverability", "findingIds": [] }, { "type": "other", "path": "evidence/detail-images.json", "caption": "detail images", "findingIds": [ "F-24", "F-32" ] }, { "type": "layout", "path": "evidence/detail-layout.json", "caption": "detail layout", "findingIds": [ "F-11" ] }, { "type": "screenshot", "path": "evidence/detail-mobile.png", "caption": "detail mobile", "findingIds": [] }, { "type": "other", "path": "evidence/detail-probe.json", "caption": "detail probe", "findingIds": [ "F-25", "F-26" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F-27", "F-29" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline", "findingIds": [ "F-36", "F-37" ] }, { "type": "heap", "path": "evidence/heap-post-login-cycle.heapsnapshot", "caption": "heap post login cycle", "findingIds": [ "F-36" ] }, { "type": "other", "path": "evidence/home-buttons.json", "caption": "home buttons", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-contrast-more.png", "caption": "home contrast more", "findingIds": [ "F-03" ] }, { "type": "other", "path": "evidence/home-css-capabilities.json", "caption": "home css capabilities", "findingIds": [ "F-04", "F-05", "F-06", "F-07", "F-12" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark", "findingIds": [ "F-01" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [ "F-01", "F-05", "F-08", "F-09", "F-10", "F-28" ] }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "home discoverability crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "home discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "home discoverability", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [ "F-01" ] }, { "type": "other", "path": "evidence/home-images.json", "caption": "home images", "findingIds": [ "F-24", "F-32" ] }, { "type": "layout", "path": "evidence/home-layout.json", "caption": "home layout", "findingIds": [ "F-11", "F-23" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [ "F-10", "F-22" ] }, { "type": "other", "path": "evidence/home-probe.json", "caption": "home probe", "findingIds": [ "F-04", "F-06", "F-09", "F-13", "F-19", "F-21", "F-25", "F-26", "F-35" ] }, { "type": "other", "path": "evidence/home-recon.json", "caption": "home recon", "findingIds": [ "F-29", "F-31" ] }, { "type": "other", "path": "evidence/home-reduced-motion.json", "caption": "home reduced motion", "findingIds": [ "F-02" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F-17", "F-18", "F-28", "F-32", "F-33", "F-34" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F-15", "F-16", "F-33" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "home", "findingIds": [ "F-17" ] }, { "type": "har-summary", "path": "evidence/lighthouse-home-summary.json", "caption": "lighthouse home summary", "findingIds": [ "F-03", "F-13", "F-15", "F-17", "F-18", "F-19", "F-20", "F-23", "F-24", "F-35" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "lighthouse home", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-signup-summary.json", "caption": "lighthouse signup summary", "findingIds": [ "F-20" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-signup.json", "caption": "lighthouse signup", "findingIds": [] }, { "type": "other", "path": "evidence/manifest.webmanifest", "caption": "manifest", "findingIds": [] }, { "type": "other", "path": "evidence/pwa.js", "caption": "pwa", "findingIds": [] }, { "type": "other", "path": "evidence/resource-dom-confirmation.json", "caption": "resource dom confirmation", "findingIds": [ "F-17" ] }, { "type": "other", "path": "evidence/robots-headers.txt", "caption": "robots headers", "findingIds": [] }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots", "findingIds": [] }, { "type": "other", "path": "evidence/runtime-resilience.json", "caption": "runtime resilience", "findingIds": [ "F-37" ] }, { "type": "screenshot", "path": "evidence/search-desktop.png", "caption": "search desktop", "findingIds": [ "F-07" ] }, { "type": "layout", "path": "evidence/search-layout.json", "caption": "search layout", "findingIds": [ "F-11" ] }, { "type": "screenshot", "path": "evidence/search-mobile.png", "caption": "search mobile", "findingIds": [ "F-12" ] }, { "type": "other", "path": "evidence/search-probe.json", "caption": "search probe", "findingIds": [] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets", "findingIds": [] }, { "type": "screenshot", "path": "evidence/signup-desktop.png", "caption": "signup desktop", "findingIds": [ "F-08" ] }, { "type": "other", "path": "evidence/signup-email-form.json", "caption": "signup email form", "findingIds": [ "F-14", "F-31" ] }, { "type": "layout", "path": "evidence/signup-layout.json", "caption": "signup layout", "findingIds": [ "F-11", "F-14", "F-23" ] }, { "type": "screenshot", "path": "evidence/signup-mobile.png", "caption": "signup mobile", "findingIds": [ "F-11", "F-12", "F-14", "F-22" ] }, { "type": "other", "path": "evidence/signup-probe.json", "caption": "signup probe", "findingIds": [ "F-21" ] }, { "type": "other", "path": "evidence/signup-validation.json", "caption": "signup validation", "findingIds": [ "F-30" ] }, { "type": "other", "path": "evidence/sitemap-headers.txt", "caption": "sitemap headers", "findingIds": [ "F-25" ] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "sitemap", "findingIds": [] }, { "type": "screenshot", "path": "evidence/spanish-home.png", "caption": "spanish home", "findingIds": [] }, { "type": "other", "path": "evidence/spanish-locale-probe.json", "caption": "spanish locale probe", "findingIds": [ "F-25" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [ "F-28", "F-34" ] }, { "type": "other", "path": "evidence/video-links.json", "caption": "video links", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Default and prefers-color-scheme: dark screenshots are visually identical, and computed CSS reports color-scheme: normal. The interface is hard-coded dark rather than preference-driven.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dark.png", "evidence/home-dom.json" ], "findingIds": [ "F-01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The reduced-motion probe found eight running placeholder animations, each with a 2000 ms duration, while prefers-reduced-motion: reduce matched.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-reduced-motion.json" ], "findingIds": [ "F-02" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Lighthouse accessibility found color-contrast failures, and the prefers-contrast: more capture does not introduce a stronger contrast treatment.