{ "url": "https://lichess.org", "auditedAt": "2026-07-20T07:45:00.000Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete representative audit of seven public archetypes. Authenticated play/account management, live multiplayer completion, checkout/donation completion, and destructive account actions were not exercised because they require credentials, another player, payment, or side effects.", "page": { "appType": "hybrid", "framework": "Server-rendered Lichess UI with progressively enhanced ES modules", "notes": "Public, multilingual, app-like chess service. Homepage and article preserve 95–97% of rendered words without JavaScript." }, "evidenceUsed": [ "screenshot", "mobile-layout-metrics", "dom+computed-styles", "evaluate-probes", "discoverability/no-JS", "HAR", "DevTools trace", "Lighthouse", "security headers", "cookies", "trackers", "secrets scan", "image audit", "heap summaries" ], "guidanceConsulted": [ "dark-mode", "accessibility", "faster-spa-view-transitions", "css-layout", "size-aware-styling", "optimize-image-priority", "security", "privacy", "passkeys", "html", "improve-text-layout-and-legibility", "identify-inp-causes" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Homepage desktop first viewport", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Homepage at 360x800", "condition": "viewport: 360x800", "findingIds": [ "F04", "F07" ] }, { "type": "screenshot", "path": "evidence/home-light.png", "caption": "Homepage under light preference", "condition": "prefers-color-scheme: light", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Homepage under dark preference", "condition": "prefers-color-scheme: dark", "findingIds": [ "F01" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Homepage mobile overflow/CLS metrics", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Homepage DOM, metadata, CSS and computed styles", "findingIds": [ "F05", "F16" ] }, { "type": "other", "path": "evidence/home-recon.json", "caption": "Homepage links and metadata recon probe", "findingIds": [ "F11", "F14" ] }, { "type": "other", "path": "evidence/preferences-probe.json", "caption": "Reduced-motion, contrast, animation and focus probe", "findingIds": [ "F02" ] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "Robots, manifest, service worker and CSS feature probe", "findingIds": [ "F03", "F05", "F07", "F14" ] }, { "type": "har", "path": "evidence/home.har", "caption": "Homepage load network archive", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Compact homepage network signals", "findingIds": [] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "Homepage DevTools performance trace", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Compact trace timings and long tasks", "findingIds": [ "F08" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "Main response security headers", "findingIds": [ "F16" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie security audit", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party/tracker audit", "findingIds": [] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client-side secret scan", "findingIds": [] }, { "type": "other", "path": "evidence/images.json", "caption": "Image markup/delivery audit", "findingIds": [ "F12", "F18" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "Lighthouse report", "findingIds": [] }, { "type": "other", "path": "evidence/lighthouse-home-summary.json", "caption": "Compact Lighthouse scores and failures", "findingIds": [ "F08", "F18" ] }, { "type": "other", "path": "evidence/lighthouse-details.json", "caption": "Affected Lighthouse accessibility/SEO nodes", "findingIds": [ "F02", "F09", "F10", "F13" ] }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "Homepage raw-vs-rendered crawler comparison", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "Homepage with JavaScript disabled", "findingIds": [] }, { "type": "screenshot", "path": "evidence/training.png", "caption": "Anonymous puzzle state", "findingIds": [] }, { "type": "other", "path": "evidence/training-probe.json", "caption": "Puzzle control/structure probe", "findingIds": [ "F09", "F11" ] }, { "type": "screenshot", "path": "evidence/analysis.png", "caption": "Analysis board state", "findingIds": [] }, { "type": "other", "path": "evidence/analysis-probe.json", "caption": "Analysis control/structure probe", "findingIds": [ "F09", "F11" ] }, { "type": "screenshot", "path": "evidence/tournament.png", "caption": "Tournament listing", "findingIds": [ "F06" ] }, { "type": "layout", "path": "evidence/tournament-mobile-layout.json", "caption": "Tournament mobile overflow/CLS metrics", "findingIds": [ "F04" ] }, { "type": "screenshot", "path": "evidence/blog.png", "caption": "Sample article", "findingIds": [ "F06" ] }, { "type": "other", "path": "evidence/blog-probe.json", "caption": "Article title, description, Open Graph and structured-data probe", "findingIds": [ "F14", "F15" ] }, { "type": "discoverability", "path": "evidence/blog-discoverability.json", "caption": "Article raw-vs-rendered crawler comparison", "findingIds": [] }, { "type": "screenshot", "path": "evidence/blog-discoverability-crawler.png", "caption": "Article with JavaScript disabled", "findingIds": [] }, { "type": "screenshot", "path": "evidence/login.png", "caption": "Sign-in form with focused field", "findingIds": [ "F11", "F17" ] }, { "type": "other", "path": "evidence/login-probe.json", "caption": "Sign-in labels/autocomplete probe", "findingIds": [ "F17" ] }, { "type": "screenshot", "path": "evidence/not-found.png", "caption": "404 recovery state", "findingIds": [] }, { "type": "other", "path": "evidence/not-found-probe.json", "caption": "404 text and recovery link probe", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "Readable baseline heap summary", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post-valid.heapsnapshot", "caption": "Heap summary after 10 menu cycles", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post-50.heapsnapshot", "caption": "Heap summary after 50 menu cycles", "findingIds": [] }, { "type": "other", "path": "evidence/memory-metrics.json", "caption": "In-page heap/DOM counts around 10 menu cycles", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "screenshot comparison under emulated light and dark preferences", "evidence": "The light and dark captures are byte-identical and both retain the dark palette; the DOM reports html class=\"dark\" rather than a system-driven theme.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-light.png", "evidence/home-dark.png" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "computed animation and stylesheet probe under prefers-reduced-motion: reduce", "evidence": "The preference matched, no active animations were returned, and the fetched site stylesheet contains four prefers-reduced-motion rules.", "pathIds": [ "home" ], "artifacts": [ "evidence/preferences-probe.json", "evidence/platform-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Lighthouse contrast audit plus prefers-contrast stylesheet probe", "evidence": "Lighthouse found 11 low-contrast text/control cases, while the fetched stylesheets contain no prefers-contrast or forced-colors adaptation.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-details.json", "evidence/preferences-probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "rendered route/state review and fetched CSS feature probe", "evidence": "Home, training, analysis and article surfaces use abrupt document/state changes; fetched CSS contains no @view-transition or view-transition-name usage.", "pathIds": [ "home", "training", "analysis", "blog" ], "artifacts": [ "evidence/platform-probe.json" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "visual review and fetched CSS probe", "evidence": "No parallax, scrollytelling or scroll-linked animation is present on the representative pages, so there is no main-thread scroll-animation anti-pattern to replace.", "pathIds": [ "home", "tournaments", "blog" ], "artifacts": [ "evidence/home-desktop.png", "evidence/tournament.png", "evidence/blog.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "CSS and interaction-surface review", "evidence": "The site stylesheet uses overscroll-behavior and the chess/puzzle surfaces use direct board interaction without a competing scroll or pointer-driven page effect.", "pathIds": [ "training", "analysis" ], "artifacts": [ "evidence/platform-probe.json", "evidence/training.png", "evidence/analysis.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "long-page screenshots and fetched CSS probe", "evidence": "The 2,957 px mobile lobby and 7,501 px mobile tournament listing retain static chrome with no scroll progress/state response; no scroll-state query was found.", "pathIds": [ "home", "tournaments" ], "artifacts": [ "evidence/home-mobile.png", "evidence/tournament-mobile-layout.json" ], "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "DOM/CSS inspection of menus and dropdown surfaces", "evidence": "Navigation/preferences use fixed/custom dropdown containers; fetched CSS contains no anchor-name, position-anchor or position-try fallback positioning.", "pathIds": [ "home", "analysis" ], "artifacts": [ "evidence/home-dom.json", "evidence/platform-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "medium", "method": "cross-route and long-page visual review", "evidence": "Representative navigation uses abrupt page replacement and long listings expose no progress marker, transition cue or destination highlight beyond the current tab underline.", "pathIds": [ "home", "tournaments", "blog" ], "artifacts": [ "evidence/home-desktop.png", "evidence/tournament.png", "evidence/blog.png" ], "findingIds": [ "F06" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "load screenshots across representative paths", "evidence": "No consent wall, ad interstitial or load-time modal obscured the lobby, puzzle, analysis board, article or login form.", "pathIds": [ "home", "training", "analysis", "blog", "login" ], "artifacts": [ "evidence/home-desktop.png", "evidence/training.png", "evidence/analysis.png", "evidence/blog.png", "evidence/login.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "pass", "confidence": "high", "method": "DOM inspection and overlay inventory", "evidence": "No modal overlay was present on load; the visible disclosure/navigation controls are native buttons, inputs and links and did not block content.", "pathIds": [ "home", "training", "analysis" ], "artifacts": [ "evidence/home-dom.json", "evidence/training-probe.json", "evidence/analysis-probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "visual review of all archetypes", "evidence": "The board and article content dominate their viewports; there are no ads and only compact global chrome.", "pathIds": [ "home", "training", "analysis", "blog" ], "artifacts": [ "evidence/training.png", "evidence/analysis.png", "evidence/blog.