{
  "url": "https://cdn.ak2yy.com",
  "auditedAt": "2026-07-22T02:50:50.844Z",
  "mode": "report",
  "status": "completed",
  "statusDetail": "Atomic coverage complete across 58 checks and two representative paths. This is a genuinely single-page informational disclaimer; linked legal documents are on surveza.ai and were excluded as a different host, while the same-host 404 failure surface was included.",
  "page": {
    "appType": "mpa",
    "framework": "Static server-rendered HTML/CSS",
    "notes": "Public Surveza survey-infrastructure disclaimer. Coverage includes the only same-host content page and an unknown-URL failure state. External Terms, Privacy, and Cookies pages on surveza.ai, individual unknown survey landing URLs, authenticated flows, and user-generated survey templates were not covered because they are outside this hostname or not discoverable from sitemap/navigation."
  },
  "evidenceUsed": [
    "screenshot (desktop/mobile/dark/forced-colors/404)",
    "DOM and computed CSS",
    "evaluate probes and keyboard focus walk",
    "layout/CLS",
    "trace",
    "HAR",
    "Lighthouse",
    "discoverability/no-JS",
    "headers",
    "cookies",
    "trackers",
    "secrets",
    "images",
    "heap summaries",
    "robots/sitemap/manifest/404 HTTP fetch",
    "Modern Web Guidance search/retrieve"
  ],
  "guidanceConsulted": [
    "dark-mode",
    "stack-drill-down",
    "position-aware-tooltips",
    "html",
    "css",
    "agentic-forms",
    "performance",
    "accessibility",
    "search-hidden-content",
    "security",
    "defer-rendering-heavy-content",
    "calculate-event-differentials",
    "forms",
    "agentic-javascript-tools",
    "persistent-top-layer-ui",
    "improve-text-layout-and-legibility",
    "optimize-image-priority",
    "identify-heavy-scripts",
    "privacy",
    "batch-analytics-events",
    "full-session-analytics",
    "persistent-toast-notifications"
  ],
  "artifacts": [
    {
      "type": "screenshot",
      "path": "evidence/404.png",
      "caption": "404",
      "findingIds": [
        "F13"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/contrast-more.png",
      "caption": "contrast more",
      "condition": "forced-colors: active; prefers-contrast: more"
    },
    {
      "type": "other",
      "path": "evidence/cookies.json",
      "caption": "cookies",
      "findingIds": [
        "F9"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/dark.png",
      "caption": "dark",
      "condition": "prefers-color-scheme: dark",
      "findingIds": [
        "F1"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/discoverability-crawler.png",
      "caption": "discoverability crawler"
    },
    {
      "type": "screenshot",
      "path": "evidence/discoverability-rendered.png",
      "caption": "discoverability rendered"
    },
    {
      "type": "discoverability",
      "path": "evidence/discoverability.json",
      "caption": "discoverability",
      "findingIds": [
        "F6"
      ]
    },
    {
      "type": "other",
      "path": "evidence/does-not-exist-audit-headers.txt",
      "caption": "does not exist audit headers.txt",
      "findingIds": [
        "F13"
      ]
    },
    {
      "type": "other",
      "path": "evidence/does-not-exist-audit.txt",
      "caption": "does not exist audit.txt",
      "findingIds": [
        "F13"
      ]
    },
    {
      "type": "other",
      "path": "evidence/headers.json",
      "caption": "headers",
      "findingIds": [
        "F8"
      ]
    },
    {
      "type": "heap",
      "path": "evidence/heap-baseline.heapsnapshot",
      "caption": "heap baseline.heapsnapshot"
    },
    {
      "type": "heap",
      "path": "evidence/heap-post.heapsnapshot",
      "caption": "heap post.heapsnapshot"
    },
    {
      "type": "screenshot",
      "path": "evidence/home-desktop.png",
      "caption": "home desktop",
      "findingIds": [
        "F1",
        "F9"
      ]
    },
    {
      "type": "dom",
      "path": "evidence/home-dom.json",
      "caption": "home dom",
      "findingIds": [
        "F2",
        "F4",
        "F5",
        "F9"
      ]
    },
    {
      "type": "layout",
      "path": "evidence/home-layout.json",
      "caption": "home layout",
      "findingIds": [
        "F11"
      ]
    },
    {
      "type": "har-summary",
      "path": "evidence/home-summary.json",
      "caption": "home summary",
      "findingIds": [
        "F9",
        "F12"
      ]
    },
    {
      "type": "trace-summary",
      "path": "evidence/home-trace-summary.json",
      "caption": "home trace summary",
      "findingIds": [
        "F10"
      ]
    },
    {
      "type": "trace",
      "path": "evidence/home-trace.json",
      "caption": "home trace",
      "findingIds": [
        "F10"
      ]
    },
    {
      "type": "har",
      "path": "evidence/home.har",
      "caption": "home.har",
      "findingIds": [
        "F9",
        "F12"
      ]
    },
    {
      "type": "other",
      "path": "evidence/images.json",
      "caption": "images",
      "findingIds": [
        "F5",
        "F11"
      ]
    },
    {
      "type": "lighthouse",
      "path": "evidence/lighthouse-key-audits.json",
      "caption": "lighthouse key audits",
      "findingIds": [
        "F3",
        "F5",
        "F9",
        "F11",
        "F12"
      ]
    },
    {
      "type": "lighthouse",
      "path": "evidence/lighthouse.json",
      "caption": "lighthouse",
      "findingIds": [
        "F3",
        "F6",
        "F10"
      ]
    },
    {
      "type": "other",
      "path": "evidence/manifest.webmanifest-headers.txt",
      "caption": "manifest.webmanifest headers.txt"
    },
    {
      "type": "other",
      "path": "evidence/manifest.webmanifest.txt",
      "caption": "manifest.webmanifest.txt"
    },
    {
      "type": "screenshot",
      "path": "evidence/mobile-360.png",
      "caption": "mobile 360",
      "condition": "viewport: 360x800",
