{ "url": "https://tabs.ultimate-guitar.com", "auditedAt": "2026-07-21T17:02:01.812Z", "mode": "report", "status": "completed", "statusDetail": "Atomic coverage complete across 58/58 registered checks and five representative paths.", "page": { "appType": "hybrid", "framework": "React", "notes": "tabs.ultimate-guitar.com redirects its root to the www Explore listing. Public MPA-style routes hydrate substantial client-rendered content." }, "evidenceUsed": [ "screenshot", "layout-metrics", "dom", "evaluate-probe", "trace", "har", "lighthouse", "headers", "cookies", "trackers", "secrets", "images", "discoverability", "heap-summary", "curl robots/sitemap/status" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/entry-desktop.png", "caption": "Explore listing at desktop width, with consent interstitial on load", "findingIds": [ "F01", "F09" ] }, { "type": "screenshot", "path": "evidence/explore-mobile.png", "caption": "Explore listing at a 360x800 viewport, rendered as a scaled 1280px desktop page", "condition": "viewport: 360x800", "findingIds": [ "F01", "F02", "F16" ] }, { "type": "layout", "path": "evidence/explore-mobile-layout.json", "caption": "Mobile layout metrics: visual viewport scaled to 0.278 with a 1298 CSS-pixel layout", "condition": "viewport: 360x800", "findingIds": [ "F02" ] }, { "type": "screenshot", "path": "evidence/tab-desktop.png", "caption": "Representative Wonderwall chord detail page at desktop width", "findingIds": [] }, { "type": "screenshot", "path": "evidence/tab-mobile.png", "caption": "Chord detail page at 360x800, also scaled from desktop layout", "condition": "viewport: 360x800", "findingIds": [ "F02" ] }, { "type": "layout", "path": "evidence/tab-mobile-layout.json", "caption": "Chord page mobile layout metrics", "condition": "viewport: 360x800", "findingIds": [ "F02" ] }, { "type": "screenshot", "path": "evidence/artist-desktop.png", "caption": "Representative artist listing page", "findingIds": [] }, { "type": "screenshot", "path": "evidence/error-desktop.png", "caption": "Useful 404 recovery page with homepage and report-problem actions", "findingIds": [] }, { "type": "dom", "path": "evidence/entry-dom.json", "caption": "Rendered DOM and computed styles for entry route", "findingIds": [ "F14", "F15" ] }, { "type": "other", "path": "evidence/entry-recon.json", "caption": "Entry route links, text, and metadata recon", "findingIds": [ "F13", "F20" ] }, { "type": "other", "path": "evidence/explore-platform-probe.json", "caption": "Document, script, semantic primitive, modern CSS, control-size, and tabindex probe", "findingIds": [ "F12", "F13", "F14", "F15", "F16", "F18", "F20" ] }, { "type": "other", "path": "evidence/explore-light-probe.json", "caption": "Computed colors under prefers-color-scheme: light", "condition": "prefers-color-scheme: light", "findingIds": [ "F12" ] }, { "type": "other", "path": "evidence/explore-dark-probe.json", "caption": "Computed colors under prefers-color-scheme: dark", "condition": "prefers-color-scheme: dark", "findingIds": [ "F12" ] }, { "type": "other", "path": "evidence/explore-reduced-motion.json", "caption": "Animation and transition probe under reduced motion", "condition": "prefers-reduced-motion: reduce", "findingIds": [] }, { "type": "other", "path": "evidence/explore-focus-probe.json", "caption": "Programmatic focus styles and positive tabindex sequence", "findingIds": [ "F05" ] }, { "type": "other", "path": "evidence/login-flow-probe.json", "caption": "Login overlay form structure after consent refusal and login activation", "findingIds": [ "F03", "F11", "F15" ] }, { "type": "other", "path": "evidence/tab-metadata-probe.json", "caption": "Tab detail title, canonical, JSON-LD, Open Graph, h1, and rendered content", "findingIds": [ "F18" ] }, { "type": "other", "path": "evidence/error-probe.json", "caption": "404 status-surface actions and media probe", "findingIds": [] }, { "type": "trace", "path": "evidence/explore-trace", "caption": "DevTools performance trace for Explore", "findingIds": [ "F06" ] }, { "type": "trace-summary", "path": "evidence/explore-trace-summary.json", "caption": "Trace summary: LCP 2.30s, TBT 607ms, longest task 544ms", "findingIds": [ "F06" ] }, { "type": "har", "path": "evidence/explore-network.har", "caption": "HAR 1.2 network capture for Explore", "findingIds": [] }, { "type": "har-summary", "path": "evidence/explore-network-summary.json", "caption": "Network summary: 45 requests, 1.17MB, 386KB third-party", "findingIds": [ "F07", "F09" ] }, { "type": "lighthouse", "path": "evidence/explore-lighthouse.json", "caption": "Lighthouse report for Explore", "findingIds": [] }, { "type": "other", "path": "evidence/explore-lighthouse-summary.json", "caption": "Compact Lighthouse scores, metrics, and failures", "findingIds": [ "F03", "F04", "F05", "F06", "F07", "F17" ] }, { "type": "other", "path": "evidence/explore-headers.json", "caption": "Security response-header audit", "findingIds": [ "F08" ] }, { "type": "other", "path": "evidence/explore-cookies.json", "caption": "Cookie security and lifetime audit", "findingIds": [ "F08" ] }, { "type": "other", "path": "evidence/explore-trackers.json", "caption": "Third-party origin and tracker footprint", "findingIds": [ "F09" ] }, { "type": "other", "path": "evidence/explore-secrets.json", "caption": "Client-visible secret scan with zero findings", "findingIds": [] }, { "type": "other", "path": "evidence/explore-images.json", "caption": "Rendered image audit on Explore", "findingIds": [] }, { "type": "discoverability", "path": "evidence/explore-discoverability.json", "caption": "Raw-HTML vs rendered discoverability comparison for Explore", "findingIds": [ "F10" ] }, { "type": "screenshot", "path": "evidence/explore-discoverability-rendered.png", "caption": "Rendered browser view of Explore", "findingIds": [] }, { "type": "screenshot", "path": "evidence/explore-discoverability-crawler.png", "caption": "Crawler/no-JS view of Explore", "findingIds": [ "F10" ] }, { "type": "discoverability", "path": "evidence/tab-discoverability.json", "caption": "Raw-HTML vs rendered discoverability comparison for chord detail", "findingIds": [ "F10" ] }, { "type": "screenshot", "path": "evidence/tab-discoverability-rendered.png", "caption": "Rendered browser view of chord