{ "url": "https://omg10.com", "auditedAt": "2026-07-21T19:56:21.428Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit of the public landing page, primary abuse-report flow, representative legal template, and unknown-route recovery.", "page": { "appType": "mpa", "framework": "none detected", "notes": "Small server-rendered informational advertising-infrastructure site with inline CSS/JS and three legal pages." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "headers", "cookies", "trackers", "secrets", "images", "discoverability", "lighthouse", "heap-summary" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "adapt-scrollbar-to-contrast-preferences", "accessibility", "same-document-transitions", "scroll-entry-exit-effects", "pull-to-reveal", "scroll-position-aware-elements", "declarative-dialog-popover-control", "html", "css", "size-aware-styling", "forms", "accessible-error-announcement", "performance", "optimize-preload-priority", "identify-heavy-scripts", "privacy", "security", "passkeys", "conditional-async-dependencies", "translator", "capture-location-agnostic-data", "coordinate-global-events", "autofill-sign-in-form", "efficient-background-processing", "agentic-javascript-tools", "agentic-forms", "webmcp", "manage-recurring-intervals" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark", "findingIds": [ "F1" ] }, { "type": "screenshot", "path": "evidence/home-contrast.png", "caption": "home contrast", "findingIds": [] }, { "type": "screenshot", "path": "evidence/privacy.png", "caption": "privacy", "findingIds": [ "F3" ] }, { "type": "screenshot", "path": "evidence/not-found.png", "caption": "not found", "findingIds": [ "F5" ] }, { "type": "screenshot", "path": "evidence/form-invalid.png", "caption": "form invalid", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [ "F1", "F2", "F11" ] }, { "type": "dom", "path": "evidence/privacy-dom.json", "caption": "privacy dom", "findingIds": [ "F2", "F3" ] }, { "type": "other", "path": "evidence/recon.json", "caption": "recon", "findingIds": [] }, { "type": "other", "path": "evidence/document-routes.json", "caption": "document routes", "findingIds": [ "F5", "F8", "F9", "F12" ] }, { "type": "other", "path": "evidence/preferences-focus.json", "caption": "preferences focus", "findingIds": [] }, { "type": "other", "path": "evidence/contrast.json", "caption": "contrast", "findingIds": [] }, { "type": "other", "path": "evidence/form-flow.json", "caption": "form flow", "findingIds": [ "F4", "F6", "F12" ] }, { "type": "other", "path": "evidence/privacy-metadata.json", "caption": "privacy metadata", "findingIds": [ "F7" ] }, { "type": "layout", "path": "evidence/home-layout-mobile.json", "caption": "home layout mobile", "findingIds": [] }, { "type": "layout", "path": "evidence/home-layout-desktop.json", "caption": "home layout desktop", "findingIds": [] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "home", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-summary.json", "caption": "lighthouse summary", "findingIds": [ "F6", "F7", "F8" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F10" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets", "findingIds": [] }, { "type": "other", "path": "evidence/images.json", "caption": "images", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "heap post", "findingIds": [] }, { "type": "other", "path": "evidence/runtime-memory.json", "caption": "runtime memory", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "The dark-mode screenshot is visually identical to the light page, and the DOM reports color-scheme: normal with fixed light surface colors.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ], "findingIds": [ "F1" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Reduced-motion emulation matched and getAnimations() returned none; the page has no non-essential auto motion.", "pathIds": [ "home" ], "artifacts": [ "evidence/preferences-focus.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Forced-colors and prefers-contrast emulation produced high-contrast system colors with readable text and visible boundaries.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-contrast.png", "evidence/contrast.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "DOM/CSS inspection finds no @view-transition rule or view-transition-name on the home and policy templates; footer navigation is a same-origin MPA route change.", "pathIds": [ "privacy" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-desktop.png", "evidence/privacy-dom.json" ], "findingIds": [ "F2" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/source-surface applicability review.", "evidence": "The site has no scroll-linked visual effect to implement.", "reason": "The site has no scroll-linked visual effect to implement." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/source-surface applicability review.", "evidence": "The informational pages expose no gesture-driven component.", "reason": "The informational pages expose no gesture-driven component." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "The privacy template is about 2,916 CSS px tall and contains ten sections, but its DOM has only footer navigation and no sticky section navigation, progress indicator, or current-page cue.", "pathIds": [ "privacy" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-desktop.png", "evidence/privacy-dom.json" ], "findingIds": [ "F3" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/source-surface applicability review.", "evidence": "No tooltip, popover, menu, or other anchored overlay exists.", "reason": "No tooltip, popover, menu, or other anchored overlay exists." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "The privacy template is about 2,916 CSS px tall and contains ten sections, but its DOM has only footer navigation and no sticky section navigation, progress indicator, or current-page cue.", "pathIds": [ "privacy" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-desktop.png", "evidence/privacy-dom.json" ], "findingIds": [ "F3" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Load screenshots show content immediately with no banner, modal, interstitial, or obscuring overlay.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-desktop.png", "evidence/privacy-dom.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "No overlay is present; the page uses native form controls and semantic main/footer/nav elements rather than custom rich-control divs.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-desktop.png", "evidence/privacy-dom.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Screenshots show one restrained content card and a small footer; chrome does not compete with the content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-desktop.png", "evidence/privacy-dom.