{ "url": "https://infoext2.delegaciondelgobierno.gob.es", "auditedAt": "2026-07-21T09:51:02.686Z", "mode": "report", "status": "completed", "statusDetail": "Atomic coverage complete: all 58 catalog checks have one conclusive outcome.", "page": { "appType": "mpa", "framework": "Server-rendered Java/JSP-style MPA with jQuery 3.4.1 and legacy Morfos/InfoWeb assets", "notes": "Public Spanish government expediente-status service. Entry page plus the personal-data/CAPTCHA form were audited; Cl@ve identity-provider internals and submission with real personal data were excluded." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "flow-replay", "trace", "har", "lighthouse", "axe-core", "headers", "cookies", "trackers", "secrets", "images", "discoverability", "heap-summary", "curl-http-probe", "modern-web-guidance@0.0.172" ], "guidanceConsulted": [ "accessibility", "accessible-error-announcement", "adapt-scrollbar-to-contrast-preferences", "agentic-forms", "agentic-javascript-tools", "anchor-positioning-tab-underline", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "animated-select-picker", "apply-webgl-shaders", "autofill-address-form", "autofill-highlight-inputs", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "batch-analytics-events", "brand-consistent-forms", "branded-select-styling", "break-up-long-tasks", "calculate-event-differentials", "calculate-total-foreground-time", "calculate-with-intrinsic-sizes", "capture-location-agnostic-data", "carousel-slide-effects", "carousel-snap-highlights", "child-state-based-styling", "complex-shapes", "component-specific-light-dark-theme", "conditional-async-dependencies", "consistent-cross-document-transitions", "content-based-styling", "coordinate-global-events", "cross-document-transitions", "css", "css-layout", "custom-select-picker-layouts", "customize-scrollbar-color-and-thickness", "dark-mode", "declarative-dialog-popover-control", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "deliver-optimized-decorative-images", "deprioritize-background-fetches", "design-token-reactivity", "detect-initial-visibility-state", "directional-navigation-transitions", "dynamic-sibling-animations", "dynamic-sibling-styling", "efficient-background-processing", "export-html-media-from-canvas", "expose-canvas-content-to-browser-features", "faster-spa-view-transitions", "flicker-free-client-side-ab-testing", "fluid-scaling", "form-fields-automatically-fit-contents", "format-human-readable-durations", "forms", "full-session-analytics", "group-element-transitions", "highlight-text-ranges", "html", "identify-heavy-scripts", "identify-inp-causes", "improve-next-page-load-performance", "improve-text-layout-and-legibility", "individual-transform-properties", "interactions-in-complex-layouts", "interactive-content-in-3d-scenes", "interactive-content-reveal", "interest-triggered-action-previews", "interest-triggered-tooltips", "language-detection", "language-model", "light-dismiss-a-dialog", "manage-recurring-intervals", "model-partial-time-concepts", "move-dom-element-without-losing-state", "navigation-drawer", "optimize-image-priority", "optimize-preload-priority", "optimize-script-priority", "overflow-clipping-control", "parallax-scroll-effects", "passkey-authentication", "passkey-conditional-create", "passkey-management", "passkey-reauthentication", "passkey-registration", "passkeys", "performance", "persistent-app-tours", "persistent-toast-notifications", "persistent-top-layer-ui", "physics-based-easing", "platform-controls-dismiss-dialog", "position-aware-tooltips", "precise-text-alignment", "prevent-text-wrapping", "privacy", "pull-to-reveal", "reduce-style-repetition", "required-field-feedback", "resilient-context-menus-and-nested-dropdowns", "resolution-optimized-pseudo-elements", "rich-media-picker", "same-document-transitions", "schedule-tasks-by-priority", "scroll-entry-exit-effects", "scroll-position-aware-elements", "scroll-progress-indicator", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "scrollability-affordance-hints", "scrollytelling", "search-hidden-content", "security", "select-menu-interaction", "sequence-distributed-events", "shaped-cutouts", "shrinking-header-on-scroll", "size-aware-styling", "soft-edge-content-fade", "stabilize-reactive-state", "stack-drill-down", "style-parent-with-has", "summarizer", "support-global-calendar-systems", "swipe-to-remove", "translator", "validate-input-after-interaction", "visually-stable-font-fallbacks", "visually-stable-mixed-fonts", "visually-texture-content", "webmcp" ], "artifacts": [ { "type": "other", "path": "coverage-manifest.json", "caption": "Atomic 58-check coverage manifest and evidence plan." }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Entry page at desktop viewport.", "condition": "desktop", "findingIds": [ "F03" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Entry page reflowed at 360x800.", "condition": "viewport: 360x800", "findingIds": [ "F06" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Mobile layout metrics: no horizontal overflow and CLS 0.", "condition": "viewport: 360x800" }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Entry