detail", "findingIds": [] }, { "type": "screenshot", "path": "evidence/tab-discoverability-crawler.png", "caption": "Crawler/no-JS view of chord detail", "findingIds": [ "F10" ] }, { "type": "heap", "path": "evidence/explore-heap-baseline", "caption": "Explore baseline heap summary", "findingIds": [] }, { "type": "heap", "path": "evidence/explore-heap-post", "caption": "Explore post-interaction heap summary after consent refusal", "findingIds": [] }, { "type": "heap", "path": "evidence/tab-heap-baseline", "caption": "Chord detail baseline heap summary", "findingIds": [ "F21" ] }, { "type": "heap", "path": "evidence/tab-heap-post", "caption": "Chord detail heap summary after 10 Simplify toggles", "findingIds": [ "F21" ] }, { "type": "other", "path": "evidence/explore-capabilities-probe.json", "caption": "Manifest, service worker, permissions, WebAuthn, WebMCP, and built-in AI capability probe", "findingIds": [ "F19" ] }, { "type": "other", "path": "evidence/explore-pwa-probe.json", "caption": "Manifest details and cache-storage probe", "findingIds": [ "F19" ] }, { "type": "other", "path": "evidence/robots.txt", "caption": "Public robots.txt", "findingIds": [] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "Public sitemap index", "findingIds": [] }, { "type": "other", "path": "evidence/404-status.txt", "caption": "HTTP status for representative missing route", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "The CSS probe finds no color-scheme/prefers-color-scheme or forced-colors/prefers-contrast support. The light condition remains #111, while the dark probe produced black-on-black computed body colors during loading.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-platform-probe.json", "evidence/explore-light-probe.json", "evidence/explore-dark-probe.json" ], "findingIds": [ "F12" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "Reduced-motion emulation matched, no active document animations were returned, and CSS contains a reduced-motion rule; only short control transitions remained.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Lighthouse reports repeated 1.11:1 black-on-#111 rating counts and 4.39:1 metadata text, below the required 4.5:1 for normal text. The CSS probe finds no color-scheme/prefers-color-scheme or forced-colors/prefers-contrast support. The light condition remains #111, while the dark probe produced black-on-black computed body colors during loading.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-lighthouse-summary.json", "evidence/explore-platform-probe.json", "evidence/explore-light-probe.json", "evidence/explore-dark-probe.json" ], "findingIds": [ "F12", "F04" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Platform/CSS inspection found no view-transition usage across an MPA whose primary journey moves from Explore to chord detail.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-platform-probe.json", "evidence/entry-recon.json" ], "findingIds": [ "F13" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths.", "evidence": "No scroll-linked decorative or scrollytelling motion is present; ordinary document scrolling is the content interaction.", "reason": "No scroll-linked decorative or scrollytelling motion is present; ordinary document scrolling is the content interaction.", "pathIds": [ "explore", "tab" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "Screenshots and DOM inspection show native document scrolling and ordinary links/buttons, with no custom pointer-driven gesture surface fighting platform behavior.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "The Explore page is over 3,000px tall, while CSS inspection found no scroll-state queries or scroll timelines and screenshots show no progress or return affordance.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/entry-dom.json", "evidence/explore-platform-probe.json" ], "findingIds": [ "F14" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "The loaded consent overlay and activated login UI are modal surfaces, but DOM inspection found zero dialog and popover elements; the login form is not within dialog or role=dialog.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/entry-dom.json", "evidence/login-flow-probe.json", "evidence/explore-platform-probe.json" ], "findingIds": [ "F15" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Platform/CSS inspection found no view-transition usage across an MPA whose primary journey moves from Explore to chord detail.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-platform-probe.json", "evidence/entry-recon.json" ], "findingIds": [ "F13" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Desktop and 360x800 screenshots show an opaque full-content scrim and modal before interaction; its copy asks users to consider processing by 1,725 partners.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/entry-desktop.png", "evidence/explore-mobile.png" ], "findingIds": [ "F01" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "The loaded consent overlay and activated login UI are modal surfaces, but DOM inspection found zero dialog and popover elements; the login form is not within dialog or role=dialog.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/entry-dom.json", "evidence/login-flow-probe.json", "evidence/explore-platform-probe.json" ], "findingIds": [ "F15" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Desktop and 360x800 screenshots show an opaque full-content scrim and modal before interaction; its copy asks users to consider processing by 1,725 partners.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/entry-desktop.png", "evidence/explore-mobile.png" ], "findingIds": [ "F01" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "At a 360x800 viewport the page sets width=1280; layout reports a 1298px CSS viewport at scale 0.278. Text and controls are visibly tiny on both Explore and the chord page.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-mobile.png", "evidence/explore-mobile-layout.json", "evidence/tab-mobile.png", "evidence/tab-mobile-layout.json" ], "findingIds": [ "F02" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "CSS inspection found no @container rules; the 360px capture simply shrinks the desktop table and sidebar instead of recomposing cards/filters.