{
  "url": "https://crn77.com",
  "auditedAt": "2026-07-20T11:09:15.377Z",
  "mode": "report",
  "status": "completed",
  "statusDetail": "Coverage-complete audit of the public information page, contact flow, one representative policy template, and an unknown-route failure state. Terms and Cookies were not separately audited because DOM recon showed they share the same legal-page archetype as Privacy Policy.",
  "page": {
    "appType": "mpa",
    "framework": "none",
    "notes": "Small server-rendered static site for advertising-infrastructure information with a JavaScript mailto contact form. Privacy Policy represents the shared legal template."
  },
  "evidenceUsed": [
    "screenshot",
    "dom",
    "layout-metrics",
    "evaluate-probe",
    "trace",
    "har",
    "discoverability",
    "headers",
    "cookies",
    "trackers",
    "secrets",
    "images",
    "heap-summary",
    "lighthouse",
    "curl-http-probe",
    "modern-web-guidance"
  ],
  "guidanceConsulted": [
    "dark-mode",
    "component-specific-light-dark-theme",
    "accessibility",
    "adapt-scrollbar-to-contrast-preferences",
    "same-document-transitions",
    "cross-document-transitions",
    "group-element-transitions",
    "faster-spa-view-transitions",
    "scrollytelling",
    "parallax-scroll-effects",
    "scroll-entry-exit-effects",
    "carousel-slide-effects",
    "physics-based-easing",
    "individual-transform-properties",
    "animate-element-entry-exit",
    "animate-to-from-top-layer",
    "animate-to-intrinsic-sizes",
    "dynamic-sibling-animations",
    "interactive-content-reveal",
    "pull-to-reveal",
    "swipe-to-remove",
    "shrinking-header-on-scroll",
    "scroll-progress-indicator",
    "scroll-position-aware-elements",
    "scroll-snap-realtime-feedback",
    "scroll-snap-state-sync",
    "scroll-target-on-load",
    "soft-edge-content-fade",
    "scrollability-affordance-hints",
    "anchor-positioning-tab-underline",
    "position-aware-tooltips",
    "interest-triggered-tooltips",
    "interest-triggered-action-previews",
    "directional-navigation-transitions",
    "carousel-snap-highlights",
    "navigation-drawer",
    "stack-drill-down",
    "persistent-app-tours",
    "persistent-toast-notifications",
    "light-dismiss-a-dialog",
    "platform-controls-dismiss-dialog",
    "declarative-dialog-popover-control",
    "animated-select-picker",
    "branded-select-styling",
    "brand-consistent-forms",
    "custom-select-picker-layouts",
    "rich-media-picker",
    "complex-shapes",
    "shaped-cutouts",
    "overflow-clipping-control",
    "visually-texture-content",
    "apply-webgl-shaders",
    "interactive-content-in-3d-scenes",
    "highlight-text-ranges",
    "prevent-text-wrapping",
    "customize-scrollbar-color-and-thickness",
    "export-html-media-from-canvas",
    "fluid-scaling",
    "calculate-with-intrinsic-sizes",
    "css-layout",
    "size-aware-styling",
    "content-based-styling",
    "child-state-based-styling",
    "design-token-reactivity",
    "dynamic-sibling-styling",
    "form-fields-automatically-fit-contents",
    "improve-text-layout-and-legibility",
    "forms",
    "accessible-error-announcement",
    "required-field-feedback",
    "validate-input-after-interaction",
    "identify-inp-causes",
    "schedule-tasks-by-priority",
    "optimize-preload-priority",
    "improve-next-page-load-performance",
    "interactions-in-complex-layouts",
    "performance",
    "visually-stable-font-fallbacks",
    "break-up-long-tasks",
    "identify-heavy-scripts",
    "optimize-script-priority",
    "defer-rendering-heavy-content",
    "defer-work-until-scroll-ends",
    "optimize-image-priority",
    "conditional-async-dependencies",
    "expose-canvas-content-to-browser-features",
    "move-dom-element-without-losing-state",
    "precise-text-alignment",
    "visually-stable-mixed-fonts",
    "css",
    "html",
    "reduce-style-repetition",
    "security",
    "privacy",
    "batch-analytics-events",
    "full-session-analytics",
    "calculate-total-foreground-time",
    "passkeys",
    "passkey-registration",
    "passkey-authentication",
    "passkey-reauthentication",
    "passkey-conditional-create",
    "passkey-management",
    "flicker-free-client-side-ab-testing",
    "consistent-cross-document-transitions",
    "stabilize-reactive-state",
    "resilient-context-menus-and-nested-dropdowns",
    "persistent-top-layer-ui",
    "detect-initial-visibility-state",
    "sequence-distributed-events",
    "translator",
    "language-detection",
    "support-global-calendar-systems",
    "capture-location-agnostic-data",
    "format-human-readable-durations",
    "manage-recurring-intervals",
    "calculate-event-differentials",
    "coordinate-global-events",
    "model-partial-time-concepts",
    "search-hidden-content",
    "select-menu-interaction",
    "style-parent-with-has",
    "autofill-address-form",
    "autofill-payment-form",
    "autofill-sign-in-form",
    "autofill-sign-up-form",
    "autofill-highlight-inputs",
    "deliver-optimized-decorative-images",
    "resolution-optimized-pseudo-elements",
    "deprioritize-background-fetches",
    "efficient-background-processing",
    "webmcp",
    "agentic-forms",
    "agentic-javascript-tools",
    "language-model",
    "summarizer",
    "declarative-button-actions"
  ],
  "artifacts": [
    {
      "type": "dom",
      "path": "evidence/404-dom.json",
      "caption": "404 dom",
      "findingIds": [
        "F11",
        "F16"
      ]
    },
    {
      "type": "other",
      "path": "evidence/home-cookies.json",
      "caption": "home cookies",
      "findingIds": [
        "F13"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/home-dark.png",
      "caption": "home dark",
      "findingIds": [
        "F01"
      ],
      "condition": "prefers-color-scheme: dark"
    },
    {
      "type": "screenshot",
      "path": "evidence/home-desktop.png",
      "caption": "home desktop"
    },
    {
      "type": "screenshot",
      "path": "evidence/home-discoverability-crawler.png",
      "caption": "home discoverability crawler"
    },
    {
      "type": "screenshot",
      "path": "evidence/home-discoverability-rendered.png",
      "caption": "home discoverability rendered"
    },
    {
      "type": "discoverability",
      "path": "evidence/home-discoverability.json",
      "caption": "home discoverability",
      "findingIds": [
        "F15"
      ]
    },
    {
