{ "url": "https://www.yahoo.com", "auditedAt": "2026-07-26T13:23:44.187Z", "mode": "report", "status": "completed", "statusDetail": "Atomic coverage complete. The requested US URL geolocated to the Yahoo UK surface; findings apply to the observed UK portal, consent, Finance, Search, News article, and login templates.", "page": { "appType": "hybrid", "framework": "Next.js on the current Yahoo homepage; mixed Yahoo properties use distinct stacks", "notes": "Representative 6-path audit. The consent handoff was assessed as part of the public entry experience. Not covered: authenticated account settings, mail inbox, finance transaction/watchlist mutation, checkout/subscription, video playback, and every regional/template variant." }, "evidenceUsed": [ "Modern Web Guidance 0.0.172 search/retrieve", "raw CDP screenshots", "transition video", "DOM/runtime evaluate probes", "layout metrics and observers", "performance trace", "HAR summary", "discoverability no-JS comparison", "headers", "cookies", "trackers", "images", "secrets scan", "Lighthouse", "heap snapshots", "raw HTTP/static probes" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/article-desktop.png", "caption": "article desktop", "findingIds": [ "F-004" ] }, { "type": "video", "path": "evidence/consent-to-home.mp4", "caption": "consent to home", "findingIds": [ "F-003" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies" }, { "type": "dom", "path": "evidence/dom-probe.json", "caption": "dom probe", "findingIds": [ "F-005", "F-008", "F-013" ] }, { "type": "screenshot", "path": "evidence/error-route.png", "caption": "error route" }, { "type": "other", "path": "evidence/finance-accessibility-motion.json", "caption": "finance accessibility motion", "findingIds": [ "F-002" ] }, { "type": "layout", "path": "evidence/finance-layout-mobile.json", "caption": "finance layout mobile", "condition": "viewport: 360x800", "findingIds": [ "F-007" ] }, { "type": "screenshot", "path": "evidence/finance-light-mobile.png", "caption": "finance light mobile", "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/finance-mobile.png", "caption": "finance mobile", "condition": "viewport: 360x800" }, { "type": "other", "path": "evidence/finance-probe.json", "caption": "finance probe", "findingIds": [ "F-013" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F-011" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline" }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "heap post" }, { "type": "heap", "path": "evidence/heap-scroll-post.heapsnapshot", "caption": "heap scroll post" }, { "type": "screenshot", "path": "evidence/home-dark-reduced.png", "caption": "home dark reduced", "condition": "prefers-color-scheme: dark", "findingIds": [ "F-001" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [ "F-004", "F-005" ] }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "home discoverability crawler" }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "home discoverability rendered" }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "home discoverability", "findingIds": [ "F-010" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom" }, { "type": "layout", "path": "evidence/home-layout-mobile.json", "caption": "home layout mobile", "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "condition": "viewport: 360x800", "findingIds": [ "F-004", "F-008" ] }, { "type": "har-summary", "path": "evidence/home-post-consent-summary.json", "caption": "home post consent summary", "findingIds": [ "F-007", "F-012", "F-015" ] }, { "type": "trace-summary", "path": "evidence/home-post-consent-trace-summary.json", "caption": "home post consent trace summary" }, { "type": "trace", "path": "evidence/home-post-consent-trace.json", "caption": "home post consent trace" }, { "type": "har", "path": "evidence/home-post-consent.har", "caption": "home post consent", "findingIds": [ "F-007", "F-012", "F-015" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary" }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary" }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace" }, { "type": "har", "path": "evidence/home.har", "caption": "home" }, { "type": "other", "path": "evidence/images.json", "caption": "images", "findingIds": [ "F-009" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse", "findingIds": [ "F-007", "F-008", "F-009", "F-010" ] }, { "type": "screenshot", "path": "evidence/login-mobile.png", "caption": "login mobile", "condition": "viewport: 360x800", "findingIds": [ "F-014" ] }, { "type": "other", "path": "evidence/login-probe.json", "caption": "login probe", "findingIds": [ "F-014" ] }, { "type": "other", "path": "evidence/path-status.json", "caption": "path status", "findingIds": [ "F-006" ] }, { "type": "other", "path": "evidence/preferences-probe.json", "caption": "preferences probe", "findingIds": [ "F-001" ] }, { "type": "other", "path": "evidence/raw-html-probe.json", "caption": "raw html probe", "findingIds": [ "F-003", "F-010", "F-013" ] }, { "type": "other", "path": "evidence/response-headers.txt", "caption": "response headers", "findingIds": [ "F-011" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots" }, { "type": "screenshot", "path": "evidence/search-results.png", "caption": "search