page remains light under the dark preference.", "condition": "prefers-color-scheme: dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-contrast.png", "caption": "Controls and text remain visible under increased contrast.", "condition": "prefers-contrast: more" }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Rendered entry-page DOM, CSS and metadata.", "findingIds": [ "F02", "F03", "F04", "F05", "F12", "F16", "F17", "F21", "F23" ] }, { "type": "other", "path": "evidence/comprehensive-probe.json", "caption": "Computed CSS, scripts, focus indicators, metadata and semantics probe.", "findingIds": [ "F01", "F02", "F03", "F04", "F05", "F06", "F09", "F12", "F16", "F17", "F21", "F23" ] }, { "type": "other", "path": "evidence/reduced-motion-probe.json", "caption": "Reduced-motion probe found no active animation to suppress.", "condition": "prefers-reduced-motion: reduce" }, { "type": "har", "path": "evidence/home.har", "caption": "HAR of entry-page load.", "findingIds": [ "F09", "F10", "F19", "F26", "F27" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "HAR summary: 17 requests, 880,982 bytes, synchronous head scripts, missing cache headers and uncompressed resources.", "findingIds": [ "F09", "F10", "F19", "F26", "F27" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "DevTools performance trace of entry-page load." }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Trace summary: LCP 1.81s in this run, no long tasks or TBT." }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse JSON for performance, accessibility, best practices and SEO.", "condition": "mobile simulation", "findingIds": [ "F08", "F10", "F12", "F15", "F16" ] }, { "type": "other", "path": "evidence/lighthouse-summary.json", "caption": "Compact Lighthouse results: LCP 6.5s, CLS 0.049, TBT 0ms, unused CSS/JS and platform warnings.", "condition": "mobile simulation", "findingIds": [ "F08", "F10", "F12", "F15", "F16" ] }, { "type": "other", "path": "evidence/axe.json", "caption": "axe-core results: invalid menubar/navigation semantics, list semantics and heading order.", "findingIds": [ "F11", "F12" ] }, { "type": "other", "path": "evidence/images.json", "caption": "Image audit: four images lack dimensions; three hidden loaders lack alt.", "findingIds": [ "F14" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security-header audit: CSP, HSTS, nosniff, framing, referrer and permissions policies absent.", "findingIds": [ "F18", "F20" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie audit: seven cookies; six are not Secure and all use SameSite=None.", "findingIds": [ "F18", "F19" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Tracker audit found legacy Google Analytics requests.", "findingIds": [ "F19", "F27" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client-side secret scan found no exposed credentials." }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw-vs-rendered comparison: 13% content overlap; raw title and H1 absent.", "findingIds": [ "F16", "F21" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Browser-rendered entry page.", "condition": "JavaScript enabled", "findingIds": [ "F21" ] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler view displays a JavaScript-required warning and incomplete page.", "condition": "JavaScript disabled", "findingIds": [ "F21" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots.txt request returned a 404 Tomcat document.", "findingIds": [ "F16", "F17", "F22" ] }, { "type": "other", "path": "evidence/resilience-probe.json", "caption": "No service worker registration; unknown route returns bare 404.", "findingIds": [ "F22" ] }, { "type": "screenshot", "path": "evidence/form-flow/step-03-click.png", "caption": "Desktop form reached through the primary journey.", "condition": "desktop", "findingIds": [ "F07", "F24", "F25" ] }, { "type": "screenshot", "path": "evidence/form-error-flow/step-03-click.png", "caption": "Mobile form: reflow succeeds, CAPTCHA helper icons are broken.", "condition": "viewport: 360x800", "findingIds": [ "F07", "F13", "F24" ] }, { "type": "other", "path": "evidence/form-probe.json", "caption": "Form probe: fields lack programmatic labels, required state and autocomplete; CAPTCHA helper images fail.", "findingIds": [ "F07", "F11", "F24", "F25" ] }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "Baseline heap summary: 95,566 nodes and 5,156,015 self-size bytes." }, { "type": "heap", "path": "evidence/heap-post-menu-valid.json", "caption": "Heap after 20 menu toggles: 96,597 nodes and 5,269,959 bytes; no Detached constructor in top summary." } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The dark-mode screenshot is pixel-identical to the light capture; the computed probe reports colorScheme \"normal\" and no prefers-color-scheme rule.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dark.png", "evidence/comprehensive-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Reduced-motion emulation matched; there were zero active animations, so no non-essential motion remained.", "pathIds": [ "entry" ], "artifacts": [ "evidence/reduced-motion-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Increased-contrast screenshot kept text and controls visible; Lighthouse color contrast scored 1.