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-contrast-more.png", "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-03" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "A 585,604-character accessible CSS corpus contained no view-transition rule, while the site has many route and dialog state changes.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-css-capabilities.json", "evidence/home-probe.json" ], "findingIds": [ "F-04" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement", "evidence": "CSS and visual inspection found no scroll-linked effect that needed an implementation choice.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-css-capabilities.json", "evidence/home-desktop.png" ], "reason": "No scroll-linked parallax, scrollytelling, or reveal effect was observed on the representative pages." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Representative browsing uses native scrolling, links, buttons, and form controls; no custom pointer gesture that fights platform behavior was observed.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-css-capabilities.json", "evidence/home-desktop.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The long listing keeps static, space-heavy chrome; CSS inspection found no scroll-state or scroll timeline support.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-css-capabilities.json" ], "findingIds": [ "F-05" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The site exposes multiple dropdown/navigation surfaces, but the accessible CSS corpus contains no anchor-name, position-anchor, or position-try rules.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-css-capabilities.json", "evidence/home-probe.json" ], "findingIds": [ "F-06" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Representative screenshots and CSS inspection show no transition or highlight mechanism that cues where attention moved after route/state changes.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-css-capabilities.json", "evidence/search-desktop.png" ], "findingIds": [ "F-07" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The desktop load screenshot shows a 502 by 365 pixel consent overlay centered over the first viewport and blocking the listing.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/signup-desktop.png" ], "findingIds": [ "F-08" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The cookie and login surfaces are present, but DOM probes report zero dialog, popover, details, role=dialog, or aria-modal elements.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/home-desktop.png" ], "findingIds": [ "F-09" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "At 765 pixels wide, the first viewport is dominated by a 207 pixel sidebar, a 100 pixel header/navigation stack, two promotional banners, and the consent overlay.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "findingIds": [ "F-10" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "All five mobile layout probes report inner/scroll width 1024 against a 360 pixel visual viewport, producing 664 pixels of horizontal overflow. The signup form is mostly off-screen.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-layout.json", "evidence/category-layout.json", "evidence/detail-layout.json", "evidence/search-layout.json", "evidence/signup-layout.json", "evidence/signup-mobile.png" ], "findingIds": [ "F-11" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The accessible CSS corpus contains no @container rules, and reused listing/form components remain desktop-sized inside a 360 pixel viewport.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-css-capabilities.json", "evidence/search-mobile.png", "evidence/signup-mobile.png" ], "findingIds": [ "F-12" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The focus probe found no outline or box-shadow on the search input/button, Lighthouse failed target-size, and the home probe listed many 16 by 16 or 20 pixel interactive targets.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-probe.json", "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-13" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Each representative page has a descriptive title and clear H1 or primary account prompt; the home listing, category index, search results, video detail, and signup purpose are immediately identifiable.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-probe.json", "evidence/category-probe.json", "evidence/detail-probe.json", "evidence/search-probe.json", "evidence/signup-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "At 360 by 800, the signup panel begins around x=327 and extends beyond the screenshot, while layout metrics report 664 pixels of horizontal overflow. Primary signup controls cannot be reached without horizontal panning.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-mobile.png", "evidence/signup-layout.json", "evidence/signup-email-form.json" ], "findingIds": [ "F-14" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Search reports a result count and filters, form submission shows field-specific errors and focuses the email input, and an unknown URL returns a branded 404 with a Return to Home action.", "pathIds": [ "search", "signup", "home" ], "artifacts": [ "evidence/search-probe.json", "evidence/signup-validation.json", "evidence/404.png", "evidence/404-status.txt" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Lighthouse measured LCP and FCP at 3.5 seconds, while a separate trace measured LCP at 1.59 seconds. The slower controlled run is outside the 2.5 second good range.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F-15" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Layout observers recorded CLS 0 on home, category, detail, and signup, and 0.00029 on search, all in the good range despite unsized-image risk.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-layout.json", "evidence/category-layout.json", "evidence/detail-layout.json", "evidence/search-layout.json", "evidence/signup-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The trace found two long tasks, with a longest task of 175.56 ms and 136.55 ms total blocking time; layout probes also observed tasks up to 195 ms.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/category-layout.json" ], "findingIds": [ "F-16" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Lighthouse estimates 1,160 ms savings from render-blocking requests and 115 KiB from cache lifetime improvements. The HAR confirms three parser-inserted VeryHigh-priority stylesheets; scripts are correctly deferred.