{ "url": "https://remotedesktop.google.com", "auditedAt": "2026-07-21T09:04:42.336Z", "mode": "report", "status": "completed", "statusDetail": "Complete atomic audit of the public landing page and unauthenticated entry paths. Authenticated remote-control sessions were excluded because credentials and peers were not supplied.", "page": { "appType": "hybrid", "framework": "Google server-rendered application shell", "notes": "Public SSR landing page with two authenticated app entry points delegated to Google Accounts." }, "evidenceUsed": [ "screenshot", "dom+computed-css", "layout-metrics", "evaluate-probe", "discoverability", "har", "trace", "lighthouse", "headers", "cookies", "trackers", "images", "secrets", "heap-summary", "HTTP probes" ], "guidanceConsulted": [ "accessibility", "accessible-error-announcement", "adapt-scrollbar-to-contrast-preferences", "agentic-forms", "agentic-javascript-tools", "anchor-positioning-tab-underline", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "animated-select-picker", "apply-webgl-shaders", "autofill-address-form", "autofill-highlight-inputs", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "batch-analytics-events", "brand-consistent-forms", "branded-select-styling", "break-up-long-tasks", "calculate-event-differentials", "calculate-total-foreground-time", "calculate-with-intrinsic-sizes", "capture-location-agnostic-data", "carousel-slide-effects", "carousel-snap-highlights", "child-state-based-styling", "complex-shapes", "component-specific-light-dark-theme", "conditional-async-dependencies", "consistent-cross-document-transitions", "content-based-styling", "coordinate-global-events", "cross-document-transitions", "css-layout", "css", "custom-select-picker-layouts", "customize-scrollbar-color-and-thickness", "dark-mode", "declarative-dialog-popover-control", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "deliver-optimized-decorative-images", "deprioritize-background-fetches", "design-token-reactivity", "detect-initial-visibility-state", "directional-navigation-transitions", "dynamic-sibling-animations", "dynamic-sibling-styling", "efficient-background-processing", "export-html-media-from-canvas", "expose-canvas-content-to-browser-features", "faster-spa-view-transitions", "flicker-free-client-side-ab-testing", "fluid-scaling", "form-fields-automatically-fit-contents", "format-human-readable-durations", "forms", "full-session-analytics", "group-element-transitions", "highlight-text-ranges", "html", "identify-heavy-scripts", "identify-inp-causes", "improve-next-page-load-performance", "improve-text-layout-and-legibility", "individual-transform-properties", "interactions-in-complex-layouts", "interactive-content-in-3d-scenes", "interactive-content-reveal", "interest-triggered-action-previews", "interest-triggered-tooltips", "language-detection", "language-model", "light-dismiss-a-dialog", "manage-recurring-intervals", "model-partial-time-concepts", "move-dom-element-without-losing-state", "navigation-drawer", "optimize-image-priority", "optimize-preload-priority", "optimize-script-priority", "overflow-clipping-control", "parallax-scroll-effects", "passkey-authentication", "passkey-conditional-create", "passkey-management", "passkey-reauthentication", "passkey-registration", "passkeys", "performance", "persistent-app-tours", "persistent-toast-notifications", "persistent-top-layer-ui", "physics-based-easing", "platform-controls-dismiss-dialog", "position-aware-tooltips", "precise-text-alignment", "prevent-text-wrapping", "privacy", "pull-to-reveal", "reduce-style-repetition", "required-field-feedback", "resilient-context-menus-and-nested-dropdowns", "resolution-optimized-pseudo-elements", "rich-media-picker", "same-document-transitions", "schedule-tasks-by-priority", "scroll-entry-exit-effects", "scroll-position-aware-elements", "scroll-progress-indicator", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "scrollability-affordance-hints", "scrollytelling", "search-hidden-content", "security", "select-menu-interaction", "sequence-distributed-events", "shaped-cutouts", "shrinking-header-on-scroll", "size-aware-styling", "soft-edge-content-fade", "stabilize-reactive-state", "stack-drill-down", "style-parent-with-has", "summarizer", "support-global-calendar-systems", "swipe-to-remove", "translator", "validate-input-after-interaction", "visually-stable-font-fallbacks", "visually-stable-mixed-fonts", "visually-texture-content", "webmcp" ], "artifacts": [ { "type": "dom", "path": "evidence/dom-home.json", "caption": "Rendered DOM, CSS, and selected computed styles", "findingIds": [ "F05", "F06", "F10" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Landing page at desktop viewport", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Landing page at 360x800", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Landing under dark preference", "condition": "prefers-color-scheme: dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-high-contrast.png", "caption": "Landing under increased contrast", "condition": "prefers-contrast: more", "findingIds": [] }, { "type": "layout", "path": "evidence/layout-mobile.json", "caption": "Mobile overflow, CLS, and long-task observations", "condition": "viewport: 360x800", "findingIds": [ "F07" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw HTML versus rendered content comparison", "findingIds": [ "F09" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Browser-rendered discoverability view", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "JavaScript-disabled crawler view", "findingIds": [] }, { "type": "har", "path": "evidence/network.har", "caption": "Network archive for landing load", "findingIds": [] }, { "type": "har-summary", "path": "evidence/network-summary.json", "caption": "Compact network totals and third-party breakdown", "findingIds": [ "F04", "F14" ] }, { "type": "trace", "path": "evidence/performance-trace.json", "caption": "DevTools load trace", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/performance-trace-summary.json", "caption": "LCP and main-thread trace summary", "findingIds": [ "F03" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse performance, accessibility, best-practices, and SEO", "findingIds": [ "F03", "F04", "F06", "F08", "F09", "F14" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security response-header inspection", "findingIds": [ "F11", "F12" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie security inspection", "findingIds": [ "F11" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party and known-tracker inventory", "findingIds": [ "F14" ] }, { "type": "other", "path": "evidence/images.json", "caption": "Rendered image inventory", "findingIds": [ "F07" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client-visible key scan; matches judged public Google API configuration", "findingIds": [] }, { "type": "other", "path": "evidence/focus-probe.json", "caption": "Computed focus indicator probe", "findingIds": [ "F02", "F05" ] }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "Animations under reduced-motion preference", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "Readable V8 heap summary", "findingIds": [] }, { "type": "screenshot", "path": "evidence/access-signin.png", "caption": "Access CTA destination: Google Account sign-in", "findingIds": [] }, { "type": "screenshot", "path": "evidence/support-signin.png", "caption": "Support CTA destination: Google Account sign-in", "findingIds": [] }, { "type": "other", "path": "evidence/not-found.json", "caption": "Same-origin 404 content and links", "findingIds": [ "F13" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots.txt response body", "findingIds": [] }, { "type": "other", "path": "evidence/sitemap-headers.txt", "caption": "sitemap.xml 404 response headers", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "Desktop screenshots under default and prefers-color-scheme: dark are pixel-identical, while computed CSS reports body color-scheme: dark. The site provides a usable dark surface but imposes it rather than adapting to the preference.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dark.png" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Emulated reduced-motion evaluate probe", "evidence": "prefers-reduced-motion: reduce was active and document.getAnimations() returned zero active animations.", "artifacts": [ "evidence/reduced-motion.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Emulated high-contrast screenshot review", "evidence": "The prefers-contrast: more screenshot keeps all text, borders, and controls visible at the same clear contrast.", "artifacts": [ "evidence/home-high-contrast.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "The unauthenticated page has no same-document state changes; both actions immediately leave for cross-origin Google Accounts, so there is no representative route transition to animate.", "reason": "The unauthenticated page has no same-document state changes; both actions immediately leave for cross-origin Google Accounts, so there is no representative route transition to animate." }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "CSS and layout observer inspection", "evidence": "CSS inspection found no scroll timelines and the mobile layout recorded no long tasks; the page does not implement scroll-linked effects.", "artifacts": [ "evidence/dom-home.json", "evidence/layout-mobile.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "No carousel, swipe, pull, draggable, or gesture-driven control exists on the audited landing surface.", "reason": "No carousel, swipe, pull, draggable, or gesture-driven control exists on the audited landing surface." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "The short landing page has no long-form reading state or scrolling chrome that needs position feedback.", "reason": "The short landing page has no long-form reading state or scrolling chrome that needs position feedback." }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "No tooltip, menu, popover, or other anchored overlay exists on the audited landing surface.", "reason": "No tooltip, menu, popover, or other anchored overlay exists on the audited landing surface." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Desktop and mobile screenshot comparison", "evidence": "Desktop places the two labelled actions in the header; mobile repeats them in a fixed bottom bar, preserving a clear next step.