{ "url": "https://shahvani.com", "auditedAt": "2026-07-20T22:12:35.429Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit of six representative public paths and all 58 catalog checks.", "page": { "appType": "mpa", "framework": "Server-rendered MPA with jQuery/Moment/Underscore and a web app manifest", "notes": "Persian RTL adult-content/community site. Audited public browsing, community, long-form, account-entry and failure-state archetypes. Authenticated posting/account management, photo detail pages and chat subdomain were not covered because they require credentials or are a separate origin; templates represented by sampled public routes were deduplicated." }, "evidenceUsed": [ "screenshot", "dom+computed-styles", "layout-metrics", "evaluate-probe", "discoverability", "har", "trace", "headers", "cookies", "trackers", "images", "secrets", "heap-summary", "lighthouse", "axe-core", "robots+sitemap" ], "guidanceConsulted": [ "dark-mode", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "scrollytelling", "physics-based-easing", "shrinking-header-on-scroll", "position-aware-tooltips", "navigation-drawer", "light-dismiss-a-dialog", "declarative-dialog-popover-control", "fluid-scaling", "size-aware-styling", "forms", "accessible-error-announcement", "identify-inp-causes", "visually-stable-font-fallbacks", "break-up-long-tasks", "optimize-image-priority", "optimize-script-priority", "identify-heavy-scripts", "improve-text-layout-and-legibility", "html", "security", "privacy", "passkeys", "flicker-free-client-side-ab-testing", "resilient-context-menus-and-nested-dropdowns", "translator", "support-global-calendar-systems", "coordinate-global-events", "validate-input-after-interaction", "autofill-sign-in-form", "deliver-optimized-decorative-images", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "language-model", "manage-recurring-intervals" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Homepage at desktop viewport", "condition": "800x600", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Homepage at mobile viewport", "condition": "360x800", "findingIds": [ "F05" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Homepage with dark preference", "condition": "prefers-color-scheme: dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/dastans-mobile.png", "caption": "Story listing mobile", "condition": "360x800", "findingIds": [ "F06" ] }, { "type": "screenshot", "path": "evidence/forum-mobile.png", "caption": "Forum listing mobile", "condition": "360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/detail-mobile.png", "caption": "Story detail mobile", "condition": "360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/login-mobile.png", "caption": "Login mobile", "condition": "360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/login-invalid.png", "caption": "Login after empty submit", "condition": "360x800; invalid submit", "findingIds": [] }, { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "Unknown-route browser error", "condition": "360x800", "findingIds": [ "F08", "F24" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Rendered homepage DOM and styles", "condition": "default", "findingIds": [ "F23" ] }, { "type": "dom", "path": "evidence/dastans-dom.json", "caption": "Rendered story-list DOM and styles", "condition": "default", "findingIds": [ "F04" ] }, { "type": "dom", "path": "evidence/forum-dom.json", "caption": "Rendered forum DOM and styles", "condition": "default", "findingIds": [] }, { "type": "dom", "path": "evidence/login-dom.json", "caption": "Rendered login DOM and styles", "condition": "default", "findingIds": [] }, { "type": "dom", "path": "evidence/detail-dom.json", "caption": "Rendered story-detail DOM and styles", "condition": "default", "findingIds": [ "F04", "F18" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Homepage mobile layout/CLS/long-task observation", "condition": "360x800", "findingIds": [] }, { "type": "layout", "path": "evidence/dastans-layout.json", "caption": "Stories mobile layout/CLS/long-task observation", "condition": "360x800", "findingIds": [] }, { "type": "layout", "path": "evidence/forum-layout.json", "caption": "Forum mobile layout/CLS/long-task observation", "condition": "360x800", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw HTML versus rendered content comparison", "condition": "JavaScript on/off", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Browser-rendered homepage", "condition": "JavaScript enabled", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler-view homepage", "condition": "JavaScript disabled", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "Homepage network archive", "condition": "5 second capture", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Compact network summary", "condition": "5 second capture", "findingIds": [ "F09", "F10", "F20", "F26", "F27" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "Homepage performance trace", "condition": "load", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Compact performance trace summary", "condition": "load", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "Baseline heap summary", "condition": "before interaction", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post-menu.json", "caption": "Heap after ten menu cycles", "condition": "repeated interaction", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse