{ "url": "https://api.id.me", "auditedAt": "2026-07-27T20:34:30.885Z", "mode": "report", "status": "blocked", "statusDetail": "Audit stopped during recon because The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "page": { "appType": "unknown", "framework": "unknown", "notes": "The requested host redirects to www.id.me. The browser-visible representation was a Cloudflare managed challenge, not the intended API/site. robots.txt and sitemap.xml returned 404 pages, so no representative templates or journeys could be selected." }, "evidenceUsed": [ "direct-http", "dom", "screenshot", "har", "discoverability", "security-headers", "Modern Web Guidance search" ], "guidanceConsulted": [ "accessibility", "accessible-error-announcement", "adapt-scrollbar-to-contrast-preferences", "agentic-forms", "agentic-javascript-tools", "autofill-highlight-inputs", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "calculate-event-differentials", "capture-location-agnostic-data", "carousel-slide-effects", "component-specific-light-dark-theme", "coordinate-global-events", "css", "css-layout", "dark-mode", "declarative-dialog-popover-control", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "deprioritize-background-fetches", "flicker-free-client-side-ab-testing", "forms", "html", "language-model", "move-dom-element-without-losing-state", "navigation-drawer", "optimize-preload-priority", "passkey-authentication", "passkey-reauthentication", "passkey-registration", "passkeys", "performance", "persistent-app-tours", "persistent-top-layer-ui", "position-aware-tooltips", "privacy", "pull-to-reveal", "schedule-tasks-by-priority", "scroll-entry-exit-effects", "scroll-position-aware-elements", "search-hidden-content", "security", "size-aware-styling", "stack-drill-down", "support-global-calendar-systems", "swipe-to-remove", "translator", "validate-input-after-interaction", "webmcp" ], "artifacts": [ { "type": "other", "path": "coverage-manifest.json", "caption": "Atomic coverage manifest containing all 58 expected check pairs and their planned evidence methods.", "findingIds": [] }, { "type": "other", "path": "evidence/curl-body.txt", "caption": "Retained audit evidence.", "findingIds": [] }, { "type": "other", "path": "evidence/curl-discovery.txt", "caption": "Route discovery attempts: robots.txt and sitemap.xml both returned 404 representations.", "findingIds": [] }, { "type": "other", "path": "evidence/curl-headers.txt", "caption": "Direct HTTP response headers showing api.id.me returns 301 to https://www.id.me.", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler view produced while access was blocked.", "condition": "headless Chrome; default viewport", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Rendered browser view of the verification challenge.", "condition": "headless Chrome; default viewport", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Discoverability probe reporting raw HTTP 403 and final URL https://www.id.me/.", "findingIds": [] }, { "type": "screenshot", "path": "evidence/entry-desktop.png", "caption": "Desktop capture of the Cloudflare managed challenge reached after the api.id.me redirect.", "condition": "headless Chrome; default viewport", "findingIds": [] }, { "type": "dom", "path": "evidence/entry-dom.json", "caption": "Rendered DOM showing final URL https://www.id.me/, title “Just a moment…”, and Cloudflare verification content.", "findingIds": [] }, { "type": "har-summary", "path": "evidence/entry-summary.json", "caption": "Compact HAR summary: 12 requests, redirects between api.id.me and www.id.me, and three HTTP 403 responses.", "findingIds": [] }, { "type": "har", "path": "evidence/entry.har", "caption": "Network capture showing redirect cycling and HTTP 403 responses at the destination.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/catalog.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-1.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-10.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-11.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-12.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-13.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-14.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-15.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-16.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-17.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-2.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-3.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-4.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-5.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-6.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-7.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-8.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/guidance/search-9.json", "caption": "Pinned Modern Web Guidance catalog/search cache consulted before judgement.", "findingIds": [] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security-header probe of the challenge response, not the inaccessible intended site.", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 0, "blocked": 58, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": false }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a screenshot or computed background under an emulated prefers-color-scheme: dark condition will reveal whether surfaces re-tint; the page CSS / a color-scheme declaration is corroborating evidence. The model chooses the method.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a transition video, or an in-page probe of getAnimations()/computed animation under an emulated prefers-reduced-motion: reduce condition, can show whether motion stops. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a screenshot under emulated prefers-contrast: more / forced-colors, or an axe/contrast probe, can show whether controls and text survive. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a transition video of a route/state change shows whether it animates; the page source / ::view-transition usage corroborates. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: source/CSS inspection for animation-timeline: scroll()/view(); a long-task / scroll-handler probe can flag the main-thread anti-pattern. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: CSS inspection for scroll-snap / overscroll-behavior / physics-based easing vs custom pointermove listeners. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a transition video of scrolling, or CSS inspection for scroll-state container queries. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: CSS inspection for anchor-name / position-anchor / position-try on overlays; a screenshot of an open overlay near a viewport edge can show drift. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: CSS inspection for ::highlight / scroll-marker; a transition video can show whether attention is cued after navigation. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a screenshot on load, or a DOM probe for full-viewport overlays present before interaction. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: DOM/source inspection for popover / /