      "type": "dom",
      "path": "evidence/home-dom.json",
      "caption": "home dom",
      "findingIds": [
        "F01",
        "F02",
        "F06",
        "F07",
        "F08",
        "F12",
        "F15",
        "F21"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/home-focus.png",
      "caption": "home focus"
    },
    {
      "type": "other",
      "path": "evidence/home-form-invalid.json",
      "caption": "home form invalid",
      "findingIds": [
        "F18"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/home-form-invalid.png",
      "caption": "home form invalid",
      "findingIds": [
        "F18"
      ]
    },
    {
      "type": "other",
      "path": "evidence/home-form-submit.json",
      "caption": "home form submit",
      "findingIds": [
        "F06",
        "F07",
        "F20",
        "F21"
      ]
    },
    {
      "type": "other",
      "path": "evidence/home-headers.json",
      "caption": "home headers",
      "findingIds": [
        "F13",
        "F14"
      ]
    },
    {
      "type": "heap",
      "path": "evidence/home-heap.json",
      "caption": "home heap"
    },
    {
      "type": "other",
      "path": "evidence/home-high-contrast.json",
      "caption": "home high contrast",
      "condition": "forced-colors: active, prefers-contrast: more"
    },
    {
      "type": "screenshot",
      "path": "evidence/home-high-contrast.png",
      "caption": "home high contrast",
      "condition": "forced-colors: active, prefers-contrast: more"
    },
    {
      "type": "other",
      "path": "evidence/home-images.json",
      "caption": "home images"
    },
    {
      "type": "layout",
      "path": "evidence/home-layout-desktop.json",
      "caption": "home layout desktop"
    },
    {
      "type": "layout",
      "path": "evidence/home-layout-mobile.json",
      "caption": "home layout mobile",
      "condition": "viewport: 360x800"
    },
    {
      "type": "other",
      "path": "evidence/home-metadata-controls.json",
      "caption": "home metadata controls",
      "findingIds": [
        "F05",
        "F08",
        "F09",
        "F10",
        "F11",
        "F12",
        "F19"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/home-mobile.png",
      "caption": "home mobile",
      "findingIds": [
        "F05",
        "F09"
      ],
      "condition": "viewport: 360x800"
    },
    {
      "type": "other",
      "path": "evidence/home-reduced-motion.json",
      "caption": "home reduced motion",
      "condition": "prefers-reduced-motion: reduce"
    },
    {
      "type": "other",
      "path": "evidence/home-secrets.json",
      "caption": "home secrets"
    },
    {
      "type": "har-summary",
      "path": "evidence/home-summary.json",
      "caption": "home summary",
      "findingIds": [
        "F13"
      ]
    },
    {
      "type": "trace-summary",
      "path": "evidence/home-trace-summary.json",
      "caption": "home trace summary"
    },
    {
      "type": "trace",
      "path": "evidence/home-trace.json",
      "caption": "home trace"
    },
    {
      "type": "other",
      "path": "evidence/home-trackers.json",
      "caption": "home trackers"
    },
    {
      "type": "har",
      "path": "evidence/home.har",
      "caption": "home"
    },
    {
      "type": "lighthouse",
      "path": "evidence/lighthouse.json",
      "caption": "lighthouse",
      "findingIds": [
        "F10",
        "F11"
      ]
    },
    {
      "type": "dom",
      "path": "evidence/privacy-dom.json",
      "caption": "privacy dom",
      "findingIds": [
        "F02",
        "F03",
        "F04",
        "F17",
        "F20"
      ]
    },
    {
      "type": "other",
      "path": "evidence/privacy-metadata.json",
      "caption": "privacy metadata",
      "findingIds": [
        "F10",
        "F17"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/privacy-mobile.png",
      "caption": "privacy mobile",
      "findingIds": [
        "F03"
      ],
      "condition": "viewport: 360x800"
    }
  ],
  "config": {
    "loaded": false
  },
  "coverage": {
    "catalogVersion": "modern-web-guidance@0.0.172",
    "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7",
    "expected": 58,
    "recorded": 58,
    "judged": 58,
    "blocked": 0,
    "notRun": 0,
    "missing": 0,
    "unknown": 0,
    "duplicates": 0,
    "complete": true
  },
  "checkOutcomes": [
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-color-scheme",
      "status": "issues",
      "confidence": "high",
      "method": "Dark screenshot plus authored CSS inspection",
      "evidence": "Dark emulation leaves the hard-coded light palette unchanged.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dark.png",
        "evidence/home-dom.json"
      ],
      "findingIds": [
        "F01"
      ]
    },
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-reduced-motion",
      "status": "pass",
      "confidence": "high",
      "method": "Emulated-media animation/computed-style probe",
      "evidence": "Reduced-motion emulation was active; getAnimations() returned none and the only authored motion is a 150ms color transition.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-reduced-motion.json"
      ]
    },
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-contrast",
      "status": "pass",
      "confidence": "high",
      "method": "High-contrast screenshot and computed-style probe",
      "evidence": "Under forced-colors:active and prefers-contrast:more, body becomes white on black and button border/text remain visible.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-high-contrast.png",
        "evidence/home-high-contrast.json"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "view-transitions",
      "status": "issues",
      "confidence": "high",
      "method": "Cross-page DOM/CSS inspection",
      "evidence": "Same-origin page templates contain no View Transition declarations or names.",
      "pathIds": [
        "privacy"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/privacy-dom.json"
      ],
      "findingIds": [
        "F02"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "scroll-driven-animations",
      "status": "not-applicable",
      "confidence": "high",
      "method": "DOM/CSS source and Lighthouse inspection",
      "evidence": "No scroll-linked animation, parallax, reveal, carousel, or scroll handler exists to implement.",
      "reason": "The site has no scroll-linked motion."