full report", "condition": "mobile simulated", "findingIds": [] }, { "type": "other", "path": "evidence/lighthouse-summary.json", "caption": "Compact Lighthouse scores/failures", "condition": "mobile simulated", "findingIds": [ "F09", "F16" ] }, { "type": "other", "path": "evidence/axe-home.json", "caption": "axe-core homepage violations", "condition": "default", "findingIds": [ "F02", "F12", "F13" ] }, { "type": "other", "path": "evidence/lighthouse-selected-audits.json", "caption": "Selected Lighthouse console, platform, image and crawl audits", "condition": "mobile simulated", "findingIds": [ "F15" ] }, { "type": "other", "path": "evidence/404-status.txt", "caption": "Unknown-route HTTP status", "condition": "default", "findingIds": [ "F08", "F24" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security header audit", "condition": "default", "findingIds": [ "F19", "F22" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie security audit", "condition": "default", "findingIds": [ "F16", "F19" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party tracker inventory", "condition": "5 second load", "findingIds": [ "F10", "F20", "F26" ] }, { "type": "other", "path": "evidence/images.json", "caption": "Image delivery audit", "condition": "default", "findingIds": [ "F15" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client secret scan", "condition": "default", "findingIds": [] }, { "type": "other", "path": "evidence/home-probe.json", "caption": "Metadata, semantics, CSS and control probe", "condition": "default", "findingIds": [ "F01", "F03", "F06", "F07", "F09", "F13", "F14", "F17", "F18" ] }, { "type": "other", "path": "evidence/login-probe.json", "caption": "Login labels/autofill/focus probe", "condition": "default", "findingIds": [ "F14", "F21", "F25" ] }, { "type": "other", "path": "evidence/mobile-menu-probe.json", "caption": "Mobile navigation trigger probe", "condition": "360x800", "findingIds": [ "F05", "F07", "F11" ] }, { "type": "other", "path": "evidence/reduced-motion-probe.json", "caption": "Animation inventory under reduced motion", "condition": "prefers-reduced-motion: reduce", "findingIds": [] }, { "type": "other", "path": "evidence/contrast-probe.json", "caption": "Computed styles under increased contrast", "condition": "prefers-contrast: more", "findingIds": [ "F02" ] }, { "type": "other", "path": "evidence/pwa-probe.json", "caption": "Manifest and service-worker probe", "condition": "default", "findingIds": [ "F23" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots.txt including content signals", "condition": "crawler policy", "findingIds": [] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "Public route inventory", "condition": "default", "findingIds": [ "F17" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The dark-condition screenshot is pixel-identical to the light screenshot; the probe reports color-scheme: normal and no color-scheme or prefers-color-scheme CSS.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Emulated reduced-motion matched true and getAnimations() returned an empty list, so no nonessential motion remains active.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "Under prefers-contrast: more, links remain #80073f with no border or non-color cue; the CSS probe found no prefers-contrast or forced-colors rules.", "pathIds": [ "home" ], "artifacts": [ "evidence/contrast-probe.json", "evidence/axe-home.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The stylesheet probe found no view-transition-name or @view-transition rule across the MPA shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "CSS/animation probe found no scroll timeline and layout observations found only native scrolling, with no scroll-linked animation anti-pattern.", "pathIds": [ "home", "stories", "forum" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Representative pages use native page scrolling and links; no custom swipe, drag, pointermove, or scroll-snap interaction fights platform gestures.", "pathIds": [ "home", "stories", "forum" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The listing and detail DOMs are about 6,400 to 8,600 CSS px tall, while the CSS probe found no scroll-state, scroll timeline, or progress treatment.", "pathIds": [ "home" ], "artifacts": [ "evidence/dastans-dom.json", "evidence/detail-dom.json" ], "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative-route recon and rendered/source probes.", "evidence": "No tooltip, popover, anchored menu, or viewport-edge overlay exists on the representative public pages.", "reason": "No tooltip, popover, anchored menu, or viewport-edge overlay exists on the representative public pages.", "pathIds": [ "home" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Visible nav labels are descriptive, real href links, and content links identify their destinations; Lighthouse crawlable anchors passes.", "pathIds": [ "home", "stories", "forum" ], "artifacts": [ "evidence/lighthouse-selected-audits.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Desktop and mobile load screenshots show content immediately with no interstitial, consent wall, or overlay obscuring it.