vs custom overlay divs with manual dismiss handling. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a screenshot plus layout metrics can show the proportion of the viewport given to chrome vs content. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: layout metrics (scrollWidth vs innerWidth) and a screenshot at an emulated narrow mobile viewport reveal overflow. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: CSS inspection for @container / container-type; a computed-style probe of the same component in a wide vs narrow container shows whether it adapts. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a focus probe (focus an element, read the computed outline) or an axe target-size check; a screenshot of a focused control corroborates. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: screenshot the first viewport and key scrolled states; inspect heading structure, nav labels, button text, and visual hierarchy; a task walkthrough can show whether the next action is obvious. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: run the flow manually with screenshots/DOM snapshots at each step; compare expected vs actual path length; inspect form requirements, navigation continuity, and blockers. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: exercise network delay/failure, invalid input, empty data and success states; screenshot the state messaging and recovery controls; inspect whether browser history and focus remain sensible. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: Lighthouse reports LCP/CLS/TBT directly and the model may run it; layout metrics + a layout-shift observer + a long-task observer (the evidence primitives) give the same signal first-party. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: the layout primitive's CLS observer captures shifts; a transition video of the first seconds shows content jumping. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: the layout primitive records long tasks; a heap summary shows the object population; Lighthouse reports TBT. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a HAR summary can reveal cache headers, redirects, render-blocking candidates, weight offenders and dependency shape; a trace/Lighthouse insight report can corroborate LCP discovery, render-blocking, font-display and document latency. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: Lighthouse/trace/code-coverage style evidence can flag unused JS/CSS, duplicated JavaScript and legacy code; a HAR summary shows third-party byte cost and request count. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: axe-core (injectable via the evaluate primitive) or Lighthouse's a11y audits enumerate these; a DOM probe of the accessibility-relevant attributes is a first-party alternative. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: axe contrast rules, a Lighthouse contrast audit, or an in-page probe computing contrast ratios from computed colours. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: axe/Lighthouse structural audits; a focus-walk probe (tab through, read activeElement + computed outline) is a first-party alternative. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a screenshot of body and heading text, plus CSS inspection for text-wrap / text alignment / font fallback handling. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: Lighthouse/axe target-size, meta-viewport and media-caption audits are useful signals; screenshots at narrow and zoomed conditions plus DOM/media inspection can corroborate. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: capture Runtime/Log CDP events, or a probe that reads collected errors; Lighthouse reports this too. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a DOM/source probe for doctype/charset/img dimensions; CSS inspection for repetition; Lighthouse best-practices audits cover the rest. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: Lighthouse best-practices audits and DevTools inspector/deprecation signals can surface these; DOM/source probes can verify paste handlers and prompt timing. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a DOM probe reads and meta[name=description]; Lighthouse SEO audits cover the same ground. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a DOM probe for anchor hrefs, viewport meta, and robots; Lighthouse SEO audits corroborate. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: inspect response status and headers, <link rel=canonical>, hreflang links, robots meta, robots.txt and sitemap.xml; Lighthouse SEO audits cover several of these. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: inspect JSON-LD/microdata and social preview tags against visible content; Lighthouse has a manual structured-data audit, and ad-hoc probes can parse schema.org blocks. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: inspect response headers / page protocol via an evaluate probe or the network layer; Lighthouse best-practices flags HTTPS and CSP issues. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: inspect network requests and third-party origins; a probe of analytics/beacon calls. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a probe for permission requests fired on load; source inspection for passkey / WebAuthn / navigator.credentials usage in auth flows. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: inspect response headers and browser security state; Lighthouse/DevTools security audits can corroborate HSTS, clickjacking, Trusted Types, origin isolation and third-party cookie findings. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: load with scripting disabled or compare a no-JS fetch of the HTML against the rendered page; check for Baseline-aware fallbacks in source. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: exercise menus near viewport edges with a screenshot; a probe of async/visibility behaviour. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a probe for a service worker registration and a web app manifest; test behaviour offline. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: simulate failed fetches/offline mode or inspect representative 404/500 routes; screenshots and DOM snapshots of error/loading/empty states show whether recovery is possible. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a DOM probe for <html lang>/dir and CSS inspection for logical vs physical properties. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: source inspection for Intl.* usage vs hand-rolled formatting; a probe of rendered dates/numbers under a different locale. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: source inspection for time-zone-aware date handling vs naive local Date math. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a screenshot of consent/upsell/cancel flows; source inspection for declarative button actions vs misleading controls. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: exercise a form, submit invalid input, and observe timing and clarity of errors via a screenshot or a :user-invalid / aria-invalid probe. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: source/DOM inspection for autocomplete attributes on form fields; a probe of autofill affordances. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: walkthrough checkout/subscription/auth/account flows when present; screenshot pricing, confirmation, cancellation and reauthentication states; inspect passkey/autocomplete support for sign-in and payment. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: inspect transferred image bytes vs displayed size; source inspection for modern formats and resolution handling. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a long-task / network probe for background fetches and processing while idle or backgrounded. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a HAR summary shows third-party bytes, font/media weight and caching; screenshots/video reveal autoplay and decorative media; trace/layout evidence shows whether media/animation keeps work running. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: source inspection for WebMCP / agentic-tool registration and agent-readable affordances. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: source inspection for built-in AI (language model / summariser) usage. The model chooses.", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: compare heap snapshots for retained growth - a baseline, then one taken after repeating the interaction with `--interact` about 10x (the memory-tracer methodology: baseline -> repeat -> post -> compare). Performance.getMetrics (JSHeapUsedSize, Nodes) across the same before/after window is corroboration. If Chrome DevTools MCP is available, follow its memory-leak-debugging skill: capture baseline, target, and final sn", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: a single `heap` summary's totals (nodeCount, totalSelfSizeBytes, constructor population) plus Performance.getMetrics (Nodes, JSHeapUsedSize) give the current footprint to judge against the page's purpose. Chrome DevTools MCP heap snapshots and memlab snapshot analysis can provide the same memory distribution when available. Read summaries or derived analysis, never raw snapshots unless a dedicated heap-analysis tool ", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "blocked", "confidence": "high", "method": "Attempted navigation to the requested URL, then planned the check-specific method from the catalog: the `heap` summary by constructor (Detached* nodes) compared across a before/after pair shows a growing detached-DOM population; an `evaluate` probe can sample listener/timer counts (e.g. getEventListeners-style counting, or instrumenting addEventListener/setInterval) before and after the repeated interaction to spot growth. Chrome DevTools MCP heap snapshots plus the memory-leak-debugging skill's common-leak guidanc", "evidence": "CDP DOM and screenshot captured only a Cloudflare managed verification page at https://www.id.me/. The HAR recorded the api.id.me 301 redirect and HTTP 403 challenge responses, so no direct evidence about this check on the intended target could be gathered.", "reason": "The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible.", "pathIds": [ "entry" ], "artifacts": [ "evidence/entry-dom.json", "evidence/entry-desktop.png", "evidence/entry-summary.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "incomplete", "reason": "All 3 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "incomplete", "reason": "All 3 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "incomplete", "reason": "All 3 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "incomplete", "reason": "All 3 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "incomplete", "reason": "All 3 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "support-core-task-success", "expectation": "default", "status": "incomplete", "reason": "All 3 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "incomplete", "reason": "All 5 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "be-inclusive", "expectation": "default", "status": "incomplete", "reason": "All 5 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "follow-best-practices", "expectation": "default", "status": "incomplete", "reason": "All 3 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "be-discoverable", "expectation": "default", "status": "incomplete", "reason": "All 4 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "incomplete", "reason": "All 4 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "be-resilient", "expectation": "contextual", "status": "incomplete", "reason": "All 4 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "incomplete", "reason": "All 3 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "be-trustworthy", "expectation": "default", "status": "incomplete", "reason": "All 4 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "incomplete", "reason": "All 3 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "incomplete", "reason": "All 2 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "incomplete", "reason": "All 3 check(s) are blocked: The requested endpoint returned HTTP 301 to https://www.id.me, where automated Chrome received an HTTP 403 Cloudflare managed challenge (\"Performing security verification\"). The intended API or site representation and its routes, controls, flows, runtime, and assets were therefore inaccessible." } ], "paths": [ { "id": "entry", "description": "Requested API entry point and redirect destination. Intended as recon for the entry representation and route discovery; failed at a Cloudflare managed bot verification challenge.", "url": "https://api.id.me", "conditions": [ "default desktop headless Chrome", "direct HTTP request", "non-JavaScript crawler fetch" ], "result": "failed" }, { "id": "route-discovery", "description": "robots.txt and sitemap.xml discovery requests. Both returned 404 pages and did not expose representative routes.", "url": "https://api.id.me/robots.txt", "conditions": [ "direct HTTP request" ], "result": "failed" } ], "findings": [], "taskList": [], "budget": { "pathCount": 2, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-27T20-31-38-466Z" }