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "physical-gestures",
      "status": "not-applicable",
      "confidence": "high",
      "method": "DOM/CSS interaction inventory",
      "evidence": "No gesture-driven, swipe, pull, carousel, or custom pointer interaction exists.",
      "reason": "The site has no gesture surface."
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "scroll-state-aware-chrome",
      "status": "issues",
      "confidence": "high",
      "method": "Long-page screenshot and CSS inspection",
      "evidence": "The long policy template has no sticky/progress/scroll-state cue.",
      "pathIds": [
        "privacy"
      ],
      "artifacts": [
        "evidence/privacy-dom.json",
        "evidence/privacy-mobile.png"
      ],
      "findingIds": [
        "F03"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "anchored-positioning",
      "status": "not-applicable",
      "confidence": "high",
      "method": "DOM inventory",
      "evidence": "No tooltip, popover, floating menu, or other anchored overlay exists.",
      "reason": "There is no anchored overlay surface."
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "directs-attention",
      "status": "issues",
      "confidence": "high",
      "method": "Rendered DOM and navigation review",
      "evidence": "Policy footer navigation has no current-page state, breadcrumb, or orientation cue.",
      "pathIds": [
        "privacy"
      ],
      "artifacts": [
        "evidence/privacy-dom.json"
      ],
      "findingIds": [
        "F04"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "no-intrusive-interruptions",
      "status": "pass",
      "confidence": "high",
      "method": "Desktop and mobile load screenshots",
      "evidence": "Load screenshots show content immediately with no popup, banner, consent wall, or obscuring overlay.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-desktop.png",
        "evidence/home-mobile.png"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "semantic-dismissible-primitives",
      "status": "not-applicable",
      "confidence": "high",
      "method": "DOM control inventory",
      "evidence": "No overlay, disclosure widget, custom picker, or transient rich control is present.",
      "reason": "There are no overlay or disclosure controls."
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "reduced-chrome",
      "status": "pass",
      "confidence": "high",
      "method": "Desktop/mobile screenshot review",
      "evidence": "The page uses one restrained content card and a compact footer; no decorative media or competing application chrome crowds content.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-desktop.png",
        "evidence/home-mobile.png"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "responsive-no-horizontal-scroll",
      "status": "pass",
      "confidence": "high",
      "method": "Mobile layout metrics and screenshot",
      "evidence": "At 360x800, scrollWidth and innerWidth are both 360 with zero horizontal overflow and a viewport meta tag.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-layout-mobile.json",
        "evidence/home-mobile.png"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "component-level-responsiveness",
      "status": "pass",
      "confidence": "high",
      "method": "CSS and desktop/mobile layout comparison",
      "evidence": "The single full-width card/form context adapts from max-width to 100% at narrow widths; no component is reused in independently sized containers.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home-layout-mobile.json",
        "evidence/home-layout-desktop.json"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "input-modality-aware",
      "status": "issues",
      "confidence": "high",
      "method": "Control geometry and keyboard-focus capture",
      "evidence": "Inputs and submit button are only 32px high, although browser focus remains visible.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-metadata-controls.json",
        "evidence/home-focus.png"
      ],
      "findingIds": [
        "F05"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "clear-purpose-and-primary-action",
      "status": "pass",
      "confidence": "high",
      "method": "First-view and full DOM content review",
      "evidence": "The H1 explains the domain and the Abuse & Security Contact section directly introduces the only primary action.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-desktop.png",
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "primary-flow-completion",
      "status": "issues",
      "confidence": "high",
      "method": "Instrumented end-to-end form submission",
      "evidence": "Valid submission only opens a mailto URL and provides no in-site completion.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-form-submit.json"
      ],
      "findingIds": [
        "F06"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "clear-system-state-and-recovery",
      "status": "issues",
      "confidence": "high",
      "method": "Instrumented submission and DOM-state inspection",
      "evidence": "The submission leaves no pending, success, failure, retry, or receipt state.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-form-submit.json",
        "evidence/home-dom.json"
      ],
      "findingIds": [
        "F07"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "good-core-web-vitals",
      "status": "pass",
      "confidence": "high",
      "method": "Trace summary, layout observer, Lighthouse",
      "evidence": "Trace LCP/FCP is 903.54ms, TBT 0ms, and observed CLS is 0; Lighthouse performance is 0.99.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-trace-summary.json",
        "evidence/home-layout-desktop.json",
        "evidence/lighthouse.json"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "visual-stability",
      "status": "pass",
      "confidence": "high",
      "method": "Layout observers and images audit",
      "evidence": "Both layout captures report CLS 0 with no shifts; there are no images or web fonts.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-layout-mobile.json",
        "evidence/home-layout-desktop.json",
        "evidence/home-images.json"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "efficient-main-thread",
      "status": "pass",
      "confidence": "high",
      "method": "Trace and long-task observers",
      "evidence": "Trace and layout observers recorded no long tasks and 0ms total blocking time.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-trace-summary.json",
        "evidence/home-layout-desktop.json"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "efficient-resource-delivery",
      "status": "pass",
      "confidence": "high",
      "method": "HAR summary confirmed against DOM and trace",
      "evidence": "HAR records only two requests and 2,712 transferred bytes with no resource chain; content is inline and LCP is under one second.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home.har",
        "evidence/home-summary.json",
        "evidence/home-dom.json",
        "evidence/home-trace-summary.json"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "trim-unused-and-duplicate-code",
      "status": "pass",
      "confidence": "high",
      "method": "HAR and DOM source inspection",
      "evidence": "HAR shows no external JavaScript/CSS or third-party bytes; the page ships one small inline script and stylesheet.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-summary.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "names-roles-labels",
      "status": "issues",
      "confidence": "high",
      "method": "DOM accessible-name/label probe plus Lighthouse corroboration",
      "evidence": "All four fields have no associated label; placeholder is the only field text.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-metadata-controls.json",
        "evidence/lighthouse.json"
      ],
      "findingIds": [
        "F08"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "sufficient-contrast",
      "status": "pass",
      "confidence": "high",
      "method": "Lighthouse contrast audit and forced-colors capture",
      "evidence": "Lighthouse accessibility scored 1.0 and forced-colors probe preserved white-on-black text and control borders.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse.json",
        "evidence/home-high-contrast.png"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "structure-and-focus",
      "status": "pass",
      "confidence": "high",
