{ "url": "https://www.tiktok.com", "auditedAt": "2026-07-21T09:37:58.184Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete report-mode audit of four representative anonymous surfaces. Excluded authenticated feed creation/upload, checkout/commerce, live-stream interaction and account settings because they require credentials or materially distinct privileged state.", "page": { "appType": "spa", "framework": "React 18", "notes": "Public short-video feed with Explore, login and PWA shell. The page is heavily client-rendered." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "Lighthouse", "robots/sitemap fetch", "Modern Web Guidance 0.0.172" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/explore-desktop.png", "caption": "Retained audit evidence: explore-desktop.png", "findingIds": [ "F04", "F07" ] }, { "type": "dom", "path": "evidence/explore-dom.json", "caption": "Retained audit evidence: explore-dom.json" }, { "type": "other", "path": "evidence/focus-targets.json", "caption": "Retained audit evidence: focus-targets.json", "findingIds": [ "F08", "F15", "F16" ] }, { "type": "other", "path": "evidence/guidance/mwg-list.json", "caption": "Retained audit evidence: mwg-list.json" }, { "type": "other", "path": "evidence/guidance/mwg-retrieved.md", "caption": "Retained audit evidence: mwg-retrieved.md" }, { "type": "other", "path": "evidence/guidance/mwg-search.json", "caption": "Retained audit evidence: mwg-search.json" }, { "type": "other", "path": "evidence/guidance/searches/01.json", "caption": "Retained audit evidence: 01.json" }, { "type": "other", "path": "evidence/guidance/searches/02.json", "caption": "Retained audit evidence: 02.json" }, { "type": "other", "path": "evidence/guidance/searches/03.json", "caption": "Retained audit evidence: 03.json" }, { "type": "other", "path": "evidence/guidance/searches/04.json", "caption": "Retained audit evidence: 04.json" }, { "type": "other", "path": "evidence/guidance/searches/05.json", "caption": "Retained audit evidence: 05.json" }, { "type": "other", "path": "evidence/guidance/searches/06.json", "caption": "Retained audit evidence: 06.json" }, { "type": "other", "path": "evidence/guidance/searches/07.json", "caption": "Retained audit evidence: 07.json" }, { "type": "other", "path": "evidence/guidance/searches/08.json", "caption": "Retained audit evidence: 08.json" }, { "type": "other", "path": "evidence/guidance/searches/09.json", "caption": "Retained audit evidence: 09.json" }, { "type": "other", "path": "evidence/guidance/searches/10.json", "caption": "Retained audit evidence: 10.json" }, { "type": "other", "path": "evidence/guidance/searches/11.json", "caption": "Retained audit evidence: 11.json" }, { "type": "other", "path": "evidence/guidance/searches/12.json", "caption": "Retained audit evidence: 12.json" }, { "type": "other", "path": "evidence/guidance/searches/13.json", "caption": "Retained audit evidence: 13.json" }, { "type": "other", "path": "evidence/guidance/searches/14.json", "caption": "Retained audit evidence: 14.json" }, { "type": "other", "path": "evidence/guidance/searches/15.json", "caption": "Retained audit evidence: 15.json" }, { "type": "other", "path": "evidence/guidance/searches/16.json", "caption": "Retained audit evidence: 16.json" }, { "type": "other", "path": "evidence/guidance/searches/17.json", "caption": "Retained audit evidence: 17.json" }, { "type": "other", "path": "evidence/guidance/searches/18.json", "caption": "Retained audit evidence: 18.json" }, { "type": "other", "path": "evidence/guidance/searches/19.json", "caption": "Retained audit evidence: 19.json" }, { "type": "other", "path": "evidence/guidance/searches/20.json", "caption": "Retained audit evidence: 20.json" }, { "type": "other", "path": "evidence/guidance/searches/21.json", "caption": "Retained audit evidence: 21.json" }, { "type": "other", "path": "evidence/guidance/searches/22.json", "caption": "Retained audit evidence: 22.json" }, { "type": "other", "path": "evidence/guidance/searches/23.json", "caption": "Retained audit evidence: 23.json" }, { "type": "other", "path": "evidence/guidance/searches/24.json", "caption": "Retained audit evidence: 24.json" }, { "type": "other", "path": "evidence/guidance/searches/25.json", "caption": "Retained audit evidence: 25.json" }, { "type": "other", "path": "evidence/guidance/searches/26.json", "caption": "Retained audit evidence: 26.json" }, { "type": "other", "path": "evidence/guidance/searches/27.json", "caption": "Retained audit evidence: 27.json" }, { "type": "other", "path": "evidence/guidance/searches/28.json", "caption": "Retained audit evidence: 28.json" }, { "type": "other", "path": "evidence/guidance/searches/29.json", "caption": "Retained audit evidence: 29.json" }, { "type": "other", "path": "evidence/guidance/searches/30.json", "caption": "Retained audit evidence: 30.json" }, { "type": "other", "path": "evidence/guidance/searches/31.json", "caption": "Retained audit evidence: 31.json" }, { "type": "other", "path": "evidence/guidance/searches/32.json", "caption": "Retained audit evidence: 32.json" }, { "type": "other", "path": "evidence/guidance/searches/33.json", "caption": "Retained audit evidence: 33.json" }, { "type": "other", "path": "evidence/guidance/searches/34.json", "caption": "Retained audit evidence: 34.json" }, { "type": "other", "path": "evidence/guidance/searches/35.json", "caption": "Retained audit evidence: 35.json" }, { "type": "other", "path": "evidence/guidance/searches/36.json", "caption": "Retained audit evidence: 36.json" }, { "type": "other", "path": "evidence/guidance/searches/37.json", "caption": "Retained audit evidence: 37.json" }, { "type": "other", "path": "evidence/guidance/searches/38.json", "caption": "Retained audit evidence: 38.json" }, { "type": "other", "path": "evidence/guidance/searches/39.json", "caption": "Retained audit evidence: 39.json" }, { "type": "other", "path": "evidence/guidance/searches/40.json", "caption": "Retained audit evidence: 40.json" }, { "type": "other", "path": "evidence/guidance/searches/41.json", "caption": "Retained audit evidence: 41.json" }, { "type": "other", "path": "evidence/guidance/searches/42.json", "caption": "Retained audit evidence: 42.json" }, { "type": "other", "path": "evidence/guidance/searches/43.json", "caption": "Retained audit evidence: 43.json" }, { "type": "other", "path": "evidence/guidance/searches/44.json", "caption": "Retained audit evidence: 44.json" }, { "type": "other", "path": "evidence/guidance/searches/45.json", "caption": "Retained audit evidence: 45.json" }, { "type": "other", "path": "evidence/guidance/searches/46.json", "caption": "Retained audit evidence: 46.json" }, { "type": "other", "path": "evidence/guidance/searches/47.json", "caption": "Retained audit evidence: 47.json" }, { "type": "other", "path": "evidence/guidance/searches/48.json", "caption": "Retained audit evidence: 48.json" }, { "type": "other", "path": "evidence/guidance/searches/49.json", "caption": "Retained audit evidence: 49.json" }, { "type": "other", "path": "evidence/guidance/searches/50.json", "caption": "Retained audit evidence: 50.json" }, { "type": "other", "path": "evidence/guidance/searches/51.json", "caption": "Retained audit evidence: 