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-summary.json", "evidence/resource-dom-confirmation.json", "evidence/home.har" ], "findingIds": [ "F-17" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Lighthouse estimates 57 KiB unused CSS and 26 KiB unused JavaScript; the HAR records 61 scripts and 997,754 transferred script bytes.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-summary.json" ], "findingIds": [ "F-18" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Lighthouse failed button-name, link-name, label-content-name-mismatch, list semantics, and accessibility-tree audits. The category probe counted 220 unlabeled interactive candidates.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/category-probe.json", "evidence/home-probe.json" ], "findingIds": [ "F-19" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Lighthouse scored the color-contrast audit 0 on both home and signup.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json" ], "findingIds": [ "F-20" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The focused search input and button have outline:none and no box-shadow. The signup page starts its main content at H3 with no H1.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-probe.json", "evidence/signup-probe.json" ], "findingIds": [ "F-21" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Mobile captures show desktop columns clipped at 360 pixels; on signup, only a narrow right edge of the panel remains visible.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-mobile.png", "evidence/signup-mobile.png" ], "findingIds": [ "F-22" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Every 360 pixel layout has 664 pixels of horizontal overflow, and Lighthouse failed target-size and meta-viewport accessibility audits in its mobile run.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-layout.json", "evidence/signup-layout.json", "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-23" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Lighthouse best-practices scored 1.0 on home and signup and did not report console or runtime error failures.", "pathIds": [ "home", "signup" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The image primitive found 29 of 36 home images and 16 of 20 detail images without width/height attributes; Lighthouse also failed unsized-images.", "pathIds": [ "home", "video-detail" ], "artifacts": [ "evidence/home-images.json", "evidence/detail-images.json", "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-24" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Lighthouse best-practices scored 1.0 on both tested templates, no permission request fired on load, and scripts use async/defer appropriately.", "pathIds": [ "home", "signup" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json", "evidence/runtime-resilience.json", "evidence/resource-dom-confirmation.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "All five representative pages expose unique, descriptive titles and meta descriptions.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-probe.json", "evidence/category-probe.json", "evidence/detail-probe.json", "evidence/search-probe.json", "evidence/signup-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Navigation uses real href links, viewport metadata is present, robots.txt allows public content routes, and Lighthouse SEO scored 1.0. Mobile usability defects are recorded under form-factor and inclusion checks.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-recon.json", "evidence/robots.txt", "evidence/lighthouse-home-summary.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Canonical URLs are present, but probes found zero hreflang links even though many language subdomains exist, and /sitemap.xml returned HTTP 404.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-probe.json", "evidence/category-probe.json", "evidence/detail-probe.json", "evidence/sitemap-headers.txt", "evidence/spanish-locale-probe.json" ], "findingIds": [ "F-25" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The video detail has accurate Open Graph metadata but no JSON-LD; home and category pages also expose no JSON-LD.", "pathIds": [ "video-detail", "home", "category" ], "artifacts": [ "evidence/detail-probe.json", "evidence/home-probe.json", "evidence/category-probe.json" ], "findingIds": [ "F-26" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "CSP contains only frame-ancestors, X-Content-Type-Options and Referrer-Policy headers are absent, and the settings and CSRF cookies were observed without Secure.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F-27" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The HAR records 116 third-party requests and 1,558,102 third-party transferred bytes across 13 third-party origins, including ad-network origins, before consent interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/home-desktop.png" ], "findingIds": [ "F-28" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "No geolocation or notification request was observed on load. Signup offers federated methods and the authored page contains passkey/WebAuthn markers.", "pathIds": [ "home", "signup" ], "artifacts": [ "evidence/runtime-resilience.json", "evidence/signup-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "HSTS and frame protection are present, but CSP only sets frame-ancestors, nosniff and Referrer-Policy headers are absent, Permissions-Policy only mentions two client hints, and page markup declares referrer=unsafe-url.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/home-recon.json" ], "findingIds": [ "F-29" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Raw HTML contains 87% of home, 100% of category, and 79% of detail rendered content; titles, H1s, and descriptions survive without JavaScript, and no page is a JS shell.", "pathIds": [ "home", "category", "video-detail" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/category-discoverability.json", "evidence/detail-discoverability.json", "evidence/home-discoverability-crawler.png", "evidence/category-discoverability-crawler.png", "evidence/detail-discoverability-crawler.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Representative routes loaded with stable state, deferred scripts, and usable navigation; no clipped overlay-specific failure was observed separately from the global fixed-width defect.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/resource-dom-confirmation.json", "evidence/home-probe.json", "evidence/404.