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "At 360x800, layout reported 0px horizontal overflow, a 360px scroll width, and a viewport meta tag.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/home-mobile.png", "evidence/preferences-focus.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/source-surface applicability review.", "evidence": "The single card template is not reused in differently sized containers; viewport/intrinsic responsiveness is the relevant test.", "reason": "The single card template is not reused in differently sized containers; viewport/intrinsic responsiveness is the relevant test." }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Controls have browser focus outlines; tested control boxes are at least 32px high and the layout does not depend on hover.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/home-mobile.png", "evidence/preferences-focus.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "The first content identifies the domain’s advertising-infrastructure purpose and the abuse contact section provides a plainly named Submit Report action.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/form-flow.json", "evidence/form-invalid.png", "evidence/not-found.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "A valid submission calls window.open() with a mailto: URL. There is no server submission, in-page success confirmation, saved state, or fallback contact address visible in the flow.", "pathIds": [ "contact-form" ], "artifacts": [ "evidence/home-desktop.png", "evidence/form-flow.json", "evidence/form-invalid.png", "evidence/not-found.png" ], "findingIds": [ "F4" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "Fetching /definitely-not-found returns HTTP 200 text/plain “empty OK”; the screenshot offers no explanation, home link, retry, or recovery action.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/home-desktop.png", "evidence/form-flow.json", "evidence/form-invalid.png", "evidence/not-found.png" ], "findingIds": [ "F5" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Trace LCP was 494ms with 0ms TBT; Lighthouse measured LCP 785ms, CLS 0, TBT 0 and scored performance 1.0.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout-desktop.json", "evidence/home-summary.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Desktop and mobile layout observers both measured CLS 0 with no shifts.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout-desktop.json", "evidence/home-summary.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Trace and layout evidence recorded no long tasks and 0ms total blocking time.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout-desktop.json", "evidence/home-summary.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "HAR recorded only 2 requests and 2,713 transferred bytes, with no render-blocking candidate, redirect, HTTP error, or missing-cache signal.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout-desktop.json", "evidence/home-summary.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "The page ships one small HTML document with inline CSS/JS and no third-party bundle; Lighthouse performance and best-practices scores are 1.0.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-layout-desktop.json", "evidence/home-summary.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "All four controls rely on placeholder text; the DOM probe finds no associated label elements. The placeholder disappears during entry, removing the visible field identity even though Lighthouse’s automated accessibility score is 1.0.", "pathIds": [ "contact-form" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png", "evidence/form-flow.json", "evidence/preferences-focus.json" ], "findingIds": [ "F6" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Lighthouse accessibility scored 1.0 and forced-colors evidence shows legible system colors.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-contrast.png", "evidence/contrast.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "The DOM has one H1, ordered H2 sections, main/footer/nav landmarks, native control order, and a visible browser focus outline.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png", "evidence/form-flow.json", "evidence/preferences-focus.json" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Desktop and mobile screenshots show unclipped text, a constrained line length, 1.7 line-height, and stable system-font rendering.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png", "evidence/form-flow.json", "evidence/preferences-focus.json" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Viewport scaling is not disabled, the 360px page reflows without overflow, controls meet the 24px WCAG minimum, and no media needs captions.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png", "evidence/form-flow.json", "evidence/preferences-focus.json" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Lighthouse best-practices scored 1.0 and reported no console-error audit failure.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-dom.json", "evidence/images.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "DOM has HTML doctype, UTF-8 charset and viewport metadata; there are no images or external assets with sizing/aspect-ratio risk.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-dom.json", "evidence/images.json" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Lighthouse best-practices scored 1.0; no load-time permissions, external vulnerable library, or paste-prevention handler was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-dom.json", "evidence/images.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "Lighthouse reports no meta description. The privacy page H1 is “Privacy Policy” but its title is “Domain Information”, matching the homepage instead of uniquely describing the page.", "pathIds": [ "privacy" ], "artifacts": [ "evidence/discoverability.json", "evidence/document-routes.json", "evidence/privacy-metadata.json" ], "findingIds": [ "F7" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "Lighthouse says robots.txt is invalid; /sitemap.xml returns plain text “empty OK”; no canonical is present; and an unknown route returns 200 instead of 404.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/document-routes.json", "evidence/privacy-metadata.json" ], "findingIds": [ "F8" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "Lighthouse says robots.txt is invalid; /sitemap.xml returns plain text “empty OK”; no canonical is present; and an unknown route returns 200 instead of 404.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/document-routes.json", "evidence/privacy-metadata.json" ], "findingIds": [ "F8" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "The document probe finds no Open Graph tags and no JSON-LD on the landing page.