{ "url": "https://serviziweb2.inps.it", "auditedAt": "2026-07-21T01:45:33.186Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit of the requested host, its resulting courtesy-page redirect, linked recovery homepage, and linked login route. The host exposes no sitemap-backed service archetypes; other INPS content templates and authenticated journeys were not covered.", "page": { "appType": "mpa", "framework": "Adobe Experience Manager (inferred from clientlib paths)", "notes": "The requested host returns HTTP 500 and redirects to a www.inps.it courtesy document returning 404. Lighthouse independently exercised the linked www.inps.it recovery homepage." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "discoverability", "har", "trace", "heap-summary", "headers", "cookies", "trackers", "images", "secrets", "lighthouse", "curl" ], "guidanceConsulted": [ "dark-mode", "accessibility", "css", "directional-navigation-transitions", "position-aware-tooltips", "navigation-drawer", "defer-rendering-heavy-content", "forms", "size-aware-styling", "schedule-tasks-by-priority", "performance", "html", "optimize-preload-priority", "accessible-error-announcement", "security", "privacy", "passkeys", "coordinate-global-events", "support-global-calendar-systems", "translator", "validate-input-after-interaction", "autofill-sign-in-form", "webmcp", "language-model" ], "artifacts": [ { "type": "screenshot", "path": "evidence/desktop.png", "caption": "Target desktop state", "condition": "1440x1000", "findingIds": [ "F1", "F2" ] }, { "type": "screenshot", "path": "evidence/mobile.png", "caption": "Target mobile state", "condition": "360x800", "findingIds": [ "F1", "F2", "F11" ] }, { "type": "screenshot", "path": "evidence/dark.png", "caption": "Target under dark preference", "condition": "prefers-color-scheme: dark", "findingIds": [ "F3" ] }, { "type": "screenshot", "path": "evidence/recovery-home.png", "caption": "Linked recovery homepage", "condition": "1440x1000", "findingIds": [] }, { "type": "screenshot", "path": "evidence/login.png", "caption": "Linked login route resolves to courtesy page", "condition": "1440x1000", "findingIds": [ "F1" ] }, { "type": "dom", "path": "evidence/dom.json", "caption": "Rendered target DOM", "findingIds": [] }, { "type": "other", "path": "evidence/probe.json", "caption": "Metadata, semantics, focus, controls and responsive probe", "findingIds": [ "F2", "F3", "F5", "F8", "F10", "F12" ] }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "Reduced motion probe", "condition": "prefers-reduced-motion: reduce", "findingIds": [] }, { "type": "layout", "path": "evidence/layout-mobile.json", "caption": "Target mobile layout metrics", "condition": "360x800", "findingIds": [ "F11" ] }, { "type": "layout", "path": "evidence/recovery-home-layout-mobile.json", "caption": "Recovery homepage mobile layout metrics", "condition": "360x800", "findingIds": [ "F4" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw HTML versus rendered discoverability", "findingIds": [ "F8" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Browser rendered discoverability view", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler/no-JS discoverability view", "findingIds": [] }, { "type": "har", "path": "evidence/network.har", "caption": "Network archive", "findingIds": [ "F4" ] }, { "type": "har-summary", "path": "evidence/network-summary.json", "caption": "Compact network signals", "findingIds": [ "F1", "F4", "F7", "F8", "F9" ] }, { "type": "trace", "path": "evidence/load-trace.json", "caption": "Performance trace", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/load-trace-summary.json", "caption": "Compact trace timings", "findingIds": [] }, { "type": "heap", "path": "evidence/heap.json", "caption": "Courtesy-page heap summary", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse report for redirected recovery homepage", "findingIds": [ "F4" ] }, { "type": "other", "path": "evidence/lighthouse-summary.json", "caption": "Compact Lighthouse results", "findingIds": [ "F4", "F9" ] }, { "type": "other", "path": "evidence/lighthouse-failures.json", "caption": "Lighthouse failures and diagnostics", "findingIds": [ "F4", "F7", "F9", "F10", "F12" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security header audit", "findingIds": [ "F6" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie audit", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party origin audit", "findingIds": [ "F7" ] }, { "type": "other", "path": "evidence/images.json", "caption": "Image element audit", "findingIds": [] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client secret scan", "findingIds": [] }, { "type": "other", "path": "evidence/resource-dom-confirmation.json", "caption": "Script/style placement and CSS-feature confirmation", "findingIds": [ "F3", "F7", "F11", "F12" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "Fetched robots.txt", "findingIds": [] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "Fetched sitemap response", "findingIds": [ "F8" ] }, { "type": "other", "path": "evidence/guidance/retrieved.md", "caption": "Pinned Modern Web Guidance consulted", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "The dark-condition screenshot remains fully light; computed color-scheme is “normal” and CSS inspection found zero prefers-color-scheme rules.