      "findingIds": [
        "F3"
      ]
    },
    {
      "type": "layout",
      "path": "evidence/mobile-layout.json",
      "caption": "mobile layout",
      "condition": "viewport: 360x800",
      "findingIds": [
        "F11"
      ]
    },
    {
      "type": "other",
      "path": "evidence/page-probe.json",
      "caption": "page probe",
      "findingIds": [
        "F1",
        "F2",
        "F4",
        "F6",
        "F7",
        "F14"
      ]
    },
    {
      "type": "other",
      "path": "evidence/preferences-probe.json",
      "caption": "preferences probe"
    },
    {
      "type": "other",
      "path": "evidence/robots.txt-headers.txt",
      "caption": "robots.txt headers.txt",
      "findingIds": [
        "F7"
      ]
    },
    {
      "type": "other",
      "path": "evidence/robots.txt.txt",
      "caption": "robots.txt.txt",
      "findingIds": [
        "F7"
      ]
    },
    {
      "type": "other",
      "path": "evidence/secrets.json",
      "caption": "secrets"
    },
    {
      "type": "other",
      "path": "evidence/sitemap.xml-headers.txt",
      "caption": "sitemap.xml headers.txt",
      "findingIds": [
        "F7"
      ]
    },
    {
      "type": "other",
      "path": "evidence/sitemap.xml.txt",
      "caption": "sitemap.xml.txt",
      "findingIds": [
        "F7"
      ]
    },
    {
      "type": "other",
      "path": "evidence/style-detail.json",
      "caption": "style detail",
      "findingIds": [
        "F1",
        "F3"
      ]
    },
    {
      "type": "other",
      "path": "evidence/trackers.json",
      "caption": "trackers",
      "findingIds": [
        "F9"
      ]
    }
  ],
  "config": {
    "loaded": false
  },
  "coverage": {
    "catalogVersion": "modern-web-guidance@0.0.172",
    "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7",
    "expected": 58,
    "recorded": 58,
    "judged": 58,
    "blocked": 0,
    "notRun": 0,
    "missing": 0,
    "unknown": 0,
    "duplicates": 0,
    "complete": true
  },
  "checkOutcomes": [
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-color-scheme",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The dark-condition screenshot is pixel-identical to the default screenshot; the computed probe reports color-scheme: normal and no prefers-color-scheme, color-scheme, or light-dark() CSS.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/dark.png",
        "evidence/home-desktop.png",
        "evidence/page-probe.json",
        "evidence/style-detail.json"
      ],
      "findingIds": [
        "F1"
      ]
    },
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-reduced-motion",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "Reduced-motion emulation reports zero animations and scroll-behavior auto; the page contains no auto-advance or non-essential motion.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/preferences-probe.json",
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-contrast",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "Under forced-colors/high-contrast emulation, text, links, contact panel, and page boundaries remain visible and distinguishable.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/contrast-more.png"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "view-transitions",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "This single static disclaimer has no same-document state swap or same-origin route transition to animate.",
      "reason": "This single static disclaimer has no same-document state swap or same-origin route transition to animate.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "scroll-driven-animations",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "The page has no parallax, scrollytelling, reveal, carousel, or other scroll-linked motion.",
      "reason": "The page has no parallax, scrollytelling, reveal, carousel, or other scroll-linked motion.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "physical-gestures",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "The page relies only on native document scrolling and standard anchor activation; DOM/CSS inspection finds no custom pointer handlers, scroll traps, or gesture code that fights platform behavior.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/page-probe.json"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "scroll-state-aware-chrome",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "The page has no sticky chrome or multi-view navigation whose state must react to scroll.",
      "reason": "The page has no sticky chrome or multi-view navigation whose state must react to scroll.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "anchored-positioning",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "No tooltip, popover, menu, or positioned overlay exists.",
      "reason": "No tooltip, popover, menu, or positioned overlay exists.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "directs-attention",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "For this single-view page, navigation is limited to visibly underlined, descriptive policy and support links in reading order; no jump or state change moves attention without an accompanying native navigation.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-desktop.png",
        "evidence/page-probe.json"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "no-intrusive-interruptions",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "Load screenshots show immediate access to the full disclaimer with no popup, banner, interstitial, or obscuring overlay.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-desktop.png",
        "evidence/mobile-360.png"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "semantic-dismissible-primitives",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "No overlay, disclosure, picker, modal, or rich custom control exists.",