results", "findingIds": [ "F-006" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets" }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "sitemap" }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [ "F-012" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Dark-emulated screenshot and computed-style probe", "evidence": "Dark preference matched but entry surfaces stayed light.", "pathIds": [ "home" ], "findingIds": [ "F-001" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Reduced-motion Runtime animation probe", "evidence": "Seven 700ms animations remained running under reduce.", "pathIds": [ "home" ], "findingIds": [ "F-002" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Lighthouse contrast audit plus screenshots", "evidence": "Lighthouse contrast passed and controls/text remained visually distinct.", "pathIds": [ "home" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "medium", "method": "Transition video plus static markup probe", "evidence": "Consent-to-home navigation is abrupt and no view-transition declarations were found.", "pathIds": [ "home" ], "findingIds": [ "F-003" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "medium", "method": "Static CSS probe and mobile layout observation", "evidence": "No scroll-linked visual effect or scroll animation was present, so no main-thread imitation was observed.", "pathIds": [ "home" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "medium", "method": "Mobile screenshots and interaction observation", "evidence": "Sampled pages use native scrolling and ordinary controls without custom pointer gesture traps.", "pathIds": [ "home" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "medium", "method": "Mobile screenshots and static feature probe", "evidence": "Long feed chrome has no observed scroll-state response or progress cue.", "pathIds": [ "home" ], "findingIds": [ "F-003" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "medium", "method": "DOM/static feature probe of menus and consent overlay", "evidence": "Positioned UI was present but no anchor-positioning usage/fallback declarations were found.", "pathIds": [ "home" ], "findingIds": [ "F-003" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Screenshots and focus/skip-link probe", "evidence": "Strong headline hierarchy, skip links, market strip, and visible state labels direct attention.", "pathIds": [ "home" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Desktop/mobile/article screenshots", "evidence": "Blocking consent overlay obscures all content on entry.", "pathIds": [ "home" ], "findingIds": [ "F-004" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "DOM probe and overlay screenshot", "evidence": "Visible modal has zero dialog/popover elements.", "pathIds": [ "home" ], "findingIds": [ "F-005" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "medium", "method": "Homepage, article, and Finance screenshots", "evidence": "Once content is visible, Finance uses a content-dense hierarchy with restrained chrome.", "pathIds": [ "home" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Layout at 360x800 on homepage and Finance", "evidence": "Both measured zero horizontal overflow with viewport metadata.", "pathIds": [ "home" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "medium", "method": "Raw/static CSS feature probe across portal templates", "evidence": "No container-query declarations were found for reused portal components.", "pathIds": [ "home" ], "findingIds": [ "F-003" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "pass", "confidence": "high", "method": "Lighthouse target-size plus focus probe", "evidence": "Target-size audit passed; sampled native links/buttons expose browser focus outlines and mobile controls are adequately sized.", "pathIds": [ "home" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "First-viewport screenshots", "evidence": "Homepage/search/Finance communicate purpose with prominent search, headlines, and clear primary controls.", "pathIds": [ "home" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Search journey and HTTP probe", "evidence": "Representative web search returned HTTP 500 instead of results.", "pathIds": [ "home" ], "findingIds": [ "F-006" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Search failure and 404 captures", "evidence": "Search failure states the problem and preserves a retry query; nonexistent path returns a real 404.", "pathIds": [ "home" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Lighthouse and trace/layout summaries", "evidence": "Lighthouse LCP was 4.1s/FCP 3.6s and Finance had two long tasks.", "pathIds": [ "home" ], "findingIds": [ "F-007" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Mobile layout observers", "evidence": "Homepage and Finance observers measured CLS 0 with no recorded shifts.", "pathIds": [ "home" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Finance layout and HAR script totals", "evidence": "Finance recorded 64ms/107ms long tasks and homepage loaded 90 scripts.", "pathIds": [ "home" ], "findingIds": [ "F-007" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Post-consent