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-platform-probe.json", "evidence/explore-mobile.png" ], "findingIds": [ "F16" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Lighthouse flags positive tabindex values on list links; the probe counted 49 positive tabindex controls. Focused header links compute outline:none and no box shadow.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-focus-probe.json", "evidence/explore-lighthouse-summary.json" ], "findingIds": [ "F05" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "The Explore h1, category filters, popular-song list, and chord links make the browse-and-open purpose immediately clear.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "The representative Explore -> Wonderwall route completed and rendered the full chord content and reading controls without account gating.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "A real 404 returns HTTP 404 and presents prominent homepage and report-a-problem recovery actions.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Lighthouse measured LCP 6.6s, TBT 1,050ms, interactive 7.1s, and performance 0.52. The raw-CDP trace corroborates a 544ms longest task and 607ms TBT.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-lighthouse-summary.json", "evidence/explore-trace-summary.json", "evidence/explore-trace" ], "findingIds": [ "F06" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "Raw-CDP mobile layout measured CLS 0.0019 on both Explore and chord detail; Lighthouse CLS 0.09 remained in the good range.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Lighthouse measured LCP 6.6s, TBT 1,050ms, interactive 7.1s, and performance 0.52. The raw-CDP trace corroborates a 544ms longest task and 607ms TBT.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-lighthouse-summary.json", "evidence/explore-trace-summary.json", "evidence/explore-trace" ], "findingIds": [ "F06" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Lighthouse measured LCP 6.6s, TBT 1,050ms, interactive 7.1s, and performance 0.52. The raw-CDP trace corroborates a 544ms longest task and 607ms TBT.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-lighthouse-summary.json", "evidence/explore-trace-summary.json", "evidence/explore-trace" ], "findingIds": [ "F06" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Lighthouse estimates 190KiB of avoidable JavaScript, including roughly half of two CMP bundles and large mobile application chunks.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-lighthouse-summary.json", "evidence/explore-network-summary.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Lighthouse reports a nameless floating-action button. The login flow probe finds username and password inputs with neither labels nor aria-label.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-lighthouse-summary.json", "evidence/login-flow-probe.json" ], "findingIds": [ "F03" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Lighthouse reports repeated 1.11:1 black-on-#111 rating counts and 4.39:1 metadata text, below the required 4.5:1 for normal text.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-lighthouse-summary.json" ], "findingIds": [ "F04" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Lighthouse flags positive tabindex values on list links; the probe counted 49 positive tabindex controls. Focused header links compute outline:none and no box shadow.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-focus-probe.json", "evidence/explore-lighthouse-summary.json" ], "findingIds": [ "F05" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "At a 360x800 viewport the page sets width=1280; layout reports a 1298px CSS viewport at scale 0.278. Text and controls are visibly tiny on both Explore and the chord page. Lighthouse reports repeated 1.11:1 black-on-#111 rating counts and 4.39:1 metadata text, below the required 4.5:1 for normal text.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-mobile.png", "evidence/explore-mobile-layout.json", "evidence/tab-mobile.png", "evidence/tab-mobile-layout.json", "evidence/explore-lighthouse-summary.json" ], "findingIds": [ "F02", "F04" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "At a 360x800 viewport the page sets width=1280; layout reports a 1298px CSS viewport at scale 0.278. Text and controls are visibly tiny on both Explore and the chord page. Lighthouse flags positive tabindex values on list links; the probe counted 49 positive tabindex controls. Focused header links compute outline:none and no box shadow.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-mobile.png", "evidence/explore-mobile-layout.json", "evidence/tab-mobile.png", "evidence/tab-mobile-layout.json", "evidence/explore-focus-probe.json", "evidence/explore-lighthouse-summary.json" ], "findingIds": [ "F02", "F05" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "Lighthouse errors-in-console audit passed with no logged browser errors.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "DOM/images evidence shows HTML doctype, UTF-8, and no rendered img sizing/alt issues on Explore.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Lighthouse reports three deprecation warnings, including deprecated Shared Storage and Protected Audience usage from Cloudflare challenge code.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-lighthouse-summary.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "Explore has a descriptive title and meta description; chord detail has a specific title and excerpt description.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "At a 360x800 viewport the page sets width=1280; layout reports a 1298px CSS viewport at scale 0.278. Text and controls are visibly tiny on both Explore and the chord page. Discoverability measured 1% raw-content coverage for Explore with raw HTTP 503 and 2% for the chord page; both were classified as JS shells and their crawler screenshots are blank.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-mobile.png", "evidence/explore-mobile-layout.json", "evidence/tab-mobile.png", "evidence/tab-mobile-layout.json", "evidence/explore-discoverability.json", "evidence/explore-discoverability-crawler.png", "evidence/tab-discoverability.json", "evidence/tab-discoverability-crawler.png" ], "findingIds": [ "F10", "F02" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Rendered metadata probe found no canonical, hreflang, JSON-LD, or Open Graph metadata on Explore, although the chord detail provides canonical, JSON-LD and Open Graph.