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/dark.png", "evidence/probe.json", "evidence/resource-dom-confirmation.json" ], "findingIds": [ "F3" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "Reduced-motion probe matched the preference and found no active animations; only short control transitions remained.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "Lighthouse found no color-contrast failures and the high-contrast blue/white controls remain visually distinct in screenshots.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "No in-document state swap or working route transition was exposed; ordinary links preserve predictable browser navigation without custom jank.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon-based applicability judgement after inspecting the target and recovery surfaces.", "evidence": "No scroll-linked animation exists on the observed error or recovery surfaces, so there is no implementation to assess.", "reason": "No scroll-linked animation exists on the observed error or recovery surfaces, so there is no implementation to assess.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Recon-based applicability judgement after inspecting the target and recovery surfaces.", "evidence": "No gesture-driven control exists on the observed surfaces.", "reason": "No gesture-driven control exists on the observed surfaces.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "Screenshots and layout evidence show stable navigation chrome with no scroll-linked obstruction on the short error state.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Recon-based applicability judgement after inspecting the target and recovery surfaces.", "evidence": "No tooltip or anchored popover was present on the observed entry and recovery states.", "reason": "No tooltip or anchored popover was present on the observed entry and recovery states.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "The courtesy message provides a clearly underlined home-page recovery link and visible primary navigation.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "The 360×800 screenshot shows the fixed cookie panel occupying almost the entire viewport before interaction. DOM evidence reports no dialog, popover, or details primitive.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/mobile.png", "evidence/desktop.png", "evidence/probe.json" ], "findingIds": [ "F2" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "The 360×800 screenshot shows the fixed cookie panel occupying almost the entire viewport before interaction. DOM evidence reports no dialog, popover, or details primitive.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/mobile.png", "evidence/desktop.png", "evidence/probe.json" ], "findingIds": [ "F2" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "Outside the consent layer, the courtesy state is visually sparse and gives priority to the error explanation and recovery link.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "At 360×800, layout reports scrollWidth=clientWidth=360 and zero horizontal overflow.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "Mobile layout fits without horizontal overflow, but live stylesheet inspection found zero container rules despite a large reused component/navigation system.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/mobile.png", "evidence/resource-dom-confirmation.json", "evidence/layout-mobile.json" ], "findingIds": [ "F11" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "The focus probe found outline-style none and no box shadow on the primary “Pensione e Previdenza” link/button and subsequent navigation links; only skip links had an outline.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/probe.json" ], "findingIds": [ "F5" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "HAR records the target document returning HTTP 500, followed by a redirect to an INPS courtesy document returning HTTP 404. Desktop and mobile screenshots show “Pagina non disponibile”; the linked login route also resolves to the same 404.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/desktop.png", "evidence/mobile.png", "evidence/network-summary.json", "evidence/login.png" ], "findingIds": [ "F1" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "HAR records the target document returning HTTP 500, followed by a redirect to an INPS courtesy document returning HTTP 404. Desktop and mobile screenshots show “Pagina non disponibile”; the linked login route also resolves to the same 404.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/desktop.png", "evidence/mobile.png", "evidence/network-summary.json", "evidence/login.png" ], "findingIds": [ "F1" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "The failure state explicitly says the page is unavailable and supplies a home-page recovery link plus primary navigation.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "Lighthouse measured LCP 8.8 s, FCP 3.6 s, TBT 350 ms, CLS 0.111, 3,364 KiB total weight, 546 KiB unused JS and 118 KiB unused CSS. Mobile layout independently observed CLS 0.104 and a 218 ms long task.