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Load screenshot and overlay DOM review", "evidence": "Load screenshots show the product explanation and actions immediately, with no consent wall, banner, modal, or interstitial.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "No overlay, disclosure, picker, or rich control is present on this simple landing surface.", "reason": "No overlay, disclosure, picker, or rich control is present on this simple landing surface." }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Visual hierarchy review", "evidence": "The first viewport is dominated by the purpose statement, illustration, and two task cards; chrome is limited to branding and two actions.", "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Mobile layout metrics and screenshot", "evidence": "At 360x800, layout reported scrollWidth 360, clientWidth 360, horizontalOverflowPx 0, and viewport meta present.", "artifacts": [ "evidence/layout-mobile.json", "evidence/home-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "pass", "confidence": "high", "method": "Cross-viewport component comparison", "evidence": "Desktop uses a split hero and top actions while mobile stacks the hero and pins actions at the bottom; reused cards fit their available width without overflow.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "The focus probe programmatically focused both Access my computer and Share my screen links and read outline: none and box-shadow: none for each.", "artifacts": [ "evidence/focus-probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "First-viewport task hierarchy review", "evidence": "The first viewport plainly explains remote access and screen sharing and exposes matching Access my computer and Share my screen actions.", "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "Primary CTA navigation walkthrough", "evidence": "Both primary actions were exercised and reached the expected Google Account sign-in form with an email field and Next action; authenticated remote sessions were excluded because no credentials were supplied.", "artifacts": [ "evidence/access-signin.png", "evidence/support-signin.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Sign-in state screenshot review", "evidence": "The landing and Google Account redirect both render stable, explicit states; sign-in offers Forgot email, Create account, Guest mode help, and Next.", "artifacts": [ "evidence/access-signin.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "medium", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "Lighthouse measured LCP at 4.2 s (performance 0.85), although the unthrottled CDP trace measured 1.48 s. This indicates a slow-network/device risk rather than a universal failure.", "artifacts": [ "evidence/lighthouse.json", "evidence/performance-trace-summary.json" ], "findingIds": [ "F03" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Layout-shift observer", "evidence": "The 4-second mobile layout observer measured CLS 0 with no layout-shift entries.", "artifacts": [ "evidence/layout-mobile.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "CDP trace and Lighthouse", "evidence": "Trace recorded one 132.96 ms long task and 82.96 ms total blocking time; Lighthouse TBT was 120 ms, within the good range.", "artifacts": [ "evidence/performance-trace-summary.json", "evidence/lighthouse.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "pass", "confidence": "high", "method": "HAR summary review", "evidence": "HAR recorded 21 successful requests, no redirects, HTTP errors, missing cache headers, uncompressed text, or render-blocking candidates.", "artifacts": [ "evidence/network-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "Lighthouse estimates 201 KiB unused JavaScript and 11 KiB unused CSS. The HAR transfers 279,079 bytes of script for a simple two-action landing page.", "artifacts": [ "evidence/lighthouse.json", "evidence/network-summary.json" ], "findingIds": [ "F04" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "pass", "confidence": "high", "method": "Lighthouse accessibility and visual control review", "evidence": "Lighthouse accessibility found no accessible-name, role, label, or image-alt audit failures; the visible actions have descriptive text.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Lighthouse contrast audit and screenshot", "evidence": "Lighthouse reported no color-contrast failures and default/high-contrast screenshots keep text and borders legible.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-high-contrast.png" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "Rendered DOM inspection found no h1 and no main landmark, while the focus probe found no visible outline on four primary action links.", "artifacts": [ "evidence/dom-home.json", "evidence/focus-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Responsive screenshot review", "evidence": "Desktop and 360px screenshots show unclipped, generously spaced text with readable line lengths and no horizontal overflow.