      "method": "DOM structure and focus probe/capture",
      "evidence": "The page has one H1 then H2, main/footer/nav landmarks, DOM-order controls, and visible native keyboard focus.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home-form-invalid.json",
        "evidence/home-focus.png"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "legible-text",
      "status": "pass",
      "confidence": "high",
      "method": "Desktop/mobile visual review and layout metrics",
      "evidence": "Screenshots show a restrained 680px measure, 1.7 line height, no clipping, and zero horizontal overflow on mobile.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-desktop.png",
        "evidence/home-mobile.png",
        "evidence/home-layout-mobile.json"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "zoom-reflow-targets-and-media",
      "status": "issues",
      "confidence": "high",
      "method": "Mobile geometry/layout probe",
      "evidence": "Reflow succeeds but interactive controls remain only 32px high.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-metadata-controls.json",
        "evidence/home-layout-mobile.json"
      ],
      "findingIds": [
        "F09"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "no-console-errors",
      "status": "pass",
      "confidence": "high",
      "method": "Lighthouse runtime audit",
      "evidence": "Lighthouse best-practices scored 1.0 and its errors-in-console audit passed.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "sound-document-and-assets",
      "status": "pass",
      "confidence": "high",
      "method": "DOM/assets inspection and Lighthouse",
      "evidence": "DOM has html doctype, UTF-8 charset, viewport metadata, no images, and simple inline assets; Lighthouse best-practices is 1.0.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home-images.json",
        "evidence/lighthouse.json"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "browser-platform-hygiene",
      "status": "pass",
      "confidence": "high",
      "method": "Lighthouse best-practices audits and DOM source inspection",
      "evidence": "Lighthouse found no deprecated APIs, vulnerable libraries, paste prevention, permission prompts, or browser errors.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "title-and-description",
      "status": "issues",
      "confidence": "high",
      "method": "Per-template metadata probes and Lighthouse SEO",
      "evidence": "Home and Privacy Policy share “Domain Information” and lack meta descriptions.",
      "pathIds": [
        "privacy"
      ],
      "artifacts": [
        "evidence/home-metadata-controls.json",
        "evidence/privacy-metadata.json",
        "evidence/lighthouse.json"
      ],
      "findingIds": [
        "F10"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "crawlable-and-mobile-friendly",
      "status": "pass",
      "confidence": "high",
      "method": "DOM link/viewport inspection plus robots response review",
      "evidence": "Visible links have real href values and descriptive policy text, viewport metadata exists, and robots permits general search crawling.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-metadata-controls.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "canonical-and-indexing-signals",
      "status": "issues",
      "confidence": "high",
      "method": "Metadata, Lighthouse SEO, and deliberate unknown-route probe",
      "evidence": "No canonical exists; robots and sitemap carry invalid placeholder text; unknown URLs return 200.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-metadata-controls.json",
        "evidence/lighthouse.json",
        "evidence/404-dom.json"
      ],
      "findingIds": [
        "F11"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "structured-and-shareable-metadata",
      "status": "issues",
      "confidence": "high",
      "method": "Rendered head/DOM inspection",
      "evidence": "No JSON-LD or social/share metadata describes the public domain/operator information.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home-metadata-controls.json"
      ],
      "findingIds": [
        "F12"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "secure-transport-and-headers",
      "status": "issues",
      "confidence": "high",
      "method": "Headers, cookies, and HAR security review",
      "evidence": "HTTPS and nosniff are present, but CSP is absent and HSTS is max-age=1.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-headers.json",
        "evidence/home-cookies.json",
        "evidence/home-summary.json"
      ],
      "findingIds": [
        "F13"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "data-minimisation-and-third-parties",
      "status": "pass",
      "confidence": "high",
      "method": "Trackers, cookies, HAR, and secrets primitives",
      "evidence": "Trackers audit found zero third parties, cookies audit found zero cookies, HAR is first-party only, and secrets scan found no credentials.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-trackers.json",
        "evidence/home-cookies.json",
        "evidence/home-summary.json",
        "evidence/home-secrets.json"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "in-context-permissions-and-modern-auth",
      "status": "pass",
      "confidence": "high",
      "method": "Lighthouse and DOM/script inspection",
      "evidence": "No permission request or authentication surface is present on load or in authored code.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "defensive-browser-policies",
      "status": "issues",
      "confidence": "high",
      "method": "Security headers primitive",
      "evidence": "No frame defense, Referrer-Policy, Permissions-Policy, or CSP is configured.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-headers.json"
      ],
      "findingIds": [
        "F14"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "progressive-enhancement",
      "status": "issues",
      "confidence": "high",
      "method": "Discoverability raw/rendered comparison and authored form/script inspection",
      "evidence": "All content survives without JS, but the primary form has action=\"#\" and requires JS to construct mailto.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-discoverability.json",
        "evidence/home-dom.json"
      ],
      "findingIds": [
        "F15"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "resilient-runtime-behaviour",
      "status": "pass",
      "confidence": "high",
      "method": "DOM/script inventory and Lighthouse",
      "evidence": "The page has no overlays or asynchronous dependencies; one bounded DOMContentLoaded listener wires the form and Lighthouse reports clean runtime behavior.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/lighthouse.json"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "offline-and-installable",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Site archetype, manifest, and service-worker inventory",
      "evidence": "This public infrastructure information page is not an app and exposes no ongoing offline workflow.",
      "reason": "A brochure/infrastructure information site does not require installation or offline app behavior."
    },
    {
      "principleId": "be-resilient",
      "checkId": "network-and-http-failure-states",
      "status": "issues",
      "confidence": "high",
      "method": "Deliberate unknown-route HTTP/browser probe",
      "evidence": "A nonexistent path returns HTTP 200 “empty OK” with no recovery UI.",
      "pathIds": [
        "not-found"
      ],
      "artifacts": [
        "evidence/404-dom.json"
      ],
      "findingIds": [
        "F16"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "lang-dir-and-logical-properties",
      "status": "issues",
      "confidence": "high",
      "method": "DOM/CSS logical-property probe",
      "evidence": "lang=\"en\" is correct, but the stylesheet uses physical left positioning and no explicit direction strategy.",
      "pathIds": [
        "privacy"
      ],
      "artifacts": [
        "evidence/privacy-metadata.json",
        "evidence/privacy-dom.json"
      ],
      "findingIds": [
        "F17"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "locale-aware-data",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Visible content and DOM inventory",
      "evidence": "The audited templates render no dates, numbers, currencies, durations, or calendars.",
      "reason": "No locale-sensitive data exists on these templates."