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "This app-like site provides a manifest with start_url and icons, an active service worker controls the page, and its service-worker source contains cache and offline handling paths.", "pathIds": [ "home" ], "artifacts": [ "evidence/manifest.webmanifest", "evidence/runtime-resilience.json", "evidence/pwa.js" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "A deliberately unknown path returns a true HTTP 404 and a branded recovery page with Return to Home and related content.", "pathIds": [ "home" ], "artifacts": [ "evidence/404-status.txt", "evidence/404.png", "evidence/404.html" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "English and Spanish pages set matching lang values, the Arabic locale sets lang=ar and dir=rtl, and the CSS corpus includes logical properties.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-probe.json", "evidence/spanish-locale-probe.json", "evidence/arabic-locale-probe.json", "evidence/home-css-capabilities.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The tested English, Spanish, and Arabic locale variants localize page titles and navigation content rather than exposing one hard-coded language. No incorrect locale-formatted data was observed.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/spanish-locale-probe.json", "evidence/arabic-locale-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement", "evidence": "DOM probes found no representative time-zone-sensitive surface to test.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/spanish-locale-probe.json" ], "reason": "No event schedule, date/time input, recurring event, or user-visible time-zone-sensitive value was present on the representative public pages." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Consent presents Accept and Reject with equal visual weight, signup states its data-use implications, and no preselected paid continuity or confirmshaming was observed.", "pathIds": [ "home", "signup" ], "artifacts": [ "evidence/home-desktop.png", "evidence/signup-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Submitting the empty email form shows clear messages and focuses email, but the error elements have no role=alert and fields do not expose aria-invalid.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-validation.json" ], "findingIds": [ "F-30" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The signup email input and site search input use autocomplete=off; email is not identified with autocomplete=email.", "pathIds": [ "signup", "home" ], "artifacts": [ "evidence/signup-email-form.json", "evidence/home-recon.json" ], "findingIds": [ "F-31" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The tested signup surface clearly offers login, federated, and email choices and discloses terms, privacy, public profile implications, and possible age verification before commitment. Paid checkout and authenticated cancellation were excluded because they require credentials/payment.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-probe.json", "evidence/signup-email-form.json" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The home image audit found 13 oversized images, 15 legacy-format URLs, 29 missing dimensions, and 3 without responsive sources.", "pathIds": [ "home", "video-detail" ], "artifacts": [ "evidence/home-images.json", "evidence/detail-images.json", "evidence/home-summary.json" ], "findingIds": [ "F-32" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The homepage loads 144 requests, 61 scripts, and 1.75 MB transferred, with multiple long tasks and large modules before a user selects content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F-33" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Third-party origins account for 116 of 144 requests and 1.56 MB of 1.75 MB transferred; the largest origin alone transfers 1.07 MB.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F-34" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "issues", "confidence": "medium", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The page has no WebMCP or agent-tool markers, and Lighthouse agentic-browsing scored 0.5 with a malformed accessibility-tree finding on home.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-35" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement", "evidence": "The audited public catalogue does not present an inference task; absence is not penalized.", "pathIds": [ "home", "category", "video-detail", "search", "signup" ], "artifacts": [ "evidence/home-probe.json" ], "reason": "No user-facing summarization, generation, or language-model task was present that would justify on-device inference." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "issues", "confidence": "medium", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "After garbage collection, ten login open/Escape-close cycles increased nodes from 682,925 to 748,412 (9.6%) and self size from 36,328,468 to 39,909,837 bytes (9.9%). Separate fresh sessions add variance, so confidence is medium.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post-login-cycle.heapsnapshot" ], "findingIds": [ "F-36" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "issues", "confidence": "medium", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "The garbage-collected baseline contains 682,925 heap nodes, 94,819 closures, and 36.3 MB self size for a catalogue landing page with 1,819 DOM elements.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/runtime-resilience.json" ], "findingIds": [ "F-37" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, network, performance, or heap evidence as cited", "evidence": "Neither heap summary lists a Detached constructor among the top 25 by self size. Closures rise by about 4% after the repeated modal cycle, materially less than total node growth, so no direct detached-DOM or clearly unbounded-listener signal was established.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post-login-cycle.