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json", "evidence/lighthouse-failures.json", "evidence/recovery-home-layout-mobile.json", "evidence/network.har", "evidence/network-summary.json" ], "findingIds": [ "F4" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "Lighthouse measured LCP 8.8 s, FCP 3.6 s, TBT 350 ms, CLS 0.111, 3,364 KiB total weight, 546 KiB unused JS and 118 KiB unused CSS. Mobile layout independently observed CLS 0.104 and a 218 ms long task.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json", "evidence/lighthouse-failures.json", "evidence/recovery-home-layout-mobile.json", "evidence/network.har", "evidence/network-summary.json" ], "findingIds": [ "F4" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "Lighthouse measured LCP 8.8 s, FCP 3.6 s, TBT 350 ms, CLS 0.111, 3,364 KiB total weight, 546 KiB unused JS and 118 KiB unused CSS. Mobile layout independently observed CLS 0.104 and a 218 ms long task.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json", "evidence/lighthouse-failures.json", "evidence/recovery-home-layout-mobile.json", "evidence/network.har", "evidence/network-summary.json" ], "findingIds": [ "F4" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "Lighthouse measured LCP 8.8 s, FCP 3.6 s, TBT 350 ms, CLS 0.111, 3,364 KiB total weight, 546 KiB unused JS and 118 KiB unused CSS. Mobile layout independently observed CLS 0.104 and a 218 ms long task.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json", "evidence/lighthouse-failures.json", "evidence/recovery-home-layout-mobile.json", "evidence/network.har", "evidence/network-summary.json" ], "findingIds": [ "F4" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "Lighthouse measured LCP 8.8 s, FCP 3.6 s, TBT 350 ms, CLS 0.111, 3,364 KiB total weight, 546 KiB unused JS and 118 KiB unused CSS. Mobile layout independently observed CLS 0.104 and a 218 ms long task.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json", "evidence/lighthouse-failures.json", "evidence/recovery-home-layout-mobile.json", "evidence/network.har", "evidence/network-summary.json" ], "findingIds": [ "F4" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "Lighthouse reports aria-allowed-attr and malformed accessibility-tree failures. On the courtesy page, the visible “Pagina non disponibile” is an h2 with no visible-content h1, while hidden/template headings precede it.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/lighthouse-failures.json", "evidence/probe.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "Lighthouse accessibility found no contrast failures; screenshots show strong blue/white and dark-text/light-surface contrast.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "The focus probe found outline-style none and no box shadow on the primary “Pensione e Previdenza” link/button and subsequent navigation links; only skip links had an outline. Lighthouse reports aria-allowed-attr and malformed accessibility-tree failures. On the courtesy page, the visible “Pagina non disponibile” is an h2 with no visible-content h1, while hidden/template headings precede it.", "pathIds": [ "target-root", "recovery-home" ], "artifacts": [ "evidence/probe.json", "evidence/lighthouse-failures.json" ], "findingIds": [ "F5", "F10" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "Desktop/mobile screenshots show readable type, spacing, and wrapping without clipping.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "Viewport allows scaling, mobile reflow has no horizontal overflow, and Lighthouse reported no target-size failure.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "Lighthouse found a failed Matomo request and Chrome inspector issues; the HAR also contains document 500/404 responses.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/lighthouse-failures.json", "evidence/network-summary.json" ], "findingIds": [ "F9" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "DOM evidence confirms HTML doctype, UTF-8 charset and responsive viewport; the image primitive found no img element defects.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "Lighthouse found a failed Matomo request and Chrome inspector issues; the HAR also contains document 500/404 responses.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/lighthouse-failures.json", "evidence/network-summary.json" ], "findingIds": [ "F9" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "The target returns 500 then serves a 404 courtesy page with no canonical or meta description and robots “noindex, nofollow”; sitemap.xml itself returns an HTML 404. The title identifies a 404 rather than the requested service.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/probe.json", "evidence/network-summary.json", "evidence/sitemap.xml", "evidence/discoverability.json" ], "findingIds": [ "F8" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "robots.txt does not block the public route, anchors have href values, the viewport meta exists, and no horizontal mobile overflow was observed.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "The target returns 500 then serves a 404 courtesy page with no canonical or meta description and robots “noindex, nofollow”; sitemap.xml itself returns an HTML 404. The title identifies a 404 rather than the requested service.