{
  "url": "https://payments.gcash.com",
  "auditedAt": "2026-07-28T02:39:22.803Z",
  "mode": "report",
  "status": "blocked",
  "statusDetail": "Audit blocked during recon: the origin returned HTTP 403 Amazon S3 AccessDenied. No judgement about the intended payment application is possible.",
  "page": {
    "appType": "unknown",
    "framework": "unknown",
    "notes": "Only an Amazon S3 AccessDenied XML response was observable."
  },
  "evidenceUsed": [
    "screenshot",
    "dom",
    "layout-metrics",
    "discoverability",
    "headers",
    "har",
    "curl-response-headers",
    "modern-web-guidance"
  ],
  "guidanceConsulted": [
    "adapt-scrollbar-to-contrast-preferences",
    "accessibility",
    "dark-mode",
    "carousel-slide-effects",
    "scroll-snap-realtime-feedback",
    "css",
    "pull-to-reveal",
    "scroll-target-on-load",
    "scroll-position-aware-elements",
    "defer-rendering-heavy-content",
    "soft-edge-content-fade",
    "interactions-in-complex-layouts",
    "required-field-feedback",
    "validate-input-after-interaction",
    "performance",
    "html",
    "webmcp",
    "accessible-error-announcement",
    "resolution-optimized-pseudo-elements",
    "security",
    "deliver-optimized-decorative-images",
    "search-hidden-content",
    "interactive-content-reveal",
    "faster-spa-view-transitions",
    "privacy",
    "passkey-reauthentication",
    "coordinate-global-events",
    "calculate-event-differentials",
    "capture-location-agnostic-data",
    "autofill-payment-form",
    "forms",
    "autofill-sign-up-form",
    "efficient-background-processing",
    "agentic-forms",
    "summarizer",
    "agentic-javascript-tools",
    "persistent-top-layer-ui",
    "defer-work-until-scroll-ends",
    "identify-inp-causes"
  ],
  "artifacts": [
    {
      "type": "screenshot",
      "path": "evidence/desktop.png",
      "caption": "Desktop browser view showing the S3 XML AccessDenied response.",
      "condition": "desktop viewport; 3 second wait"
    },
    {
      "type": "screenshot",
      "path": "evidence/mobile.png",
      "caption": "Mobile capture of the same AccessDenied response.",
      "condition": "viewport: 360x800"
    },
    {
      "type": "dom",
      "path": "evidence/dom.json",
      "caption": "Rendered DOM containing Chrome’s XML viewer around the S3 AccessDenied document."
    },
    {
      "type": "layout",
      "path": "evidence/mobile-layout.json",
      "caption": "Mobile layout metrics for the error document; no intended application was available.",
      "condition": "viewport: 360x800"
    },
    {
      "type": "discoverability",
      "path": "evidence/discoverability.json",
      "caption": "Raw and rendered inspection reporting HTTP 403; result describes the error response, not the intended site."
    },
    {
      "type": "screenshot",
      "path": "evidence/discoverability-rendered.png",
      "caption": "Browser-view screenshot of the 403 XML response."
    },
    {
      "type": "screenshot",
      "path": "evidence/discoverability-crawler.png",
      "caption": "Crawler-view screenshot of the 403 XML response."
    },
    {
      "type": "other",
      "path": "evidence/headers.json",
      "caption": "Security-header probe of the 403 response; not treated as evidence about the unavailable application."
    },
    {
      "type": "har",
      "path": "evidence/network.har",
      "caption": "HAR proving the main document returned HTTP 403."
    },
    {
      "type": "har-summary",
      "path": "evidence/network-summary.json",
      "caption": "Compact network summary: three requests, including one HTTP 403 document response."
    },
    {
      "type": "other",
      "path": "evidence/curl-headers.txt",
      "caption": "Independent curl response headers: HTTP/2 403, application/xml, server AmazonS3."
    },
    {
      "type": "other",
      "path": "coverage-manifest.tsv",
      "caption": "Materialised manifest of all 58 expected principle/check pairs."
    },
    {
      "type": "other",
      "path": "evidence/guidance/retrieved.md",
      "caption": "Modern Web Guidance retrieved up front from pinned catalog 0.0.172."
    },
    {
      "type": "other",
      "path": "evidence/guidance/searches.json",
      "caption": "Per-principle live searches of pinned Modern Web Guidance catalog 0.0.172."
    },
    {
      "type": "other",
      "path": "evidence/guidance/catalog.json",
      "caption": "Pinned Modern Web Guidance catalog listing used for the audit plan."
    },
    {
      "type": "other",
      "path": "validation.log",
      "caption": "Atomic coverage validator output showing 58 blocked checks and publication-gate failure."