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "mobile layout metrics at 360x800", "evidence": "Lobby and tournament pages both report scrollWidth 360, clientWidth 360 and zero horizontal overflow with a viewport meta tag.", "pathIds": [ "home", "tournaments" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/tournament-mobile-layout.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "medium", "method": "fetched CSS feature probe across reused components", "evidence": "No @container or container-type rules were found in the three page stylesheets; complex lobby cards, carousels and board sidebars adapt only at page/viewport level.", "pathIds": [ "home", "analysis" ], "artifacts": [ "evidence/platform-probe.json", "evidence/home-mobile.png", "evidence/analysis.png" ], "findingIds": [ "F07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "pass", "confidence": "high", "method": "keyboard-focus and mobile visual review", "evidence": "The login username receives a strong blue focus ring, controls remain operable as buttons/links, and primary mobile actions have generous target sizes.", "pathIds": [ "login", "home" ], "artifacts": [ "evidence/login.png", "evidence/home-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "first-viewport review of representative paths", "evidence": "Quick pairing, puzzle instruction, analysis board, tournament heading, article title and sign-in form each make their purpose and next action apparent.", "pathIds": [ "home", "training", "analysis", "tournaments", "blog", "login" ], "artifacts": [ "evidence/home-desktop.png", "evidence/training.png", "evidence/analysis.png", "evidence/login.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "anonymous task walkthrough", "evidence": "An anonymous user can select a pairing, solve a loaded puzzle and open the analysis board without registration; sign-in is confined to account-specific activity.", "pathIds": [ "home", "training", "analysis" ], "artifacts": [ "evidence/home-desktop.png", "evidence/training.png", "evidence/analysis.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "state and failure-route inspection", "evidence": "Puzzle state says “Your turn” and identifies the side to move; the 404 clearly says Page not found and links back to the homepage.", "pathIds": [ "training", "not-found" ], "artifacts": [ "evidence/training.png", "evidence/not-found.png", "evidence/not-found-probe.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Lighthouse and DevTools trace", "evidence": "Lighthouse measured LCP 3.7 s (outside the good <=2.5 s range), although CLS was 0 and TBT 0 ms; a warm trace measured LCP 1.06 s.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "layout observers and Lighthouse", "evidence": "Mobile lobby and tournament observers both report CLS 0 with no shifts; Lighthouse also reports CLS 0.", "pathIds": [ "home", "tournaments" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/tournament-mobile-layout.json", "evidence/lighthouse-home-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "trace and layout long-task observers", "evidence": "The trace reports zero long tasks and 0 ms total blocking time; both mobile layout captures also observed no long tasks.", "pathIds": [ "home", "tournaments" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-mobile-layout.json", "evidence/tournament-mobile-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "pass", "confidence": "high", "method": "HAR, DOM and Lighthouse delivery audits", "evidence": "The load transfers about 440 KB with no errors or redirects; scripts are modules/deferred in DOM. Lighthouse estimates only 130 ms render-blocking savings.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-dom.json", "evidence/lighthouse-home-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "pass", "confidence": "high", "method": "HAR and Lighthouse diagnostics", "evidence": "The 440 KB load has no tracker bundles and Lighthouse did not report unused or duplicated JavaScript/CSS audits as failures.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse-home-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audit and DOM control inventory", "evidence": "Lighthouse found two unnamed carousel buttons and nine content/flair images without alt; training and analysis probes also enumerate icon-only buttons without accessible names.", "pathIds": [ "home", "training", "analysis" ], "artifacts": [ "evidence/lighthouse-details.json", "evidence/training-probe.json", "evidence/analysis-probe.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Lighthouse color-contrast audit", "evidence": "Lighthouse reports insufficient contrast for Register, feed timestamps/links and tournament text (11 affected nodes).", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-details.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "heading/control probes and focused screenshot", "evidence": "The homepage, puzzle, analysis and login rendered with no h1; complex board tools expose many icon-only controls. The login field itself has a clear visible focus ring.", "pathIds": [ "home", "training", "analysis", "login" ], "artifacts": [ "evidence/home-recon.json", "evidence/training-probe.json", "evidence/analysis-probe.json", "evidence/login.png" ], "findingIds": [ "F11" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "visual review at desktop and mobile", "evidence": "Body copy, board coordinates, form labels and article text are readable without clipping; mobile layout remains single-column and stable.", "pathIds": [ "home", "training", "blog", "login" ], "artifacts": [ "evidence/home-mobile.png", "evidence/training.png", "evidence/blog.png", "evidence/login.