51.json" }, { "type": "other", "path": "evidence/guidance/searches/52.json", "caption": "Retained audit evidence: 52.json" }, { "type": "other", "path": "evidence/guidance/searches/53.json", "caption": "Retained audit evidence: 53.json" }, { "type": "other", "path": "evidence/guidance/searches/54.json", "caption": "Retained audit evidence: 54.json" }, { "type": "other", "path": "evidence/guidance/searches/55.json", "caption": "Retained audit evidence: 55.json" }, { "type": "other", "path": "evidence/guidance/searches/56.json", "caption": "Retained audit evidence: 56.json" }, { "type": "other", "path": "evidence/guidance/searches/57.json", "caption": "Retained audit evidence: 57.json" }, { "type": "other", "path": "evidence/guidance/searches/58.json", "caption": "Retained audit evidence: 58.json" }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "Retained audit evidence: heap-baseline.heapsnapshot", "findingIds": [ "F34" ] }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "Retained audit evidence: heap-post.heapsnapshot" }, { "type": "other", "path": "evidence/home-after-consent-probe.json", "caption": "Retained audit evidence: home-after-consent-probe.json", "findingIds": [ "F15" ] }, { "type": "other", "path": "evidence/home-cookies.json", "caption": "Retained audit evidence: home-cookies.json", "findingIds": [ "F24" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Retained audit evidence: home-dark.png" }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Retained audit evidence: home-desktop.png", "findingIds": [ "F04" ] }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "Retained audit evidence: home-discoverability-crawler.png", "findingIds": [ "F28" ] }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "Retained audit evidence: home-discoverability-rendered.png", "findingIds": [ "F28" ] }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "Retained audit evidence: home-discoverability.json", "findingIds": [ "F20", "F28" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Retained audit evidence: home-dom.json", "findingIds": [ "F05" ] }, { "type": "other", "path": "evidence/home-headers.json", "caption": "Retained audit evidence: home-headers.json", "findingIds": [ "F24", "F27" ] }, { "type": "screenshot", "path": "evidence/home-high-contrast.png", "caption": "Retained audit evidence: home-high-contrast.png", "findingIds": [ "F14" ] }, { "type": "other", "path": "evidence/home-images.json", "caption": "Retained audit evidence: home-images.json", "findingIds": [ "F18", "F31" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Retained audit evidence: home-mobile-layout.json", "findingIds": [ "F06", "F16" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Retained audit evidence: home-mobile.png", "findingIds": [ "F06" ] }, { "type": "other", "path": "evidence/home-more-menu-probe.json", "caption": "Retained audit evidence: home-more-menu-probe.json", "findingIds": [ "F03", "F05" ] }, { "type": "screenshot", "path": "evidence/home-more-menu.png", "caption": "Retained audit evidence: home-more-menu.png", "findingIds": [ "F03" ] }, { "type": "other", "path": "evidence/home-probe.json", "caption": "Retained audit evidence: home-probe.json", "findingIds": [ "F02", "F07", "F20", "F23" ] }, { "type": "other", "path": "evidence/home-reduced-motion.json", "caption": "Retained audit evidence: home-reduced-motion.json", "findingIds": [ "F01" ] }, { "type": "other", "path": "evidence/home-secrets.json", "caption": "Retained audit evidence: home-secrets.json" }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Retained audit evidence: home-summary.json", "findingIds": [ "F11", "F12", "F25", "F32", "F33" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Retained audit evidence: home-trace-summary.json", "findingIds": [ "F09", "F10", "F32" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "Retained audit evidence: home-trace.json", "findingIds": [ "F09" ] }, { "type": "other", "path": "evidence/home-trackers.json", "caption": "Retained audit evidence: home-trackers.json", "findingIds": [ "F25" ] }, { "type": "har", "path": "evidence/home.har", "caption": "Retained audit evidence: home.har", "findingIds": [ "F11", "F33" ] }, { "type": "other", "path": "evidence/lighthouse-failures.json", "caption": "Retained audit evidence: lighthouse-failures.json", "findingIds": [ "F10", "F13", "F14", "F15", "F17", "F19", "F21", "F22", "F27", "F29" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Retained audit evidence: lighthouse.json", "findingIds": [ "F09" ] }, { "type": "screenshot", "path": "evidence/login-desktop.png", "caption": "Retained audit evidence: login-desktop.png", "findingIds": [ "F04", "F26", "F30" ] }, { "type": "dom", "path": "evidence/login-dom.json", "caption": "Retained audit evidence: login-dom.json" }, { "type": "other", "path": "evidence/login-email-probe.json", "caption": "Retained audit evidence: login-email-probe.json" }, { "type": "other", "path": "evidence/login-email-probe2.json", "caption": "Retained audit evidence: login-email-probe2.json" }, { "type": "screenshot", "path": "evidence/login-email.png", "caption": "Retained audit evidence: login-email.png" }, { "type": "other", "path": "evidence/login-probe.json", "caption": "Retained audit evidence: login-probe.json", "findingIds": [ "F26", "F30" ] }, { "type": "other", "path": "evidence/memory-metrics.json", "caption": "Retained audit evidence: memory-metrics.json" }, { "type": "screenshot", "path": "evidence/not-found.png", "caption": "Retained audit evidence: not-found.png" }, { "type": "other", "path": "evidence/pwa-probe.json", "caption": "Retained audit evidence: pwa-probe.json" }, { "type": "other", "path": "evidence/resource-dom-probe.json", "caption": "Retained audit evidence: resource-dom-probe.json", "findingIds": [ "F11", "F12" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "Retained audit evidence: robots.txt", "findingIds": [ "F22" ] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "Retained audit evidence: sitemap.xml", "findingIds": [ "F22" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-dark.png", "evidence": "Screenshot comparison under dark preference shows the shell remains a coherent dark design.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-dark.png" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-reduced-motion.json", "evidence": "The reduced-motion evaluate probe found six ~531ms document animations, including running animations, while matchMedia(prefers-reduced-motion: reduce) was true.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-reduced-motion.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-high-contrast.png", "evidence": "High-contrast emulation screenshot retains visible feed, controls and text.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-high-contrast.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-probe.json", "evidence": "The rendered DOM probe found no startViewTransition usage; navigation between feed and Explore swaps state without a documented transition treatment.