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/probe.json", "evidence/network-summary.json", "evidence/sitemap.xml", "evidence/discoverability.json" ], "findingIds": [ "F8" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "The target returns 500 then serves a 404 courtesy page with no canonical or meta description and robots “noindex, nofollow”; sitemap.xml itself returns an HTML 404. The title identifies a 404 rather than the requested service.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/probe.json", "evidence/network-summary.json", "evidence/sitemap.xml", "evidence/discoverability.json" ], "findingIds": [ "F8" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "The headers primitive found no CSP, HSTS, X-Content-Type-Options, clickjacking protection, Referrer-Policy, or Permissions-Policy.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F6" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "HAR/trackers evidence records 33 of 35 requests as third-party relative to the requested host, including Adobe, Helix RUM, Dynatrace/INPS analytics and Azure-hosted chat resources; Lighthouse reports a third-party cookie.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json", "evidence/lighthouse-failures.json", "evidence/resource-dom-confirmation.json" ], "findingIds": [ "F7" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "Probe found no permission requests on load; navigation documents SPID, CIE and CNS identity options rather than an embedded password-only form.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "The headers primitive found no CSP, HSTS, X-Content-Type-Options, clickjacking protection, Referrer-Policy, or Permissions-Policy. HAR/trackers evidence records 33 of 35 requests as third-party relative to the requested host, including Adobe, Helix RUM, Dynatrace/INPS analytics and Azure-hosted chat resources; Lighthouse reports a third-party cookie.", "pathIds": [ "target-root", "recovery-home" ], "artifacts": [ "evidence/headers.json", "evidence/network-summary.json", "evidence/trackers.json", "evidence/lighthouse-failures.json", "evidence/resource-dom-confirmation.json" ], "findingIds": [ "F6", "F7" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "Discoverability evidence found 92% rendered-content coverage in raw HTML and no empty JS shell.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "The observed courtesy-page controls render without clipping and the page remains usable without an SPA runtime.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Recon-based applicability judgement after inspecting the target and recovery surfaces.", "evidence": "This government portal depends on live identity and benefit data; offline completion was judged outside the applicable service model.", "reason": "This government portal depends on live identity and benefit data; offline completion was judged outside the applicable service model.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "HAR records the target document returning HTTP 500, followed by a redirect to an INPS courtesy document returning HTTP 404. Desktop and mobile screenshots show “Pagina non disponibile”; the linked login route also resolves to the same 404.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/desktop.png", "evidence/mobile.png", "evidence/network-summary.json", "evidence/login.png" ], "findingIds": [ "F1" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "The rendered Italian document declares lang=it and follows left-to-right reading order; the narrow layout reflows without directional breakage.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Recon-based applicability judgement after inspecting the target and recovery surfaces.", "evidence": "No date, currency, duration, or calendar value was part of the target error/recovery task.", "reason": "No date, currency, duration, or calendar value was part of the target error/recovery task.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon-based applicability judgement after inspecting the target and recovery surfaces.", "evidence": "No time-based event or timestamp was part of the target error/recovery task.", "reason": "No time-based event or timestamp was part of the target error/recovery task.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "Consent presents Accept, Reject non-technical cookies, Settings, and close controls without confirmshaming; close is described as rejection.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "The only observed failure state uses neutral language and provides clear recovery rather than blaming the user.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "The search field has an explicit accessible name and does not request sensitive personal data.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "HAR records the target document returning HTTP 500, followed by a redirect to an INPS courtesy document returning HTTP 404. Desktop and mobile screenshots show “Pagina non disponibile”; the linked login route also resolves to the same 404.", "pathIds": [ "target-root" ], "artifacts": [ "evidence/desktop.png", "evidence/mobile.png", "evidence/network-summary.json", "evidence/login.png" ], "findingIds": [ "F1" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "Lighthouse measured LCP 8.8 s, FCP 3.6 s, TBT 350 ms, CLS 0.111, 3,364 KiB total weight, 546 KiB unused JS and 118 KiB unused CSS. Mobile layout independently observed CLS 0.104 and a 218 ms long task.