      "reason": "No overlay, disclosure, picker, modal, or rich custom control exists.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "reduced-chrome",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "The screenshots show one restrained content card; nearly all card area is substantive disclaimer and support content.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-desktop.png",
        "evidence/mobile-360.png"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "responsive-no-horizontal-scroll",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "At 360x800, layout reports scrollWidth 360, clientWidth 360, and 0px horizontal overflow; the full-page screenshot shows a coherent one-column reflow.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/mobile-layout.json",
        "evidence/mobile-360.png"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "component-level-responsiveness",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "The one-off disclaimer layout has no component reused in differently sized containers; viewport responsiveness is directly tested separately.",
      "reason": "The one-off disclaimer layout has no component reused in differently sized containers; viewport responsiveness is directly tested separately.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "input-modality-aware",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The rendered CSS contains :focus { outline: 0 }, input:focus { outline: none }, and a:hover/a:active { outline: none }; the focus probe reports outlineStyle none for all nine links.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/page-probe.json"
      ],
      "findingIds": [
        "F2"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "clear-purpose-and-primary-action",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "The first viewport plainly identifies the domain as Surveza survey infrastructure; support and policy actions use explicit labels.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-desktop.png",
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "primary-flow-completion",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "The only primary action is reporting/contact: a clearly visible support@surveza.ai mailto link is available alongside crawlable Terms, Privacy, and Cookies links.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/page-probe.json",
        "evidence/mobile-360.png"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "clear-system-state-and-recovery",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The tested missing URL correctly returns HTTP 404 but shows only “404 Not Found / nginx”, with no explanation, home link, support link, or route back to the disclaimer.",
      "pathIds": [
        "not-found"
      ],
      "artifacts": [
        "evidence/404.png",
        "evidence/does-not-exist-audit-headers.txt",
        "evidence/does-not-exist-audit.txt"
      ],
      "findingIds": [
        "F13"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "good-core-web-vitals",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "Lighthouse measures LCP 3.5s and FCP 2.6s (performance 0.87), while the unthrottled trace is fast at 794ms with 0ms blocking, indicating network dependencies rather than main-thread work.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse.json",
        "evidence/home-trace-summary.json",
        "evidence/home-trace.json"
      ],
      "findingIds": [
        "F10"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "visual-stability",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "Both the images primitive and Lighthouse flag the logo as missing width/height; layout records CLS 0.021 desktop and 0.041 mobile.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/images.json",
        "evidence/home-layout.json",
        "evidence/mobile-layout.json",
        "evidence/lighthouse-key-audits.json"
      ],
      "findingIds": [
        "F11"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "efficient-main-thread",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "The trace and layout observer record no long tasks and 0ms total blocking time over load.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-trace-summary.json",
        "evidence/home-layout.json"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "efficient-resource-delivery",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "Lighthouse measures LCP 3.5s and FCP 2.6s (performance 0.87), while the unthrottled trace is fast at 794ms with 0ms blocking, indicating network dependencies rather than main-thread work.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse.json",
        "evidence/home-trace-summary.json",
        "evidence/home-trace.json"
      ],
      "findingIds": [
        "F10"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "trim-unused-and-duplicate-code",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "Lighthouse estimates 47 KiB of unused JavaScript in the 89 KiB Yandex Metrika bundle (53.9% unused); HAR shows it is the largest resource and third parties account for 80% of transferred bytes.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse-key-audits.json",
        "evidence/home-summary.json",
        "evidence/home.har"
      ],
      "findingIds": [
        "F12"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "names-roles-labels",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The logo image renders the Surveza name but has alt=\"\" with no adjacent brand text; Lighthouse also flags the injected rtmark tracking img for having no alt attribute.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/images.json",
        "evidence/lighthouse-key-audits.json"
      ],
      "findingIds": [
        "F5"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "sufficient-contrast",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "Lighthouse reports #7d7d7d 12px text on #fff at 4.11:1, below the 4.5:1 minimum, across the explanatory copy and copyright.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse.json",