    },
    {
      "principleId": "be-internationalised",
      "checkId": "time-zone-correctness",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Visible content and DOM inventory",
      "evidence": "The site exposes no event or time data.",
      "reason": "No time-zone-sensitive data exists."
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "no-dark-patterns",
      "status": "issues",
      "confidence": "high",
      "method": "Policy and submission-flow content review",
      "evidence": "There is no ad/consent interruption, but the responsible operator/controller is not named and rights/contact data handling is not clear.",
      "pathIds": [
        "privacy"
      ],
      "artifacts": [
        "evidence/privacy-dom.json",
        "evidence/home-form-submit.json"
      ],
      "findingIds": [
        "F20"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "humane-error-handling",
      "status": "issues",
      "confidence": "high",
      "method": "Invalid-submit interaction and state probe",
      "evidence": "Native validation focuses only the first invalid field; there are no persistent field errors, aria-invalid states, or error summary.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-form-invalid.json",
        "evidence/home-form-invalid.png"
      ],
      "findingIds": [
        "F18"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "trustworthy-input-assistance",
      "status": "issues",
      "confidence": "high",
      "method": "Form attribute/control probe",
      "evidence": "Every field explicitly sets autocomplete=\"off\", including name and email.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-metadata-controls.json"
      ],
      "findingIds": [
        "F19"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "safe-commercial-and-account-flows",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Page and route inventory",
      "evidence": "No checkout, subscription, consent choice, authentication, or account-management flow is present.",
      "reason": "The site has no commercial or account flow."
    },
    {
      "principleId": "be-sustainable",
      "checkId": "optimised-assets",
      "status": "pass",
      "confidence": "high",
      "method": "Images and DOM asset inventory",
      "evidence": "Images audit reports zero images; the page uses no decorative raster assets or external fonts.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-images.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "no-wasteful-work",
      "status": "pass",
      "confidence": "high",
      "method": "Trace, HAR, and script inspection",
      "evidence": "Trace shows zero long tasks and HAR only two requests/2,712 bytes; no background fetch or processing exists.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-trace-summary.json",
        "evidence/home-summary.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "third-party-and-media-budget",
      "status": "pass",
      "confidence": "high",
      "method": "Trackers, HAR, and DOM inspection",
      "evidence": "Tracker audit found zero third-party origins and the page has no audio, video, animation payload, or external fonts.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-trackers.json",
        "evidence/home-summary.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "be-agent-ready",
      "checkId": "structured-agent-capabilities",
      "status": "issues",
      "confidence": "high",
      "method": "Discoverability and form-flow inspection",
      "evidence": "Raw content is fully machine-readable, but the actionable form has no functional HTTP action or dependable result and is not safely exposed as an agent capability.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-discoverability.json",
        "evidence/home-dom.json",
        "evidence/home-form-submit.json"
      ],
      "findingIds": [
        "F21"
      ]
    },
    {
      "principleId": "be-agent-ready",
      "checkId": "on-device-inference",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Site purpose and feature inventory",
      "evidence": "The static domain-information and contact experience has no inference task that would improve the core experience.",
      "reason": "No summarization, translation, or language-model feature is warranted for this small static surface."
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "no-leak-under-repeated-interaction",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Interaction inventory and DOM/script inspection",
      "evidence": "The page has no repeatable open/close, route-state, infinite-scroll, or dynamic interaction; submission leaves the page or invokes a mail client.",
      "reason": "There is no representative repeatable in-page interaction to exercise ten times."
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "bounded-footprint",
      "status": "pass",
      "confidence": "high",
      "method": "Heap summary and DOM inventory",
      "evidence": "Baseline heap is 31,669 nodes and 1,102,209 self-size bytes for the small page, proportionate to the rendered content.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-heap.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "no-detached-dom-or-unbounded-listeners",
      "status": "pass",
      "confidence": "high",
      "method": "Heap summary plus authored script inspection",
      "evidence": "Authored script installs one DOMContentLoaded listener and one form submit listener, creates no dynamic DOM, timers, observers, or repeating listener registrations.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-heap.json",
        "evidence/home-dom.json"
      ]
    }
  ],
  "principleOutcomes": [
    {
      "principleId": "respect-user-preferences",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F01"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F02"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F03",
        "F04"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "expectation": "default",
      "status": "pass"
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F05"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F06",
        "F07"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "expectation": "default",
      "status": "pass"
    },
    {
      "principleId": "be-inclusive",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F08",
        "F09"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "expectation": "default",
      "status": "pass"
    },
    {
      "principleId": "be-discoverable",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F10",
        "F11",
        "F12"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F13",
        "F14"
      ]
    },
    {
      "principleId": "be-resilient",
      "expectation": "contextual",
      "status": "issues",
      "findingIds": [
        "F15",
        "F16"
      ]
    },
    {
      "principleId": "be-internationalised",
      "expectation": "contextual",
      "status": "issues",
      "findingIds": [
        "F17"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F20",
        "F18",
        "F19"
      ]
    },
    {
      "principleId": "be-sustainable",