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-platform-probe.json", "evidence/tab-metadata-probe.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Rendered metadata probe found no canonical, hreflang, JSON-LD, or Open Graph metadata on Explore, although the chord detail provides canonical, JSON-LD and Open Graph.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-platform-probe.json", "evidence/tab-metadata-probe.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Headers audit finds no HSTS, X-Content-Type-Options, or Permissions-Policy; CSP only declares frame-ancestors. Cookie audit finds seven cookies without Secure and several SameSite=None cookies.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-headers.json", "evidence/explore-cookies.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "The consent copy names 1,725 partners. HAR records 17 third-party requests and 386,118 transferred bytes, with 12 requests and 381,924 bytes from InMobi CMP origins before consent.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/entry-desktop.png", "evidence/explore-network-summary.json", "evidence/explore-trackers.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "After activating Log in, the DOM contains an unsemantic custom form with username/password inputs, no labels, no autocomplete tokens, and no visible passkey control.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/login-flow-probe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Headers audit finds no HSTS, X-Content-Type-Options, or Permissions-Policy; CSP only declares frame-ancestors. Cookie audit finds seven cookies without Secure and several SameSite=None cookies.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-headers.json", "evidence/explore-cookies.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Discoverability measured 1% raw-content coverage for Explore with raw HTTP 503 and 2% for the chord page; both were classified as JS shells and their crawler screenshots are blank.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-discoverability.json", "evidence/explore-discoverability-crawler.png", "evidence/tab-discoverability.json", "evidence/tab-discoverability-crawler.png" ], "findingIds": [ "F10" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "Representative consent, login, and 404 surfaces rendered without clipping at tested desktop conditions and key content remained recoverable.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "A manifest and service-worker registration are present, but Cache Storage had no keys after load, so no offline fallback or precached shell/content was observable.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-capabilities-probe.json", "evidence/explore-pwa-probe.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "The tested missing route returned a truthful HTTP 404 with clear recovery actions rather than a blank shell or false success.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "The site offers language/country UI and html lang=en, but dir is absent, no hreflang is exposed on Explore, and inspected CSS contained no logical sizing/spacing properties.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-platform-probe.json", "evidence/entry-recon.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "The tested English/global listing formats large counts with locale separators and exposes language/country selection; no hand-rolled date-entry flow was present.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths.", "evidence": "The representative listing and chord-reading journeys contain no scheduling, recurring event, or time-zone-sensitive transaction.", "reason": "The representative listing and chord-reading journeys contain no scheduling, recurring event, or time-zone-sensitive transaction.", "pathIds": [ "explore", "tab" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Desktop and 360x800 screenshots show an opaque full-content scrim and modal before interaction; its copy asks users to consider processing by 1,725 partners.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/entry-desktop.png", "evidence/explore-mobile.png" ], "findingIds": [ "F01" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "After activating Log in, the DOM contains an unsemantic custom form with username/password inputs, no labels, no autocomplete tokens, and no visible passkey control.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/login-flow-probe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "After activating Log in, the DOM contains an unsemantic custom form with username/password inputs, no labels, no autocomplete tokens, and no visible passkey control.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/login-flow-probe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "After activating Log in, the DOM contains an unsemantic custom form with username/password inputs, no labels, no autocomplete tokens, and no visible passkey control.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/login-flow-probe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "HAR shows only two small image transfers (10.6KB total), and the images primitive found no oversized, legacy, or missing-srcset img elements on Explore.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Lighthouse estimates 190KiB of avoidable JavaScript, including roughly half of two CMP bundles and large mobile application chunks.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/explore-lighthouse-summary.json", "evidence/explore-network-summary.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "The consent copy names 1,725 partners. HAR records 17 third-party requests and 386,118 transferred bytes, with 12 requests and 381,924 bytes from InMobi CMP origins before consent.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/entry-desktop.png", "evidence/explore-network-summary.json", "evidence/explore-trackers.