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-contrast.png", "evidence/lighthouse-summary.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The primary flow navigates from /infoext2/ to /consulta.html, while CSS inspection found no view-transition rules.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/comprehensive-probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative route and journey recon.", "evidence": "No scroll-linked animation, parallax, reveal or scrollytelling surface exists on either representative page.", "reason": "No scroll-linked animation, parallax, reveal or scrollytelling surface exists on either representative page.", "pathIds": [ "entry", "form-journey" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative route and journey recon.", "evidence": "The audited service has no gesture-driven, swipe, pull or carousel interaction.", "reason": "The audited service has no gesture-driven, swipe, pull or carousel interaction.", "pathIds": [ "entry", "form-journey" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "Desktop and mobile screenshots show a fixed-height application bar, and CSS inspection found no scroll-state query or progress treatment.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json" ], "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative route and journey recon.", "evidence": "No tooltip, popover or anchored menu was invoked in the representative journey.", "reason": "No tooltip, popover or anchored menu was invoked in the representative journey.", "pathIds": [ "entry", "form-journey" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "The primary journey moves to a page with a prominent service heading, short instruction, grouped fields and one dominant Consultar action.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/comprehensive-probe.json", "evidence/home-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Desktop and mobile load screenshots show no popup, interstitial, consent wall or content-obscuring overlay.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/comprehensive-probe.json", "evidence/home-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "DOM inspection found .mf-dialog and a veil but zero , popover or
elements.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/comprehensive-probe.json" ], "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "The first viewport is dominated by the task heading, two concise explanations and primary actions; no advertising or promotional chrome appears.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/comprehensive-probe.json", "evidence/home-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "At 360x800, layout metrics report scrollWidth=clientWidth=360 and horizontalOverflowPx=0; the form also reflows to one column.", "pathIds": [ "entry", "form-journey" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png", "evidence/comprehensive-probe.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The mobile layout works, but CSS inspection found no @container rules and 565 physical-direction declarations.", "pathIds": [ "entry" ], "artifacts": [ "evidence/comprehensive-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The focus probe reports outline-style:none for Menu, Volver and both entry CTAs; their heights are 38px, with the menu only 40x38px.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-mobile.png", "evidence/comprehensive-probe.json" ], "findingIds": [ "F06" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "The heading explicitly identifies expediente/solicitud status, and the two entry methods are explained and visibly actionable.", "pathIds": [ "entry", "form-journey" ], "artifacts": [ "evidence/form-flow/step-03-click.png", "evidence/form-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Flow replay successfully navigated entry -> Entrar formulario -> /consulta.html; the resulting form exposes NIE/date/year/CAPTCHA and Consultar with no account wall or upsell.", "pathIds": [ "entry", "form-journey" ], "artifacts": [ "evidence/form-flow/step-03-click.png", "evidence/form-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The desktop and mobile form screenshots show broken images for “Escuchar pista sonora” and “Recargar Captcha”; the probe reports naturalWidth 0 for both.", "pathIds": [ "form-journey" ], "artifacts": [ "evidence/form-flow/step-03-click.png", "evidence/form-error-flow/step-03-click.png", "evidence/form-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "Lighthouse measured FCP 6.4s and LCP 6.5s (performance 0.61), although the separate trace measured LCP 1.81s; this variance indicates fragile delivery.", "pathIds": [ "entry" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Mobile layout capture measured CLS 0; Lighthouse measured CLS 0.049, within the good range.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-summary.