      "expectation": "contextual",
      "status": "pass"
    },
    {
      "principleId": "be-agent-ready",
      "expectation": "contextual",
      "status": "issues",
      "findingIds": [
        "F21"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "expectation": "default",
      "status": "pass"
    }
  ],
  "paths": [
    {
      "id": "home",
      "description": "Entry/information archetype: purpose, content, global headers/network, preferences, responsive layout, performance, discoverability, privacy, and baseline memory.",
      "url": "https://crn77.com/",
      "conditions": [
        "desktop",
        "viewport 360x800",
        "prefers-color-scheme: dark",
        "prefers-reduced-motion: reduce",
        "forced-colors: active",
        "no JavaScript crawler"
      ],
      "result": "issues"
    },
    {
      "id": "contact-flow",
      "description": "Primary abuse-report journey: empty validation, keyboard focus, valid submission, completion and recovery.",
      "url": "https://crn77.com/#contact-form",
      "conditions": [
        "keyboard focus",
        "empty invalid submit",
        "valid submit with window.open intercepted"
      ],
      "result": "issues"
    },
    {
      "id": "privacy",
      "description": "Representative legal/content template. Privacy Policy stands in for Terms and Cookies because they share the same card/footer archetype; reviewed for long-form navigation, metadata, trust, mobile layout, and i18n.",
      "url": "https://crn77.com/assets/privacy-policy.html",
      "conditions": [
        "viewport 360x800",
        "default desktop DOM"
      ],
      "result": "issues"
    },
    {
      "id": "not-found",
      "description": "Deliberate unknown-route test for HTTP semantics and recovery UI.",
      "url": "https://crn77.com/definitely-not-a-real-page",
      "conditions": [
        "direct navigation",
        "raw HTTP response"
      ],
      "result": "issues"
    }
  ],
  "findings": [
    {
      "id": "F01",
      "severity": "medium",
      "confidence": "high",
      "summary": "The site ignores the user’s dark color-scheme preference.",
      "evidence": "The dark-mode capture is byte-for-byte visually equivalent to the light capture, and authored CSS hard-codes #f5f6f8 and #fff with no color-scheme or prefers-color-scheme rule.",
      "suggestedFix": "Declare color-scheme: light dark and use light-dark() or a prefers-color-scheme query for surfaces, text, borders, and controls.",
      "effort": "small",
      "principleId": "respect-user-preferences",
      "principleCheckId": "respects-color-scheme",
      "guidanceId": "dark-mode",
      "pathId": "home",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-dark.png",
        "evidence/home-dom.json"
      ]
    },
    {
      "id": "F02",
      "severity": "low",
      "confidence": "high",
      "summary": "Cross-document navigation swaps abruptly instead of preserving visual context.",
      "evidence": "DOM/CSS inspection across the home and policy template found no @view-transition rule or view-transition-name despite same-origin document navigation.",
      "suggestedFix": "Add @view-transition { navigation: auto } and stable view-transition-name values for shared card/footer elements, with reduced-motion handling.",
      "effort": "small",
      "principleId": "implement-natural-interactions",
      "principleCheckId": "view-transitions",
      "guidanceId": "cross-document-transitions",
      "pathId": "privacy",
      "url": "https://crn77.com/assets/privacy-policy.html",
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/privacy-dom.json"
      ]
    },
    {
      "id": "F03",
      "severity": "low",
      "confidence": "medium",
      "summary": "Long policy pages provide no position or reading-progress cue.",
      "evidence": "The privacy page is a long single card, while DOM/CSS inspection shows no sticky navigation, progress indicator, or scroll-state styling.",
      "suggestedFix": "Add restrained scroll progress or sticky section navigation that responds to scroll state without obscuring content.",
      "effort": "medium",
      "principleId": "provide-guided-navigation",
      "principleCheckId": "scroll-state-aware-chrome",
      "guidanceId": "scroll-progress-indicator",
      "pathId": "privacy",
      "url": "https://crn77.com/assets/privacy-policy.html",
      "artifacts": [
        "evidence/privacy-dom.json",
        "evidence/privacy-mobile.png"
      ]
    },
    {
      "id": "F04",
      "severity": "medium",
      "confidence": "high",
      "summary": "Legal-page navigation does not identify the current page or offer clear orientation.",
      "evidence": "Each policy footer renders the same three links with no aria-current, current-state styling, breadcrumb, or direct route back to the domain-information heading.",
      "suggestedFix": "Mark the current policy link with aria-current=\"page\", add a clear Home/Domain information route, and preserve focus/attention after navigation.",
      "effort": "small",
      "principleId": "provide-guided-navigation",
      "principleCheckId": "directs-attention",
      "guidanceId": "directional-navigation-transitions",
      "pathId": "privacy",
      "url": "https://crn77.com/assets/privacy-policy.html",
      "artifacts": [
        "evidence/privacy-dom.json"
      ]
    },
    {
      "id": "F05",
      "severity": "medium",
      "confidence": "high",
      "summary": "Primary form controls are too short for comfortable touch input.",
      "evidence": "The control probe measured all inputs and the submit button at 32 CSS px high, below the common 44 CSS px touch-target target.",
      "suggestedFix": "Give controls a minimum block-size of 44px, preserve adequate spacing, and retain visible :focus-visible styles.",
      "effort": "trivial",
      "principleId": "adapt-to-the-form-factor",
      "principleCheckId": "input-modality-aware",
      "guidanceId": "accessibility",
      "pathId": "contact-flow",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-metadata-controls.json",
        "evidence/home-mobile.png"
      ]
    },
    {
      "id": "F06",
      "severity": "high",
      "confidence": "high",
      "summary": "The abuse-report flow cannot complete within the site and depends on a configured desktop mail client.",
      "evidence": "A valid submission was intercepted opening mailto:gscreporter@gmail.com; the page remained unchanged and provided no server receipt or report identifier.",
      "suggestedFix": "Submit to an HTTPS endpoint, show an in-page pending/success state and reference number, and retain mailto only as an explicit fallback.",
      "effort": "medium",
      "principleId": "support-core-task-success",
      "principleCheckId": "primary-flow-completion",
      "guidanceId": "forms",
      "pathId": "contact-flow",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-form-submit.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "id": "F07",
      "severity": "high",
      "confidence": "high",
      "summary": "The core report flow has no durable success, delivery-failure, retry, or cancellation state.",