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "pass", "confidence": "high", "method": "viewport and mobile reflow inspection", "evidence": "The viewport allows user scaling (no maximum-scale/user-scalable=no), and tested mobile pages reflow with zero horizontal overflow. No essential timed media appears on tested paths.", "pathIds": [ "home", "tournaments" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-mobile-layout.json", "evidence/tournament-mobile-layout.json" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse best-practices run", "evidence": "Lighthouse scored Best Practices 1.00 and did not report console errors or uncaught exceptions.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "DOM, image primitive and Lighthouse", "evidence": "Doctype and UTF-8 are valid, but 9 images lack intrinsic dimensions and 3 are over 2x display size; the load happened to record CLS 0.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json", "evidence/images.json" ], "findingIds": [ "F12" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Lighthouse best-practices and form inspection", "evidence": "Best Practices scored 1.00; BFCache exclusions are WebSocket/no-store constraints, and no permission prompt or paste prevention appeared.", "pathIds": [ "home", "login" ], "artifacts": [ "evidence/lighthouse-home-summary.json", "evidence/lighthouse-details.json", "evidence/login-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "DOM and crawler metadata inspection", "evidence": "Homepage and article have descriptive unique titles and meta descriptions, all present in raw HTML.", "pathIds": [ "home", "blog" ], "artifacts": [ "evidence/home-recon.json", "evidence/blog-probe.json", "evidence/home-discoverability.json", "evidence/blog-discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Lighthouse SEO and DOM inspection", "evidence": "Robots allows crawling and no-JS coverage is 95%, but Lighthouse flags the search trigger implemented as an with no href as non-crawlable.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-details.json", "evidence/platform-probe.json", "evidence/home-discoverability.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "DOM, robots and alternate-link inspection", "evidence": "Both homepage and sampled article return 200 and robots allows them, with extensive hreflang on home, but neither exposes rel=canonical and robots.txt declares no Sitemap URL.", "pathIds": [ "home", "blog" ], "artifacts": [ "evidence/home-recon.json", "evidence/blog-probe.json", "evidence/platform-probe.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "article metadata probe", "evidence": "The article has accurate Open Graph title, description, URL, type and image, but has no JSON-LD or microdata for its Article entity.", "pathIds": [ "blog" ], "artifacts": [ "evidence/blog-probe.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "pass", "confidence": "high", "method": "headers, cookies, secrets and DOM inspection", "evidence": "HTTPS, HSTS, X-Frame-Options DENY, secure HttpOnly SameSite=Lax cookie and a nonce-based meta CSP are present; secret scan found none.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/secrets.json", "evidence/home-dom.json" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "pass", "confidence": "high", "method": "tracker and HAR inspection", "evidence": "No known trackers were found; external traffic is confined to Lichess-owned asset/image/socket origins and no third-party cookies were set.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json", "evidence/cookies.json" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "login-form and runtime inspection", "evidence": "No permission prompt occurred on load, but the public sign-in UI exposes password plus one-time code only and no passkey/WebAuthn option.", "pathIds": [ "login" ], "artifacts": [ "evidence/login.png", "evidence/login-probe.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "main-response header inspection", "evidence": "HSTS, X-Frame-Options and Permissions-Policy are present, but response CSP, X-Content-Type-Options and Referrer-Policy are absent; the meta CSP cannot provide all header-only protections.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/home-dom.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "no-JS crawler comparison", "evidence": "Raw HTML preserves 95% of homepage and 97% of article content; neither page is a JS shell.", "pathIds": [ "home", "blog" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/blog-discoverability.json", "evidence/home-discoverability-crawler.png", "evidence/blog-discoverability-crawler.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "representative runtime state review", "evidence": "Lobby, puzzle, analysis and listing loaded into stable, usable states without cut-off overlays or fragile blank shells.", "pathIds": [ "home", "training", "analysis", "tournaments" ], "artifacts": [ "evidence/home-desktop.png", "evidence/training.png", "evidence/analysis.png", "evidence/tournament.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "pass", "confidence": "high", "method": "manifest/service-worker probe", "evidence": "A complete standalone web app manifest with 32–1024 px icons is linked and a service worker registration controls the lichess.org scope.