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/document-routes.json", "evidence/privacy-metadata.json" ], "findingIds": [ "F9" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "The header probe finds no CSP, frame protection, Referrer-Policy, or Permissions-Policy. HSTS exists but max-age=1 provides effectively no durable downgrade protection.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json", "evidence/home-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "The audited pages set no cookies, contact no third-party origin, load no known tracker, and expose no secret.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json", "evidence/home-summary.json" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/source-surface applicability review.", "evidence": "The audited public pages request no browser permissions and expose no authentication flow.", "reason": "The audited public pages request no browser permissions and expose no authentication flow." }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "The header probe finds no CSP, frame protection, Referrer-Policy, or Permissions-Policy. HSTS exists but max-age=1 provides effectively no durable downgrade protection.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json", "evidence/trackers.json", "evidence/secrets.json", "evidence/home-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Discoverability measured 100% raw-HTML content coverage with title and H1 present and no JS shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/document-routes.json", "evidence/privacy-metadata.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "The static templates have no overlays or async dependencies; native links and form validation remain functional without fragile UI state.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/document-routes.json", "evidence/privacy-metadata.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/source-surface applicability review.", "evidence": "This small informational landing site is not app-like; installability and an offline app shell are not proportionate requirements.", "reason": "This small informational landing site is not app-like; installability and an offline app shell are not proportionate requirements." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "Fetching /definitely-not-found returns HTTP 200 text/plain “empty OK”; the screenshot offers no explanation, home link, retry, or recovery action.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/discoverability.json", "evidence/document-routes.json", "evidence/privacy-metadata.json" ], "findingIds": [ "F5" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "The DOM has lang=\"en\", but authored CSS positions list markers with left: 0 and padding-left semantics, so it will not naturally mirror in RTL writing modes.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/home-desktop.png", "evidence/privacy-dom.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/source-surface applicability review.", "evidence": "The deliberately English-only pages render no dates, numbers, currency, durations, or other locale-sensitive data.", "reason": "The deliberately English-only pages render no dates, numbers, currency, durations, or other locale-sensitive data." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/source-surface applicability review.", "evidence": "The pages contain no events, times, scheduling, or time-zone-sensitive values.", "reason": "The pages contain no events, times, scheduling, or time-zone-sensitive values." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "No consent wall, upsell, disguised ad, continuity trap, or deceptive default appears on the audited landing and policy pages.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/form-flow.json", "evidence/form-invalid.png", "evidence/not-found.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Required controls validate only on submission and native browser messages clearly identify missing required values.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/form-flow.json", "evidence/form-invalid.png", "evidence/not-found.png" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact review against the mapped guidance.", "evidence": "Every contact input and textarea has autocomplete=\"off\", including name and email, forcing repeat visitors to retype standard identity fields.", "pathIds": [ "contact-form" ], "artifacts": [ "evidence/home-desktop.png", "evidence/form-flow.json", "evidence/form-invalid.png", "evidence/not-found.png" ], "findingIds": [ "F12" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/source-surface applicability review.", "evidence": "No checkout, subscription, consent, authentication, or account-management flow is present.", "reason": "No checkout, subscription, consent, authentication, or account-management flow is present." }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "The image audit found zero images; total transfer was only 2,713 bytes.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/images.json" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Trace found no long tasks, HAR found only two first-party requests, and source inspection found no timers or background processing.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/images.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "There are no third-party requests, fonts, images, audio, video, or autoplay media.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/images.json" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/source-surface applicability review.", "evidence": "The site explicitly says it offers no user-facing service or capability for an agent to invoke; its static content is already fully crawler-readable.", "reason": "The site explicitly says it offers no user-facing service or capability for an agent to invoke; its static content is already fully crawler-readable." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/source-surface applicability review.", "evidence": "There is no summarisation or language-model task whose on-device execution would improve this small static information page.", "reason": "There is no summarisation or language-model task whose on-device execution would improve this small static information page." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "After ten fill/focus/reset cycles, heap self-size was 1.126MB versus 1.102MB baseline (about 2.2% variance) with no constructor growth suggesting an unbounded leak.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot", "evidence/runtime-memory.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "The page has 51 DOM elements, about 1.15MB JS heap used, and a 1.10–1.13MB heap snapshot footprint, proportionate to this static form page.