      "evidence": "After valid submission the form stays in place and only window.open(mailto:) runs; there is no status region, confirmation, retry path, or handling for a blocked/unconfigured mail client.",
      "suggestedFix": "Model explicit submitting, success, and error states; announce status in a live region and provide retry plus alternate contact details.",
      "effort": "medium",
      "principleId": "support-core-task-success",
      "principleCheckId": "clear-system-state-and-recovery",
      "guidanceId": "persistent-toast-notifications",
      "pathId": "contact-flow",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-form-submit.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "id": "F08",
      "severity": "high",
      "confidence": "high",
      "summary": "The contact fields have no persistent visible labels.",
      "evidence": "The DOM probe found labels:[] and no aria-label for name, email, subject, and message; placeholders are the only names and disappear during entry.",
      "suggestedFix": "Add explicit <label for> elements with durable field names and keep placeholders as optional examples only.",
      "effort": "trivial",
      "principleId": "be-inclusive",
      "principleCheckId": "names-roles-labels",
      "guidanceId": "accessibility",
      "pathId": "contact-flow",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-metadata-controls.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "id": "F09",
      "severity": "medium",
      "confidence": "high",
      "summary": "The form’s 32px controls weaken zoom/reflow and touch usability.",
      "evidence": "At the 360x800 viewport there is no overflow, but measured input and button heights remain only 32px.",
      "suggestedFix": "Use fluid sizing and a minimum 44px target size without disabling user scaling.",
      "effort": "trivial",
      "principleId": "be-inclusive",
      "principleCheckId": "zoom-reflow-targets-and-media",
      "guidanceId": "fluid-scaling",
      "pathId": "contact-flow",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-metadata-controls.json",
        "evidence/home-mobile.png"
      ]
    },
    {
      "id": "F10",
      "severity": "high",
      "confidence": "high",
      "summary": "Pages use the same generic title and provide no meta description.",
      "evidence": "The home page and Privacy Policy both report title “Domain Information”; both lack meta[name=description]. Lighthouse SEO scored 0 for meta-description.",
      "suggestedFix": "Give each page a unique descriptive title and concise description reflecting its visible content.",
      "effort": "trivial",
      "principleId": "be-discoverable",
      "principleCheckId": "title-and-description",
      "guidanceId": "html",
      "pathId": "privacy",
      "url": "https://crn77.com/assets/privacy-policy.html",
      "artifacts": [
        "evidence/home-metadata-controls.json",
        "evidence/privacy-metadata.json",
        "evidence/lighthouse.json"
      ]
    },
    {
      "id": "F11",
      "severity": "high",
      "confidence": "high",
      "summary": "Indexing and HTTP status signals are inconsistent and misleading.",
      "evidence": "robots.txt ends with an invalid “empty OK” directive, sitemap.xml returns plain “empty OK”, no canonical link is present, and a nonexistent URL returns HTTP 200 with “empty OK” instead of 404.",
      "suggestedFix": "Return real 404/410 statuses, publish a valid XML sitemap or 404 it, remove invalid robots lines, and add self-referencing canonicals where appropriate.",
      "effort": "small",
      "principleId": "be-discoverable",
      "principleCheckId": "canonical-and-indexing-signals",
      "guidanceId": "html",
      "pathId": "not-found",
      "url": "https://crn77.com/definitely-not-a-real-page",
      "artifacts": [
        "evidence/404-dom.json",
        "evidence/lighthouse.json",
        "evidence/home-metadata-controls.json"
      ]
    },
    {
      "id": "F12",
      "severity": "low",
      "confidence": "high",
      "summary": "The public organization/infrastructure pages lack share and structured metadata.",
      "evidence": "DOM inspection found no JSON-LD, Open Graph fields, or canonical metadata for the visible domain/operator information.",
      "suggestedFix": "Add accurate Organization/WebSite JSON-LD and Open Graph title, description, URL, and image fields where representative assets exist.",
      "effort": "small",
      "principleId": "be-discoverable",
      "principleCheckId": "structured-and-shareable-metadata",
      "guidanceId": "html",
      "pathId": "home",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home-metadata-controls.json"
      ]
    },
    {
      "id": "F13",
      "severity": "high",
      "confidence": "high",
      "summary": "The document has no Content-Security-Policy and HSTS is effectively non-durable.",
      "evidence": "The headers primitive found no CSP; Strict-Transport-Security is only max-age=1 second. HTTPS and nosniff are present and no cookies or mixed content were observed.",
      "suggestedFix": "Deploy a nonce/hash-based CSP and a durable HSTS policy after validating HTTPS coverage, then consider includeSubDomains and preload deliberately.",
      "effort": "medium",
      "principleId": "be-private-and-secure",
      "principleCheckId": "secure-transport-and-headers",
      "guidanceId": "security",
      "pathId": "home",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-headers.json",
        "evidence/home-cookies.json",
        "evidence/home-summary.json"
      ]
    },
    {
      "id": "F14",
      "severity": "high",
      "confidence": "high",
      "summary": "Clickjacking, referrer, and permissions defenses are absent.",
      "evidence": "The headers primitive found no X-Frame-Options or CSP frame-ancestors, no Referrer-Policy, and no Permissions-Policy.",
      "suggestedFix": "Set CSP frame-ancestors (or X-Frame-Options as legacy defense), strict-origin-when-cross-origin or stricter Referrer-Policy, and a least-privilege Permissions-Policy.",
      "effort": "small",
      "principleId": "be-private-and-secure",
      "principleCheckId": "defensive-browser-policies",
      "guidanceId": "security",
      "pathId": "home",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-headers.json"
      ]
    },
    {
      "id": "F15",
      "severity": "medium",
      "confidence": "high",
      "summary": "Core content is progressive, but the primary report action disappears without JavaScript.",
      "evidence": "Discoverability measured 100% raw-HTML content coverage, but the authored form action is “#” and only the DOMContentLoaded script creates the mailto action.",
      "suggestedFix": "Give the form a functional server action first and enhance it with client-side status handling.",
      "effort": "medium",
      "principleId": "be-resilient",
      "principleCheckId": "progressive-enhancement",
      "guidanceId": "forms",
      "pathId": "contact-flow",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-discoverability.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "id": "F16",
      "severity": "high",