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Trace and Lighthouse both measured 0ms total blocking time; the layout observer found no long tasks.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-summary.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The HAR transferred 880,982 bytes; a 543,793-byte stylesheet and six synchronous head scripts have no async/defer, and the summary flags missing cache headers and no content encoding.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/comprehensive-probe.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "Lighthouse estimates 516 KiB unused CSS (97% of styles-sede.css) and 155 KiB unused JavaScript.", "pathIds": [ "entry" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "axe reports a critical aria-required-children failure on nav role=menubar and serious list semantics failures; the form probe reports no associated labels or aria-labels for NIE, date, year and CAPTCHA inputs.", "pathIds": [ "form-journey" ], "artifacts": [ "evidence/axe.json", "evidence/form-probe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Lighthouse color-contrast audit scored 1 and increased-contrast screenshot retained legible controls and text.", "pathIds": [ "entry" ], "artifacts": [ "evidence/axe.json", "evidence/comprehensive-probe.json", "evidence/form-probe.json" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "axe and Lighthouse flag H1-to-H4 heading order; computed focus styles are none for the primary CTAs and menu button.", "pathIds": [ "entry" ], "artifacts": [ "evidence/axe.json", "evidence/comprehensive-probe.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Desktop and mobile screenshots show unclipped text, readable line lengths and coherent reflow on both entry and form pages.", "pathIds": [ "entry" ], "artifacts": [ "evidence/axe.json", "evidence/comprehensive-probe.json", "evidence/form-probe.json" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "At 360px the layout has no horizontal overflow, but entry controls are 38px high and CAPTCHA audio/refresh images fail to load.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/form-error-flow/step-03-click.png" ], "findingIds": [ "F13" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "HAR completed with no HTTP errors on the representative load; Lighthouse-only localhost/chrome-extension errors were audit-environment probes and not attributed to site resources.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/comprehensive-probe.json", "evidence/home-desktop.png" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The image primitive found four of four images without width/height and three ajax-loader images without alt.", "pathIds": [ "entry" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F14" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "Lighthouse reports a deprecated unload listener, while the DOM loads jQuery 3.4.1, Modernizr and multiple old synchronous utility bundles.", "pathIds": [ "form-journey" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-dom.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Rendered DOM has a specific Spanish title and matching meta description for the expediente status task.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/comprehensive-probe.json", "evidence/home-desktop.png" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "Both entry CTAs use href=\"#\" with onclick submission, and /robots.txt returned a Tomcat 404 document; Lighthouse also marked robots.txt invalid.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/robots.txt", "evidence/lighthouse-summary.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The probe found no canonical or hreflang; both /robots.txt and /sitemap.xml returned the same 404 document.", "pathIds": [ "entry" ], "artifacts": [ "evidence/comprehensive-probe.json", "evidence/robots.txt" ], "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative route and journey recon.", "evidence": "This is a transactional status-check utility, not an article, product, event or rich public entity page requiring schema.org/social-preview metadata.", "reason": "This is a transactional status-check utility, not an article, product, event or rich public entity page requiring schema.org/social-preview metadata.", "pathIds": [ "entry", "form-journey" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The header audit found no CSP, HSTS or nosniff; the cookie audit found six cookies without Secure and all seven with SameSite=None.", "pathIds": [ "entry" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The tracker probe found ssl.google-analytics.com; seven legacy __utm*/infrastructure cookies are set, including a 400-day __utma cookie, with no consent surface observed.", "pathIds": [ "entry" ], "artifacts": [ "evidence/trackers.json", "evidence/cookies.json", "evidence/home-summary.