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "Lighthouse failed the meta-viewport accessibility audit; the DOM contains maximum-scale=1 and user-scalable=no.", "artifacts": [ "evidence/lighthouse.json", "evidence/dom-home.json" ], "findingIds": [ "F06" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse runtime audits", "evidence": "Lighthouse best-practices scored 1.0 and reported no console-error or uncaught-exception failure.", "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "The images primitive found two SVG logo instances without width and height attributes. No CLS occurred in this capture, but intrinsic dimensions should reserve space deterministically.", "artifacts": [ "evidence/images.json", "evidence/layout-mobile.json" ], "findingIds": [ "F07" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "Lighthouse reports three BFCache blockers, including Cache-Control: no-store on the main resource and a modified HTTP-only cookie.", "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "The discoverability primitive and Lighthouse both report that the title survives raw HTML but meta description is absent.", "artifacts": [ "evidence/discoverability.json", "evidence/lighthouse.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "DOM and robots inspection", "evidence": "The page has real anchor actions, a viewport meta, descriptive link text, and robots.txt returns 200 without blocking rules.", "artifacts": [ "evidence/dom-home.json", "evidence/robots.txt" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "high", "method": "HTTP, canonical, robots, and sitemap inspection", "evidence": "The landing response is 200, canonical points to https://remotedesktop.google.com/, no noindex is present, and robots.txt is non-blocking; sitemap.xml is absent but unnecessary for this single public entry page.", "artifacts": [ "evidence/dom-home.json", "evidence/robots.txt", "evidence/sitemap-headers.txt" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "Rendered DOM inspection found no Open Graph or JSON-LD metadata for this public product landing page.", "artifacts": [ "evidence/dom-home.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "The headers primitive found no HSTS and a CSP allowlist containing unsafe-inline/unsafe-eval. Cookies included NID without Secure and both cookies used SameSite=None.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "pass", "confidence": "high", "method": "Tracker and HAR review", "evidence": "Tracker inspection found no known tracker domain; HAR shows four Google-owned third-party origins and only 99 content bytes of fetch/XHR traffic, with no evidence of form data collection on load.", "artifacts": [ "evidence/trackers.json", "evidence/network-summary.json" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "high", "method": "Load and authentication navigation review", "evidence": "No permission prompt appears on load; both authentication-required actions redirect in context to the Google Account sign-in flow rather than collecting a password on this origin.", "artifacts": [ "evidence/home-desktop.png", "evidence/access-signin.png" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "The headers primitive found no Referrer-Policy; Permissions-Policy only declares broad client-hint access and does not constrain sensitive browser capabilities.", "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "No-JavaScript discoverability comparison", "evidence": "Discoverability comparison measured 100% raw-HTML content coverage, isJsShell false, and matching rendered/crawler screenshots.", "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Runtime state and layout review", "evidence": "No overlays or async content shifts occur on the landing page; layout remained stable with CLS 0 and all CTA navigation resolved predictably.", "artifacts": [ "evidence/layout-mobile.json", "evidence/access-signin.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "Remote desktop sessions intrinsically require a live network and authenticated peer; offline operation is not a meaningful core capability, though a manifest is linked.", "reason": "Remote desktop sessions intrinsically require a live network and authenticated peer; offline operation is not a meaningful core capability, though a manifest is linked." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "The exercised /does-not-exist route renders only Google’s generic 404 text and an unlabeled logo link, with no Home, Access, or Support recovery action.", "artifacts": [ "evidence/not-found.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "DOM, CSS, and localization bundle inspection", "evidence": "The document declares lang=en-US; delivered bundles are locale-specific (en_US), and screenshots show no direction-sensitive task UI beyond text and cards.", "artifacts": [ "evidence/dom-home.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "The audited landing surface renders no dates, numbers, currencies, durations, addresses, or locale-sensitive input.", "reason": "The audited landing surface renders no dates, numbers, currencies, durations, addresses, or locale-sensitive input." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "The audited landing surface represents no events, recurring intervals, times, or time zones.", "reason": "The audited landing surface represents no events, recurring intervals, times, or time zones." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Visual and interaction review", "evidence": "The page presents two equally styled task choices, no consent wall, upsell, hidden price, urgency, or continuity mechanism.", "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "No form is hosted on the audited origin; the exercised sign-in form belongs to accounts.google.com and is outside this site audit.", "reason": "No form is hosted on the audited origin; the exercised sign-in form belongs to accounts.google.com and is outside this site audit." }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "No input fields are hosted on the audited origin.", "reason": "No input fields are hosted on the audited origin." }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "high", "method": "Account entry-flow walkthrough", "evidence": "There is no commercial flow; account-required actions clearly redirect to the standard Google Account sign-in page before any commitment or remote session.", "artifacts": [ "evidence/access-signin.png", "evidence/support-signin.png" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "pass", "confidence": "high", "method": "Image inventory", "evidence": "Images primitive found only two tiny SVG logo instances, no oversized raster images, no legacy formats, and no missing responsive source issue.", "artifacts": [ "evidence/images.json" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "pass", "confidence": "high", "method": "Trace, HAR, and animation review", "evidence": "Trace showed only one long task and HAR recorded four tiny fetch/XHR responses totaling 99 content bytes; no autoplay media or idle animation runs.", "artifacts": [ "evidence/performance-trace-summary.json", "evidence/network-summary.json", "evidence/reduced-motion.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct evidence review against pinned Modern Web Guidance", "evidence": "The HAR attributes 198,704 of 509,107 transferred bytes to third-party origins, while Lighthouse estimates 201 KiB of unused JavaScript. No known tracker was detected.", "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json", "evidence/lighthouse.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "This security-sensitive remote-control service does not expose a safe unauthenticated agent action surface; scraping or delegating remote-control actions would be inappropriate without an explicit trusted capability model.", "reason": "This security-sensitive remote-control service does not expose a safe unauthenticated agent action surface; scraping or delegating remote-control actions would be inappropriate without an explicit trusted capability model." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "The landing and remote-connection task has no summarisation, generation, or language-model use case where on-device inference would improve the audited surface.", "reason": "The landing and remote-connection task has no summarisation, generation, or language-model use case where on-device inference would improve the audited surface." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "not-applicable", "confidence": "high", "method": "DOM and visual applicability review", "evidence": "The unauthenticated landing page has no same-document modal, route cycle, feed, editor, or other representative interaction to repeat without leaving for cross-origin authentication.", "reason": "The unauthenticated landing page has no same-document modal, route cycle, feed, editor, or other representative interaction to repeat without leaving for cross-origin authentication." }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "V8 heap summary", "evidence": "Heap summary measured 179,022 nodes and 7,831,773 bytes total self size, proportionate to this Google application shell and without a dominant page-data constructor.", "artifacts": [ "evidence/heap-baseline.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Heap constructor and animation review", "evidence": "Single-state heap summary contains no Detached* constructor among top constructors and the static page exposes no repeating interaction or timer-driven animation.", "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/reduced-motion.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "pass" }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "pass" }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "pass" }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass" }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F03", "F04" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F05", "F06" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F10" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F13" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "pass" }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F14" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "The audited service has no applicable agent-facing capability or on-device inference surface." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "landing", "description": "Public landing template and primary choice surface; audited at desktop, mobile, preference, crawler, performance, security, and memory conditions.", "url": "https://remotedesktop.google.com/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-contrast: more", "prefers-reduced-motion: reduce", "JavaScript disabled" ], "result": "issues" }, { "id": "access-entry", "description": "Access my computer CTA through the expected Google Account authentication entry; authenticated device list/session excluded because no credentials were supplied.", "url": "https://remotedesktop.google.com/access", "conditions": [ "signed out" ], "result": "pass" }, { "id": "support-entry", "description": "Share my screen CTA through the expected Google Account authentication entry; authenticated support-code flow excluded because no credentials were supplied.", "url": "https://remotedesktop.google.com/support", "conditions": [ "signed out" ], "result": "pass" }, { "id": "not-found", "description": "Representative same-origin HTTP/error recovery state.", "url": "https://remotedesktop.google.com/does-not-exist", "conditions": [ "404" ], "result": "issues" } ], "findings": [ { "id": "F01", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "medium", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "confidence": "high", "summary": "Theme does not follow the system light/dark preference", "evidence": "Desktop screenshots under default and prefers-color-scheme: dark are pixel-identical, while computed CSS reports body color-scheme: dark. The site provides a usable dark surface but imposes it rather than adapting to the preference.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dark.png" ], "suggestedFix": "Declare light and dark palettes and select them with color-scheme, prefers-color-scheme, or light-dark().", "effort": "medium" }, { "id": "F02", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "confidence": "high", "summary": "Primary links have no visible keyboard focus indicator", "evidence": "The focus probe programmatically focused both Access my computer and Share my screen links and read outline: none and box-shadow: none for each.", "artifacts": [ "evidence/focus-probe.json" ], "suggestedFix": "Add a strong :focus-visible indicator with sufficient contrast while retaining the browser outline as a fallback.", "effort": "small" }, { "id": "F03", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "medium", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "confidence": "medium", "summary": "Cold-load LCP misses the good threshold under Lighthouse throttling", "evidence": "Lighthouse measured LCP at 4.2 s (performance 0.85), although the unthrottled CDP trace measured 1.48 s. This indicates a slow-network/device risk rather than a universal failure.", "artifacts": [ "evidence/lighthouse.json", "evidence/performance-trace-summary.json" ], "suggestedFix": "Profile the LCP element and shorten its critical path; prioritise the hero asset and defer non-critical bundles.", "effort": "medium" }, { "id": "F04", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "medium", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "confidence": "high", "summary": "The landing page ships substantial unused JavaScript and CSS", "evidence": "Lighthouse estimates 201 KiB unused JavaScript and 11 KiB unused CSS. The HAR transfers 279,079 bytes of script for a simple two-action landing page.", "artifacts": [ "evidence/lighthouse.json", "evidence/network-summary.json" ], "suggestedFix": "Split route-specific code, defer feedback/account chrome until requested, and remove landing-page CSS not used above the fold.", "effort": "medium" }, { "id": "F05", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "confidence": "high", "summary": "The page lacks semantic heading/landmark structure and visible focus", "evidence": "Rendered DOM inspection found no h1 and no main landmark, while the focus probe found no visible outline on four primary action links.", "artifacts": [ "evidence/dom-home.json", "evidence/focus-probe.json" ], "suggestedFix": "Mark the hero statement as an h1, wrap primary content in main, and add a clear :focus-visible treatment.", "effort": "small" }, { "id": "F06", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "high", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "accessibility", "confidence": "high", "summary": "Mobile viewport configuration disables pinch zoom", "evidence": "Lighthouse failed the meta-viewport accessibility audit; the DOM contains maximum-scale=1 and user-scalable=no.", "artifacts": [ "evidence/lighthouse.json", "evidence/dom-home.json" ], "suggestedFix": "Remove maximum-scale=1 and user-scalable=no so users can zoom while preserving the responsive width=device-width setting.", "effort": "trivial" }, { "id": "F07", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "low", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "html", "confidence": "high", "summary": "Brand images omit intrinsic dimensions", "evidence": "The images primitive found two SVG logo instances without width and height attributes. No CLS occurred in this capture, but intrinsic dimensions should reserve space deterministically.", "artifacts": [ "evidence/images.json", "evidence/layout-mobile.json" ], "suggestedFix": "Add width and height matching each SVG aspect ratio, or reserve equivalent space with aspect-ratio.", "effort": "trivial" }, { "id": "F08", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "low", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "html", "confidence": "high", "summary": "The page is ineligible for the back/forward cache", "evidence": "Lighthouse reports three BFCache blockers, including Cache-Control: no-store on the main resource and a modified HTTP-only cookie.