HAR summary and Lighthouse", "evidence": "4.12MB/278 requests with blocking CSS and cache gaps.", "pathIds": [ "home" ], "findingIds": [ "F-007" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "HAR and Lighthouse diagnostics", "evidence": "2.14MB scripts, third-party dominance, and 53KiB estimated unused CSS.", "pathIds": [ "home" ], "findingIds": [ "F-007" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audits and DOM probe", "evidence": "Visible-label/accessibility-name mismatch and landmark omission were detected.", "pathIds": [ "home" ], "findingIds": [ "F-008" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Lighthouse and screenshots", "evidence": "Automated contrast audit passed and text/controls were legible in sampled states.", "pathIds": [ "home" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "DOM/focus probe and Lighthouse", "evidence": "Consent page has no landmarks and lacks lang; sampled controls include inconsistent focus styling.", "pathIds": [ "home" ], "findingIds": [ "F-008" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Desktop/mobile screenshots", "evidence": "Body and headline text are readable with comfortable sizing and wrapping on sampled views.", "pathIds": [ "home" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Lighthouse viewport audit and 360px screenshot", "evidence": "Viewport restricts scaling and mobile consent requires a forced scroll-to-end step.", "pathIds": [ "home" ], "findingIds": [ "F-008" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse console audit", "evidence": "No browser console errors were logged on the audited entry.", "pathIds": [ "home" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Image primitive, raw HTML, Lighthouse", "evidence": "Doctype/charset are valid, but six entry images lack dimensions and CSS waste is reported.", "pathIds": [ "home" ], "findingIds": [ "F-009" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Lighthouse best-practice diagnostics", "evidence": "Two BFCache blockers were reported.", "pathIds": [ "home" ], "findingIds": [ "F-009" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Discoverability, raw HTML, and Lighthouse", "evidence": "Consent handoff exposes a generic title and no meta description despite good underlying Yahoo metadata.", "pathIds": [ "home" ], "findingIds": [ "F-010" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Raw HTML, robots, Lighthouse, layout", "evidence": "Server HTML has 47 real anchors, viewport metadata, and general crawler access; layout has no overflow.", "pathIds": [ "home" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "medium", "method": "Raw HTTP/static probe and robots", "evidence": "Public homepage returned 200 in recon, has a canonical, robots permits general crawling, and declares a sitemap.", "pathIds": [ "home" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "medium", "method": "Raw static metadata probe and article capture", "evidence": "Homepage contains two JSON-LD blocks and the article template presents a coherent visible entity.", "pathIds": [ "home" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Headers/cookies/secrets primitives", "evidence": "HTTPS and no exposed secrets passed, but key security headers are missing on the final entry response.", "pathIds": [ "home" ], "findingIds": [ "F-011" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "HAR and tracker primitives", "evidence": "194 third-party requests transferred 2.77MB after consent.", "pathIds": [ "home" ], "findingIds": [ "F-012" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "medium", "method": "Login and runtime probes", "evidence": "No permission prompt appeared on load; login source contains WebAuthn capability.", "pathIds": [ "home" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Headers primitive", "evidence": "CSP/frame protection/HSTS/Permissions-Policy were absent on the consent response.", "pathIds": [ "home" ], "findingIds": [ "F-011" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Raw HTML and discoverability primitive", "evidence": "Homepage ships 533KB server HTML with content/links; discoverability reports 100% raw coverage and no JS shell.", "pathIds": [ "home" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "medium", "method": "Responsive screenshots and consent interaction video", "evidence": "Consent choices remain reachable and reject navigation completes; sampled overlays did not clip horizontally.", "pathIds": [ "home" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Site-type judgement and Finance manifest probe", "evidence": "A public news/search portal is not a core offline application; Finance exposes a manifest, but offline installability is not required for the audited core content.", "reason": "A public news/search portal is not a core offline application; Finance exposes a manifest, but offline installability is not required for the audited core content." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Search and 404 state captures", "evidence": "Search failure gives a retry action and the bad content route returns a branded 404 response.", "pathIds": [ "home" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "DOM and raw probes", "evidence": "Underlying Yahoo/Finance use en-GB, but the consent document has an empty lang attribute.", "pathIds": [ "home" ], "findingIds": [ "F-013" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "pass", "confidence": "medium", "method": "Finance mobile rendering", "evidence": "UK market values, percentages, and relative article times are formatted coherently for the en-GB surface.", "pathIds": [ "home" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Content-surface applicability judgement", "evidence": "The sampled landing, article, search, and sign-in surfaces expose no user-scheduled or cross-time-zone event workflow to validate.", "reason": "The sampled landing, article, search, and sign-in surfaces expose no user-scheduled or cross-time-zone event workflow to validate." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Consent screenshots and interaction", "evidence": "Accept all and Reject all have equal visual prominence; manage settings and withdrawal policy are explicit.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "Search error capture", "evidence": "Failure message is neutral, preserves the query, and gives a clear retry action.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Login DOM probe", "evidence": "Username field omits autocomplete=username.", "pathIds": [ "home" ], "findingIds": [ "F-014" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "medium", "method": "Login screenshot/probe", "evidence": "Sampled sign-in entry is concise, labels persistence, offers federated sign-in, and links account creation/terms.", "pathIds": [ "home" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "HAR weight offenders and image probe", "evidence": "A 444KB image and multiple large media assets load in the initial portal graph.", "pathIds": [ "home" ], "findingIds": [ "F-015" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "HAR third-party/background network summary", "evidence": "Initial window loads 278 requests including analytics/ad background calls and 90 scripts.", "pathIds": [ "home" ], "findingIds": [ "F-015" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "HAR transfer totals", "evidence": "2.77MB third-party bytes and 4.12MB total are disproportionate for first view.", "pathIds": [ "home" ], "findingIds": [ "F-015" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Robots policy and site-intent judgement", "evidence": "Yahoo explicitly disallows major AI/search-agent crawlers and exposes no declared agent tool surface; this indicates no intended agent-facing capability.", "reason": "Yahoo explicitly disallows major AI/search-agent crawlers and exposes no declared agent tool surface; this indicates no intended agent-facing capability." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Site-intent and sampled source judgement", "evidence": "No user-facing inference task requiring built-in on-device AI was present in the sampled news/search/account journeys.", "reason": "No user-facing inference task requiring built-in on-device AI was present in the sampled news/search/account journeys." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Baseline/post heap totals after ten scroll cycles", "evidence": "Repeated scrolling changed heap nodes only 72,846→72,861 and self size 3,823,114→3,824,698 bytes, showing no unbounded growth in the sampled interaction.", "pathIds": [ "home" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Heap summary totals", "evidence": "Consent entry footprint was 72,846 nodes and 3.82MB self size, proportionate to the sampled document.", "pathIds": [ "home" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "low", "method": "Before/after heap node totals", "evidence": "Total node population remained effectively flat across ten cycles (+15), with no accumulation signal; constructor-level detached-node tracing was not needed to establish growth absence at this confidence.", "pathIds": [ "home" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F-001", "F-002" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F-003" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F-003" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F-004", "F-005" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F-003" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F-006" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F-007" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F-008" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F-009" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F-010" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F-011", "F-012" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F-013" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F-014" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F-015" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "Yahoo explicitly disallows major AI/search-agent crawlers and exposes no declared agent tool surface; this indicates no intended agent-facing capability. No user-facing inference task requiring built-in on-device AI was present in the sampled news/search/account journeys." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Yahoo UK homepage and consent entry surface, representing the public portal landing page and consent journey.", "url": "https://uk.yahoo.com/", "conditions": [ "desktop 1440x1000", "mobile 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "no JavaScript crawler", "reject-consent interaction" ], "result": "issues" }, { "id": "article", "description": "Representative Yahoo News article/detail template discovered from homepage links.", "url": "https://uk.news.yahoo.com/madeleine-mccann-brother-swims-commonwealth-125746555.html", "conditions": [ "desktop 1440x1000" ], "result": "issues" }, { "id": "finance", "description": "Yahoo Finance listing/content portal, representing a distinct data-rich app-like template.", "url": "https://uk.finance.yahoo.com/", "conditions": [ "mobile 360x800", "prefers-color-scheme: light", "prefers-reduced-motion: reduce", "keyboard focus probe" ], "result": "issues" }, { "id": "search", "description": "Primary Yahoo web-search result journey for the query “web platform”.", "url": "https://search.yahoo.com/search?p=web+platform", "conditions": [ "desktop 1440x1000" ], "result": "issues" }, { "id": "login", "description": "Representative account sign-in entry flow, checked for input assistance and modern authentication signals.", "url": "https://login.yahoo.com/", "conditions": [ "mobile 360x800" ], "result": "issues" }, { "id": "error", "description": "Representative nonexistent Yahoo content route, checked for HTTP/error-state recovery.", "url": "https://uk.yahoo.com/this-route-should-not-exist-audit-404", "conditions": [ "desktop 1440x1000" ], "result": "pass" } ], "findings": [ { "id": "F-001", "confidence": "high", "severity": "medium", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "summary": "The main Yahoo and consent surfaces do not adapt to the requested dark theme.", "evidence": "The dark-emulated homepage screenshot is pixel-identical in its white consent surface to the normal desktop capture; the computed preference probe confirms prefers-color-scheme: dark while body text remains black on a transparent/light surface.", "artifacts": [ "evidence/home-dark-reduced.png", "evidence/preferences-probe.json" ], "suggestedFix": "Declare color-scheme and use preference-driven surface/text tokens, using light-dark() or a prefers-color-scheme fallback so the consent and portal UI retint together.", "effort": "medium", "pathId": "home", "url": "https://uk.yahoo.com/" }, { "id": "F-002", "confidence": "high", "severity": "medium", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Yahoo Finance continues non-essential animation when reduced motion is requested.", "evidence": "The reduced-motion runtime probe found seven running animations, each 700ms, while matchMedia(prefers-reduced-motion: reduce) was true.", "artifacts": [ "evidence/finance-accessibility-motion.json" ], "suggestedFix": "Under prefers-reduced-motion: reduce, remove or shorten non-essential transitions and stop auto-advancing motion while preserving state feedback.", "effort": "small", "pathId": "finance", "url": "https://uk.finance.yahoo.com/" }, { "id": "F-003", "confidence": "high", "severity": "low", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "guidanceCategory": "user-experience", "summary": "Navigation and state changes do not expose modern declarative transition or positioning cues.", "evidence": "The consent-to-home video shows an abrupt full-document swap, and raw/static probes found no view-transition or scroll-timeline declarations and no container-query use on the homepage surface.", "artifacts": [ "evidence/consent-to-home.mp4", "evidence/raw-html-probe.json" ], "suggestedFix": "Progressively enhance route/state changes with View Transitions and use declarative scroll/anchor/container primitives where those components need positional adaptation, retaining fallbacks.", "effort": "medium", "pathId": "home", "url": "https://uk.yahoo.com/" }, { "id": "F-004", "confidence": "high", "severity": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "summary": "A mandatory consent interstitial obscures the entire homepage and every article before content can be used.", "evidence": "Desktop, mobile, and article screenshots all show a modal privacy wall over blurred or dimmed content. On mobile the long copy extends beyond the viewport and requires a “Go to end” control before the choices are visible.