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F-01", "F-02", "F-03" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F-04" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F-05", "F-06", "F-07" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F-08", "F-09", "F-10" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F-11", "F-12", "F-13" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F-14" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F-15", "F-16", "F-17", "F-18" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F-19", "F-20", "F-21", "F-22", "F-23" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F-24" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F-25", "F-26" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F-27", "F-28", "F-29" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F-30", "F-31" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F-32", "F-33", "F-34" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "issues", "findingIds": [ "F-35" ] }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F-36", "F-37" ] } ], "paths": [ { "id": "home", "description": "Entry listing, global navigation, consent, preferences, network, performance, and memory. Represents the shared catalogue shell.", "url": "https://xhaccess.com/", "conditions": [ "desktop", "360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "prefers-contrast: more", "keyboard focus" ], "result": "issues" }, { "id": "category", "description": "Category index archetype with dense navigation and headings.", "url": "https://xhaccess.com/categories", "conditions": [ "desktop", "360x800", "no JavaScript crawler comparison" ], "result": "issues" }, { "id": "video-detail", "description": "Primary content-detail and playback archetype.", "url": "https://xhaccess.com/videos/big-natural-tits-ebony-dancer-stretched-by-white-cock-at-twerking-class-xh2GphA", "conditions": [ "desktop", "360x800", "no JavaScript crawler comparison" ], "result": "issues" }, { "id": "search", "description": "Search results and filtering journey.", "url": "https://xhaccess.com/search/test", "conditions": [ "desktop", "360x800" ], "result": "issues" }, { "id": "signup", "description": "Primary account signup and invalid-form recovery journey.", "url": "https://xhaccess.com/signup", "conditions": [ "desktop", "360x800", "empty form submission" ], "result": "issues" } ], "findings": [ { "id": "F-01", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Theme does not respond to the system color preference.", "evidence": "Default and prefers-color-scheme: dark screenshots are visually identical, and computed CSS reports color-scheme: normal. The interface is hard-coded dark rather than preference-driven.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dark.png", "evidence/home-dom.json" ], "suggestedFix": "Declare color-scheme and use prefers-color-scheme or light-dark() so both light and dark system preferences receive intentional palettes.", "effort": "small" }, { "id": "F-02", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Loading animations continue under reduced-motion.", "evidence": "The reduced-motion probe found eight running placeholder animations, each with a 2000 ms duration, while prefers-reduced-motion: reduce matched.", "artifacts": [ "evidence/home-reduced-motion.json" ], "suggestedFix": "Disable non-essential placeholder and transition animation in a prefers-reduced-motion: reduce media query.", "effort": "small" }, { "id": "F-03", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "guidanceId": "adapt-scrollbar-to-contrast-preferences", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Text and controls do not maintain sufficient contrast.", "evidence": "Lighthouse accessibility found color-contrast failures, and the prefers-contrast: more capture does not introduce a stronger contrast treatment.", "artifacts": [ "evidence/home-contrast-more.png", "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Add a high-contrast palette for prefers-contrast and verify all text and essential controls meet WCAG contrast ratios.", "effort": "medium" }, { "id": "F-04", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Route and state changes lack declarative View Transitions.", "evidence": "A 585,604-character accessible CSS corpus contained no view-transition rule, while the site has many route and dialog state changes.", "artifacts": [ "evidence/home-css-capabilities.json", "evidence/home-probe.json" ], "suggestedFix": "Use same-document and cross-document View Transitions for meaningful route and overlay state changes, with reduced-motion fallbacks.", "effort": "medium" }, { "id": "F-05", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Persistent navigation does not respond to scroll state.", "evidence": "The long listing keeps static, space-heavy chrome; CSS inspection found no scroll-state or scroll timeline support.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-css-capabilities.json" ], "suggestedFix": "Use scroll-state container queries or a restrained shrinking header so persistent chrome yields space after scrolling.", "effort": "medium" }, { "id": "F-06", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "provide-guided-navigation", "principleCheckId": "anchored-positioning", "guidanceId": "position-aware-tooltips", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Menus are not built with CSS anchor positioning.", "evidence": "The site exposes multiple dropdown/navigation surfaces, but the accessible CSS corpus contains no anchor-name, position-anchor, or position-try rules.", "artifacts": [ "evidence/home-css-capabilities.json", "evidence/home-probe.json" ], "suggestedFix": "Anchor menus and transient overlays to their triggers with CSS anchor positioning and fallback positions.", "effort": "medium" }, { "id": "F-07", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "provide-guided-navigation", "principleCheckId": "directs-attention", "guidanceId": "directional-navigation-transitions", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Navigation changes provide little visual continuity.", "evidence": "Representative screenshots and CSS inspection show no transition or highlight mechanism that cues where attention moved after route/state changes.", "artifacts": [ "evidence/home-css-capabilities.json", "evidence/search-desktop.png" ], "suggestedFix": "Add directional transitions or targeted highlight cues for route, filter, and drawer changes, while honoring reduced motion.", "effort": "medium" }, { "id": "F-08", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "A consent modal obscures the primary content on load.", "evidence": "The desktop load screenshot shows a 502 by 365 pixel consent overlay centered over the first viewport and blocking the listing.", "artifacts": [ "evidence/home-desktop.png", "evidence/signup-desktop.png" ], "suggestedFix": "Use a compact, content-preserving consent surface with equally prominent choices and immediate dismissal.", "effort": "small" }, { "id": "F-09", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Custom overlays do not use dialog or popover primitives.", "evidence": "The cookie and login surfaces are present, but DOM probes report zero dialog, popover, details, role=dialog, or aria-modal elements.", "artifacts": [ "evidence/home-probe.json", "evidence/home-desktop.png" ], "suggestedFix": "Implement modal flows with dialog and transient surfaces with popover, including native focus and light-dismiss behavior.", "effort": "medium" }, { "id": "F-10", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "overflow-clipping-control", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Navigation, promotions, and sidebars crowd out content.", "evidence": "At 765 pixels wide, the first viewport is dominated by a 207 pixel sidebar, a 100 pixel header/navigation stack, two promotional banners, and the consent overlay.