{ "url": "https://nid.naver.com", "auditedAt": "2026-07-27T20:40:53.543Z", "mode": "report", "status": "partial", "statusDetail": "57 of 58 atomic checks were judged. End-to-end authentication was blocked because no safe test account/credentials were available.", "page": { "appType": "mpa", "framework": "server-rendered multi-page account service", "notes": "The root redirects through three hops to a localized sign-in page. Public sign-in, sign-up terms, ID recovery, invalid submission, and 404 recovery were sampled; authenticated account settings and successful credential submission were not covered." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "discoverability", "headers", "cookies", "trackers", "images", "secrets", "heap-summary", "lighthouse", "manual HTTP robots/sitemap probe", "Modern Web Guidance" ], "guidanceConsulted": [ "accessibility", "dark-mode", "performance", "forms", "passkeys", "passkey-authentication", "accessible-error-announcement", "validate-input-after-interaction", "required-field-feedback", "autofill-sign-in-form", "fluid-scaling", "security", "privacy", "stabilize-reactive-state", "agentic-forms" ], "artifacts": [ { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "Audit evidence: 404-mobile.png", "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/checkbox-defaults.json", "caption": "Audit evidence: checkbox-defaults.json" }, { "type": "other", "path": "evidence/cookies.json", "caption": "Audit evidence: cookies.json", "findingIds": [ "F-010" ] }, { "type": "screenshot", "path": "evidence/dark.png", "caption": "Audit evidence: dark.png", "condition": "prefers-color-scheme: dark", "findingIds": [ "F-001" ] }, { "type": "screenshot", "path": "evidence/desktop.png", "caption": "Audit evidence: desktop.png", "findingIds": [ "F-001" ] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Audit evidence: discoverability-crawler.png" }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Audit evidence: discoverability-rendered.png" }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Audit evidence: discoverability.json", "findingIds": [ "F-016" ] }, { "type": "dom", "path": "evidence/dom.json", "caption": "Audit evidence: dom.json" }, { "type": "other", "path": "evidence/feature-probe.json", "caption": "Audit evidence: feature-probe.json", "findingIds": [ "F-001", "F-012", "F-014" ] }, { "type": "other", "path": "evidence/focus-targets.json", "caption": "Audit evidence: focus-targets.json", "findingIds": [ "F-003", "F-004" ] }, { "type": "screenshot", "path": "evidence/forgot-mobile.png", "caption": "Audit evidence: forgot-mobile.png", "condition": "viewport: 360x800", "findingIds": [ "F-014" ] }, { "type": "other", "path": "evidence/forgot-probe.json", "caption": "Audit evidence: forgot-probe.json", "findingIds": [ "F-004" ] }, { "type": "other", "path": "evidence/guidance-retrieved.md", "caption": "Audit evidence: guidance-retrieved.md" }, { "type": "other", "path": "evidence/guidance-search-performance.json", "caption": "Audit evidence: guidance-search-performance.json" }, { "type": "other", "path": "evidence/guidance-search-quality.json", "caption": "Audit evidence: guidance-search-quality.json" }, { "type": "other", "path": "evidence/guidance-search-security.json", "caption": "Audit evidence: guidance-search-security.json" }, { "type": "other", "path": "evidence/guidance-search-ux.json", "caption": "Audit evidence: guidance-search-ux.json" }, { "type": "other", "path": "evidence/headers.json", "caption": "Audit evidence: headers.json", "findingIds": [ "F-010" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "Audit evidence: heap-baseline.heapsnapshot" }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "Audit evidence: heap-post.heapsnapshot" }, { "type": "other", "path": "evidence/images.json", "caption": "Audit evidence: images.json", "findingIds": [ "F-009" ] }, { "type": "other", "path": "evidence/invalid-probe-actual.json", "caption": "Audit evidence: invalid-probe-actual.json" }, { "type": "other", "path": "evidence/invalid-probe.json", "caption": "Audit evidence: invalid-probe.json" }, { "type": "screenshot", "path": "evidence/invalid-submit-actual.png", "caption": "Audit evidence: invalid-submit-actual.png" }, { "type": "screenshot", "path": "evidence/invalid-submit.png", "caption": "Audit evidence: invalid-submit.png" }, { "type": "layout", "path": "evidence/layout-mobile.json", "caption": "Audit evidence: layout-mobile.json", "condition": "viewport: 360x800" }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Audit evidence: lighthouse.json", "findingIds": [ "F-002", "F-005", "F-006", "F-008", "F-009", "F-016" ] }, { "type": "har-summary", "path": "evidence/main-summary.json", "caption": "Audit evidence: main-summary.json", "findingIds": [ "F-007", "F-011", "F-015", "F-017" ] }, { "type": "trace-summary", "path": "evidence/main-trace-summary.json", "caption": "Audit evidence: main-trace-summary.json", "findingIds": [ "F-005", "F-006" ] }, { "type": "trace", "path": "evidence/main-trace.json", "caption": "Audit