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json", "evidence/lighthouse-failures.json", "evidence/recovery-home-layout-mobile.json", "evidence/network.har", "evidence/network-summary.json" ], "findingIds": [ "F4" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "Lighthouse reports 3,364 KiB total, 546 KiB unused JS and 118 KiB unused CSS; the DOM contains 1,144 anchors including 156 hash-only links, while analytics, chat, and several undeferred scripts load immediately.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/lighthouse-failures.json", "evidence/probe.json", "evidence/resource-dom-confirmation.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct CDP/Lighthouse evidence on target and representative recovery paths.", "evidence": "HAR/trackers evidence records 33 of 35 requests as third-party relative to the requested host, including Adobe, Helix RUM, Dynatrace/INPS analytics and Azure-hosted chat resources; Lighthouse reports a third-party cookie. Lighthouse reports 3,364 KiB total, 546 KiB unused JS and 118 KiB unused CSS; the DOM contains 1,144 anchors including 156 hash-only links, while analytics, chat, and several undeferred scripts load immediately.", "pathIds": [ "recovery-home" ], "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json", "evidence/lighthouse-failures.json", "evidence/resource-dom-confirmation.json", "evidence/probe.json" ], "findingIds": [ "F7", "F12" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon-based applicability judgement after inspecting the target and recovery surfaces.", "evidence": "No declared agent-facing scope exists; this emerging capability is an opportunity rather than an obligation.", "reason": "No declared agent-facing scope exists; this emerging capability is an opportunity rather than an obligation.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon-based applicability judgement after inspecting the target and recovery surfaces.", "evidence": "No summarisation or language-model task is exposed on the observed surface.", "reason": "No summarisation or language-model task is exposed on the observed surface.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "not-applicable", "confidence": "high", "method": "Recon-based applicability judgement after inspecting the target and recovery surfaces.", "evidence": "The target resolves to a static courtesy page with no representative repeated interaction to exercise without fabricating one.", "reason": "The target resolves to a static courtesy page with no representative repeated interaction to exercise without fabricating one.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "Heap summary reports 26,735 nodes and 904,384 bytes self size, proportionate to the static courtesy state.", "pathIds": [ "target-root", "recovery-home" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Direct visual and objective inspection across the target courtesy state and linked recovery surface.", "evidence": "The single-state heap summary contains no Detached* constructor among top retained constructors and no active animation/timer behavior was observed.", "pathIds": [ "target-root", "recovery-home" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F3" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "pass" }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "pass" }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F2" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F5" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F1" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F4" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F5" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F9" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F8" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F6", "F7" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F1" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F1" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F4", "F12", "F7" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No declared agent-facing scope exists; this emerging capability is an opportunity rather than an obligation. No summarisation or language-model task is exposed on the observed surface." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "target-root", "description": "Requested service host and resulting courtesy/error state; represents the only directly exposed target entry template.", "url": "https://serviziweb2.inps.it/", "conditions": [ "desktop 1440x1000", "mobile 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "no-JS crawler" ], "result": "issues" }, { "id": "recovery-home", "description": "The linked INPS homepage used as the advertised recovery destination and as a representative public content/navigation surface.", "url": "https://www.inps.it/", "conditions": [ "desktop 1440x1000", "mobile 360x800", "Lighthouse mobile" ], "result": "issues" }, { "id": "login-route", "description": "The prominent Accedi route, exercised to test the account journey; it resolves to the same courtesy 404.", "url": "https://www.inps.it/it/it/auth/login.html", "conditions": [ "desktop 1440x1000" ], "result": "failed" } ], "findings": [ { "id": "F1", "severity": "critical", "confidence": "high", "pathId": "target-root", "url": "https://serviziweb2.inps.it/", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "forms", "summary": "The