      "confidence": "high",
      "summary": "Unknown routes return a misleading successful empty response with no recovery.",
      "evidence": "A deliberately nonexistent route returned HTTP 200 text/plain “empty OK”; browser DOM contains no explanation, navigation, or retry/home link.",
      "suggestedFix": "Return HTTP 404 with a branded, accessible page that explains the error and links back to the domain information and report flow.",
      "effort": "small",
      "principleId": "be-resilient",
      "principleCheckId": "network-and-http-failure-states",
      "guidanceId": "persistent-toast-notifications",
      "pathId": "not-found",
      "url": "https://crn77.com/definitely-not-a-real-page",
      "artifacts": [
        "evidence/404-dom.json"
      ]
    },
    {
      "id": "F17",
      "severity": "low",
      "confidence": "high",
      "summary": "The stylesheet uses a physical left offset and has no explicit direction strategy.",
      "evidence": "The privacy CSS probe found ul li::before positioned with left:0 and the document has no dir attribute; lang=\"en\" is correctly present.",
      "suggestedFix": "Use inset-inline-start and padding-inline-start, and set/propagate direction where localized content can vary.",
      "effort": "trivial",
      "principleId": "be-internationalised",
      "principleCheckId": "lang-dir-and-logical-properties",
      "guidanceId": "translator",
      "pathId": "privacy",
      "url": "https://crn77.com/assets/privacy-policy.html",
      "artifacts": [
        "evidence/privacy-metadata.json",
        "evidence/privacy-dom.json"
      ]
    },
    {
      "id": "F18",
      "severity": "medium",
      "confidence": "high",
      "summary": "Validation feedback is transient and not represented as persistent accessible field state.",
      "evidence": "After an empty submit, only the first invalid input receives the browser bubble/focus; all invalid controls have aria-invalid=null and unchanged border color, with no error summary or field messages in the DOM.",
      "suggestedFix": "After interaction, render persistent field errors, synchronize :user-invalid with aria-invalid and described-by text, and focus an error summary when useful.",
      "effort": "small",
      "principleId": "be-trustworthy",
      "principleCheckId": "humane-error-handling",
      "guidanceId": "accessible-error-announcement",
      "pathId": "contact-flow",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-form-invalid.json",
        "evidence/home-form-invalid.png"
      ]
    },
    {
      "id": "F19",
      "severity": "medium",
      "confidence": "high",
      "summary": "The form explicitly disables useful autofill.",
      "evidence": "All name, email, subject, and message fields report autocomplete=\"off\"; name and email could use standard tokens.",
      "suggestedFix": "Use autocomplete=\"name\" and autocomplete=\"email\" and avoid disabling autocomplete on free-text fields without a concrete security reason.",
      "effort": "trivial",
      "principleId": "be-trustworthy",
      "principleCheckId": "trustworthy-input-assistance",
      "guidanceId": "autofill-sign-up-form",
      "pathId": "contact-flow",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-metadata-controls.json"
      ]
    },
    {
      "id": "F20",
      "severity": "medium",
      "confidence": "medium",
      "summary": "The privacy and abuse surfaces do not identify the responsible operator clearly.",
      "evidence": "The policy repeatedly refers to “the operator” without naming a legal entity or postal contact, while rights requests are routed through the same Gmail-backed form that collects name/email.",
      "suggestedFix": "Identify the controller/operator and jurisdiction, publish durable contact details, and explain exactly how report/contact data is processed and retained.",
      "effort": "small",
      "principleId": "be-trustworthy",
      "principleCheckId": "no-dark-patterns",
      "guidanceId": "privacy",
      "pathId": "privacy",
      "url": "https://crn77.com/assets/privacy-policy.html",
      "artifacts": [
        "evidence/privacy-dom.json",
        "evidence/home-form-submit.json"
      ]
    },
    {
      "id": "F21",
      "severity": "medium",
      "confidence": "high",
      "summary": "The only actionable form is not exposed as a reliable structured agent capability.",
      "evidence": "The semantic form has action=\"#\", missing labels, and a JavaScript-only mailto handler, so an agent cannot discover a dependable submission endpoint or completion result.",
      "suggestedFix": "First make the form a real labelled HTTP action; where agent use is intended, expose a narrowly scoped WebMCP/agentic-form tool with confirmation and clear result semantics.",
      "effort": "medium",
      "principleId": "be-agent-ready",
      "principleCheckId": "structured-agent-capabilities",
      "guidanceId": "agentic-forms",
      "pathId": "contact-flow",
      "url": "https://crn77.com/",
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home-form-submit.json"
      ]
    }
  ],
  "taskList": [
    {
      "id": "T1",
      "title": "Replace the mailto-only report flow with a labelled, server-backed form and explicit success/error states",
      "priority": 1,
      "findingIds": [
        "F06",
        "F07",
        "F08",
        "F15",
        "F18",
        "F19",
        "F21"
      ],
      "guidanceId": "forms",
      "status": "open"
    },
    {
      "id": "T2",
      "title": "Return correct HTTP errors and repair robots, sitemap, canonical, title, and description signals",
      "priority": 2,
      "findingIds": [
        "F10",
        "F11",
        "F12",
        "F16"
      ],
      "guidanceId": "html",
      "status": "open"
    },
    {
      "id": "T3",
      "title": "Deploy CSP, durable HSTS, frame, referrer, and permissions policies",
      "priority": 3,
      "findingIds": [
        "F13",
        "F14"
      ],
      "guidanceId": "security",
      "status": "open"
    },
    {
      "id": "T4",
      "title": "Identify the operator/controller and clarify contact-data handling",
      "priority": 4,
      "findingIds": [
        "F20"
      ],
      "guidanceId": "privacy",
      "status": "open"
    },
    {
      "id": "T5",
      "title": "Add preference-aware dark colors and retain forced-color support",
      "priority": 5,
      "findingIds": [
        "F01"
      ],
      "guidanceId": "dark-mode",
      "status": "open"
    },
    {
      "id": "T6",
      "title": "Improve touch targets and legal-page orientation/navigation",
      "priority": 6,
      "findingIds": [
        "F03",
        "F04",
        "F05",
        "F09"
      ],
      "guidanceId": "accessibility",
      "status": "open"
    },
    {
      "id": "T7",
      "title": "Add progressive route transitions and logical directional properties",
      "priority": 7,
      "findingIds": [
        "F02",
        "F17"
      ],
      "guidanceId": "cross-document-transitions",
      "status": "open"
    }
  ],
  "budget": {
    "pathCount": 4,
    "auditPasses": 1
  },
  "agent": "pi",
  "runId": "2026-07-20T11-09-15-377Z"
}