evidence: main-trace.json", "findingIds": [ "F-005" ] }, { "type": "har", "path": "evidence/main.har", "caption": "Audit evidence: main.har", "findingIds": [ "F-007", "F-011", "F-015" ] }, { "type": "other", "path": "evidence/memory-metrics.json", "caption": "Audit evidence: memory-metrics.json" }, { "type": "screenshot", "path": "evidence/mobile.png", "caption": "Audit evidence: mobile.png", "condition": "viewport: 360x800", "findingIds": [ "F-002", "F-014" ] }, { "type": "other", "path": "evidence/platform-seo-probe.json", "caption": "Audit evidence: platform-seo-probe.json", "findingIds": [ "F-013", "F-016", "F-017" ] }, { "type": "other", "path": "evidence/recon.json", "caption": "Audit evidence: recon.json", "findingIds": [ "F-004", "F-013" ] }, { "type": "other", "path": "evidence/robots-sitemap.txt", "caption": "Audit evidence: robots-sitemap.txt", "findingIds": [ "F-017" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Audit evidence: secrets.json" }, { "type": "screenshot", "path": "evidence/signup-mobile.png", "caption": "Audit evidence: signup-mobile.png", "condition": "viewport: 360x800", "findingIds": [ "F-012", "F-014" ] }, { "type": "other", "path": "evidence/signup-probe.json", "caption": "Audit evidence: signup-probe.json", "findingIds": [ "F-004", "F-012" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Audit evidence: trackers.json", "findingIds": [ "F-011" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 57, "blocked": 1, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": false }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Light/default and dark captures are identical; root color-scheme is normal and no preference CSS was detected.", "findingIds": [ "F-001" ], "pathIds": [ "sign-in" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Under prefers-reduced-motion: reduce, getAnimations() returned no active animations; the static sign-in flow contains no auto-advance motion.", "pathIds": [ "sign-in" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Lighthouse directly measured 2.99:1 action-text contrast, and no forced-colors/prefers-contrast adaptation was detected.", "findingIds": [ "F-002" ], "pathIds": [ "sign-in" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Feature inspection found no View Transition CSS and route screenshots show abrupt full-page state changes.", "findingIds": [ "F-014" ], "pathIds": [ "sign-in" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The representative authentication surfaces contain no parallax, scrollytelling, carousel, or scroll-linked motion to implement.", "reason": "The representative authentication surfaces contain no parallax, scrollytelling, carousel, or scroll-linked motion to implement." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The tested surfaces use native scrolling, links, buttons, checkboxes, and text inputs without custom pointer-drag handlers.", "pathIds": [ "sign-in" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "not-applicable", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The short sign-in and recovery views have no sticky/affixed chrome or long-scroll journey requiring scroll-state adaptation.", "reason": "The short sign-in and recovery views have no sticky/affixed chrome or long-scroll journey requiring scroll-state adaptation." }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "No tooltip, popover, context menu, or floating anchored overlay appears on the representative views.", "reason": "No tooltip, popover, context menu, or floating anchored overlay appears on the representative views." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Focused credential fields have no computed outline or replacement shadow, reducing the visual cue for moved keyboard attention.", "findingIds": [ "F-003" ], "pathIds": [ "sign-in" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Load screenshots across sign-in, recovery, and sign-up show no popup, interstitial, consent wall, or content-obscuring banner.", "pathIds": [ "sign-in" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "No modal or transient overlay is present; disclosures on sign-up are embedded controls rather than full-screen custom overlays.", "pathIds": [ "sign-in" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Screenshots show a focused, single-column task surface with minimal branding and no competing promotional chrome.", "pathIds": [ "sign-in" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "At 360x800 the layout primitive measured scrollWidth=clientWidth=360 and zero horizontal overflow; all three public flows fit the viewport.", "pathIds": [ "sign-in" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The sign-in form changes from a centered 600px desktop surface to a fluid mobile layout without clipping; the representative component adapts successfully despite no exposed @container rules.", "pathIds": [ "sign-in" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Focus probes found invisible focus on credential inputs and several controls/links are below 