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot", "evidence/runtime-memory.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Direct screenshot, DOM, evaluate, layout, Lighthouse, network, discoverability, or heap evidence as appropriate.", "evidence": "Before/after heap constructor summaries contain no Detached* population; source/runtime probes find one bounded DOMContentLoaded/form listener and no timer pattern.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot", "evidence/runtime-memory.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F1" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F2" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F3" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "pass" }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "pass" }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F4", "F5" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "pass" }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F6" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "pass" }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F7", "F8", "F9" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F10" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F5" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F11" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F12" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "pass" }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "The site explicitly says it offers no user-facing service or capability for an agent to invoke; its static content is already fully crawler-readable. There is no summarisation or language-model task whose on-device execution would improve this small static information page." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Landing/information template and first viewport; represents the public domain explanation.", "url": "https://omg10.com/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "forced-colors: active", "prefers-reduced-motion: reduce", "crawler/no JavaScript" ], "result": "issues" }, { "id": "contact-form", "description": "Primary abuse-report journey, including empty validation and a valid submission.", "url": "https://omg10.com/#contact-form", "conditions": [ "keyboard focus", "invalid submission", "valid submission" ], "result": "issues" }, { "id": "privacy", "description": "Representative long legal/content template; terms and cookies pages share this template and were de-duplicated.", "url": "https://omg10.com/assets/privacy-policy.html", "conditions": [ "desktop", "DOM and metadata inspection" ], "result": "issues" }, { "id": "not-found", "description": "Recovery path for an unknown URL and HTTP-status handling.", "url": "https://omg10.com/definitely-not-found", "conditions": [ "unknown route" ], "result": "issues" } ], "findings": [ { "id": "F1", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "pathId": "home", "url": "https://omg10.com/", "summary": "The page ignores the user’s dark color-scheme preference.", "evidence": "The dark-mode screenshot is visually identical to the light page, and the DOM reports color-scheme: normal with fixed light surface colors.", "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ], "suggestedFix": "Declare color-scheme: light dark and adapt the surface, border, text, and control colors with light-dark() or a prefers-color-scheme query.", "effort": "small" }, { "id": "F2", "severity": "low", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "guidanceCategory": "user-experience", "pathId": "privacy", "url": "https://omg10.com/assets/privacy-policy.html", "summary": "Cross-document navigation swaps pages abruptly.", "evidence": "DOM/CSS inspection finds no @view-transition rule or view-transition-name on the home and policy templates; footer navigation is a same-origin MPA route change.", "artifacts": [ "evidence/home-dom.json", "evidence/privacy-dom.json" ], "suggestedFix": "Add an opt-in @view-transition navigation rule and restrained cross-document transition, while retaining reduced-motion behavior.", "effort": "small" }, { "id": "F3", "severity": "low", "confidence": "medium", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "scroll-progress-indicator", "guidanceCategory": "user-experience", "pathId": "privacy", "url": "https://omg10.com/assets/privacy-policy.html", "summary": "Long legal pages provide no position or section-navigation cue.", "evidence": "The privacy template is about 2,916 CSS px tall and contains ten sections, but its DOM has only footer navigation and no sticky section navigation, progress indicator, or current-page cue.", "artifacts": [ "evidence/privacy.png", "evidence/privacy-dom.json" ], "suggestedFix": "Add a compact section table of contents or scroll-progress cue for long policy pages and indicate the current policy in the footer navigation.", "effort": "small" }, { "id": "F4", "severity": "medium", "confidence": "high", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "forms", "pathId": "contact-form", "url": "https://omg10.com/", "summary": "The abuse-report flow depends on an external mail client and has no in-page completion state.", "evidence": "A valid submission calls window.open() with a mailto: URL. There is no server submission, in-page success confirmation, saved state, or fallback contact address visible in the flow.", "artifacts": [ "evidence/form-flow.json" ], "suggestedFix": "Submit to a protected server endpoint and show pending, success, and failure states; retain a clearly visible email fallback if mailto remains available.", "effort": "medium" }, { "id": "F5", "severity": "high", "confidence": "high", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "user-experience", "pathId": "not-found", "url": "https://omg10.com/definitely-not-found", "summary": "Unknown routes return a misleading successful blank response.", "evidence": "Fetching /definitely-not-found returns HTTP 200 text/plain “empty OK”; the screenshot offers no explanation, home link, retry, or recovery action.", "artifacts": [ "evidence/document-routes.json", "evidence/not-found.png" ], "suggestedFix": "Return an actual 404 status and a branded error document with a concise explanation, home link, and contact/retry options.", "effort": "small" }, { "id": "F6", "severity": "medium", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "pathId": "contact-form", "url": "https://omg10.com/", "summary": "Contact fields have no persistent visible labels.", "evidence": "All four controls rely on placeholder text; the DOM probe finds no associated label elements. The placeholder disappears during entry, removing the visible field identity even though Lighthouse’s automated accessibility score is 1.0.", "artifacts": [ "evidence/form-flow.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Add explicit