        "evidence/lighthouse-key-audits.json",
        "evidence/mobile-360.png",
        "evidence/style-detail.json"
      ],
      "findingIds": [
        "F3"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "structure-and-focus",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The DOM probe finds zero h1-h6 elements despite multiple visually styled titles, and the focus walk finds outlineStyle none on every link.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/page-probe.json",
        "evidence/home-dom.json"
      ],
      "findingIds": [
        "F4"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "legible-text",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "Lighthouse reports #7d7d7d 12px text on #fff at 4.11:1, below the 4.5:1 minimum, across the explanatory copy and copyright.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse.json",
        "evidence/lighthouse-key-audits.json",
        "evidence/mobile-360.png",
        "evidence/style-detail.json"
      ],
      "findingIds": [
        "F3"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "zoom-reflow-targets-and-media",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "Viewport allows user scaling, Lighthouse passes target-size and meta-viewport, mobile reflow has no horizontal overflow, and the page contains no time-based media requiring captions.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse-key-audits.json",
        "evidence/mobile-layout.json",
        "evidence/mobile-360.png"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "no-console-errors",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "Lighthouse directly reports no browser errors logged to the console.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse-key-audits.json"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "sound-document-and-assets",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "Both the images primitive and Lighthouse flag the logo as missing width/height; layout records CLS 0.021 desktop and 0.041 mobile.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/images.json",
        "evidence/home-layout.json",
        "evidence/mobile-layout.json",
        "evidence/lighthouse-key-audits.json"
      ],
      "findingIds": [
        "F11"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "browser-platform-hygiene",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "Lighthouse passes deprecations, BFCache, paste, geolocation-on-load, notification-on-load, and console audits; the only Inspector issue is cookie-related and is reported under privacy/security.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse-key-audits.json"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "title-and-description",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The title is only “Surveza” and there is no meta description; Lighthouse SEO scores 0.82 and fails meta-description.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/page-probe.json",
        "evidence/lighthouse.json",
        "evidence/discoverability.json"
      ],
      "findingIds": [
        "F6"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "crawlable-and-mobile-friendly",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "All visible links have real descriptive hrefs, the viewport meta is valid, and no robots policy blocks indexing; raw HTML contains the full link/content structure.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/page-probe.json",
        "evidence/discoverability.json"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "canonical-and-indexing-signals",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The DOM probe finds no canonical or robots meta, while /robots.txt and /sitemap.xml both return the generic nginx 404 response.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/page-probe.json",
        "evidence/robots.txt-headers.txt",
        "evidence/robots.txt.txt",
        "evidence/sitemap.xml-headers.txt",
        "evidence/sitemap.xml.txt"
      ],
      "findingIds": [
        "F7"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "structured-and-shareable-metadata",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The metadata probe finds no Open Graph fields and no JSON-LD despite the page representing the Surveza organization and its support contact.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/page-probe.json"
      ],
      "findingIds": [
        "F14"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "secure-transport-and-headers",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The headers primitive finds no CSP, clickjacking policy, Referrer-Policy, or Permissions-Policy; HSTS is max-age=1 second. HTTPS and nosniff are present.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/headers.json"
      ],
      "findingIds": [
        "F8"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "data-minimisation-and-third-parties",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The DOM initializes Yandex Metrika with webvisor:true, clickmap:true, and trackLinks:true on load. HAR records 15/21 third-party requests and 125,641/156,183 transferred bytes; cookie and Lighthouse evidence shows first-party SameSite=None analytics cookies plus 16 third-party cookies, while no consent UI appears.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home-summary.json",
        "evidence/home.har",
        "evidence/cookies.json",
        "evidence/trackers.json",
        "evidence/lighthouse-key-audits.json",
        "evidence/home-desktop.png"
      ],
      "findingIds": [
        "F9"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "in-context-permissions-and-modern-auth",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "Permission probes remain in the browser prompt state and Lighthouse confirms neither geolocation nor notifications are requested on load; there is no authentication surface where passkeys apply.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/page-probe.json",