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths.", "evidence": "No developer-declared agent-facing transactional surface was found; emerging WebMCP exposure is therefore outside this audit context.", "reason": "No developer-declared agent-facing transactional surface was found; emerging WebMCP exposure is therefore outside this audit context.", "pathIds": [ "explore", "tab" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths.", "evidence": "The core browse/read-tabs journey has no clear inference task that must run on device; built-in AI absence is not penalized.", "reason": "The core browse/read-tabs journey has no clear inference task that must run on device; built-in AI absence is not penalized.", "pathIds": [ "explore", "tab" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "issues", "confidence": "medium", "method": "Direct visual, DOM/evaluate, network, performance, accessibility, discoverability, or heap evidence as cited.", "evidence": "Heap summary rose from 704,860 nodes / 32.0MB to 926,248 nodes / 42.1MB after 10 Simplify toggles. Because snapshots used fresh browser sessions, confidence is medium rather than high.", "pathIds": [ "explore", "tab", "artist", "login", "error" ], "artifacts": [ "evidence/tab-heap-baseline", "evidence/tab-heap-post" ], "findingIds": [ "F21" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "Baseline heaps were 28.1MB for Explore and 32.0MB for the richer chord detail, proportionate to the rendered React content despite the separate repeated-interaction concern.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Direct screenshots, DOM/evaluate probes, route walkthrough, Lighthouse, HAR/trace, metadata, or heap summaries as appropriate.", "evidence": "Neither retained-heap summary showed Detached* constructors among the largest retained constructors; no direct detached-DOM signal was observed.", "pathIds": [ "explore", "tab", "artist", "login", "error" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F12", "F04" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F13" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F14", "F15", "F13" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F15" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F02", "F16", "F05" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass" }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F03", "F04", "F05", "F02" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F02", "F18" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09", "F11" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F10", "F19" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F20" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F11" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F07", "F09" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No developer-declared agent-facing transactional surface was found; emerging WebMCP exposure is therefore outside this audit context. The core browse/read-tabs journey has no clear inference task that must run on device; built-in AI absence is not penalized." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F21" ] } ], "paths": [ { "id": "explore", "description": "Redirect target and primary discovery/listing archetype; includes desktop, mobile, preferences, keyboard, performance, network, privacy, PWA and discoverability conditions.", "url": "https://www.ultimate-guitar.com/explore", "conditions": [ "desktop", "viewport 360x800", "prefers-color-scheme light/dark", "prefers-reduced-motion reduce", "keyboard-only", "fresh storage" ], "result": "issues" }, { "id": "tab", "description": "Representative core content/detail journey: Wonderwall chord page, including desktop/mobile, metadata, no-JS and repeated Simplify interaction.", "url": "https://tabs.ultimate-guitar.com/tab/oasis/wonderwall-chords-27596", "conditions": [ "desktop", "viewport 360x800", "no JavaScript crawler", "10 repeated Simplify toggles" ], "result": "issues" }, { "id": "artist", "description": "Representative artist/listing template to avoid homepage-only coverage.", "url": "https://www.ultimate-guitar.com/artist/oasis_734", "conditions": [ "desktop" ], "result": "issues" }, { "id": "login", "description": "Account journey opened from the Explore page after refusing consent; direct /login also exposed the generic missing-page route.", "url": "https://www.ultimate-guitar.com/explore", "conditions": [ "consent refused", "login overlay opened" ], "result": "issues" }, { "id": "error", "description": "Representative network/HTTP recovery state using a guaranteed missing route.", "url": "https://www.ultimate-guitar.com/not-a-real-page-web-uplift", "conditions": [ "HTTP 404", "desktop" ], "result": "pass" } ], "findings": [ { "id": "F01", "severity": "high", "confidence": "high", "summary": "A consent interstitial blocks the core content on every fresh visit.", "evidence": "Desktop and 360x800 screenshots show an opaque full-content scrim and modal before interaction; its copy asks users to consider processing by 1,725 partners.", "suggestedFix": "Replace the load-blocking interstitial with a compact, accessible consent surface; make refusal as direct as consent and use a native dialog only where a modal decision is legally required.", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "artifacts": [ "evidence/entry-desktop.png", "evidence/explore-mobile.png" ], "effort": "medium", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F02", "severity": "critical", "confidence": "high", "summary": "Mobile visitors receive a scaled-down desktop canvas instead of a mobile layout.", "evidence": "At a 360x800 viewport the page sets width=1280; layout reports a 1298px CSS viewport at scale 0.278. Text and controls are visibly tiny on both Explore and the chord page.", "suggestedFix": "Use width=device-width, initial-scale=1; remove fixed 1280px mobile sizing; rebuild the page shell and content grid with intrinsic sizing, Grid/Flexbox, and responsive type/spacing.", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "user-experience", "artifacts": [ "evidence/explore-mobile.png", "evidence/explore-mobile-layout.json", "evidence/tab-mobile.png", "evidence/tab-mobile-layout.json" ], "effort": "large", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F03", "severity": "high", "confidence": "high", "summary": "Interactive controls lack accessible names and login fields lack programmatic labels.", "evidence": "Lighthouse reports a nameless floating-action button. The login flow probe finds username and password inputs with neither labels nor aria-label.", "suggestedFix": "Use