44px target size.", "findingIds": [ "F-003", "F-004" ], "pathIds": [ "sign-in" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "First-view screenshots clearly label Sign in, Find your ID, and terms agreement, with a visually dominant next action.", "pathIds": [ "sign-in" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "blocked", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "End-to-end authentication could not be completed without a valid NAVER test account and credentials; submitting unknown credentials would be unsafe.", "reason": "End-to-end authentication could not be completed without a valid NAVER test account and credentials; submitting unknown credentials would be unsafe.", "pathIds": [ "sign-in" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Blank sign-in submission focuses the identity field and exposes a role=alert message; Forgot ID is reachable and the 404 view offers a return action.", "pathIds": [ "sign-in" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Lighthouse LCP was 3.3s with Speed Index 7.7s and TBT 250ms; independent trace LCP was 3.04s.", "findingIds": [ "F-005" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "CLS was 0.087 in Lighthouse and 0.094 in the mobile layout observer, both within the good <0.1 range; all images have dimensions.", "pathIds": [ "sign-in" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Trace and Lighthouse recorded long tasks/TBT, including two tasks over 80ms.", "findingIds": [ "F-006" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "HAR recorded 4.5MB transferred, 3.12MB fonts, uncompressed scripts, missing cache headers, and a three-hop redirect.", "findingIds": [ "F-007" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Lighthouse estimated 268KiB unused JavaScript across passkey, app-scheme, CAPTCHA, and telemetry modules.", "findingIds": [ "F-008" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Lighthouse and images inspection found three social-login images lacking alt/decorative semantics.", "findingIds": [ "F-009" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Lighthouse measured 2.99:1 contrast on primary action text.", "findingIds": [ "F-002" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Credential inputs and icon controls show no computed focus outline or replacement shadow.", "findingIds": [ "F-003" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Desktop/mobile screenshots show readable line lengths, unclipped labels, consistent left alignment, and no text overlap on the tested surfaces.", "pathIds": [ "sign-in" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Viewport metadata disables scaling and target inspection found multiple sub-44px controls/links.", "findingIds": [ "F-004" ], "pathIds": [ "sign-in" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Lighthouse errors-in-console audit passed with no captured errors.", "pathIds": [ "sign-in" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "DOM/Lighthouse confirm HTML doctype, UTF-8 charset, correctly dimensioned SVG images, and no image aspect-ratio problems.", "pathIds": [ "sign-in" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Lighthouse found no deprecated API, geolocation-on-load, or notification-on-load issue; BFCache no-store behavior is appropriate for a sensitive authentication document.", "pathIds": [ "sign-in" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The title is descriptive, but DOM, discoverability, and Lighthouse all found no meta description.", "findingIds": [ "F-016" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Links use real href values, viewport metadata is present, robots.txt returns 200 with explicit identity-surface rules, and Lighthouse crawlable-anchor/link-text audits pass.", "pathIds": [ "sign-in" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The root uses a three-hop redirect into a parameterized login URL, no canonical link is present, and /sitemap.xml returns 404.", "findingIds": [ "F-017" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "not-applicable", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "A private sign-in/account recovery surface is not a shareable article, product, organization, event, or other rich public entity.", "reason": "A private sign-in/account recovery surface is not a shareable article, product, organization, event, or other rich public entity." }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "HTTPS/HSTS/nosniff/frame protection are present, but two cookies lack Secure, SameSite=None is widespread, CSP allows unsafe-inline, and Permissions-Policy is missing.", "findingIds": [ "F-010" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Thirty third-party requests across eight origins transfer 3.72MB before authentication.", "findingIds": [ "F-011" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Lighthouse found no permission prompts on load, and the page loads a dedicated passkey/WebAuthn module alongside password login.", "pathIds": [ "sign-in" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "HSTS, X-Frame-Options