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-route recon", "evidence": "No authored parallax, reveal or other scroll-linked animation was present on the representative surfaces; native feed scrolling was tested instead.", "reason": "No authored parallax, reveal or other scroll-linked animation was present on the representative surfaces; native feed scrolling was tested instead.", "pathIds": [ "home-feed", "explore", "login" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-mobile.png, evidence/home-probe.json", "evidence": "Feed and Explore use native vertical scrolling and the sampled media is not autoplaying at probe time.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-after-consent-probe.json, evidence/explore-desktop.png", "evidence": "Persistent side navigation identifies For You/Explore and stays available while feed content scrolls.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-after-consent-probe.json", "evidence/explore-desktop.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-more-menu.png, evidence/home-more-menu-probe.json", "evidence": "Opening More produced a DIV role=dialog at x=220/y=84 and the stylesheet probe found zero anchor-name, position-anchor or position-try rules.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-more-menu.png", "evidence/home-more-menu-probe.json" ], "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/explore-desktop.png, evidence/home-after-consent-probe.json", "evidence": "Explore selection, content-first feed paging and labeled navigation controls provide clear current-state cues.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/explore-desktop.png", "evidence/home-after-consent-probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-desktop.png, evidence/explore-desktop.png, evidence/login-desktop.png", "evidence": "Desktop, Explore, login and 404 screenshots show a 200px cookie panel covering roughly the lower 40% of the 493px viewport before interaction.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-desktop.png", "evidence/explore-desktop.png", "evidence/login-desktop.png" ], "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-more-menu-probe.json, evidence/home-dom.json", "evidence": "The initial DOM contained no dialog, popover or details elements; the More menu opened as a DIV role=dialog and the cookie banner is a custom shadow-DOM element.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-more-menu-probe.json", "evidence/home-dom.json" ], "findingIds": [ "F05" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-dark.png", "evidence": "After consent dismissal the feed dedicates most of the viewport to the current video, with compact side actions.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-dark.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-mobile-layout.json, evidence/home-mobile.png", "evidence": "At a 360px visual viewport, the layout primitive measured 492px content width and 132px horizontal overflow. The screenshot visibly clips the video and caption.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-probe.json, evidence/explore-desktop.png", "evidence": "The CSSOM probe found zero @container rules while the same shell presents feed cards and a three-column Explore grid in different available widths.", "pathIds": [ "explore" ], "artifacts": [ "evidence/home-probe.json", "evidence/explore-desktop.png" ], "findingIds": [ "F07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct review using evidence/focus-targets.json", "evidence": "The focus probe reported outline-style none and no box-shadow for every sampled control; navigation buttons are 40x40px and several links are only 16-23px high.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/focus-targets.json" ], "findingIds": [ "F08" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-dark.png, evidence/explore-desktop.png, evidence/login-desktop.png", "evidence": "For You immediately presents a video feed; Explore presents topical cards; login clearly labels its purpose and methods.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-dark.png", "evidence/explore-desktop.png", "evidence/login-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-after-consent-probe.json, evidence/explore-desktop.png, evidence/login-probe.json", "evidence": "Anonymous users can consume the feed, navigate to Explore and open login choices without a forced account wall.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-after-consent-probe.json", "evidence/explore-desktop.png", "evidence/login-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/not-found.png", "evidence": "The unknown-route test renders a branded 404 state with global search/login navigation instead of a blank shell.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/not-found.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct review using evidence/lighthouse.json, evidence/home-trace-summary.json, evidence/home-trace.json", "evidence": "Lighthouse measured LCP 22.3s, FCP 12.0s, TBT 1,394ms and performance 0.30; the independent trace measured LCP 4.64s and TBT 2.55s.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json", "evidence/home-trace.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-mobile-layout.json", "evidence": "The mobile layout observer measured CLS 0.0186, within the good threshold despite later shifts.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-trace-summary.json, evidence/lighthouse-failures.json", "evidence": "The trace found nine long tasks, including one 2,410ms task, for 2,555ms total blocking time; Lighthouse TBT was 1,394ms.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse-failures.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-summary.json, evidence/resource-dom-probe.json, evidence/home.har", "evidence": "The HAR recorded 362 requests and 8.83MB transferred; 214 scripts account for 6.31MB, with parser-inserted non-deferred scripts confirmed in the DOM probe.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-summary.json", "evidence/resource-dom-probe.json", "evidence/home.har" ], "findingIds": [ "F11" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-summary.json, evidence/resource-dom-probe.json", "evidence": "The HAR recorded 214 scripts and 6.31MB script transfer, including multiple monitoring plugin versions and login chunks on the unauthenticated feed.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-summary.json", "evidence/resource-dom-probe.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct review using evidence/lighthouse-failures.json", "evidence": "Lighthouse found unnamed buttons and links, unlabeled password inputs and images without alt; the agent accessibility tree audit also failed.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/lighthouse-failures.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct review using evidence/lighthouse-failures.json, evidence/home-high-contrast.png", "evidence": "Lighthouse found 3.0:1 white-on-cyan cookie text and 3.68:1 white-on-pink Open TikTok text, below the required 4.5:1.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/lighthouse-failures.json", "evidence/home-high-contrast.png" ], "findingIds": [ "F14" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-after-consent-probe.json, evidence/lighthouse-failures.json, evidence/focus-targets.json", "evidence": "The homepage has no H1, Lighthouse found skipped heading order, and the focus probe showed outline-style none on all sampled keyboard targets.