labelled native controls, give every icon button an accessible name, and expose the login overlay as a correctly named dialog.", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "artifacts": [ "evidence/explore-lighthouse-summary.json", "evidence/login-flow-probe.json" ], "effort": "small", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F04", "severity": "high", "confidence": "high", "summary": "Important list metadata fails minimum color contrast.", "evidence": "Lighthouse reports repeated 1.11:1 black-on-#111 rating counts and 4.39:1 metadata text, below the required 4.5:1 for normal text.", "suggestedFix": "Raise text-token contrast in the dark theme and test each state against WCAG AA, including consent and disabled/secondary metadata.", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "artifacts": [ "evidence/explore-lighthouse-summary.json" ], "effort": "small", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F05", "severity": "high", "confidence": "high", "summary": "Keyboard focus order is manually rewritten and header focus is invisible.", "evidence": "Lighthouse flags positive tabindex values on list links; the probe counted 49 positive tabindex controls. Focused header links compute outline:none and no box shadow.", "suggestedFix": "Remove positive tabindex values, preserve DOM order, and add a clear :focus-visible treatment with sufficient contrast.", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "artifacts": [ "evidence/explore-focus-probe.json", "evidence/explore-lighthouse-summary.json" ], "effort": "medium", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F06", "severity": "high", "confidence": "high", "summary": "The Explore route is slow and main-thread heavy on Lighthouse mobile conditions.", "evidence": "Lighthouse measured LCP 6.6s, TBT 1,050ms, interactive 7.1s, and performance 0.52. The raw-CDP trace corroborates a 544ms longest task and 607ms TBT.", "suggestedFix": "Prioritize the LCP path, split long tasks, defer non-critical scripts, and keep consent code out of the critical rendering path.", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "performance", "artifacts": [ "evidence/explore-lighthouse-summary.json", "evidence/explore-trace-summary.json", "evidence/explore-trace" ], "effort": "large", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F07", "severity": "medium", "confidence": "high", "summary": "The route ships substantial unused JavaScript.", "evidence": "Lighthouse estimates 190KiB of avoidable JavaScript, including roughly half of two CMP bundles and large mobile application chunks.", "suggestedFix": "Code-split route code, conditionally load CMP UI, and remove or defer unused bundles until the associated interaction.", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "artifacts": [ "evidence/explore-lighthouse-summary.json", "evidence/explore-network-summary.json" ], "effort": "medium", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F08", "severity": "high", "confidence": "high", "summary": "Transport defenses and cookie attributes are incomplete.", "evidence": "Headers audit finds no HSTS, X-Content-Type-Options, or Permissions-Policy; CSP only declares frame-ancestors. Cookie audit finds seven cookies without Secure and several SameSite=None cookies.", "suggestedFix": "Set HSTS and nosniff, deploy an allowlist CSP beyond frame-ancestors, add a restrictive Permissions-Policy, and mark HTTPS cookies Secure with the narrowest appropriate SameSite value.", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "security", "artifacts": [ "evidence/explore-headers.json", "evidence/explore-cookies.json" ], "effort": "medium", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F09", "severity": "high", "confidence": "high", "summary": "The consent and third-party footprint is disproportionate to the core task.", "evidence": "The consent copy names 1,725 partners. HAR records 17 third-party requests and 386,118 transferred bytes, with 12 requests and 381,924 bytes from InMobi CMP origins before consent.", "suggestedFix": "Minimize the vendor list and pre-consent network activity; load only the consent functionality needed to record a choice, then gate optional vendors by purpose.", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy", "artifacts": [ "evidence/entry-desktop.png", "evidence/explore-network-summary.json", "evidence/explore-trackers.json" ], "effort": "large", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F10", "severity": "high", "confidence": "high", "summary": "Core listing and tab content is effectively absent for non-JavaScript crawlers.", "evidence": "Discoverability measured 1% raw-content coverage for Explore with raw HTTP 503 and 2% for the chord page; both were classified as JS shells and their crawler screenshots are blank.", "suggestedFix": "Server-render the primary list and chord content with real links, return 200 HTML to legitimate crawlers, and hydrate progressively.", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "guidanceCategory": "html", "artifacts": [ "evidence/explore-discoverability.json", "evidence/explore-discoverability-crawler.png", "evidence/tab-discoverability.json", "evidence/tab-discoverability-crawler.png" ], "effort": "large", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F11", "severity": "high", "confidence": "high", "summary": "The sign-in flow is an unlabelled password-only custom overlay without autofill hints.", "evidence": "After activating Log in, the DOM contains an unsemantic custom form with username/password inputs, no labels, no autocomplete tokens, and no visible passkey control.", "suggestedFix": "Use a semantic dialog and labelled sign-in form with username/current-password autocomplete; add passkey authentication and humane inline validation/recovery.", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "guidanceCategory": "forms", "artifacts": [ "evidence/login-flow-probe.json" ], "effort": "medium", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F12", "severity": "medium", "confidence": "high", "summary": "Theme and contrast preferences are not consistently respected.", "evidence": "The CSS probe finds no color-scheme/prefers-color-scheme or forced-colors/prefers-contrast support. The light condition remains #111, while the dark probe produced black-on-black