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "suggestedFix": "Collapse secondary navigation and promotions, reserve the first viewport for the requested content, and defer non-essential campaigns.", "effort": "large" }, { "id": "F-11", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "user-experience", "severity": "critical", "confidence": "high", "summary": "The desktop layout is forced into mobile viewports.", "evidence": "All five mobile layout probes report inner/scroll width 1024 against a 360 pixel visual viewport, producing 664 pixels of horizontal overflow. The signup form is mostly off-screen.", "artifacts": [ "evidence/home-layout.json", "evidence/category-layout.json", "evidence/detail-layout.json", "evidence/search-layout.json", "evidence/signup-layout.json", "evidence/signup-mobile.png" ], "suggestedFix": "Serve a genuinely responsive layout with intrinsic widths and mobile breakpoints; verify document scrollWidth never exceeds the visual viewport.", "effort": "large" }, { "id": "F-12", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Components do not adapt to their available container.", "evidence": "The accessible CSS corpus contains no @container rules, and reused listing/form components remain desktop-sized inside a 360 pixel viewport.", "artifacts": [ "evidence/home-css-capabilities.json", "evidence/search-mobile.png", "evidence/signup-mobile.png" ], "suggestedFix": "Add container-type to reusable layout regions and use size container queries for cards, filters, and account forms.", "effort": "large" }, { "id": "F-13", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Focus indicators and touch targets are inadequate.", "evidence": "The focus probe found no outline or box-shadow on the search input/button, Lighthouse failed target-size, and the home probe listed many 16 by 16 or 20 pixel interactive targets.", "artifacts": [ "evidence/home-probe.json", "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Provide visible :focus-visible styling and enlarge interactive hit areas to at least 24 by 24 CSS pixels, preferably 44 by 44 for primary touch controls.", "effort": "medium" }, { "id": "F-14", "pathId": "signup", "url": "https://xhaccess.com/signup", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "forms", "severity": "critical", "confidence": "high", "summary": "The signup flow is unusable at a common mobile viewport.", "evidence": "At 360 by 800, the signup panel begins around x=327 and extends beyond the screenshot, while layout metrics report 664 pixels of horizontal overflow. Primary signup controls cannot be reached without horizontal panning.", "artifacts": [ "evidence/signup-mobile.png", "evidence/signup-layout.json", "evidence/signup-email-form.json" ], "suggestedFix": "Reflow the account panel to the viewport, keep all fields and actions within the visual width, and test the complete signup journey at 360 pixels.", "effort": "large" }, { "id": "F-15", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Homepage LCP misses the good threshold in Lighthouse.", "evidence": "Lighthouse measured LCP and FCP at 3.5 seconds, while a separate trace measured LCP at 1.59 seconds. The slower controlled run is outside the 2.5 second good range.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Prioritize the LCP content and remove render-blocking work; verify LCP under representative mobile and throttled conditions.", "effort": "medium" }, { "id": "F-16", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-main-thread", "guidanceId": "break-up-long-tasks", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Load work includes avoidable long tasks.", "evidence": "The trace found two long tasks, with a longest task of 175.56 ms and 136.55 ms total blocking time; layout probes also observed tasks up to 195 ms.", "artifacts": [ "evidence/home-trace-summary.json", "evidence/category-layout.json" ], "suggestedFix": "Break up long tasks, defer non-critical initialization, and schedule background work by priority.", "effort": "medium" }, { "id": "F-17", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-preload-priority", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Render-blocking and cache inefficiencies delay content.", "evidence": "Lighthouse estimates 1,160 ms savings from render-blocking requests and 115 KiB from cache lifetime improvements. The HAR confirms three parser-inserted VeryHigh-priority stylesheets; scripts are correctly deferred.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-summary.json", "evidence/resource-dom-confirmation.json", "evidence/home.har" ], "suggestedFix": "Inline only critical CSS, defer non-critical styles, reduce dependency depth, and set effective cache lifetimes for versioned assets.", "effort": "large" }, { "id": "F-18", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "The homepage ships excess CSS and JavaScript.", "evidence": "Lighthouse estimates 57 KiB unused CSS and 26 KiB unused JavaScript; the HAR records 61 scripts and 997,754 transferred script bytes.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-summary.json" ], "suggestedFix": "Code-split by route and feature, remove unused style rules and legacy transforms, and delay third-party modules until needed.", "effort": "large" }, { "id": "F-19", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Interactive controls lack robust accessible names and roles.", "evidence": "Lighthouse failed button-name, link-name, label-content-name-mismatch, list semantics, and accessibility-tree audits. The category probe counted 220 unlabeled interactive candidates.