requested service host does not expose a usable entry experience.", "evidence": "HAR records the target document returning HTTP 500, followed by a redirect to an INPS courtesy document returning HTTP 404. Desktop and mobile screenshots show “Pagina non disponibile”; the linked login route also resolves to the same 404.", "artifacts": [ "evidence/desktop.png", "evidence/mobile.png", "evidence/network-summary.json", "evidence/login.png" ], "suggestedFix": "Restore a successful service entry route, preserve valid deep links, and return a purposeful recovery page only for genuinely missing URLs.", "effort": "large" }, { "id": "F2", "severity": "high", "confidence": "high", "pathId": "target-root", "url": "https://serviziweb2.inps.it/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "forms", "guidanceCategory": "forms", "summary": "The cookie notice obscures most content, especially on mobile.", "evidence": "The 360×800 screenshot shows the fixed cookie panel occupying almost the entire viewport before interaction. DOM evidence reports no dialog, popover, or details primitive.", "artifacts": [ "evidence/mobile.png", "evidence/desktop.png", "evidence/probe.json" ], "suggestedFix": "Use a compact, semantic consent dialog with focus management and equal accept/reject choices; defer nonessential detail to settings.", "effort": "medium" }, { "id": "F3", "severity": "medium", "confidence": "high", "pathId": "target-root", "url": "https://serviziweb2.inps.it/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "summary": "The interface does not honor the user’s dark color preference.", "evidence": "The dark-condition screenshot remains fully light; computed color-scheme is “normal” and CSS inspection found zero prefers-color-scheme rules.", "artifacts": [ "evidence/dark.png", "evidence/probe.json", "evidence/resource-dom-confirmation.json" ], "suggestedFix": "Declare color-scheme and provide preference-driven light/dark surface, text, border, illustration, and browser-chrome colors.", "effort": "medium" }, { "id": "F4", "severity": "high", "confidence": "high", "pathId": "recovery-home", "url": "https://www.inps.it/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "summary": "The recovery homepage is slow, unstable, and ships substantial avoidable code.", "evidence": "Lighthouse measured LCP 8.8 s, FCP 3.6 s, TBT 350 ms, CLS 0.111, 3,364 KiB total weight, 546 KiB unused JS and 118 KiB unused CSS. Mobile layout independently observed CLS 0.104 and a 218 ms long task.", "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json", "evidence/lighthouse-failures.json", "evidence/recovery-home-layout-mobile.json", "evidence/network.har", "evidence/network-summary.json" ], "suggestedFix": "Prioritize the LCP resource, reserve late content space, defer noncritical scripts/styles, remove unused bundles, and split work into sub-50 ms tasks.", "effort": "large" }, { "id": "F5", "severity": "high", "confidence": "high", "pathId": "target-root", "url": "https://serviziweb2.inps.it/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Keyboard focus is not visibly indicated on ordinary navigation controls.", "evidence": "The focus probe found outline-style none and no box shadow on the primary “Pensione e Previdenza” link/button and subsequent navigation links; only skip links had an outline.", "artifacts": [ "evidence/probe.json" ], "suggestedFix": "Add a high-contrast :focus-visible indicator that is not clipped and remains visible across all links, buttons, menus, and consent controls.", "effort": "small" }, { "id": "F6", "severity": "high", "confidence": "high", "pathId": "target-root", "url": "https://serviziweb2.inps.it/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "summary": "The target response omits baseline browser security headers.", "evidence": "The headers primitive found no CSP, HSTS, X-Content-Type-Options, clickjacking protection, Referrer-Policy, or Permissions-Policy.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Set HSTS, nosniff, a restrictive CSP including frame-ancestors, Referrer-Policy, and a least-privilege Permissions-Policy on the entry response and redirects.", "effort": "medium" }, { "id": "F7", "severity": "medium", "confidence": "high", "pathId": "recovery-home", "url": "https://www.inps.it/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "summary": "Analytics and third-party dependencies load before consent on the initial view.", "evidence": "HAR/trackers evidence records 33 of 35 requests as third-party relative to the requested host, including Adobe, Helix RUM, Dynatrace/INPS analytics and Azure-hosted chat resources; Lighthouse reports a third-party cookie.", "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json", "evidence/lighthouse-failures.json", "evidence/resource-dom-confirmation.json" ], "suggestedFix": "Load only essential first-party resources before consent, gate analytics/chat, minimize fields and retention, batch telemetry, and document each processor.", "effort": "large" }, { "id": "F8", "severity": "medium", "confidence": "high", "pathId": "target-root", "url": "https://serviziweb2.inps.it/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "html", "summary": "The public entry URL emits contradictory failure and indexing signals.", "evidence": "The target returns 500 then