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "At 360px the visible menu trigger is DIV role=navigation, tabindex=-1, has no name, and is only 25x29px. It cannot be operated with the keyboard.", "pathIds": [ "home" ], "artifacts": [ "evidence/mobile-menu-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F05" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Screenshots show a restrained header, one content panel, and compact footer; the primary content dominates below the mobile shell.", "pathIds": [ "home", "login" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Layout probes at 360x800 report 0px horizontal overflow on homepage, stories and forum; screenshots show reflowed content.", "pathIds": [ "home", "stories", "forum" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The complete CSS probe found no container-type or @container rules despite cards, tables, forms and navigation being reused in narrow and wide contexts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/dastans-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The menu trigger measures 25x29px and tabindex=-1; desktop login/register links measure only 29x31px and 47x31px.", "pathIds": [ "home" ], "artifacts": [ "evidence/mobile-menu-probe.json", "evidence/home-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "First viewport states site purpose, links directly to stories/photos/community, and displays clear login/register actions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Public story and forum routes load directly from real hrefs, and the login form presents labelled username/password, CAPTCHA and submit controls without an account-wall detour.", "pathIds": [ "stories", "forum", "login" ], "artifacts": [ "evidence/login-mobile.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "A request to a nonexistent route returned HTTP 404 with an empty response, producing the browser error screen with no site navigation, explanation, search, or recovery link.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/404-mobile.png", "evidence/404-status.txt" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Lighthouse reports LCP 1.67s, CLS 0.00196 and TBT 3.5ms; trace LCP is 456ms with 0ms TBT.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Mobile layout observers report CLS 0 on homepage, stories and forum; Lighthouse CLS is 0.00196.", "pathIds": [ "home", "stories", "forum" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Trace reports no long tasks and 0ms TBT; list observations saw only one 75ms and one 52ms task, with no sustained blockage.", "pathIds": [ "home", "stories", "forum" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "HAR/DOM confirmation shows jQuery 3.5.1, Moment, Underscore, global.js, lp.js and sharer.min.js are classic scripts without async/defer. The homepage still has a good 1.7s Lighthouse LCP, but this delivery pattern increases dependency cost.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-probe.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The HAR reports 350,952 transferred bytes, including 274,030 script bytes; 198,233 bytes are third-party and Google Tag Manager alone is 152,718 bytes.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The mobile probe identifies a nameless DIV with role=navigation and tabindex=-1 as the hamburger trigger.", "pathIds": [ "home" ], "artifacts": [ "evidence/mobile-menu-probe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "axe reports five serious link-in-text-block failures: #80073f links have only 1.21:1 contrast against surrounding #333 text and no underline or other cue.", "pathIds": [ "home" ], "artifacts": [ "evidence/axe-home.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "axe and Lighthouse report no main landmark and no h1; the DOM probes show zero h1/h2 elements on homepage, listing, forum, login and detail samples.", "pathIds": [ "home" ], "artifacts": [ "evidence/axe-home.json", "evidence/home-probe.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Mobile screenshots show 17px Persian text with comfortable line spacing and no clipping or horizontal overflow across content and form templates.", "pathIds": [ "home", "stories", "login" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The menu trigger is 25x29px, login/register links are 29x31px and 47x31px, and the CAPTCHA refresh button is 37x37px. Reflow itself has no horizontal overflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/login-probe.json" ], "findingIds": [ "F14" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Lighthouse errors-in-console audit passes with an empty error list.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-selected-audits.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The images primitive and Lighthouse unsized-images audit both identify /static/images/logo.png as missing width and height.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/lighthouse-selected-audits.json" ], "findingIds": [ "F15" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "Lighthouse best-practices scores 0.77 and inspector-issues fails; its third-party-cookies audit reports six cookies.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/cookies.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "DOM probe confirms a Persian title and descriptive meta description; discoverability confirms both survive in raw HTML.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "All 20 homepage links have hrefs, viewport meta is present, robots allows search indexing, and Lighthouse crawlability passes.