computed body colors during loading.", "suggestedFix": "Declare color-scheme, derive light/dark tokens from prefers-color-scheme, and add forced-colors/prefers-contrast adaptations for controls and metadata.", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "artifacts": [ "evidence/explore-platform-probe.json", "evidence/explore-light-probe.json", "evidence/explore-dark-probe.json" ], "effort": "medium", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F13", "severity": "medium", "confidence": "high", "summary": "Listing-to-detail navigation is an abrupt full-document swap.", "evidence": "Platform/CSS inspection found no view-transition usage across an MPA whose primary journey moves from Explore to chord detail.", "suggestedFix": "Progressively add cross-document View Transitions for list-to-detail navigation, with ordinary navigation as the fallback and reduced-motion respected.", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "guidanceCategory": "user-experience", "artifacts": [ "evidence/explore-platform-probe.json", "evidence/entry-recon.json" ], "effort": "medium", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F14", "severity": "low", "confidence": "high", "summary": "Long listing pages provide static rather than scroll-aware navigation chrome.", "evidence": "The Explore page is over 3,000px tall, while CSS inspection found no scroll-state queries or scroll timelines and screenshots show no progress or return affordance.", "suggestedFix": "Add a lightweight scroll-aware back-to-top/progress affordance using container scroll-state queries as progressive enhancement.", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "scroll-position-aware-elements", "guidanceCategory": "user-experience", "artifacts": [ "evidence/entry-dom.json", "evidence/explore-platform-probe.json" ], "effort": "small", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F15", "severity": "medium", "confidence": "high", "summary": "Overlays are custom div structures rather than semantic top-layer primitives.", "evidence": "The loaded consent overlay and activated login UI are modal surfaces, but DOM inspection found zero dialog and popover elements; the login form is not within dialog or role=dialog.", "suggestedFix": "Implement modal flows with dialog, accessible naming and focus management; use popover for transient menus and declarative invokers where supported.", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience", "artifacts": [ "evidence/entry-dom.json", "evidence/login-flow-probe.json", "evidence/explore-platform-probe.json" ], "effort": "medium", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F16", "severity": "medium", "confidence": "high", "summary": "The dense listing does not adapt at component level.", "evidence": "CSS inspection found no @container rules; the 360px capture simply shrinks the desktop table and sidebar instead of recomposing cards/filters.", "suggestedFix": "Give reusable list, filter and chord components containment and use container queries to alter density, columns and controls by available inline size.", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "user-experience", "artifacts": [ "evidence/explore-platform-probe.json", "evidence/explore-mobile.png" ], "effort": "large", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F17", "severity": "low", "confidence": "high", "summary": "Third-party challenge code uses deprecated browser APIs.", "evidence": "Lighthouse reports three deprecation warnings, including deprecated Shared Storage and Protected Audience usage from Cloudflare challenge code.", "suggestedFix": "Update or configure the challenge integration to a current build and monitor DevTools deprecation reports in CI.", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "html", "artifacts": [ "evidence/explore-lighthouse-summary.json" ], "effort": "small", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F18", "severity": "medium", "confidence": "high", "summary": "The public Explore listing lacks canonical and rich share metadata.", "evidence": "Rendered metadata probe found no canonical, hreflang, JSON-LD, or Open Graph metadata on Explore, although the chord detail provides canonical, JSON-LD and Open Graph.", "suggestedFix": "Add a self-canonical and accurate Open Graph metadata to the listing; add structured list/breadcrumb data where it faithfully represents visible content.", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "html", "artifacts": [ "evidence/explore-platform-probe.json", "evidence/tab-metadata-probe.json" ], "effort": "small", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F19", "severity": "medium", "confidence": "high", "summary": "The installable app exposes no observable offline cache in a fresh session.", "evidence": "A manifest and service-worker registration are present, but Cache Storage had no keys after load, so no offline fallback or precached shell/content was observable.", "suggestedFix": "Add and test a small offline fallback for the app shell and previously viewed tabs; keep caching bounded and clearly message stale/offline state.", "principleId": "be-resilient", "principleCheckId": "offline-and-installable", "guidanceId": "performance", "guidanceCategory": "performance", "artifacts": [ "evidence/explore-capabilities-probe.json", "evidence/explore-pwa-probe.json" ], "effort": "medium", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F20", "severity": "medium", "confidence": "high", "summary": "The global site is not structurally ready for bidirectional/localized layout.", "evidence": "The site offers language/country UI and html lang=en, but dir is absent, no hreflang is exposed on Explore, and inspected CSS contained no logical sizing/spacing properties.", "suggestedFix": "Set language and direction per locale, replace physical layout properties with logical ones, and publish hreflang for true localized variants.", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "guidanceCategory": "user-experience", "artifacts": [ "evidence/explore-platform-probe.json", "evidence/entry-recon.json" ], "effort": "medium", "pathId": "explore", "url": "https://www.ultimate-guitar.com/explore" }, { "id": "F21", "severity": "medium", "confidence": "medium", "summary": "Repeated chord simplification showed substantial retained-heap