    }
  ],
  "config": {
    "loaded": false
  },
  "coverage": {
    "catalogVersion": "modern-web-guidance@0.0.172",
    "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7",
    "expected": 58,
    "recorded": 58,
    "judged": 0,
    "blocked": 58,
    "notRun": 0,
    "missing": 0,
    "unknown": 0,
    "duplicates": 0,
    "complete": false
  },
  "checkOutcomes": [
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-color-scheme",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The respects-color-scheme condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-reduced-motion",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The respects-reduced-motion condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-contrast",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The respects-contrast condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "view-transitions",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The view-transitions condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "scroll-driven-animations",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The scroll-driven-animations condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "physical-gestures",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The physical-gestures condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "scroll-state-aware-chrome",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The scroll-state-aware-chrome condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "anchored-positioning",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The anchored-positioning condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "directs-attention",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The directs-attention condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "no-intrusive-interruptions",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The no-intrusive-interruptions condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "semantic-dismissible-primitives",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The semantic-dismissible-primitives condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "reduced-chrome",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The reduced-chrome condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "responsive-no-horizontal-scroll",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The responsive-no-horizontal-scroll condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "component-level-responsiveness",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The component-level-responsiveness condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "input-modality-aware",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The input-modality-aware condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "clear-purpose-and-primary-action",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The clear-purpose-and-primary-action condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "primary-flow-completion",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The primary-flow-completion condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "clear-system-state-and-recovery",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The clear-system-state-and-recovery condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "good-core-web-vitals",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The good-core-web-vitals condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "visual-stability",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The visual-stability condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "efficient-main-thread",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The efficient-main-thread condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "efficient-resource-delivery",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The efficient-resource-delivery condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "trim-unused-and-duplicate-code",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The trim-unused-and-duplicate-code condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "names-roles-labels",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The names-roles-labels condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "sufficient-contrast",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The sufficient-contrast condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "structure-and-focus",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The structure-and-focus condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "legible-text",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The legible-text condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "zoom-reflow-targets-and-media",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The zoom-reflow-targets-and-media condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "no-console-errors",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The no-console-errors condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "sound-document-and-assets",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The sound-document-and-assets condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "browser-platform-hygiene",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The browser-platform-hygiene condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "title-and-description",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The title-and-description condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "crawlable-and-mobile-friendly",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The crawlable-and-mobile-friendly condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "canonical-and-indexing-signals",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The canonical-and-indexing-signals condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "structured-and-shareable-metadata",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The structured-and-shareable-metadata condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "secure-transport-and-headers",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The secure-transport-and-headers condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "data-minimisation-and-third-parties",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The data-minimisation-and-third-parties condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "in-context-permissions-and-modern-auth",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The in-context-permissions-and-modern-auth condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "defensive-browser-policies",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The defensive-browser-policies condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "progressive-enhancement",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The progressive-enhancement condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "resilient-runtime-behaviour",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The resilient-runtime-behaviour condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "offline-and-installable",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The offline-and-installable condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "network-and-http-failure-states",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The network-and-http-failure-states condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "lang-dir-and-logical-properties",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The lang-dir-and-logical-properties condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "locale-aware-data",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The locale-aware-data condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "time-zone-correctness",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The time-zone-correctness condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "no-dark-patterns",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The no-dark-patterns condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "humane-error-handling",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The humane-error-handling condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "trustworthy-input-assistance",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The trustworthy-input-assistance condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "safe-commercial-and-account-flows",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The safe-commercial-and-account-flows condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "optimised-assets",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The optimised-assets condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "no-wasteful-work",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The no-wasteful-work condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "third-party-and-media-budget",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The third-party-and-media-budget condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-agent-ready",
      "checkId": "structured-agent-capabilities",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The structured-agent-capabilities condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-agent-ready",
      "checkId": "on-device-inference",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The on-device-inference condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "no-leak-under-repeated-interaction",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The no-leak-under-repeated-interaction condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "bounded-footprint",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The bounded-footprint condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "no-detached-dom-or-unbounded-listeners",
      "status": "blocked",
      "confidence": "high",
      "method": "Attempted browser navigation and prerequisite recon using screenshot, rendered DOM, mobile layout, discoverability fetch, response headers, and HAR capture.",
      "evidence": "Navigation reached only the S3 AccessDenied response (HTTP 403), not the intended site. The no-detached-dom-or-unbounded-listeners condition could not be exercised or observed.",
      "reason": "The public entry URL returned HTTP 403 application/xml from Amazon S3 with an AccessDenied document, so the actual payment experience, routes, controls, states, and authored assets were unavailable to inspect.",
      "pathIds": [
        "entry-access-attempt"
      ],
      "artifacts": [
        "evidence/desktop.png",
        "evidence/dom.json",
        "evidence/network-summary.json"
      ]
    }
  ],
  "principleOutcomes": [
    {
      "principleId": "respect-user-preferences",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 3 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "implement-natural-interactions",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 3 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "provide-guided-navigation",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 3 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 3 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 3 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "support-core-task-success",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 3 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "be-fast-and-stable",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 5 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "be-inclusive",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 5 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "follow-best-practices",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 3 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "be-discoverable",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 4 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "be-private-and-secure",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 4 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "be-resilient",
      "expectation": "contextual",
      "status": "incomplete",
      "reason": "All 4 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "be-internationalised",
      "expectation": "contextual",
      "status": "incomplete",
      "reason": "All 3 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "be-trustworthy",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 4 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "be-sustainable",
      "expectation": "contextual",
      "status": "incomplete",
      "reason": "All 3 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "be-agent-ready",
      "expectation": "contextual",
      "status": "incomplete",
      "reason": "All 2 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    },
    {
      "principleId": "be-memory-efficient",
      "expectation": "default",
      "status": "incomplete",
      "reason": "All 3 check(s) are blocked because the origin serves only an HTTP 403 S3 AccessDenied response from this audit environment."
    }
  ],
  "paths": [
    {
      "id": "entry-access-attempt",
      "description": "Attempted the public payment entry URL to identify routes and the primary payment journey. Coverage could not proceed because the origin returned an S3 AccessDenied response. No additional templates or flows were covered.",
      "url": "https://payments.gcash.com/",
      "conditions": [
        "desktop viewport",
        "viewport: 360x800",
        "non-JavaScript crawler fetch"
      ],
      "result": "failed"
    }
  ],
  "findings": [],
  "taskList": [],
  "budget": {
    "pathCount": 1,
    "auditPasses": 1
  },
  "agent": "pi",
  "runId": "2026-07-28T02-33-15-731Z"
}