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-after-consent-probe.json", "evidence/lighthouse-failures.json", "evidence/focus-targets.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-dark.png, evidence/explore-desktop.png, evidence/login-desktop.png", "evidence": "Screenshots show readable feed captions, topic labels and login choices with adequate line lengths; contrast exceptions are separately recorded.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-dark.png", "evidence/explore-desktop.png", "evidence/login-desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-mobile-layout.json, evidence/focus-targets.json", "evidence": "The 360px layout has 132px horizontal overflow; sampled navigation targets are 40x40px and text links as little as 16px high.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/focus-targets.json" ], "findingIds": [ "F16" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Direct review using evidence/lighthouse-failures.json", "evidence": "Lighthouse failed errors-in-console, including a 400 API request and repeated CSP policy warnings.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/lighthouse-failures.json" ], "findingIds": [ "F17" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-images.json", "evidence": "The images primitive found all four sampled images missing width and height attributes, two oversized avatars and two legacy-format resources.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-images.json" ], "findingIds": [ "F18" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct review using evidence/lighthouse-failures.json", "evidence": "Lighthouse found unload listeners, deprecated Shared Storage use, and six BFCache blockers including unload, no-store and WebSocket conditions.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/lighthouse-failures.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-probe.json, evidence/home-discoverability.json", "evidence": "The rendered metadata probe found a title but no meta description; discoverability confirmed the description is absent in raw HTML.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-probe.json", "evidence/home-discoverability.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Direct review using evidence/lighthouse-failures.json", "evidence": "Lighthouse failed crawlable-anchors for a Learn more anchor without href and link-name for an unlabeled search link.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/lighthouse-failures.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct review using evidence/lighthouse-failures.json, evidence/robots.txt, evidence/sitemap.xml", "evidence": "Lighthouse found no valid rel=canonical; /sitemap.xml returned Not Found, while robots.txt defines a selective crawl policy.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/lighthouse-failures.json", "evidence/robots.txt", "evidence/sitemap.xml" ], "findingIds": [ "F22" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-probe.json", "evidence": "The DOM probe found zero JSON-LD blocks and no Open Graph metadata on the public homepage.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-probe.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-headers.json, evidence/home-cookies.json", "evidence": "Headers show HTTPS/HSTS but CSP allows unsafe-inline and unsafe-eval; the cookie audit found nine cookies flagged insecure and msToken without Secure/HttpOnly using SameSite=None.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-trackers.json, evidence/home-summary.json", "evidence": "The tracker probe found 16 third-party origins; the HAR attributed 329 requests and 8.59MB to third-party origins, including monitoring domains, before account interaction.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Direct review using evidence/login-desktop.png, evidence/login-probe.json", "evidence": "The login probe offers QR, phone/email/username, Facebook, Google and Apple; neither rendered markup nor the DOM contained passkey/WebAuthn signals.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-desktop.png", "evidence/login-probe.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-headers.json, evidence/lighthouse-failures.json", "evidence": "Permissions-Policy is missing and CSP permits unsafe-inline/unsafe-eval; Lighthouse also reported third-party cookie and CSP inspector issues.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-headers.json", "evidence/lighthouse-failures.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-discoverability.json, evidence/home-discoverability-rendered.png, evidence/home-discoverability-crawler.png", "evidence": "Discoverability measured only 3% raw/rendered word coverage and classified the page as a JS shell; the crawler screenshot is effectively blank while the browser screenshot contains the feed.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-discoverability.json", "evidence/home-discoverability-rendered.png", "evidence/home-discoverability-crawler.png" ], "findingIds": [ "F28" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-more-menu.png, evidence/memory-metrics.json", "evidence": "The More menu opened within the viewport and the feed remained usable after repeated scrolling.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-more-menu.png", "evidence/memory-metrics.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/pwa-probe.json", "evidence": "A scoped active service worker and installable manifest with name, icons, start_url and display mode were directly observed.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/pwa-probe.json" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/not-found.png", "evidence": "A deliberately unknown route produced a branded 404 recovery surface with search and login navigation.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/not-found.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-probe.json, evidence/login-email-probe.json", "evidence": "Rendered documents declare en/en-GB and ltr, and login exposes a broad language selector including RTL languages.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-probe.json", "evidence/login-email-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/login-email-probe.json, evidence/home-probe.json", "evidence": "The session rendered en-GB locale selection and region-aware content; no malformed locale-sensitive numeric/date formatting was observed.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/login-email-probe.json", "evidence/home-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-route recon", "evidence": "No event, timestamp editing or other time-zone-sensitive value appeared on the audited anonymous surfaces.", "reason": "No event, timestamp editing or other time-zone-sensitive value appeared on the audited anonymous surfaces.", "pathIds": [ "home-feed", "explore", "login" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/home-desktop.png, evidence/login-desktop.png", "evidence": "Consent presents equally prominent Decline optional cookies and Allow all controls; login terms and privacy links are visible.