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-selected-audits.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The metadata probe found no rel=canonical on the homepage; robots allows search and sitemap.xml lists a large public corpus, so canonical indexing signals are applicable.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/sitemap.xml" ], "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The homepage probe found zero JSON-LD blocks and no Open Graph tags; representative pages are public stories, forums and lists.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json", "evidence/detail-dom.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The headers primitive reports missing CSP and HSTS. All four observed cookies lack Secure; shsess is HttpOnly but SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The tracker probe finds four third-party origins including Google Analytics and an ad-tech origin; HAR attributes 198,233 of 350,952 transferred bytes to third parties.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The login form exposes username/password fields but neither has autocomplete, and the page/source probes show no WebAuthn/passkey affordance.", "pathIds": [ "home" ], "artifacts": [ "evidence/login-probe.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "Headers show no HSTS, CSP, or Permissions-Policy; Referrer-Policy is no-referrer-when-downgrade rather than a stricter origin policy. X-Frame-Options and nosniff are present.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Discoverability reports 100% raw-HTML content coverage, no JS shell, and identical crawler/browser content visibility.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "No transient overlays or asynchronous app shell exists on sampled routes; navigation is server-rendered and stable in screenshots/layout observers.", "pathIds": [ "home", "stories", "forum" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The manifest is valid, but the runtime probe reports no registrations and rendered source calls getRegistrations() then unregister() on every load, so there is no offline fallback.", "pathIds": [ "home" ], "artifacts": [ "evidence/pwa-probe.json", "evidence/home-dom.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The unknown-route test returns a bare HTTP 404 and Chrome’s generic error document rather than a useful site state.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/404-mobile.png", "evidence/404-status.txt" ], "findingIds": [ "F24" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Rendered HTML declares lang=fa and dir=rtl, and mobile screenshots show correct Persian reading order.", "pathIds": [ "home", "stories", "forum" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative-route recon and rendered/source probes.", "evidence": "The sampled public routes expose no dates, currencies, or other user-facing locale-sensitive data that can be meaningfully reformatted.", "reason": "The sampled public routes expose no dates, currencies, or other user-facing locale-sensitive data that can be meaningfully reformatted.", "pathIds": [ "home" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative-route recon and rendered/source probes.", "evidence": "The sampled public routes expose no scheduling or event-time flow where time-zone or DST correctness applies.", "reason": "The sampled public routes expose no scheduling or event-time flow where time-zone or DST correctness applies.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Homepage, login and invalid-submit states show no preselected consent, disguised ads, forced continuity, confirmshaming, or obstructed cancellation.", "pathIds": [ "home", "login" ], "artifacts": [ "evidence/login-invalid.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Empty login submit invokes native required-field validation without clearing entered context; visible labels are retained for username and password.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-invalid.png" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "The username and password inputs have labels but no autocomplete attributes; the CAPTCHA answer is also unlabeled and placeholder-only.", "pathIds": [ "home" ], "artifacts": [ "evidence/login-probe.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative-route recon and rendered/source probes.", "evidence": "No checkout, subscription, pricing, cancellation, or sensitive account-management flow is available in the unauthenticated scope.", "reason": "No checkout, subscription, pricing, cancellation, or sensitive account-management flow is available in the unauthenticated scope.", "pathIds": [ "home" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "The only homepage image is a 5.9KB logo, is not oversized at its display size, and Lighthouse responsive-image audit passes.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "A 508-character homepage makes 21 requests; seven are third-party, including analytics, Cloudflare telemetry and four requests to coverdistilltile.com.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, CDP, Lighthouse, network, or security evidence as cited.", "evidence": "Third-party transfer is 198,233 bytes, 56% of the 350,952-byte homepage, while the visible page has one small logo and short text.