and Referrer-Policy are present, but Permissions-Policy is absent and CSP retains unsafe-inline.", "findingIds": [ "F-010" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Discoverability comparison reports 100% rendered content coverage in raw HTML, isJsShell=false, and title/H1 survive without JavaScript.", "pathIds": [ "sign-in" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Representative forms and disclosures render without clipped overlays; native links/buttons preserve simple navigation state.", "pathIds": [ "sign-in" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Authentication and account recovery intrinsically require an online identity service; no offline completion promise is reasonable.", "reason": "Authentication and account recovery intrinsically require an online identity service; no offline completion promise is reasonable." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "A deliberately invalid route renders a clear error page with explanatory text and a return button rather than a blank shell.", "pathIds": [ "sign-in" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "medium", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Language attributes are present, but no logical CSS properties were detected and the English sign-up outline contains Korean headings.", "findingIds": [ "F-012" ], "pathIds": [ "sign-up" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The representative public identity surfaces render no dates, currency, numbers, durations, or calendars requiring locale formatting.", "reason": "The representative public identity surfaces render no dates, currency, numbers, durations, or calendars requiring locale formatting." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "No time, event, recurrence, or time-zone-dependent data appears in the tested public flows.", "reason": "No time, event, recurrence, or time-zone-dependent data appears in the tested public flows." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Stay Signed in is not preselected, terms begin unchecked, optional terms are visibly marked, and recovery/signup actions are plainly labeled.", "pathIds": [ "sign-in" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Blank submission waits for interaction, focuses the ID field, and exposes “Please enter your ID or phone number” in a role=alert element.", "pathIds": [ "sign-in" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The username/phone and password controls both have empty autocomplete values.", "findingIds": [ "F-013" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Forgot ID/password and sign-up are prominent, optional consent is distinct, IP Security state is explicit, and passkey support is loaded.", "pathIds": [ "sign-in" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "pass", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "All three raster-equivalent assets are lightweight SVGs with explicit dimensions and no oversized-image signal.", "pathIds": [ "sign-in" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The small form loads 4.5MB and 30 third-party requests, including modules unused in the tested entry state.", "findingIds": [ "F-007", "F-011" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The 3.12MB font and 3.72MB third-party footprint is disproportionate to a small form UI.", "findingIds": [ "F-015" ], "pathIds": [ "sign-in" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "No agent-facing surface is intended; exposing authentication actions to agents without an explicit safe delegation design would be inappropriate.", "reason": "No agent-facing surface is intended; exposing authentication actions to agents without an explicit safe delegation design would be inappropriate." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The public identity flows have no summarisation, generation, or language-model task where on-device inference would improve the experience.", "reason": "The public identity flows have no summarisation, generation, or language-model task where on-device inference would improve the experience." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "An evaluate probe repeated ten tab/focus cycles and observed zero change in usedJSHeapSize and DOM element count during the interaction window.", "pathIds": [ "sign-in" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "The baseline heap summary reported 15.30MB total self size for the authentication page, proportionate to the tested page and without a dominant application object population.", "pathIds": [ "sign-in" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Reviewed representative screenshots and DOM/evaluate probes; used the check-specific objective artifact cited in evidence.", "evidence": "Ten repeated tab/focus cycles left the DOM count unchanged at 187; baseline/post summary samples did not show a growing Detached* constructor population.", "pathIds": [ "sign-in" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F-001", "F-002" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F-014" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F-003" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "pass" }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F-003", "F-004" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "incomplete", "reason": "At least one required check was blocked by an external condition." }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F-005", "F-006", "F-007", "F-008" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F-009", "F-002", "F-003", "F-004" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "pass" }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F-016", "F-017" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F-010", "F-011" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F-012" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F-013" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F-007", "F-011", "F-015" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No agent-facing surface is intended; exposing authentication actions to agents without an explicit safe delegation design would be inappropriate. The public identity flows have no summarisation, generation, or language-model task where on-device inference would improve the experience." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "sign-in", "description": "Entry/root redirect and primary credential, passkey/social, recovery, invalid-submit, responsive, preference, security, performance and memory surface.", "url": "https://nid.naver.com", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "keyboard focus", "blank submission", "JavaScript disabled crawler comparison" ], "result": "issues" }, { "id": "sign-up", "description": "Representative consent and account-creation entry archetype; inspected terms hierarchy, defaults, localization and mobile layout. Successful registration was excluded because it requires identity data and account creation.", "url": "https://nid.naver.com/user2/join/agree?lang=en_US&realname=N", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "forgot-id", "description": "Representative account-recovery form; inspected labels, task clarity, localization and mobile layout. Submission was not attempted because it requires personal contact data.", "url": "https://nid.naver.com/account/find-id/profile?lang=en_US", "conditions": [ "viewport: 360x800" ], "result": "pass" }, { "id": "invalid-route", "description": "Network/HTTP failure recovery archetype using a deliberately nonexistent route.", "url": "https://nid.naver.com/definitely-not-a-real-page-web-uplift", "conditions": [ "viewport: 360x800" ], "result": "pass" } ], "findings": [ { "id": "F-001", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "summary": "The sign-in surface forces the same dark palette regardless of the system colour preference.", "evidence": "Default/light-condition and prefers-color-scheme: dark screenshots are pixel-identical; the computed root color-scheme is normal and no color-scheme metadata is declared.", "artifacts": [ "evidence/desktop.png", "evidence/dark.png", "evidence/feature-probe.json" ], "suggestedFix": "Declare color-scheme: light dark on :root and provide preference-driven light and dark tokens, retaining the current dark palette for dark preference.", "effort": "small", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-002", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "summary": "Primary action text does not meet WCAG contrast requirements.", "evidence": "Lighthouse measured 2.99:1 contrast for white text on #05ac4f on the Sign in and Open app controls, below the 4.5:1 requirement for normal text.", "artifacts": [ "evidence/lighthouse.json", "evidence/mobile.png" ], "suggestedFix": "Darken the green action surface or use a darker foreground so normal-sized text reaches at least 4.5:1; verify all states.", "effort": "trivial", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-003", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "summary": "Keyboard focus is not visibly indicated on the credential fields and several icon controls.", "evidence": "Programmatic focus inspection reported outline-style none and no box-shadow on both visible credential inputs and three 36px icon buttons.", "artifacts": [ "evidence/focus-targets.json" ], "suggestedFix": "Add a high-contrast :focus-visible outline with adequate offset to every interactive element, including inputs and icon controls.", "effort": "small", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-004", "severity": "medium", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "summary": "User zoom is disabled and several text links and icon controls are smaller than 44px.", "evidence": "All three public flow pages specify maximum-scale=1/user-scalable=no; the target probe found 36x36 icon buttons and multiple links only 15-19px high.", "artifacts": [ "evidence/recon.json", "evidence/signup-probe.json", "evidence/forgot-probe.json", "evidence/focus-targets.json" ], "suggestedFix": "Remove