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-desktop.png", "evidence/login-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-route recon", "evidence": "The audited unauthenticated login entry rendered method-choice and federated controls but no editable authored form on which validation behavior could be exercised.", "reason": "The audited unauthenticated login entry rendered method-choice and federated controls but no editable authored form on which validation behavior could be exercised.", "pathIds": [ "home-feed", "explore", "login" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct review using evidence/lighthouse-failures.json", "evidence": "Lighthouse found four password inputs without labels; the markup snippets expose no autocomplete token, placeholder or accessible name.", "pathIds": [ "login" ], "artifacts": [ "evidence/lighthouse-failures.json" ], "findingIds": [ "F29" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Direct review using evidence/login-desktop.png, evidence/login-probe.json", "evidence": "The public login entry offers QR, phone/email/username and federated providers but no passkey or WebAuthn path.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-desktop.png", "evidence/login-probe.json" ], "findingIds": [ "F30" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-images.json", "evidence": "Two of four sampled images are oversized, all lack width/height and two use legacy formats; one below-fold image lacks lazy loading.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-images.json" ], "findingIds": [ "F31" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-summary.json, evidence/home-trace-summary.json", "evidence": "The initial load makes 362 requests including 89 fetch/XHR requests and multiple monitoring endpoints; trace TBT is 2.55s.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F32" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct review using evidence/home-summary.json, evidence/home.har", "evidence": "Third parties account for 329 requests and 8.59MB of 8.83MB transferred; scripts alone are 6.31MB and fonts 643KB.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "F33" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-route recon", "evidence": "Agent-facing capabilities are emerging and no developer intent to expose TikTok actions to agents was declared; absence is not penalised.", "reason": "Agent-facing capabilities are emerging and no developer intent to expose TikTok actions to agents was declared; absence is not penalised.", "pathIds": [ "home-feed", "explore", "login" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement after representative-route recon", "evidence": "No summarisation or language-model task was part of the audited anonymous journeys, so on-device inference is not applicable.", "reason": "No summarisation or language-model task was part of the audited anonymous journeys, so on-device inference is not applicable.", "pathIds": [ "home-feed", "explore", "login" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/heap-baseline.heapsnapshot, evidence/heap-post.heapsnapshot", "evidence": "After ten feed scroll-down/up cycles, heap self size changed from 100.06MB to 100.87MB while node count fell from 1,765,634 to 1,753,945; no monotonic retained growth is established.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "issues", "confidence": "high", "method": "Direct review using evidence/heap-baseline.heapsnapshot", "evidence": "The baseline heap summary contains 1,765,634 nodes/records and 100.1MB self size, including 492,545 code entries and 164,467 closures for one visible feed card.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot" ], "findingIds": [ "F34" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Direct evidence review: evidence/memory-metrics.json, evidence/heap-baseline.heapsnapshot, evidence/heap-post.heapsnapshot", "evidence": "After repeated scrolling, live DOM nodes fell from 764 to 706 and heap node count fell; Detached constructors did not appear among the largest baseline/post constructors.", "pathIds": [ "home-feed" ], "artifacts": [ "evidence/memory-metrics.json", "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F04", "F05" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07", "F08" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass" }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F10", "F11", "F12" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F13", "F14", "F15", "F16" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F17", "F18", "F19" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F20", "F21", "F22", "F23" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F24", "F25", "F26", "F27" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F28" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "pass" }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F29", "F30" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F31", "F32", "F33" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "All checks were judged contextual and not applicable to the audited anonymous journeys." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F34" ] } ], "paths": [ { "id": "home-feed", "description": "Public For You feed, the primary content-consumption journey and global shell.", "url": "https://www.tiktok.com/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "prefers-contrast: more", "keyboard focus", "cookie consent declined", "repeated feed scrolling" ], "result": "issues" }, { "id": "explore", "description": "Explore listing, representing discovery/category browsing and card-grid layout.", "url": "https://www.tiktok.com/explore", "conditions": [ "desktop", "cookie consent undecided" ], "result": "issues" }, { "id": "login", "description": "Authentication entry point, representing account, consent, localization and sign-in choices.", "url": "https://www.tiktok.com/login", "conditions": [ "desktop", "cookie consent undecided" ], "result": "issues" }, { "id": "not-found", "description": "Unknown route, representing HTTP/runtime failure recovery.", "url": "https://www.tiktok.com/this-route-does-not-exist-web-uplift", "conditions": [ "desktop" ], "result": "pass" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "summary": "Motion continues when reduced motion is requested", "evidence": "The reduced-motion evaluate probe found six ~531ms document animations, including running animations, while matchMedia(prefers-reduced-motion: reduce) was true.", "suggestedFix": "Disable non-essential animation and autoplay transitions inside prefers-reduced-motion: reduce; retain only essential state feedback.", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "artifacts": [ "evidence/home-reduced-motion.json" ], "effort": "small", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F02", "severity": "low", "confidence": "high", "summary": "Route and state changes do not use View Transitions", "evidence": "The rendered DOM probe found no startViewTransition usage; navigation between feed and Explore swaps state without a documented transition treatment.", "suggestedFix": "Progressively enhance meaningful same-document route/state changes with document.startViewTransition(), with a non-animated fallback and reduced-motion