growth.", "evidence": "Heap summary rose from 704,860 nodes / 32.0MB to 926,248 nodes / 42.1MB after 10 Simplify toggles. Because snapshots used fresh browser sessions, confidence is medium rather than high.", "suggestedFix": "Reproduce in one long-lived session with baseline/target/final snapshots, then remove retained listeners, closures, or component trees identified by the dominator paths.", "principleId": "be-memory-efficient", "principleCheckId": "no-leak-under-repeated-interaction", "guidanceId": "manage-recurring-intervals", "guidanceCategory": "user-experience", "artifacts": [ "evidence/tab-heap-baseline", "evidence/tab-heap-post" ], "effort": "medium", "pathId": "tab", "url": "https://tabs.ultimate-guitar.com/tab/oasis/wonderwall-chords-27596" } ], "taskList": [ { "id": "T01", "title": "Use width=device-width, initial-scale=1; remove fixed 1280px mobile sizing; rebuild the page shell and content grid with intrinsic sizing, Grid/Flexbox, and responsive type/spacing.", "priority": 1, "findingIds": [ "F02" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T02", "title": "Replace the load-blocking interstitial with a compact, accessible consent surface; make refusal as direct as consent and use a native dialog only where a modal decision is legally required.", "priority": 2, "findingIds": [ "F01" ], "guidanceId": "light-dismiss-a-dialog", "status": "open" }, { "id": "T03", "title": "Server-render the primary list and chord content with real links, return 200 HTML to legitimate crawlers, and hydrate progressively.", "priority": 3, "findingIds": [ "F10" ], "guidanceId": "html", "status": "open" }, { "id": "T04", "title": "Prioritize the LCP path, split long tasks, defer non-critical scripts, and keep consent code out of the critical rendering path.", "priority": 4, "findingIds": [ "F06" ], "guidanceId": "performance", "status": "open" }, { "id": "T05", "title": "Use labelled native controls, give every icon button an accessible name, and expose the login overlay as a correctly named dialog.", "priority": 5, "findingIds": [ "F03" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T06", "title": "Raise text-token contrast in the dark theme and test each state against WCAG AA, including consent and disabled/secondary metadata.", "priority": 6, "findingIds": [ "F04" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T07", "title": "Remove positive tabindex values, preserve DOM order, and add a clear :focus-visible treatment with sufficient contrast.", "priority": 7, "findingIds": [ "F05" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T08", "title": "Set HSTS and nosniff, deploy an allowlist CSP beyond frame-ancestors, add a restrictive Permissions-Policy, and mark HTTPS cookies Secure with the narrowest appropriate SameSite value.", "priority": 8, "findingIds": [ "F08" ], "guidanceId": "security", "status": "open" }, { "id": "T09", "title": "Minimize the vendor list and pre-consent network activity; load only the consent functionality needed to record a choice, then gate optional vendors by purpose.", "priority": 9, "findingIds": [ "F09" ], "guidanceId": "privacy", "status": "open" }, { "id": "T10", "title": "Use a semantic dialog and labelled sign-in form with username/current-password autocomplete; add passkey authentication and humane inline validation/recovery.", "priority": 10, "findingIds": [ "F11" ], "guidanceId": "autofill-sign-in-form", "status": "open" }, { "id": "T11", "title": "Code-split route code, conditionally load CMP UI, and remove or defer unused bundles until the associated interaction.", "priority": 11, "findingIds": [ "F07" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T12", "title": "Declare color-scheme, derive light/dark tokens from prefers-color-scheme, and add forced-colors/prefers-contrast adaptations for controls and metadata.", "priority": 12, "findingIds": [ "F12" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T13", "title": "Progressively add cross-document View Transitions for list-to-detail navigation, with ordinary navigation as the fallback and reduced-motion respected.", "priority": 13, "findingIds": [ "F13" ], "guidanceId": "cross-document-transitions", "status": "open" }, { "id": "T14", "title": "Implement modal flows with dialog, accessible naming and focus management; use popover for transient menus and declarative invokers where supported.", "priority": 14, "findingIds": [ "F15" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T15", "title": "Give reusable list, filter and chord components containment and use container queries to alter density, columns and controls by available inline size.", "priority": 15, "findingIds": [ "F16" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T16", "title": "Add a self-canonical and accurate Open Graph metadata to the listing; add structured list/breadcrumb data where it faithfully represents visible content.", "priority": 16, "findingIds": [ "F18" ], "guidanceId": "html", "status": "open" }, { "id": "T17", "title": "Add and test a small offline fallback for the app shell and previously viewed tabs; keep caching bounded and clearly message stale/offline state.", "priority": 17, "findingIds": [ "F19" ], "guidanceId": "performance", "status": "open" }, { "id": "T18", "title": "Set language and direction per locale, replace physical layout properties with logical ones, and publish hreflang for true localized variants.", "priority": 18, "findingIds": [ "F20" ], "guidanceId": "translator", "status": "open" }, { "id": "T19", "title": "Reproduce in one long-lived session with baseline/target/final snapshots, then remove retained listeners, closures, or component trees identified by the dominator paths.", "priority": 19, "findingIds": [ "F21" ], "guidanceId": "manage-recurring-intervals", "status": "open" }, { "id": "T20", "title": "Add a lightweight scroll-aware back-to-top/progress affordance using container scroll-state queries as progressive enhancement.", "priority": 20, "findingIds": [ "F14" ], "guidanceId": "scroll-position-aware-elements", "status": "open" }, { "id": "T21", "title": "Update or configure the challenge integration to a current build and monitor DevTools deprecation reports in CI.", "priority": 21, "findingIds": [ "F17" ], "guidanceId": "html", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-21T16-49-08-203Z" }