serves a 404 courtesy page with no canonical or meta description and robots “noindex, nofollow”; sitemap.xml itself returns an HTML 404. The title identifies a 404 rather than the requested service.", "artifacts": [ "evidence/probe.json", "evidence/network-summary.json", "evidence/sitemap.xml", "evidence/discoverability.json" ], "suggestedFix": "Serve a 200 response for the real entry page with a unique title, description, canonical, crawlable links, and a valid sitemap; retain noindex only on actual error documents.", "effort": "medium" }, { "id": "F9", "severity": "medium", "confidence": "high", "pathId": "recovery-home", "url": "https://www.inps.it/", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "guidanceId": "html", "guidanceCategory": "html", "summary": "The page records runtime/network errors and browser inspector issues.", "evidence": "Lighthouse found a failed Matomo request and Chrome inspector issues; the HAR also contains document 500/404 responses.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/lighthouse-failures.json", "evidence/network-summary.json" ], "suggestedFix": "Remove or correct failing telemetry calls, resolve inspector issues, and monitor uncaught exceptions and failed requests in release checks.", "effort": "medium" }, { "id": "F10", "severity": "medium", "confidence": "high", "pathId": "recovery-home", "url": "https://www.inps.it/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Accessibility semantics are incomplete.", "evidence": "Lighthouse reports aria-allowed-attr and malformed accessibility-tree failures. On the courtesy page, the visible “Pagina non disponibile” is an h2 with no visible-content h1, while hidden/template headings precede it.", "artifacts": [ "evidence/lighthouse-failures.json", "evidence/probe.json" ], "suggestedFix": "Correct invalid ARIA, expose one logical h1 for the page, remove hidden duplicate heading structure from the accessibility tree, and validate the final accessibility tree.", "effort": "medium" }, { "id": "F11", "severity": "medium", "confidence": "high", "pathId": "recovery-home", "url": "https://www.inps.it/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "css", "summary": "Responsive behavior relies on global styling rather than component containment.", "evidence": "Mobile layout fits without horizontal overflow, but live stylesheet inspection found zero container rules despite a large reused component/navigation system.", "artifacts": [ "evidence/mobile.png", "evidence/resource-dom-confirmation.json", "evidence/layout-mobile.json" ], "suggestedFix": "Introduce container-type on reusable regions and use @container rules so cards, navigation, search, and consent UI adapt to their allocated space.", "effort": "medium" }, { "id": "F12", "severity": "medium", "confidence": "high", "pathId": "recovery-home", "url": "https://www.inps.it/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "defer-rendering-heavy-content", "guidanceCategory": "performance", "summary": "The public landing experience transfers and executes work disproportionate to its first view.", "evidence": "Lighthouse reports 3,364 KiB total, 546 KiB unused JS and 118 KiB unused CSS; the DOM contains 1,144 anchors including 156 hash-only links, while analytics, chat, and several undeferred scripts load immediately.", "artifacts": [ "evidence/lighthouse-failures.json", "evidence/probe.json", "evidence/resource-dom-confirmation.json" ], "suggestedFix": "Do not serialize hidden mega-menu content or load chat/analytics upfront; lazy-render offscreen navigation and conditionally import feature code.", "effort": "large" } ], "taskList": [ { "id": "T1", "title": "Restore the target service and login routes", "priority": 1, "findingIds": [ "F1" ], "guidanceId": "forms", "status": "open" }, { "id": "T2", "title": "Fix LCP, CLS, long tasks, and unused bundles", "priority": 2, "findingIds": [ "F4" ], "guidanceId": "performance", "status": "open" }, { "id": "T3", "title": "Add baseline security headers and consent-gate telemetry", "priority": 3, "findingIds": [ "F6", "F7" ], "guidanceId": "security", "status": "open" }, { "id": "T4", "title": "Replace the obstructive custom consent overlay", "priority": 4, "findingIds": [ "F2" ], "guidanceId": "forms", "status": "open" }, { "id": "T5", "title": "Restore visible keyboard focus and correct accessibility semantics", "priority": 5, "findingIds": [ "F5", "F10" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T6", "title": "Correct canonical, metadata, status, and sitemap signals", "priority": 6, "findingIds": [ "F8" ], "guidanceId": "html", "status": "open" }, { "id": "T7", "title": "Honor dark mode", "priority": 7, "findingIds": [ "F3" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T8", "title": "Defer hidden navigation, chat, and background work", "priority": 8, "findingIds": [ "F12" ], "guidanceId": "defer-rendering-heavy-content", "status": "open" }, { "id": "T9", "title": "Adopt component-level container responsiveness", "priority": 9, "findingIds": [ "F11" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T10", "title": "Eliminate browser/network errors", "priority": 10, "findingIds": [ "F9" ], "guidanceId": "html", "status": "open" } ], "budget": { "pathCount": 3, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-21T01-45-33-186Z" }