override.", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-probe.json" ], "effort": "medium", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F03", "severity": "low", "confidence": "high", "summary": "The More overlay is manually positioned rather than anchored", "evidence": "Opening More produced a DIV role=dialog at x=220/y=84 and the stylesheet probe found zero anchor-name, position-anchor or position-try rules.", "suggestedFix": "Use popover plus CSS anchor positioning and position-try fallbacks so the menu remains attached and collision-safe.", "principleId": "provide-guided-navigation", "principleCheckId": "anchored-positioning", "guidanceId": "position-aware-tooltips", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-more-menu.png", "evidence/home-more-menu-probe.json" ], "effort": "small", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F04", "severity": "medium", "confidence": "high", "summary": "Cookie consent obscures a large share of every first view", "evidence": "Desktop, Explore, login and 404 screenshots show a 200px cookie panel covering roughly the lower 40% of the 493px viewport before interaction.", "suggestedFix": "Use a compact, accessible consent surface that preserves an equally prominent decline choice without hiding primary content; remember the decision.", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-desktop.png", "evidence/explore-desktop.png", "evidence/login-desktop.png" ], "effort": "medium", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F05", "severity": "medium", "confidence": "high", "summary": "Overlays use custom elements and ad-hoc dialog roles", "evidence": "The initial DOM contained no dialog, popover or details elements; the More menu opened as a DIV role=dialog and the cookie banner is a custom shadow-DOM element.", "suggestedFix": "Use native dialog for modal consent and popover for transient menus, with declarative invocation and light-dismiss where appropriate.", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-more-menu-probe.json", "evidence/home-dom.json" ], "effort": "medium", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F06", "severity": "high", "confidence": "high", "summary": "The mobile layout overflows horizontally", "evidence": "At a 360px visual viewport, the layout primitive measured 492px content width and 132px horizontal overflow. The screenshot visibly clips the video and caption.", "suggestedFix": "Remove fixed/minimum widths that force 492px layout; use intrinsic sizing, max-inline-size:100%, and test the consent/feed shell at 320-360px.", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "effort": "medium", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F07", "severity": "low", "confidence": "high", "summary": "Reusable feed and listing components show no container-query adaptation", "evidence": "The CSSOM probe found zero @container rules while the same shell presents feed cards and a three-column Explore grid in different available widths.", "suggestedFix": "Adopt container-type and size-aware component rules where cards/shell modules are reused, retaining media-query fallbacks only where needed.", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-probe.json", "evidence/explore-desktop.png" ], "effort": "medium", "pathId": "explore", "url": "https://www.tiktok.com/explore" }, { "id": "F08", "severity": "high", "confidence": "high", "summary": "Keyboard focus is not visibly indicated and several controls are undersized", "evidence": "The focus probe reported outline-style none and no box-shadow for every sampled control; navigation buttons are 40x40px and several links are only 16-23px high.", "suggestedFix": "Add strong :focus-visible styles and enlarge interactive hit areas to at least 44x44 CSS px without relying on hover.", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "artifacts": [ "evidence/focus-targets.json" ], "effort": "small", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F09", "severity": "critical", "confidence": "high", "summary": "Loading performance is far outside the good range", "evidence": "Lighthouse measured LCP 22.3s, FCP 12.0s, TBT 1,394ms and performance 0.30; the independent trace measured LCP 4.64s and TBT 2.55s.", "suggestedFix": "Prioritize the LCP media/poster, reduce startup JavaScript, defer non-critical monitoring/login code, and validate under representative mobile throttling.", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json", "evidence/home-trace.json" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F10", "severity": "high", "confidence": "high", "summary": "Startup JavaScript blocks the main thread", "evidence": "The trace found nine long tasks, including one 2,410ms task, for 2,555ms total blocking time; Lighthouse TBT was 1,394ms.", "suggestedFix": "Break startup work into schedulable tasks, defer islands until needed and remove forced synchronous layout from monitoring code.", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-main-thread", "guidanceId": "break-up-long-tasks", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse-failures.json" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F11", "severity": "high", "confidence": "high", "summary": "The dependency graph is extremely large and delays content", "evidence": "The HAR recorded 362 requests and 8.83MB transferred; 214 scripts account for 6.31MB, with parser-inserted non-deferred scripts confirmed in the DOM probe.", "suggestedFix": "Ship only critical bootstrap code, mark non-critical scripts async/defer, reduce fonts, and audit cache/dependency chains.", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-summary.json", "evidence/resource-dom-probe.json", "evidence/home.har" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F12", "severity": "high", "confidence": "high", "summary": "Script volume dominates the page before user intent", "evidence": "The HAR recorded 214 scripts and 6.31MB script transfer, including multiple monitoring plugin versions and login chunks on the unauthenticated feed.", "suggestedFix": "Use coverage/bundle analysis to remove duplicate monitoring versions and gate login, analytics and secondary feature bundles behind intent.", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-summary.json", "evidence/resource-dom-probe.json" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F13", "severity": "high", "confidence": "high", "summary": "Controls, links, images and inputs lack accessible names", "evidence": "Lighthouse found unnamed buttons and links, unlabeled password inputs and images without alt; the agent accessibility tree audit also failed.", "suggestedFix": "Give every interactive control a stable accessible name, associate labels with inputs, and provide meaningful or empty alt text as appropriate.", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "artifacts": [ "evidence/lighthouse-failures.json" ], "effort": "medium", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F14", "severity": "high", "confidence": "high", "summary": "Text and primary controls fail WCAG contrast", "evidence": "Lighthouse found 3.0:1 white-on-cyan cookie text and 3.68:1 white-on-pink Open TikTok text, below the required 4.5:1.", "suggestedFix": "Adjust foreground/background tokens to meet 4.5:1 for normal text and verify all consent/control