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Where security requirements permit, avoid no-store for the public landing document and isolate state-changing cookie work from it.", "effort": "medium" }, { "id": "F09", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "medium", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "page title meta description seo", "guidanceCategory": "seo", "confidence": "high", "summary": "The public landing page has no meta description", "evidence": "The discoverability primitive and Lighthouse both report that the title survives raw HTML but meta description is absent.", "artifacts": [ "evidence/discoverability.json", "evidence/lighthouse.json" ], "suggestedFix": "Add a concise, page-specific meta description explaining remote access and screen sharing.", "effort": "trivial" }, { "id": "F10", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "low", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "structured data schema.org json-ld open graph social preview metadata", "guidanceCategory": "seo", "confidence": "high", "summary": "Share-preview and structured entity metadata are absent", "evidence": "Rendered DOM inspection found no Open Graph or JSON-LD metadata for this public product landing page.", "artifacts": [ "evidence/dom-home.json" ], "suggestedFix": "Add accurate Open Graph metadata and appropriate SoftwareApplication or WebApplication JSON-LD that matches visible content.", "effort": "small" }, { "id": "F11", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "confidence": "high", "summary": "Security header and cookie posture has avoidable weaknesses", "evidence": "The headers primitive found no HSTS and a CSP allowlist containing unsafe-inline/unsafe-eval. Cookies included NID without Secure and both cookies used SameSite=None.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Enable HSTS, remove unsafe-eval/unsafe-inline from enforceable CSP paths, and set Secure plus the narrowest viable SameSite policy on cookies.", "effort": "medium" }, { "id": "F12", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "medium", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "confidence": "high", "summary": "Referrer policy is absent and Permissions-Policy is overly permissive", "evidence": "The headers primitive found no Referrer-Policy; Permissions-Policy only declares broad client-hint access and does not constrain sensitive browser capabilities.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Set a privacy-preserving Referrer-Policy and an explicit least-privilege Permissions-Policy while retaining frame protection and Trusted Types.", "effort": "small" }, { "id": "F13", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "medium", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "user-experience", "confidence": "high", "summary": "The same-origin 404 page provides no recovery path", "evidence": "The exercised /does-not-exist route renders only Google’s generic 404 text and an unlabeled logo link, with no Home, Access, or Support recovery action.", "artifacts": [ "evidence/not-found.json" ], "suggestedFix": "Serve a product-specific 404 with clear links back to the landing page and the two primary tasks.", "effort": "small" }, { "id": "F14", "pathId": "landing", "url": "https://remotedesktop.google.com/", "severity": "low", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "confidence": "high", "summary": "Third-party and unused script cost is high for the landing page’s scope", "evidence": "The HAR attributes 198,704 of 509,107 transferred bytes to third-party origins, while Lighthouse estimates 201 KiB of unused JavaScript. No known tracker was detected.", "artifacts": [ "evidence/network-summary.json", "evidence/trackers.json", "evidence/lighthouse.json" ], "suggestedFix": "Defer account, feedback, and logging modules until needed and keep the unauthenticated landing payload focused on its two actions.", "effort": "medium" } ], "taskList": [ { "id": "T01", "title": "Restore zoom, semantic structure, and visible keyboard focus", "priority": 1, "findingIds": [ "F02", "F05", "F06" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T02", "title": "Harden CSP, transport, cookie, referrer, and permissions policies", "priority": 2, "findingIds": [ "F11", "F12" ], "guidanceId": "security", "status": "open" }, { "id": "T03", "title": "Cut unused landing-page code and improve cold-load LCP", "priority": 3, "findingIds": [ "F03", "F04", "F14" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T04", "title": "Add meta description and share/entity metadata", "priority": 4, "findingIds": [ "F09", "F10" ], "guidanceId": "html", "status": "open" }, { "id": "T05", "title": "Provide product-specific 404 recovery", "priority": 5, "findingIds": [ "F13" ], "guidanceId": "persistent-toast-notifications", "status": "open" }, { "id": "T06", "title": "Follow the user color-scheme preference", "priority": 6, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T07", "title": "Add intrinsic image dimensions and revisit BFCache eligibility", "priority": 7, "findingIds": [ "F07", "F08" ], "guidanceId": "html", "status": "open" } ], "budget": { "pathCount": 4, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-21T09-04-42-336Z" }