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Lighthouse confirms no geolocation/notification prompt on load; the page offers Spain’s Cl@ve external authentication mechanism rather than collecting a local password.", "pathIds": [ "entry" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "CSP/frame-ancestors or X-Frame-Options, HSTS, Referrer-Policy, Permissions-Policy and X-Content-Type-Options are all missing.", "pathIds": [ "entry" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The crawler comparison reports only 13% content overlap, raw title/H1 absent, and the no-JS page explicitly says JavaScript is required; entry actions rely on onclick form submission.", "pathIds": [ "entry" ], "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-crawler.png", "evidence/home-dom.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Menu and entry-to-form flow replayed successfully at desktop and mobile sizes; no clipped overlay or failed async dependency appeared in the exercised path.", "pathIds": [ "entry" ], "artifacts": [ "evidence/discoverability.json", "evidence/resilience-probe.json", "evidence/form-flow/step-03-click.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative route and journey recon.", "evidence": "A confidential live case-status lookup is intrinsically online and is not an installable app use case.", "reason": "A confidential live case-status lookup is intrinsically online and is not an installable app use case.", "pathIds": [ "entry", "form-journey" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The resilience probe and robots/sitemap requests returned generic Tomcat 404 pages with no path back to the service.", "pathIds": [ "entry" ], "artifacts": [ "evidence/resilience-probe.json", "evidence/robots.txt" ], "findingIds": [ "F22" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The page declares lang=es, but CSS inspection found 565 physical left/right declarations and zero logical-property declarations.", "pathIds": [ "entry" ], "artifacts": [ "evidence/comprehensive-probe.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative route and journey recon.", "evidence": "The audited states do not display formatted dates, numbers, currencies or durations; the date is user input.", "reason": "The audited states do not display formatted dates, numbers, currencies or durations; the date is user input.", "pathIds": [ "entry", "form-journey" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative route and journey recon.", "evidence": "The audited journey contains no event times, schedules, time zones or DST-sensitive values.", "reason": "The audited journey contains no event times, schedules, time zones or DST-sensitive values.", "pathIds": [ "entry", "form-journey" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "No pricing, consent coercion, disguised advertising, continuity, nagging or confirmshaming appeared in entry and form screenshots.", "pathIds": [ "entry" ], "artifacts": [ "evidence/form-flow/step-03-click.png", "evidence/form-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "The form probe found required=false and no programmatic labels on every visible field; broken CAPTCHA helper controls prevent reliable recovery.", "pathIds": [ "form-journey" ], "artifacts": [ "evidence/form-probe.json", "evidence/form-error-flow/step-03-click.png" ], "findingIds": [ "F24" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "NIE, presentation date, birth year and CAPTCHA controls all report empty autocomplete, no inputmode/pattern, and the date remains a generic text field.", "pathIds": [ "form-journey" ], "artifacts": [ "evidence/form-probe.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative route and journey recon.", "evidence": "No checkout, subscription, pricing, consent, account-management or local authentication flow is present; Cl@ve is an external identity option.", "reason": "No checkout, subscription, pricing, consent, account-management or local authentication flow is present; Cl@ve is an external identity option.", "pathIds": [ "entry", "form-journey" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "The image audit found no oversized or below-fold eager image and the visible logo/CAPTCHA are small; asset waste is captured separately under code and third-party checks.", "pathIds": [ "entry" ], "artifacts": [ "evidence/home-dom.json", "evidence/comprehensive-probe.json", "evidence/home-desktop.png" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "Lighthouse estimates 516 KiB unused CSS and 155 KiB unused JS; HAR total is 880,982 bytes for a mostly text-and-button page.", "pathIds": [ "entry" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-summary.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct browser evidence and targeted probe described in the linked finding.", "evidence": "Two Google Analytics requests transfer 18,266 bytes and set long-lived tracking cookies during the sensitive service entry journey.", "pathIds": [ "entry" ], "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative route and journey recon.", "evidence": "This sensitive identity-and-CAPTCHA-protected status lookup has no declared agent-facing intent; exposing autonomous tools is not appropriate by default.", "reason": "This sensitive identity-and-CAPTCHA-protected status lookup has no declared agent-facing intent; exposing autonomous tools is not appropriate by default.", "pathIds": [ "entry", "form-journey" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Applicability judgement from representative route and journey recon.", "evidence": "The narrow deterministic status-check task has no summarisation or language-model use case.", "reason": "The narrow deterministic status-check task has no summarisation or language-model use case.", "pathIds": [ "entry", "form-journey" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "After 20 menu toggles, heap self-size increased only 113,944 bytes (2.2%) and node count 1,031 (1.1%), with no evidence of unbounded retained growth.", "pathIds": [ "entry" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-menu-valid.