states.", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "artifacts": [ "evidence/lighthouse-failures.json", "evidence/home-high-contrast.png" ], "effort": "small", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F15", "severity": "high", "confidence": "high", "summary": "Heading structure and focus presentation are not robust", "evidence": "The homepage has no H1, Lighthouse found skipped heading order, and the focus probe showed outline-style none on all sampled keyboard targets.", "suggestedFix": "Add a logical H1-to-Hn hierarchy, proper landmarks, and a clearly visible focus indicator following reading order.", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "artifacts": [ "evidence/home-after-consent-probe.json", "evidence/lighthouse-failures.json", "evidence/focus-targets.json" ], "effort": "medium", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F16", "severity": "medium", "confidence": "high", "summary": "Reflow and target sizing fail on narrow screens", "evidence": "The 360px layout has 132px horizontal overflow; sampled navigation targets are 40x40px and text links as little as 16px high.", "suggestedFix": "Make the shell reflow without overflow and expand pointer/touch hit areas while preserving zoom and scalable viewport behavior.", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/focus-targets.json" ], "effort": "medium", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F17", "severity": "medium", "confidence": "high", "summary": "The page emits runtime and network console errors", "evidence": "Lighthouse failed errors-in-console, including a 400 API request and repeated CSP policy warnings.", "suggestedFix": "Fix or intentionally suppress failed startup requests and deliver an enforceable, internally consistent CSP without browser warnings.", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "guidanceId": "html", "guidanceCategory": "user-experience", "artifacts": [ "evidence/lighthouse-failures.json" ], "effort": "medium", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F18", "severity": "medium", "confidence": "high", "summary": "Image markup does not reserve stable dimensions", "evidence": "The images primitive found all four sampled images missing width and height attributes, two oversized avatars and two legacy-format resources.", "suggestedFix": "Emit intrinsic width/height or aspect-ratio, responsive srcset/sizes and modern formats for authored imagery.", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-images.json" ], "effort": "medium", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F19", "severity": "medium", "confidence": "high", "summary": "Deprecated APIs and BFCache blockers remain", "evidence": "Lighthouse found unload listeners, deprecated Shared Storage use, and six BFCache blockers including unload, no-store and WebSocket conditions.", "suggestedFix": "Remove unload handlers and deprecated Shared Storage calls; minimize actionable no-store mutations so return navigation can use BFCache.", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "user-experience", "artifacts": [ "evidence/lighthouse-failures.json" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F20", "severity": "medium", "confidence": "high", "summary": "The public homepage has no meta description", "evidence": "The rendered metadata probe found a title but no meta description; discoverability confirmed the description is absent in raw HTML.", "suggestedFix": "Add a concise, page-specific meta description to raw server HTML.", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-probe.json", "evidence/home-discoverability.json" ], "effort": "small", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F21", "severity": "medium", "confidence": "high", "summary": "Some links are unnamed or not crawlable", "evidence": "Lighthouse failed crawlable-anchors for a Learn more anchor without href and link-name for an unlabeled search link.", "suggestedFix": "Use real destination href values and descriptive accessible link text for all navigation and disclosure links.", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "guidanceCategory": "user-experience", "artifacts": [ "evidence/lighthouse-failures.json" ], "effort": "small", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F22", "severity": "medium", "confidence": "high", "summary": "Canonical and sitemap signals are incomplete", "evidence": "Lighthouse found no valid rel=canonical; /sitemap.xml returned Not Found, while robots.txt defines a selective crawl policy.", "suggestedFix": "Emit canonical URLs per public template and publish sitemap indexes consistent with robots and localized routes.", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "user-experience", "artifacts": [ "evidence/lighthouse-failures.json", "evidence/robots.txt", "evidence/sitemap.xml" ], "effort": "medium", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F23", "severity": "medium", "confidence": "high", "summary": "The homepage lacks entity and share-preview metadata", "evidence": "The DOM probe found zero JSON-LD blocks and no Open Graph metadata on the public homepage.", "suggestedFix": "Add accurate Organization/WebSite and page/entity JSON-LD plus Open Graph/Twitter preview metadata matching visible content.", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-probe.json" ], "effort": "small", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F24", "severity": "high", "confidence": "high", "summary": "Cookie and CSP posture has avoidable weaknesses", "evidence": "Headers show HTTPS/HSTS but CSP allows unsafe-inline and unsafe-eval; the cookie audit found nine cookies flagged insecure and msToken without Secure/HttpOnly using SameSite=None.", "suggestedFix": "Move to nonce/hash-based CSP without unsafe-eval, set Secure and HttpOnly on sensitive tokens, and use Lax/Strict unless cross-site behavior is required.", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "artifacts": [ "evidence/home-headers.json", "evidence/home-cookies.json" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F25", "severity": "high", "confidence": "high", "summary": "The initial anonymous load has a very large telemetry and third-party footprint", "evidence": "The tracker probe found 16 third-party origins; the HAR attributed 329 requests and 8.59MB to third-party origins, including monitoring domains, before account interaction.", "suggestedFix": "Gate optional telemetry behind consent, consolidate monitoring, batch events and load only third parties required for the immediate task.", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F26", "severity": "medium", "confidence": "high", "summary": "The login entry exposes no phishing-resistant passkey option", "evidence": "The login probe offers QR, phone/email/username, Facebook, Google and Apple; neither rendered markup nor the DOM contained passkey/WebAuthn signals.", "suggestedFix": "Offer passkey authentication and registration alongside existing methods, using conditional UI where supported.", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "user-experience", "artifacts": [ "evidence/login-desktop.png", "evidence/login-probe.json" ], "effort": "large", "pathId": "login", "url": "https://www.tiktok.com/login" }, { "id": "F27", "severity": "medium", "confidence": "high", "summary": "Defensive