maximum-scale and user-scalable restrictions, and enlarge compact controls using padding while preserving the responsive layout.", "effort": "small", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-005", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "summary": "The mobile sign-in load misses the good LCP range and has a slow visual completion.", "evidence": "Lighthouse measured LCP 3.3s, Speed Index 7.7s, and TBT 250ms; the independent trace measured LCP 3.04s.", "artifacts": [ "evidence/lighthouse.json", "evidence/main-trace-summary.json", "evidence/main-trace.json" ], "suggestedFix": "Prioritise the first-view render, eliminate unnecessary startup assets, and defer non-critical authentication/telemetry modules until needed.", "effort": "medium", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-006", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-main-thread", "guidanceId": "performance", "summary": "Startup scripting creates avoidable blocking work.", "evidence": "Lighthouse measured 250ms TBT; the trace found two long tasks up to 93.58ms with 74.23ms total blocking time.", "artifacts": [ "evidence/lighthouse.json", "evidence/main-trace-summary.json" ], "suggestedFix": "Split startup tasks at 50ms boundaries and defer telemetry, CAPTCHA, and passkey work until the relevant interaction.", "effort": "medium", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-007", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "performance", "summary": "A simple sign-in view transfers 4.5MB, dominated by four very large font files.", "evidence": "HAR recorded 4,502,020 transferred bytes; fonts accounted for 3,123,898 bytes, four Pretendard weights were 753-779KB each, and two scripts were delivered uncompressed.", "artifacts": [ "evidence/main-summary.json", "evidence/main.har" ], "suggestedFix": "Subset and unicode-range the fonts, load only used weights, compress JavaScript, and add useful immutable caching to versioned static resources.", "effort": "medium", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-008", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "performance", "summary": "The entry page ships substantial JavaScript that is unused during the tested load.", "evidence": "Lighthouse estimated 268KiB unused JavaScript, including 85.6KB in passkeyApi.js and 62.6KB in appscheme.js.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Code-split passkey, app-scheme, CAPTCHA, and analytics modules and load them only when their associated control or risk state is reached.", "effort": "medium", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-009", "severity": "medium", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "summary": "Three social sign-in images have no alt attribute or decorative semantics.", "evidence": "The images primitive and Lighthouse both identified Apple, Google, and LINE SVG images without alt; their parent buttons are named, so the images should be explicitly decorative.", "artifacts": [ "evidence/images.json", "evidence/lighthouse.json" ], "suggestedFix": "Add alt=\"\" (or role=\"presentation\") to the decorative images while retaining the accessible name on each parent button.", "effort": "trivial", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-010", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "summary": "The authentication origin sets cookies without Secure and weakens its otherwise strong security-header posture.", "evidence": "Cookie inspection found nid_slevel and NACT without Secure and all seven cookies reported SameSite=None; CSP includes unsafe-inline and Permissions-Policy is absent.", "artifacts": [ "evidence/cookies.json", "evidence/headers.json" ], "suggestedFix": "Set Secure on every HTTPS cookie, use Lax/Strict where cross-site use is unnecessary, remove unsafe-inline through nonce/hash migration, and define a restrictive Permissions-Policy.", "effort": "medium", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-011", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "summary": "The sign-in page has a broad third-party and telemetry footprint before authentication.", "evidence": "The HAR recorded 30 third-party requests and 3,716,277 third-party bytes across eight external origins; several analytics/ad-related Naver origins load on the credential entry view.", "artifacts": [ "evidence/main-summary.json", "evidence/trackers.json", "evidence/main.har" ], "suggestedFix": "Minimise pre-auth telemetry, defer non-essential analytics until consent/context, batch events, and self-host critical assets where practical.", "effort": "medium", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-012", "severity": "low", "confidence": "medium", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "accessibility", "summary": "The localized account surfaces do not demonstrate writing-mode-resilient layout primitives.", "evidence": "The feature probe found no logical CSS properties in accessible stylesheets; the English sign-up DOM also retains Korean heading text in its outline.", "artifacts": [ "evidence/feature-probe.json", "evidence/signup-probe.json", "evidence/signup-mobile.png" ], "suggestedFix": "Use inline/block logical properties for spacing and positioning, and ensure hidden/accessibility headings are localized with the visible surface.", "effort": "small", "pathId": "sign-up", "url": "https://nid.naver.com/user2/join/agree?lang=en_US&realname=N" }, { "id": "F-013", "severity": "high", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "summary": "The sign-in fields omit standard autocomplete tokens.", "evidence": "DOM inspection found an empty autocomplete value on both the username/phone input and password input.", "artifacts": [ "evidence/platform-seo-probe.json", "evidence/recon.json" ], "suggestedFix": "Set autocomplete=\"username\" on the identity field and autocomplete=\"current-password\" on the password field; preserve passkey support.", "effort": "trivial", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-014", "severity": "low", "confidence": "medium", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "stabilize-reactive-state", "summary": "Public account-route changes are abrupt and provide no continuity cue.", "evidence": "CSS inspection found no view-transition rules and the three public routes load as unrelated visual states without a directional or shared-element transition.", "artifacts": [ "evidence/feature-probe.json", "evidence/mobile.png", "evidence/forgot-mobile.png", "evidence/signup-mobile.png" ], "suggestedFix": "Use progressively enhanced cross-document View Transitions for public account navigation while preserving instant navigation where reduced motion is requested.", "effort": "small", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-015", "severity": "medium", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "performance", "summary": "Font and third-party transfer cost is disproportionate to the small authentication UI.", "evidence": "A mostly text-and-form page transfers 4.5MB, including 3.12MB of fonts and 3.72MB from third-party origins.", "artifacts": [ "evidence/main-summary.json", "evidence/main.har" ], "suggestedFix": "Adopt a strict pre-auth byte budget, subset fonts, and defer or remove third-party modules that do not support the immediate sign-in task.", "effort": "medium", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-016", "severity": "low", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "accessibility", "summary": "The public sign-in document has no meta description.", "evidence": "DOM, discoverability, and Lighthouse all found a descriptive title but no meta[name=description].", "artifacts": [ "evidence/platform-seo-probe.json", "evidence/discoverability.json", "evidence/lighthouse.json" ], "suggestedFix": "Add a concise localized description explaining that this is NAVER secure sign-in and account access.", "effort": "trivial", "pathId": "sign-in", "url": "https://nid.naver.com" }, { "id": "F-017", "severity": "low", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "summary": "The public entry chain has no canonical signal or sitemap endpoint.", "evidence": "The root redirects three times into a parameterized login URL, DOM inspection found no canonical link, and /sitemap.xml returned 404.", "artifacts": [ "evidence/main-summary.json", "evidence/platform-seo-probe.json", "evidence/robots-sitemap.txt" ], "suggestedFix": "Publish a stable canonical URL for the public sign-in entry and keep robots/indexing policy consistent with that canonical; add a sitemap only if public account-help routes should be indexed.", "effort": "small", "pathId": "sign-in", "url": "https://nid.naver.com" } ], "taskList": [ { "id": "T-001", "title": "Cut the pre-auth font, JavaScript, and third-party payload", "priority": 1, "findingIds": [ "F-005", "F-006", "F-007", "F-008", "F-011", "F-015" ], "guidanceId": "performance", "status": "open" }, { "id": "T-002", "title": "Harden cookies and browser security policy on the identity origin", "priority": 2, "findingIds": [ "F-010" ], "guidanceId": "security", "status": "open" }, { "id": "T-003", "title": "Restore accessible contrast, focus, zoom, and target sizing", "priority": 3, "findingIds": [ "F-002", "F-003", "F-004", "F-009" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T-004", "title": "Add standard sign-in autocomplete tokens", "priority": 4, "findingIds": [ "F-013" ], "guidanceId": "autofill-sign-in-form", "status": "open" }, { "id": "T-005", "title": "Make theme and localized layout preference-aware", "priority": 5, "findingIds": [ "F-001", "F-012" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T-006", "title": "Add reduced-motion-safe route continuity", "priority": 6, "findingIds": [ "F-014" ], "guidanceId": "stabilize-reactive-state", "status": "open" }, { "id": "T-007", "title": "Add stable public indexing metadata", "priority": 7, "findingIds": [ "F-016", "F-017" ], "guidanceId": "accessibility", "status": "open" } ], "budget": { "pathCount": 4, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-27T20-40-53-543Z" }