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative-route recon and rendered/source probes.", "evidence": "The publisher explicitly blocks major AI agents in robots.txt and exposes no intended agent-facing action surface.", "reason": "The publisher explicitly blocks major AI agents in robots.txt and exposes no intended agent-facing action surface.", "pathIds": [ "home" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative-route recon and rendered/source probes.", "evidence": "The simple content/community experience has no task that plausibly benefits from on-device inference.", "reason": "The simple content/community experience has no task that plausibly benefits from on-device inference.", "pathIds": [ "home" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "After ten menu open/close cycles, heap grew only 128,836 bytes (0.58%) and 734 nodes (0.64%), consistent with bounded warm-up rather than unbounded retention.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-post-menu.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Baseline heap is about 22.0MB and 115,507 nodes, proportionate to the small server-rendered page plus third-party scripts.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Direct active/visual/objective evidence under the cited representative conditions.", "evidence": "Neither heap summary reports Detached* among retained constructors, and the repeated menu interaction produced only sub-1% growth.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-post-menu.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F05" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F10" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12", "F13", "F14" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F15", "F16" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F17", "F18" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F19", "F20", "F21", "F22" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F23", "F24" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F25" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F26", "F27" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "The publisher explicitly blocks major AI agents in robots.txt and exposes no intended agent-facing action surface. The simple content/community experience has no task that plausibly benefits from on-device inference." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Homepage and global shell: purpose, navigation, preferences, metadata, security, performance and no-JS behavior.", "url": "https://shahvani.com/", "conditions": [ "desktop 800x600", "mobile 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "prefers-contrast: more", "JavaScript disabled" ], "result": "issues" }, { "id": "stories", "description": "Story listing archetype representing long, searchable collection pages.", "url": "https://shahvani.com/dastans", "conditions": [ "mobile 360x800", "3 second layout observation" ], "result": "issues" }, { "id": "story-detail", "description": "Long-form content detail archetype selected from sitemap.xml.", "url": "https://shahvani.com/dastan/آتش-عشق-یا-شهوت-۳-", "conditions": [ "mobile 360x800" ], "result": "issues" }, { "id": "forum", "description": "Forum/index archetype representing community navigation and long tabular content.", "url": "https://shahvani.com/forum", "conditions": [ "mobile 360x800", "3 second layout observation" ], "result": "issues" }, { "id": "login", "description": "Primary account form, labels, autofill, keyboard focus and invalid-submit behavior.", "url": "https://shahvani.com/login", "conditions": [ "mobile 360x800", "keyboard focus probe", "empty invalid submit" ], "result": "issues" }, { "id": "not-found", "description": "Unknown-route recovery state.", "url": "https://shahvani.com/this-route-does-not-exist-atomic-audit", "conditions": [ "mobile 360x800" ], "result": "issues" } ], "findings": [ { "id": "F01", "pathId": "home", "url": "https://shahvani.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "The site remains light when the user requests dark mode.", "evidence": "The dark-condition screenshot is pixel-identical to the light screenshot; the probe reports color-scheme: normal and no color-scheme or prefers-color-scheme CSS.", "artifacts": [ "evidence/home-dark.png", "evidence/home-probe.json" ], "suggestedFix": "Declare color-scheme: light dark and provide preference-driven surface, text and control colors using prefers-color-scheme or light-dark().", "effort": "small" }, { "id": "F02", "pathId": "home", "url": "https://shahvani.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "guidanceId": "adapt-scrollbar-to-contrast-preferences", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "High-contrast preferences do not receive an adapted treatment.", "evidence": "Under prefers-contrast: more, links remain #80073f with no border or non-color cue; the CSS probe found no prefers-contrast or forced-colors rules.", "artifacts": [ "evidence/contrast-probe.json", "evidence/axe-home.json" ], "suggestedFix": "Add high-contrast and forced-colors styles, preserve system colors, and ensure links and controls retain non-color affordances.", "effort": "small" }, { "id": "F03", "pathId": "home", "url": "https://shahvani.com/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Cross-document navigation swaps abruptly with no transition treatment.", "evidence": "The stylesheet probe found no view-transition-name or @view-transition rule across the MPA