browser policy coverage is incomplete", "evidence": "Permissions-Policy is missing and CSP permits unsafe-inline/unsafe-eval; Lighthouse also reported third-party cookie and CSP inspector issues.", "suggestedFix": "Deploy a least-privilege Permissions-Policy, tighten CSP/Trusted Types where applicable, and complete third-party-cookie migration.", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security", "artifacts": [ "evidence/home-headers.json", "evidence/lighthouse-failures.json" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F28", "severity": "high", "confidence": "high", "summary": "Core feed content is unavailable without JavaScript", "evidence": "Discoverability measured only 3% raw/rendered word coverage and classified the page as a JS shell; the crawler screenshot is effectively blank while the browser screenshot contains the feed.", "suggestedFix": "Server-render meaningful feed/discovery content and crawlable links, then hydrate enhancements progressively.", "principleId": "be-resilient", "principleCheckId": "progressive-enhancement", "guidanceId": "consistent-cross-document-transitions", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-discoverability.json", "evidence/home-discoverability-rendered.png", "evidence/home-discoverability-crawler.png" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F29", "severity": "medium", "confidence": "high", "summary": "Hidden sign-in inputs lack basic input semantics", "evidence": "Lighthouse found four password inputs without labels; the markup snippets expose no autocomplete token, placeholder or accessible name.", "suggestedFix": "Label each sign-in field and provide correct username/current-password/one-time-code autocomplete tokens.", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "guidanceCategory": "user-experience", "artifacts": [ "evidence/lighthouse-failures.json" ], "effort": "medium", "pathId": "login", "url": "https://www.tiktok.com/login" }, { "id": "F30", "severity": "medium", "confidence": "high", "summary": "Account access relies on legacy/federated choices without passkey management", "evidence": "The public login entry offers QR, phone/email/username and federated providers but no passkey or WebAuthn path.", "suggestedFix": "Add passkey sign-in, registration and management with clear recovery and reauthentication behavior.", "principleId": "be-trustworthy", "principleCheckId": "safe-commercial-and-account-flows", "guidanceId": "passkey-management", "guidanceCategory": "user-experience", "artifacts": [ "evidence/login-desktop.png", "evidence/login-probe.json" ], "effort": "large", "pathId": "login", "url": "https://www.tiktok.com/login" }, { "id": "F31", "severity": "medium", "confidence": "high", "summary": "Image delivery wastes bytes and omits intrinsic metadata", "evidence": "Two of four sampled images are oversized, all lack width/height and two use legacy formats; one below-fold image lacks lazy loading.", "suggestedFix": "Serve right-sized AVIF/WebP sources with srcset/sizes, dimensions and lazy loading below the fold.", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-images.json" ], "effort": "medium", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F32", "severity": "high", "confidence": "high", "summary": "Anonymous startup performs excessive background work", "evidence": "The initial load makes 362 requests including 89 fetch/XHR requests and multiple monitoring endpoints; trace TBT is 2.55s.", "suggestedFix": "Defer, batch or remove background telemetry and secondary fetches until idle, visibility or explicit user intent.", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-summary.json", "evidence/home-trace-summary.json" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F33", "severity": "high", "confidence": "high", "summary": "Third-party code dominates the resource budget", "evidence": "Third parties account for 329 requests and 8.59MB of 8.83MB transferred; scripts alone are 6.31MB and fonts 643KB.", "suggestedFix": "Set per-route third-party/script/font budgets, gate login/media extras and monitor regressions in CI.", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "guidanceCategory": "user-experience", "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" }, { "id": "F34", "severity": "medium", "confidence": "high", "summary": "The initial heap footprint is disproportionate to the visible feed", "evidence": "The baseline heap summary contains 1,765,634 nodes/records and 100.1MB self size, including 492,545 code entries and 164,467 closures for one visible feed card.", "suggestedFix": "Reduce loaded bundles and long-lived closures, virtualize aggressively and set heap/DOM budgets for the unauthenticated shell.", "principleId": "be-memory-efficient", "principleCheckId": "bounded-footprint", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "user-experience", "artifacts": [ "evidence/heap-baseline.heapsnapshot" ], "effort": "large", "pathId": "home-feed", "url": "https://www.tiktok.com/" } ], "taskList": [ { "id": "T01", "title": "Cut startup JavaScript, request count and long main-thread tasks", "priority": 1, "findingIds": [ "F09", "F10", "F11", "F12", "F32", "F33", "F34" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T02", "title": "Fix mobile reflow, focus visibility and target sizing", "priority": 2, "findingIds": [ "F06", "F08", "F16" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T03", "title": "Repair names, labels, alt text, headings and contrast", "priority": 3, "findingIds": [ "F13", "F14", "F15", "F29" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T04", "title": "Server-render public content and complete metadata/indexing signals", "priority": 4, "findingIds": [ "F20", "F21", "F22", "F23", "F28" ], "guidanceId": "html", "status": "open" }, { "id": "T05", "title": "Reduce telemetry and harden cookies, CSP and browser policies", "priority": 5, "findingIds": [ "F24", "F25", "F27" ], "guidanceId": "security", "status": "open" }, { "id": "T06", "title": "Replace intrusive/custom overlays with native dialog and popover patterns", "priority": 6, "findingIds": [ "F03", "F04", "F05" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T07", "title": "Add reduced-motion handling and progressive route transitions", "priority": 7, "findingIds": [ "F01", "F02" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T08", "title": "Add passkey-based sign-in and account management", "priority": 8, "findingIds": [ "F26", "F30" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T09", "title": "Optimize responsive images and reserve dimensions", "priority": 9, "findingIds": [ "F18", "F31" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T10", "title": "Remove console errors, deprecated APIs and actionable BFCache blockers", "priority": 10, "findingIds": [ "F17", "F19" ], "guidanceId": "html", "status": "open" }, { "id": "T11", "title": "Introduce container-aware component layouts where modules are reused", "priority": 11, "findingIds": [ "F07" ], "guidanceId": "size-aware-styling", "status": "open" } ], "budget": { "wallClockSeconds": 1320, "pathCount": 4, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-21T09-37-58-184Z" }