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Baseline heap self-size is 5.16 MB with 95,566 snapshot nodes, proportionate for the small page and legacy libraries.", "pathIds": [ "entry" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-menu-valid.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, flow, performance, accessibility, network or memory evidence.", "evidence": "Neither baseline nor post-interaction top constructor summary contains Detached* nodes; small closure/object growth after toggles is bounded in this sample.", "pathIds": [ "entry" ], "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post-menu-valid.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F05", "F06" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F07" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09", "F10" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12", "F13" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F14", "F15" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F16", "F17" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F18", "F19", "F20" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F21", "F22" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F23" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F24", "F25" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F26", "F27" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "This sensitive identity-and-CAPTCHA-protected status lookup has no declared agent-facing intent; exposing autonomous tools is not appropriate by default. The narrow deterministic status-check task has no summarisation or language-model use case." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "entry", "description": "Entry/choice page, representing the public landing template and choice between Cl@ve and manual lookup. Audited at desktop, mobile, dark, contrast, reduced-motion and crawler conditions.", "url": "https://infoext2.delegaciondelgobierno.gob.es/infoext2/", "conditions": [ "desktop", "viewport 360x800", "prefers-color-scheme: dark", "prefers-contrast: more", "prefers-reduced-motion: reduce", "JavaScript disabled" ], "result": "issues" }, { "id": "form-journey", "description": "Primary manual expediente lookup journey from entry to /consulta.html, representing the form template and identity/CAPTCHA flow.", "url": "https://infoext2.delegaciondelgobierno.gob.es/infoext2/consulta.html", "conditions": [ "desktop", "viewport 360x800", "keyboard/computed focus probe" ], "result": "issues" }, { "id": "error-route", "description": "Unknown route plus robots.txt/sitemap.xml responses, representing HTTP failure handling and indexing infrastructure.", "url": "https://infoext2.delegaciondelgobierno.gob.es/infoext2/definitely-not-found", "conditions": [ "HTTP 404" ], "result": "issues" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "summary": "The interface ignores the user’s dark colour-scheme preference.", "evidence": "The dark-mode screenshot is pixel-identical to the light capture; the computed probe reports colorScheme \"normal\" and no prefers-color-scheme rule.", "suggestedFix": "Declare color-scheme and provide preference-driven dark surface, text, border and control tokens.", "effort": "small", "artifacts": [ "evidence/home-dark.png", "evidence/comprehensive-probe.json" ], "pathId": "entry", "url": "https://infoext2.delegaciondelgobierno.gob.es" }, { "id": "F02", "severity": "low", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "guidanceCategory": "animation", "summary": "The entry-to-form navigation swaps abruptly.", "evidence": "The primary flow navigates from /infoext2/ to /consulta.html, while CSS inspection found no view-transition rules.", "suggestedFix": "Use a cross-document View Transition for this same-origin MPA journey, with a no-motion fallback.", "effort": "medium", "artifacts": [ "evidence/home-dom.json", "evidence/comprehensive-probe.json" ], "pathId": "entry", "url": "https://infoext2.delegaciondelgobierno.gob.es" }, { "id": "F03", "severity": "low", "confidence": "high", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "guidanceCategory": "user-experience", "summary": "Navigation chrome is static and consumes space without adapting to scroll state.", "evidence": "Desktop and mobile screenshots show a fixed-height application bar, and CSS inspection found no scroll-state query or progress treatment.", "suggestedFix": "Reduce or adapt the header after scroll using CSS scroll-state/container-query guidance where supported.", "effort": "small", "artifacts": [ "evidence/home-desktop.png", "evidence/home-dom.json" ], "pathId": "entry", "url": "https://infoext2.delegaciondelgobierno.gob.es" }, { "id": "F04", "severity": "low", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience", "summary": "A custom hidden dialog is implemented with divs rather than the dialog primitive.", "evidence": "DOM inspection found .mf-dialog and a veil but zero , popover or