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/article-desktop.png" ], "suggestedFix": "Use a compact, content-preserving consent surface with equivalent accept/reject controls immediately visible; reserve blocking modality only where legally necessary and make it fit without a forced scroll.", "effort": "medium", "pathId": "home", "url": "https://uk.yahoo.com/" }, { "id": "F-005", "confidence": "high", "severity": "medium", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "html", "summary": "The blocking consent experience is not represented by the native dialog or popover primitives.", "evidence": "The DOM probe reports dialogs: 0 and popovers: 0 while screenshots show a modal overlay; no landmark exists on the consent document.", "artifacts": [ "evidence/dom-probe.json", "evidence/home-desktop.png" ], "suggestedFix": "Represent the modal flow with , manage initial/return focus, provide an explicit close or equivalent choice, and use popover only for non-modal transient UI.", "effort": "medium", "pathId": "home", "url": "https://uk.yahoo.com/" }, { "id": "F-006", "confidence": "high", "severity": "high", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "forms", "summary": "The primary web-search journey failed instead of returning results.", "evidence": "A direct Yahoo search for “web platform” returned HTTP 500 and the captured result page says “We had temporary problems searching for web pages,” offering only a retry link.", "artifacts": [ "evidence/search-results.png", "evidence/path-status.json" ], "suggestedFix": "Restore reliable search-result delivery and preserve the query with a clear retry path and fallback result source during upstream failures.", "effort": "large", "pathId": "search", "url": "https://search.yahoo.com/search?p=web+platform" }, { "id": "F-007", "confidence": "high", "severity": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "performance", "guidanceCategory": "performance", "summary": "The homepage ships a very heavy, third-party-dominated request graph after consent.", "evidence": "The post-consent HAR recorded 278 requests and 4,120,910 transferred bytes: 90 scripts (2,137,452 bytes), 194 third-party requests (2,772,039 bytes), multiple render-blocking stylesheets, and missing cache headers. Lighthouse on the consent entry measured LCP 4.1s and FCP 3.6s; Finance recorded 64ms and 107ms long tasks.", "artifacts": [ "evidence/home-post-consent-summary.json", "evidence/home-post-consent.har", "evidence/lighthouse.json", "evidence/finance-layout-mobile.json" ], "suggestedFix": "Set a first-load budget; remove or defer low-value ad/analytics bundles, split non-critical code, prioritize the LCP resource, shorten blocking CSS chains, and fix cache policy for stable assets.", "effort": "large", "pathId": "home", "url": "https://uk.yahoo.com/" }, { "id": "F-008", "confidence": "high", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "The consent entry restricts zoom and has accessibility semantics gaps.", "evidence": "Lighthouse reports user-scalable=no or maximum-scale below 5, a visible-label/accessibility-name mismatch, and a missing html lang attribute. The consent DOM has no landmarks; the 360px screenshot requires an extra “Go to end” step to reach choices.", "artifacts": [ "evidence/lighthouse.json", "evidence/dom-probe.json", "evidence/home-mobile.png" ], "suggestedFix": "Allow pinch zoom, add the correct lang and landmarks, align accessible names with visible labels, and ensure all choices remain reachable and understandable at narrow/zoomed layouts.", "effort": "small", "pathId": "home", "url": "https://uk.yahoo.com/" }, { "id": "F-009", "confidence": "high", "severity": "medium", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "html", "summary": "The entry surface has asset sizing and browser lifecycle hygiene problems.", "evidence": "The image primitive found six images without width/height on the consent entry, and Lighthouse reports two reasons preventing back/forward cache restoration plus 53 KiB estimated unused CSS.", "artifacts": [ "evidence/images.json", "evidence/lighthouse.json" ], "suggestedFix": "Give images intrinsic dimensions/aspect-ratio, remove BFCache blockers, and trim or conditionally load unused consent CSS.", "effort": "medium", "pathId": "home", "url": "https://uk.yahoo.com/" }, { "id": "F-010", "confidence": "high", "severity": "medium", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "guidanceCategory": "html", "summary": "The browser-visible consent landing replaces Yahoo’s descriptive metadata with generic, incomplete metadata.", "evidence": "The browser and non-JS discoverability capture resolve to “Your privacy choices”; Lighthouse reports no meta description. The underlying raw Yahoo HTML does contain a descriptive title, description, canonical, and server-rendered links, so the loss is specific to the consent entry.", "artifacts": [ "evidence/home-discoverability.json", "evidence/lighthouse.json", "evidence/raw-html-probe.json" ], "suggestedFix": "Preserve page-specific title, description, canonical, and social metadata through the consent handoff while keeping the consent purpose clear to users.", "effort": "small", "pathId": "home", "url": "https://uk.yahoo.com/" }, { "id": "F-011", "confidence": "high", "severity": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "summary": "The browser-visible entry response lacks important browser-enforced security policies.", "evidence": "The headers primitive found HTTPS but no CSP, HSTS, nosniff, clickjacking protection, Referrer-Policy, or Permissions-Policy on the final consent response. A separate rate-limited Yahoo response exposed nosniff and a weak no-referrer-when-downgrade policy but still no CSP/HSTS evidence.", "artifacts": [ "evidence/headers.json", "evidence/response-headers.txt" ], "suggestedFix": "Deploy a