        "evidence/lighthouse-key-audits.json"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "defensive-browser-policies",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The headers primitive finds no CSP, clickjacking policy, Referrer-Policy, or Permissions-Policy; HSTS is max-age=1 second. HTTPS and nosniff are present.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/headers.json"
      ],
      "findingIds": [
        "F8"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "progressive-enhancement",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "Discoverability evidence shows 100% content coverage without JavaScript, no empty mount, and identical substantive crawler-visible content.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/discoverability.json",
        "evidence/discoverability-crawler.png",
        "evidence/discoverability-rendered.png"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "resilient-runtime-behaviour",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "There are no menus, overlays, DOM moves, conditional dependencies, or application runtime states to exercise.",
      "reason": "There are no menus, overlays, DOM moves, conditional dependencies, or application runtime states to exercise.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "offline-and-installable",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "This is an informational domain disclaimer rather than an app; installation and offline application behavior are not needed.",
      "reason": "This is an informational domain disclaimer rather than an app; installation and offline application behavior are not needed.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "network-and-http-failure-states",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The tested missing URL correctly returns HTTP 404 but shows only “404 Not Found / nginx”, with no explanation, home link, support link, or route back to the disclaimer.",
      "pathIds": [
        "not-found"
      ],
      "artifacts": [
        "evidence/404.png",
        "evidence/does-not-exist-audit-headers.txt",
        "evidence/does-not-exist-audit.txt"
      ],
      "findingIds": [
        "F13"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "lang-dir-and-logical-properties",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "The static English document declares html lang=\"en\"; its simple flex layout and reading order remain coherent, and it contains no bidirectional or translated variant requiring a dir override.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/page-probe.json"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "locale-aware-data",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "The page contains no dates, currencies, numbers, durations, calendars, or other locale-sensitive data.",
      "reason": "The page contains no dates, currencies, numbers, durations, calendars, or other locale-sensitive data.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "time-zone-correctness",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "The page contains no events, schedules, or time values.",
      "reason": "The page contains no events, schedules, or time values.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "no-dark-patterns",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The DOM initializes Yandex Metrika with webvisor:true, clickmap:true, and trackLinks:true on load. HAR records 15/21 third-party requests and 125,641/156,183 transferred bytes; cookie and Lighthouse evidence shows first-party SameSite=None analytics cookies plus 16 third-party cookies, while no consent UI appears.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home-summary.json",
        "evidence/home.har",
        "evidence/cookies.json",
        "evidence/trackers.json",
        "evidence/lighthouse-key-audits.json",
        "evidence/home-desktop.png"
      ],
      "findingIds": [
        "F9"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "humane-error-handling",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "There are no forms or editable inputs.",
      "reason": "There are no forms or editable inputs.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "trustworthy-input-assistance",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "There are no inputs to autofill or assist.",
      "reason": "There are no inputs to autofill or assist.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "safe-commercial-and-account-flows",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "The page explicitly performs no commerce and exposes no account, consent-management, authentication, subscription, or checkout flow.",
      "reason": "The page explicitly performs no commerce and exposes no account, consent-management, authentication, subscription, or checkout flow.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "optimised-assets",
      "status": "pass",
      "confidence": "high",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "The authored visual assets are a scalable SVG logo and a 4.5 KiB WebP background; the image probe finds no oversized rendered image.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/images.json",
        "evidence/home-summary.json"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "no-wasteful-work",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "Lighthouse estimates 47 KiB of unused JavaScript in the 89 KiB Yandex Metrika bundle (53.9% unused); HAR shows it is the largest resource and third parties account for 80% of transferred bytes.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse-key-audits.json",
        "evidence/home-summary.json",
        "evidence/home.har"
      ],
      "findingIds": [
        "F12"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "third-party-and-media-budget",