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/category-probe.json", "evidence/home-probe.json" ], "suggestedFix": "Use semantic controls and lists, provide programmatic names that match visible labels, and label every form input and icon-only action.", "effort": "large" }, { "id": "F-20", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Text and controls fail WCAG contrast.", "evidence": "Lighthouse scored the color-contrast audit 0 on both home and signup.", "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-signup-summary.json" ], "suggestedFix": "Adjust text, muted text, link, and control colors to meet WCAG AA in all themes and states.", "effort": "medium" }, { "id": "F-21", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Keyboard focus is invisible and page structure is inconsistent.", "evidence": "The focused search input and button have outline:none and no box-shadow. The signup page starts its main content at H3 with no H1.", "artifacts": [ "evidence/home-probe.json", "evidence/signup-probe.json" ], "suggestedFix": "Add strong :focus-visible indicators, maintain logical heading levels, and use native dialog focus management for modal flows.", "effort": "medium" }, { "id": "F-22", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-inclusive", "principleCheckId": "legible-text", "guidanceId": "improve-text-layout-and-legibility", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "Mobile reflow clips and hides essential text and controls.", "evidence": "Mobile captures show desktop columns clipped at 360 pixels; on signup, only a narrow right edge of the panel remains visible.", "artifacts": [ "evidence/home-mobile.png", "evidence/signup-mobile.png" ], "suggestedFix": "Reflow typography and panels to the visual viewport with fluid line lengths, wrapping, and no horizontal panning.", "effort": "large" }, { "id": "F-23", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "The experience fails reflow and target-size requirements.", "evidence": "Every 360 pixel layout has 664 pixels of horizontal overflow, and Lighthouse failed target-size and meta-viewport accessibility audits in its mobile run.", "artifacts": [ "evidence/home-layout.json", "evidence/signup-layout.json", "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Remove fixed desktop sizing, preserve user zoom, enlarge targets, and verify content at 320 CSS pixels and 400 percent zoom.", "effort": "large" }, { "id": "F-24", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Many images lack explicit intrinsic dimensions.", "evidence": "The image primitive found 29 of 36 home images and 16 of 20 detail images without width/height attributes; Lighthouse also failed unsized-images.", "artifacts": [ "evidence/home-images.json", "evidence/detail-images.json", "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Set width and height or a stable aspect-ratio for every image and preserve the intrinsic ratio in responsive CSS.", "effort": "medium" }, { "id": "F-25", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Localized pages lack hreflang and the conventional sitemap endpoint is missing.", "evidence": "Canonical URLs are present, but probes found zero hreflang links even though many language subdomains exist, and /sitemap.xml returned HTTP 404.", "artifacts": [ "evidence/home-probe.json", "evidence/category-probe.json", "evidence/detail-probe.json", "evidence/sitemap-headers.txt", "evidence/spanish-locale-probe.json" ], "suggestedFix": "Publish an XML sitemap and reciprocal hreflang annotations for locale variants while retaining self-canonical URLs.", "effort": "medium" }, { "id": "F-26", "pathId": "video-detail", "url": "https://xhaccess.com/videos/big-natural-tits-ebony-dancer-stretched-by-white-cock-at-twerking-class-xh2GphA", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Rich content lacks structured data.", "evidence": "The video detail has accurate Open Graph metadata but no JSON-LD; home and category pages also expose no JSON-LD.", "artifacts": [ "evidence/detail-probe.json", "evidence/home-probe.json", "evidence/category-probe.json" ], "suggestedFix": "Add schema.org VideoObject and appropriate organization or collection JSON-LD that matches visible content.", "effort": "medium" }, { "id": "F-27", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Transport is HTTPS, but browser defenses and cookie flags are incomplete.", "evidence": "CSP contains only frame-ancestors, X-Content-Type-Options and Referrer-Policy headers are absent, and the settings and CSRF cookies were observed without Secure.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Deploy a restrictive script/style CSP, add nosniff and a strict referrer policy, and mark every HTTPS cookie Secure with appropriate SameSite and HttpOnly attributes.", "effort": "medium" }, { "id": "F-28", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "severity": "high", "confidence": "high", "summary": "The initial load has a large third-party footprint.", "evidence": "The HAR records 116 third-party requests and 1,558,102 third-party transferred bytes across 13 third-party origins, including ad-network origins, before consent interaction.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/home-desktop.png" ], "suggestedFix": "Gate optional advertising, identity, and analytics requests behind consent and user intent; batch and minimize remaining collection.", "effort": "large" }, { "id": "F-29", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Defensive policies are too narrow.", "evidence": "HSTS and frame protection are present, but CSP only sets frame-ancestors, nosniff and Referrer-Policy headers are absent, Permissions-Policy only mentions two client hints, and page markup declares referrer=unsafe-url.", "artifacts": [ "evidence/headers.json", "evidence/home-recon.json" ], "suggestedFix": "Expand CSP beyond framing, add nosniff, use strict-origin-when-cross-origin or stricter referrer policy, and explicitly deny unneeded powerful features.", "effort": "medium" }, { "id": "F-30", "pathId": "signup", "url": "https://xhaccess.com/signup", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "accessible-error-announcement", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Signup errors are visual but not programmatically announced.", "evidence": "Submitting the empty email form shows clear messages and focuses email, but the error elements have no role=alert and fields do not expose aria-invalid.", "artifacts": [ "evidence/signup-validation.json" ], "suggestedFix": "Synchronize :user-invalid with aria-invalid and announce post-interaction errors through a live region while keeping focus on the first invalid