shell.", "artifacts": [ "evidence/home-probe.json" ], "suggestedFix": "Progressively enhance same-origin navigation with @view-transition and restrained directional transitions, while respecting reduced motion.", "effort": "small" }, { "id": "F04", "pathId": "home", "url": "https://shahvani.com/", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "guidanceCategory": "user-experience", "severity": "low", "confidence": "high", "summary": "Long listing and detail pages provide no responsive scroll-state orientation.", "evidence": "The listing and detail DOMs are about 6,400 to 8,600 CSS px tall, while the CSS probe found no scroll-state, scroll timeline, or progress treatment.", "artifacts": [ "evidence/dastans-dom.json", "evidence/detail-dom.json" ], "suggestedFix": "Add a lightweight scroll progress/orientation affordance for long content, preferably declarative and disabled under reduced motion.", "effort": "small" }, { "id": "F05", "pathId": "home", "url": "https://shahvani.com/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience", "severity": "high", "confidence": "high", "summary": "The mobile menu trigger is an unfocusable div rather than a button.", "evidence": "At 360px the visible menu trigger is DIV role=navigation, tabindex=-1, has no name, and is only 25x29px. It cannot be operated with the keyboard.", "artifacts": [ "evidence/mobile-menu-probe.json", "evidence/home-mobile.png" ], "suggestedFix": "Replace the trigger with a named button using aria-expanded and aria-controls; keep the nav landmark on the nav element.", "effort": "small" }, { "id": "F06", "pathId": "home", "url": "https://shahvani.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "css", "severity": "low", "confidence": "high", "summary": "Components rely only on page-level responsive rules.", "evidence": "The complete CSS probe found no container-type or @container rules despite cards, tables, forms and navigation being reused in narrow and wide contexts.", "artifacts": [ "evidence/home-probe.json", "evidence/dastans-mobile.png" ], "suggestedFix": "Adopt container queries for reusable cards, tables and forms where their layout depends on available component width.", "effort": "small" }, { "id": "F07", "pathId": "home", "url": "https://shahvani.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Key mobile controls are too small and one is pointer-only.", "evidence": "The menu trigger measures 25x29px and tabindex=-1; desktop login/register links measure only 29x31px and 47x31px.", "artifacts": [ "evidence/mobile-menu-probe.json", "evidence/home-probe.json" ], "suggestedFix": "Use native controls, provide at least a 44x44 CSS-pixel hit area or sufficient spacing, and retain visible :focus-visible styles.", "effort": "small" }, { "id": "F08", "pathId": "not-found", "url": "https://shahvani.com/this-route-does-not-exist-atomic-audit", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "Unknown routes fall through to Chrome’s generic 404 page.", "evidence": "A request to a nonexistent route returned HTTP 404 with an empty response, producing the browser error screen with no site navigation, explanation, search, or recovery link.", "artifacts": [ "evidence/404-mobile.png", "evidence/404-status.txt" ], "suggestedFix": "Serve a branded 404 document with a concise explanation, home/search actions, and the normal site navigation.", "effort": "small" }, { "id": "F09", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Nonessential legacy scripts are parser-blocking on every page.", "evidence": "HAR/DOM confirmation shows jQuery 3.5.1, Moment, Underscore, global.js, lp.js and sharer.min.js are classic scripts without async/defer. The homepage still has a good 1.7s Lighthouse LCP, but this delivery pattern increases dependency cost.", "artifacts": [ "evidence/home-summary.json", "evidence/home-probe.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Remove unused global libraries; defer remaining noncritical scripts and load route-specific behavior only where needed.", "effort": "small" }, { "id": "F10", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Third-party and legacy JavaScript dominate an otherwise small page.", "evidence": "The HAR reports 350,952 transferred bytes, including 274,030 script bytes; 198,233 bytes are third-party and Google Tag Manager alone is 152,718 bytes.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Audit script usage, remove unnecessary jQuery/Moment/Underscore and tracking code, and conditionally load third parties after user value or consent.", "effort": "small" }, { "id": "F11", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "The mobile navigation trigger has neither a valid control role nor an accessible name.", "evidence": "The mobile probe identifies a nameless DIV with role=navigation and tabindex=-1 as the hamburger trigger.", "artifacts": [ "evidence/mobile-menu-probe.json" ], "suggestedFix": "Use a button with an accessible Persian label, aria-expanded and aria-controls; leave role=navigation on the containing nav.", "effort": "small" }, { "id": "F12", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Inline links are distinguishable only by low-contrast color.", "evidence": "axe reports five serious link-in-text-block failures: #80073f links have only 1.21:1 contrast against surrounding #333 text and no underline or other cue.", "artifacts": [ "evidence/axe-home.json" ], "suggestedFix": "Underline inline links and choose colors meeting text and non-text contrast requirements in all preference modes.", "effort": "small" }, { "id": "F13", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "high", "confidence": "high", "summary": "Pages lack a main landmark and heading hierarchy.", "evidence": "axe and Lighthouse report no main landmark and no h1; the DOM probes show zero h1/h2 elements on homepage, listing, forum, login and detail samples.", "artifacts": [ "evidence/axe-home.json", "evidence/home-probe.json" ], "suggestedFix": "Wrap primary content in main and add one descriptive h1 per template followed by a logical heading hierarchy.", "effort": "small" }, { "id": "F14", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "severity": "medium", "confidence": "high", "summary": "Several important targets fall below a comfortable touch size.", "evidence": "The menu trigger is 25x29px, login/register links are 29x31px and 47x31px, and the CAPTCHA refresh button is 37x37px. Reflow itself has no horizontal overflow.", "artifacts": [ "evidence/home-probe.json", "evidence/login-probe.json" ], "suggestedFix": "Increase target boxes or spacing to at least 44 CSS pixels for primary mobile actions without preventing user zoom.", "effort": "small" }, { "id": "F15", "pathId": "home", "url": "https://shahvani.com/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "html", "severity": "low", "confidence": "high", "summary": "The logo has no intrinsic width and height attributes.", "evidence": "The images primitive and Lighthouse unsized-images audit both identify /static/images/logo.png as missing width and height.", "artifacts": [ "evidence/images.json", "evidence/lighthouse-selected-audits.json" ], "suggestedFix": "Add width and height attributes matching the source aspect ratio and retain responsive CSS sizing.", "effort": "small" }, { "id": "F16", "pathId": "home", "url": "https://shahvani.com/", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Chrome records unresolved inspector issues from the page’s cookie and third-party setup.", "evidence": "Lighthouse best-practices scores 0.77 and inspector-issues fails; its third-party-cookies audit reports six cookies.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/cookies.json" ], "suggestedFix": "Resolve the reported cookie/security issues, update third-party integrations, and verify the DevTools Issues panel is clean.", "effort": "small" }, { "id": "F17", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Public pages omit canonical URLs.", "evidence": "The metadata probe found no rel=canonical on the homepage; robots allows search and sitemap.xml lists a large public corpus, so canonical indexing signals are applicable.", "artifacts": [ "evidence/home-probe.json", "evidence/sitemap.xml" ], "suggestedFix": "Add an absolute self-referencing canonical URL per indexable page and keep it consistent with sitemap URLs.", "effort": "small" }, { "id": "F18", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "html", "severity": "medium", "confidence": "high", "summary": "Content pages have no structured or social-preview metadata.", "evidence": "The homepage probe found zero JSON-LD blocks and no Open Graph tags; representative pages are public stories, forums and lists.", "artifacts": [ "evidence/home-probe.json", "evidence/detail-dom.json" ], "suggestedFix": "Add accurate Open Graph/Twitter metadata and schema.org JSON-LD for the organization and applicable story/article pages.", "effort": "small" }, { "id": "F19", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Session and analytics cookies are sent without Secure and with SameSite=None, and CSP/HSTS are absent.", "evidence": "The headers primitive reports missing CSP and HSTS. All four observed cookies lack Secure; shsess is HttpOnly but SameSite=None.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Set Secure on all HTTPS cookies, use Lax/Strict unless cross-site use is essential, and deploy a restrictive CSP plus HSTS.", "effort": "small" }, { "id": "F20", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "severity": "high", "confidence": "high", "summary": "Tracking starts on load without an evident consent or minimisation boundary.", "evidence": "The tracker probe finds four third-party origins including Google Analytics and an ad-tech origin; HAR attributes 198,233 of 350,952 transferred bytes to third parties.", "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json" ], "suggestedFix": "Minimise analytics, remove opaque ad-tech calls, gate optional tracking on informed consent, and batch only essential events.", "effort": "small" }, { "id": "F21", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "security", "severity": "medium", "confidence": "high", "summary": "The account flow offers password-only authentication with no autofill tokens or passkey path.", "evidence": "The login form exposes username/password fields but neither has autocomplete, and the page/source probes show no WebAuthn/passkey affordance.", "artifacts": [ "evidence/login-probe.json" ], "suggestedFix": "Add username/current-password autocomplete immediately and offer passkey/WebAuthn registration and sign-in as a progressive enhancement.", "effort": "small" }, { "id": "F22", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "severity": "high", "confidence": "high", "summary": "Several browser-enforced defenses are missing or weak.", "evidence": "Headers show no HSTS, CSP, or Permissions-Policy; Referrer-Policy is no-referrer-when-downgrade rather than a stricter origin policy. X-Frame-Options and nosniff are present.