nonce/hash-based CSP including frame-ancestors, HSTS, nosniff, strict-origin-when-cross-origin (or stricter), and a least-privilege Permissions-Policy consistently across Yahoo and consent origins.", "effort": "medium", "pathId": "home", "url": "https://uk.yahoo.com/" }, { "id": "F-012", "confidence": "high", "severity": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "summary": "Third-party advertising and analytics dominate the post-consent network footprint.", "evidence": "The HAR attributes 194 of 278 requests and 2.77 MB of 4.12 MB to third-party origins, including Google Ads/Tag Manager, Taboola, Scorecard Research, and Yahoo analytics calls; some analytics/beacon responses lacked cache headers.", "artifacts": [ "evidence/home-post-consent-summary.json", "evidence/home-post-consent.har", "evidence/trackers.json" ], "suggestedFix": "Audit each vendor against user value, remove redundant measurement, defer non-essential tags until the relevant consent state, batch analytics, and isolate remaining third parties.", "effort": "large", "pathId": "home", "url": "https://uk.yahoo.com/" }, { "id": "F-013", "confidence": "high", "severity": "medium", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "guidanceCategory": "internationalization", "summary": "The consent document omits its language declaration.", "evidence": "The runtime DOM probe reports an empty html lang on “Your privacy choices,” while the underlying Yahoo and Finance documents correctly use en-GB.", "artifacts": [ "evidence/dom-probe.json", "evidence/raw-html-probe.json", "evidence/finance-probe.json" ], "suggestedFix": "Set html lang=en-GB (and dir when needed) on the consent document and verify shared components use logical properties for bidirectional layouts.", "effort": "trivial", "pathId": "home", "url": "https://uk.yahoo.com/" }, { "id": "F-014", "confidence": "high", "severity": "medium", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "guidanceCategory": "forms", "summary": "The Yahoo sign-in username field does not advertise the expected autocomplete token.", "evidence": "The login probe found a text input named username with an empty autocomplete attribute. WebAuthn-related source was present, but no visible passkey choice appeared on the sampled first step.", "artifacts": [ "evidence/login-probe.json", "evidence/login-mobile.png" ], "suggestedFix": "Set autocomplete=username on the identifier field and expose passkey sign-in or conditional mediation clearly when available, retaining password/federated fallbacks.", "effort": "small", "pathId": "login", "url": "https://login.yahoo.com/" }, { "id": "F-015", "confidence": "high", "severity": "high", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "summary": "Media, scripts, and background third-party work are disproportionate for the first portal view.", "evidence": "The post-consent load transferred 4.12 MB, including a 444 KB decorative/highlight image, 2.14 MB of scripts, and 2.77 MB from third parties; analytics and advertising calls continue during the initial observation window.", "artifacts": [ "evidence/home-post-consent-summary.json", "evidence/home-post-consent.har" ], "suggestedFix": "Adopt a page-weight and third-party budget, responsive/modern image delivery, lazy activation for recommendations and ads, and background-fetch prioritization tied to visibility and consent.", "effort": "large", "pathId": "home", "url": "https://uk.yahoo.com/" } ], "taskList": [ { "id": "T-001", "title": "Cut initial request, script, third-party, and media weight behind a strict budget", "priority": 1, "findingIds": [ "F-007", "F-012", "F-015" ], "guidanceId": "performance", "status": "open" }, { "id": "T-002", "title": "Replace the content-blocking consent wall with a compact, semantic, zoom-safe flow", "priority": 2, "findingIds": [ "F-004", "F-005", "F-008", "F-013" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T-003", "title": "Deploy consistent CSP, HSTS, clickjacking, referrer, and permissions policies", "priority": 3, "findingIds": [ "F-011" ], "guidanceId": "security", "status": "open" }, { "id": "T-004", "title": "Restore reliable search result completion with resilient retry behavior", "priority": 4, "findingIds": [ "F-006" ], "guidanceId": "forms", "status": "open" }, { "id": "T-005", "title": "Honor dark and reduced-motion preferences across shared Yahoo surfaces", "priority": 5, "findingIds": [ "F-001", "F-002" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T-006", "title": "Preserve descriptive metadata across the consent handoff", "priority": 6, "findingIds": [ "F-010" ], "guidanceId": "html", "status": "open" }, { "id": "T-007", "title": "Fix image dimensions, BFCache blockers, and username autofill", "priority": 7, "findingIds": [ "F-009", "F-014" ], "guidanceId": "html", "status": "open" }, { "id": "T-008", "title": "Progressively enhance navigation and reusable components with declarative transitions and queries", "priority": 8, "findingIds": [ "F-003" ], "guidanceId": "cross-document-transitions", "status": "open" } ], "budget": { "wallClockSeconds": 1200, "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-26T13-23-44-187Z" }