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "404 recovery inspection", "evidence": "An invalid route renders a clear 404/Page not found state and a direct homepage recovery link rather than a blank shell.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/not-found.png", "evidence/not-found-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "DOM language and alternate-link inspection", "evidence": "The document declares en-US and exposes hreflang variants including Arabic and Persian; language-specific routes are server-rendered.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-recon.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "pass", "confidence": "high", "method": "rendered time markup inspection", "evidence": "Live dates and times use semantic without href, making it non-crawlable and semantically misleading.", "artifacts": [ "evidence/lighthouse-details.json" ], "suggestedFix": "Use a button for opening search, or provide a real href to a search page if it is navigation.", "effort": "trivial" }, { "id": "F14", "pathId": "home", "url": "https://lichess.org/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Canonical and sitemap signals are incomplete", "evidence": "Neither the homepage nor sampled article exposes rel=canonical, and robots.txt contains no Sitemap declaration despite public localized content.", "artifacts": [ "evidence/home-recon.json", "evidence/blog-probe.json", "evidence/platform-probe.json" ], "suggestedFix": "Emit a self-referencing canonical on indexable templates and declare the canonical sitemap URL in robots.txt; keep hreflang/canonical clusters consistent.", "effort": "small" }, { "id": "F15", "pathId": "blog", "url": "https://lichess.org/@/Lichess/blog/announcing-the-chessmood-2020-grand-prix-2026/Y7sU143E", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "low", "confidence": "high", "summary": "Article metadata lacks structured data", "evidence": "The sampled article has accurate Open Graph fields but no JSON-LD or microdata describing the Article entity.", "artifacts": [ "evidence/blog-probe.json" ], "suggestedFix": "Add schema.org BlogPosting/Article JSON-LD matching the visible headline, author, dates, canonical URL and image.", "effort": "small" }, { "id": "F16", "pathId": "home", "url": "https://lichess.org/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Several response-level browser defenses are missing", "evidence": "The main response lacks CSP, X-Content-Type-Options and Referrer-Policy headers. A nonce-based CSP exists only as meta; HSTS, X-Frame-Options and Permissions-Policy are present.", "artifacts": [ "evidence/headers.json", "evidence/home-dom.json" ], "suggestedFix": "Move/duplicate CSP into the HTTP response (including frame-ancestors), add X-Content-Type-Options: nosniff and an explicit strict-origin-when-cross-origin or stricter Referrer-Policy.", "effort": "small" }, { "id": "F17", "pathId": "login", "url": "https://lichess.org/login", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Public authentication offers passwords but no passkey path", "evidence": "The login form exposes username, current-password and one-time-code fields, with no visible or probed WebAuthn/passkey option.", "artifacts": [ "evidence/login.png", "evidence/login-probe.json" ], "suggestedFix": "Add passkey registration and authentication as a phishing-resistant option, retaining password recovery during migration and requesting credentials only in user-initiated context.", "effort": "large" }, { "id": "F18", "pathId": "home", "url": "https://lichess.org/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "optimize-image-priority", "guidanceCategory": "modern-web-guidance", "severity": "low", "confidence": "high", "summary": "Below-fold images are not deferred or responsively selected", "evidence": "All 18 sampled images are below fold without lazy loading, 9 lack srcset, 3 are oversized, and Lighthouse estimates 18 KiB potential savings.", "artifacts": [ "evidence/images.json", "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Lazy-load below-fold editorial/feed imagery and provide srcset/sizes; retain eager/high priority only for the true LCP asset.", "effort": "small" } ], "taskList": [ { "id": "T1", "title": "Complete accessible names, structure and contrast", "priority": 1, "findingIds": [ "F02", "F09", "F10", "F11" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T2", "title": "Strengthen response security headers", "priority": 2, "findingIds": [ "F16" ], "guidanceId": "security", "status": "open" }, { "id": "T3", "title": "Bring cold-load LCP into the good range", "priority": 3, "findingIds": [ "F08", "F12", "F18" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T4", "title": "Respect system theme preferences", "priority": 4, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T5", "title": "Add canonical, sitemap and Article metadata", "priority": 5, "findingIds": [ "F13", "F14", "F15" ], "guidanceId": "html", "status": "open" }, { "id": "T6", "title": "Offer passkey authentication", "priority": 6, "findingIds": [ "F17" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T7", "title": "Modernise responsive and navigation behavior", "priority": 7, "findingIds": [ "F03", "F04", "F05", "F06", "F07" ], "guidanceId": "css-layout", "status": "open" } ], "budget": { "wallClockSeconds": 900, "pathCount": 7, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-20T07-38-16-173Z" }