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Add HSTS, CSP with frame-ancestors, a least-privilege Permissions-Policy, and strict-origin-when-cross-origin or stricter referrer policy.", "effort": "small" }, { "id": "F23", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-resilient", "principleCheckId": "offline-and-installable", "guidanceId": "flicker-free-client-side-ab-testing", "guidanceCategory": "performance", "severity": "low", "confidence": "high", "summary": "The site advertises an app manifest but deliberately unregisters every service worker.", "evidence": "The manifest is valid, but the runtime probe reports no registrations and rendered source calls getRegistrations() then unregister() on every load, so there is no offline fallback.", "artifacts": [ "evidence/pwa-probe.json", "evidence/home-dom.json" ], "suggestedFix": "Either remove the installability signal or add a scoped service worker with a minimal offline page and resilient cached shell.", "effort": "small" }, { "id": "F24", "pathId": "not-found", "url": "https://shahvani.com/this-route-does-not-exist-atomic-audit", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "user-experience", "severity": "medium", "confidence": "high", "summary": "HTTP failure recovery is not handled by the site.", "evidence": "The unknown-route test returns a bare HTTP 404 and Chrome’s generic error document rather than a useful site state.", "artifacts": [ "evidence/404-mobile.png", "evidence/404-status.txt" ], "suggestedFix": "Return a small server-rendered 404 template with navigation, search, and retry/home recovery.", "effort": "small" }, { "id": "F25", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "guidanceCategory": "forms", "severity": "medium", "confidence": "high", "summary": "Sign-in fields omit autocomplete assistance.", "evidence": "The username and password inputs have labels but no autocomplete attributes; the CAPTCHA answer is also unlabeled and placeholder-only.", "artifacts": [ "evidence/login-probe.json" ], "suggestedFix": "Set autocomplete=username and autocomplete=current-password; give CAPTCHA input a persistent label and avoid obstructing password-manager workflows.", "effort": "small" }, { "id": "F26", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Background analytics and ad-tech work is disproportionate to the simple homepage.", "evidence": "A 508-character homepage makes 21 requests; seven are third-party, including analytics, Cloudflare telemetry and four requests to coverdistilltile.com.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Remove nonessential telemetry/ad-tech and defer remaining analytics until consent or idle after the core experience.", "effort": "small" }, { "id": "F27", "pathId": "home", "url": "https://shahvani.com/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "guidanceCategory": "performance", "severity": "medium", "confidence": "high", "summary": "Third parties consume most transferred bytes without visible user value.", "evidence": "Third-party transfer is 198,233 bytes, 56% of the 350,952-byte homepage, while the visible page has one small logo and short text.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Set a third-party budget, remove opaque origins, and load analytics only when justified and cached/deferred.", "effort": "small" } ], "taskList": [ { "id": "T01", "title": "Replace the mobile menu div with a named, keyboard-operable button and enlarge small targets", "priority": 1, "findingIds": [ "F05", "F07", "F11", "F14" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T02", "title": "Harden cookies and response security policies", "priority": 2, "findingIds": [ "F19", "F22", "F16" ], "guidanceId": "security", "status": "open" }, { "id": "T03", "title": "Remove or consent-gate opaque third parties and trim global legacy scripts", "priority": 3, "findingIds": [ "F09", "F10", "F20", "F26", "F27" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T04", "title": "Add main landmarks, an h1 hierarchy, and robust inline-link cues", "priority": 4, "findingIds": [ "F12", "F13" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T05", "title": "Add dark and high-contrast preference styles", "priority": 5, "findingIds": [ "F01", "F02" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T06", "title": "Add a useful branded 404 recovery page", "priority": 6, "findingIds": [ "F08", "F24" ], "guidanceId": "persistent-toast-notifications", "status": "open" }, { "id": "T07", "title": "Improve sign-in autofill and add a progressive passkey option", "priority": 7, "findingIds": [ "F21", "F25" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T08", "title": "Add canonical, Open Graph and appropriate structured metadata", "priority": 8, "findingIds": [ "F17", "F18" ], "guidanceId": "html", "status": "open" }, { "id": "T09", "title": "Resolve lower-priority layout, asset, motion and installability gaps", "priority": 9, "findingIds": [ "F03", "F04", "F06", "F15", "F23" ], "guidanceId": "html", "status": "open" } ], "budget": { "wallClockSeconds": 900, "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-20T22-12-35-429Z" }