elements.", "suggestedFix": "Replace modal behavior with and native close/focus semantics.", "effort": "medium", "artifacts": [ "evidence/home-dom.json", "evidence/comprehensive-probe.json" ], "pathId": "entry", "url": "https://infoext2.delegaciondelgobierno.gob.es" }, { "id": "F05", "severity": "low", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "css", "summary": "Responsiveness is viewport-driven rather than component-driven.", "evidence": "The mobile layout works, but CSS inspection found no @container rules and 565 physical-direction declarations.", "suggestedFix": "Define reusable modules as containment contexts and move local layout switches to container queries.", "effort": "medium", "artifacts": [ "evidence/comprehensive-probe.json" ], "pathId": "entry", "url": "https://infoext2.delegaciondelgobierno.gob.es" }, { "id": "F06", "severity": "high", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Primary actions have no visible keyboard focus and several targets are undersized.", "evidence": "The focus probe reports outline-style:none for Menu, Volver and both entry CTAs; their heights are 38px, with the menu only 40x38px.", "suggestedFix": "Add high-contrast :focus-visible styling and increase interactive target boxes to at least 44x44 CSS px.", "effort": "small", "artifacts": [ "evidence/home-mobile.png", "evidence/comprehensive-probe.json" ], "pathId": "entry", "url": "https://infoext2.delegaciondelgobierno.gob.es" }, { "id": "F07", "severity": "high", "confidence": "high", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "accessible-error-announcement", "guidanceCategory": "accessibility", "summary": "The form’s CAPTCHA recovery controls are visibly broken.", "evidence": "The desktop and mobile form screenshots show broken images for “Escuchar pista sonora” and “Recargar Captcha”; the probe reports naturalWidth 0 for both.", "suggestedFix": "Serve working audio and refresh controls as real labelled buttons, announce refresh/error state, and provide a non-visual alternative.", "effort": "medium", "artifacts": [ "evidence/form-flow/step-03-click.png", "evidence/form-error-flow/step-03-click.png", "evidence/form-probe.json" ], "pathId": "form-journey", "url": "https://infoext2.delegaciondelgobierno.gob.es" }, { "id": "F08", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "summary": "Cold-load performance is inconsistent and slow under Lighthouse simulation.", "evidence": "Lighthouse measured FCP 6.4s and LCP 6.5s (performance 0.61), although the separate trace measured LCP 1.81s; this variance indicates fragile delivery.", "suggestedFix": "Remove blocking and unused resources, compress responses, and remeasure under representative network and device conditions.", "effort": "medium", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json" ], "pathId": "entry", "url": "https://infoext2.delegaciondelgobierno.gob.es" }, { "id": "F09", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "guidanceCategory": "performance", "summary": "Critical resource delivery is dominated by uncached, uncompressed, render-blocking assets.", "evidence": "The HAR transferred 880,982 bytes; a 543,793-byte stylesheet and six synchronous head scripts have no async/defer, and the summary flags missing cache headers and no content encoding.", "suggestedFix": "Compress text resources, add immutable caching for versioned assets, split critical CSS, and defer non-critical scripts.", "effort": "medium", "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/comprehensive-probe.json" ], "pathId": "entry", "url": "https://infoext2.delegaciondelgobierno.gob.es" }, { "id": "F10", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "summary": "Most of the shipped CSS and substantial JavaScript are unused on the primary page.", "evidence": "Lighthouse estimates 516 KiB unused CSS (97% of styles-sede.css) and 155 KiB unused JavaScript.", "suggestedFix": "Create a route-specific CSS bundle and remove or conditionally load jQuery, tooltip, datepicker and framework code not needed on the entry page.", "effort": "large", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-summary.json" ], "pathId": "entry", "url": "https://infoext2.delegaciondelgobierno.gob.es" }, { "id": "F11", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Navigation roles and form-field naming are not programmatically sound.", "evidence": "axe reports a critical aria-required-children failure on nav role=menubar and serious list semantics failures; the form probe reports no associated labels or aria-labels for NIE, date, year and CAPTCHA inputs.", "suggestedFix": "Use a normal