field.", "effort": "small" }, { "id": "F-31", "pathId": "signup", "url": "https://xhaccess.com/signup", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-up-form", "guidanceCategory": "forms", "severity": "medium", "confidence": "high", "summary": "Email and search fields disable useful autofill.", "evidence": "The signup email input and site search input use autocomplete=off; email is not identified with autocomplete=email.", "artifacts": [ "evidence/signup-email-form.json", "evidence/home-recon.json" ], "suggestedFix": "Use autocomplete=email and the appropriate account tokens; retain search history behavior unless there is a specific privacy requirement.", "effort": "small" }, { "id": "F-32", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "optimize-image-priority", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Many image assets are oversized or lack delivery metadata.", "evidence": "The home image audit found 13 oversized images, 15 legacy-format URLs, 29 missing dimensions, and 3 without responsive sources.", "artifacts": [ "evidence/home-images.json", "evidence/detail-images.json", "evidence/home-summary.json" ], "suggestedFix": "Serve right-sized AVIF/WebP variants with srcset/sizes, reserve dimensions, and lazy-load below-fold media.", "effort": "medium" }, { "id": "F-33", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "The initial page performs excessive work before user intent.", "evidence": "The homepage loads 144 requests, 61 scripts, and 1.75 MB transferred, with multiple long tasks and large modules before a user selects content.", "artifacts": [ "evidence/home-summary.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Defer optional modules and background fetches until interaction or idle time, and remove redundant locale, campaign, and third-party work.", "effort": "large" }, { "id": "F-34", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "guidanceCategory": "performance", "severity": "high", "confidence": "high", "summary": "Third-party delivery dominates the page budget.", "evidence": "Third-party origins account for 116 of 144 requests and 1.56 MB of 1.75 MB transferred; the largest origin alone transfers 1.07 MB.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Set a third-party byte/request budget, gate non-essential vendors, and defer media and identity modules until they provide immediate user value.", "effort": "large" }, { "id": "F-35", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-agent-ready", "principleCheckId": "structured-agent-capabilities", "guidanceId": "webmcp", "guidanceCategory": "webmcp", "severity": "low", "confidence": "medium", "summary": "Searchable catalogue capabilities are not exposed as structured agent tools.", "evidence": "The page has no WebMCP or agent-tool markers, and Lighthouse agentic-browsing scored 0.5 with a malformed accessibility-tree finding on home.", "artifacts": [ "evidence/home-probe.json", "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Expose safe search, filter, and detail retrieval actions through agentic forms or WebMCP where product policy permits.", "effort": "large" }, { "id": "F-36", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-memory-efficient", "principleCheckId": "no-leak-under-repeated-interaction", "guidanceId": "manage-recurring-intervals", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "medium", "summary": "Retained heap grows after repeated login open/close cycles.", "evidence": "After garbage collection, ten login open/Escape-close cycles increased nodes from 682,925 to 748,412 (9.6%) and self size from 36,328,468 to 39,909,837 bytes (9.9%). Separate fresh sessions add variance, so confidence is medium.", "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post-login-cycle.heapsnapshot" ], "suggestedFix": "Profile the login modal with same-session baseline, target, and final snapshots; release modal closures, arrays, listeners, and cached nodes after close.", "effort": "large" }, { "id": "F-37", "pathId": "home", "url": "https://xhaccess.com/", "principleId": "be-memory-efficient", "principleCheckId": "bounded-footprint", "guidanceId": "defer-rendering-heavy-content", "guidanceCategory": "performance", "severity": "medium", "confidence": "medium", "summary": "The landing page starts with a large JavaScript heap footprint.", "evidence": "The garbage-collected baseline contains 682,925 heap nodes, 94,819 closures, and 36.3 MB self size for a catalogue landing page with 1,819 DOM elements.", "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/runtime-resilience.json" ], "suggestedFix": "Reduce initial component/module population, lazy-initialize below-fold widgets, and audit large native/object/closure populations.", "effort": "large" } ], "taskList": [ { "id": "T-1", "title": "Rebuild responsive mobile layout and account flow", "priority": 1, "findingIds": [ "F-11", "F-14", "F-22", "F-23", "F-12" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T-2", "title": "Fix accessible names, focus, contrast, semantics, and target sizes", "priority": 2, "findingIds": [ "F-13", "F-19", "F-20", "F-21" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T-3", "title": "Reduce render-blocking, unused, and third-party work", "priority": 3, "findingIds": [ "F-17", "F-34", "F-15", "F-16", "F-18", "F-33" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T-4", "title": "Harden CSP, cookie flags, and browser security policies", "priority": 4, "findingIds": [ "F-27", "F-28", "F-29" ], "guidanceId": "security", "status": "open" }, { "id": "T-5", "title": "Replace intrusive custom overlays with semantic primitives", "priority": 5, "findingIds": [ "F-08", "F-10", "F-09" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T-6", "title": "Complete preference support for motion, color, and contrast", "priority": 6, "findingIds": [ "F-03", "F-02", "F-01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T-7", "title": "Optimize images and reserve their layout space", "priority": 7, "findingIds": [ "F-24", "F-32" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T-8", "title": "Investigate heap growth across repeated modal cycles", "priority": 8, "findingIds": [ "F-36", "F-37" ], "guidanceId": "manage-recurring-intervals", "status": "open" }, { "id": "T-9", "title": "Improve metadata, form assistance, navigation, and emerging platform use", "priority": 9, "findingIds": [ "F-25", "F-26", "F-30", "F-31", "F-04", "F-05", "F-06", "F-07", "F-35" ], "guidanceId": "html", "status": "open" } ], "budget": { "wallClockSeconds": 600, "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-20T01-02-19-476Z" }