      "status": "issues",
      "confidence": "high",
      "method": "Direct check-specific review of browser evidence and objective probes.",
      "evidence": "The DOM initializes Yandex Metrika with webvisor:true, clickmap:true, and trackLinks:true on load. HAR records 15/21 third-party requests and 125,641/156,183 transferred bytes; cookie and Lighthouse evidence shows first-party SameSite=None analytics cookies plus 16 third-party cookies, while no consent UI appears.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home-summary.json",
        "evidence/home.har",
        "evidence/cookies.json",
        "evidence/trackers.json",
        "evidence/lighthouse-key-audits.json",
        "evidence/home-desktop.png"
      ],
      "findingIds": [
        "F9",
        "F12"
      ]
    },
    {
      "principleId": "be-agent-ready",
      "checkId": "structured-agent-capabilities",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "This static infrastructure disclaimer has no transactional capability or workflow for an agent to invoke.",
      "reason": "This static infrastructure disclaimer has no transactional capability or workflow for an agent to invoke.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-agent-ready",
      "checkId": "on-device-inference",
      "status": "not-applicable",
      "confidence": "high",
      "method": "Applicability judgement after rendered-DOM recon and representative-path enumeration.",
      "evidence": "The page has no summarisation, generation, or inference task where on-device AI would improve the experience.",
      "reason": "The page has no summarisation, generation, or inference task where on-device AI would improve the experience.",
      "pathIds": [
        "home"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "no-leak-under-repeated-interaction",
      "status": "pass",
      "confidence": "medium",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "After ten full-page scroll-down/up cycles, heap self size is 3,007,008 bytes versus 2,939,572 baseline (+2.3%) with only small, bounded constructor changes; no unbounded growth signal appeared.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/heap-baseline.heapsnapshot",
        "evidence/heap-post.heapsnapshot"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "bounded-footprint",
      "status": "pass",
      "confidence": "medium",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "The baseline heap is proportionate for the static page at 2.94 MB self size and 70,531 nodes in the V8 snapshot summary; trace also reports no blocking work.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/heap-baseline.heapsnapshot",
        "evidence/home-trace-summary.json"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "no-detached-dom-or-unbounded-listeners",
      "status": "pass",
      "confidence": "medium",
      "method": "Direct check-specific inspection using the referenced browser artifacts.",
      "evidence": "Neither heap summary exposes Detached* constructors among the dominant populations, and repeated scrolling changes closures only from 5,245 to 5,268 (+23), a small bounded difference rather than accumulating listeners.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/heap-baseline.heapsnapshot",
        "evidence/heap-post.heapsnapshot"
      ]
    }
  ],
  "principleOutcomes": [
    {
      "principleId": "respect-user-preferences",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F1"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "expectation": "default",
      "status": "pass"
    },
    {
      "principleId": "provide-guided-navigation",
      "expectation": "default",
      "status": "pass"
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "expectation": "default",
      "status": "pass"
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F2"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F13"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F10",
        "F11",
        "F12"
      ]
    },
    {
      "principleId": "be-inclusive",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F5",
        "F3",
        "F4"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F11"
      ]
    },
    {
      "principleId": "be-discoverable",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F6",
        "F7",
        "F14"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F8",
        "F9"
      ]
    },
    {
      "principleId": "be-resilient",
      "expectation": "contextual",
      "status": "issues",
      "findingIds": [
        "F13"
      ]
    },
    {
      "principleId": "be-internationalised",
      "expectation": "contextual",
      "status": "pass"
    },
    {
      "principleId": "be-trustworthy",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F9"
      ]
    },
    {
      "principleId": "be-sustainable",
      "expectation": "contextual",
      "status": "issues",
      "findingIds": [
        "F12",
        "F9"
      ]
    },
    {
      "principleId": "be-agent-ready",
      "expectation": "contextual",
      "status": "not-applicable",
      "reason": "This static infrastructure disclaimer has no transactional capability or workflow for an agent to invoke. The page has no summarisation, generation, or inference task where on-device AI would improve the experience."
    },
    {
      "principleId": "be-memory-efficient",
      "expectation": "default",
      "status": "pass"
    }
  ],
  "paths": [
    {
      "id": "home",
      "description": "The sole public same-host content archetype: Surveza infrastructure disclaimer, tested at desktop/mobile and preference conditions.",
      "url": "https://cdn.ak2yy.com/",
      "conditions": [
        "default desktop",
        "viewport 360x800",
        "prefers-color-scheme: dark",
        "prefers-reduced-motion: reduce",
        "forced-colors: active",
        "keyboard-only focus walk",
        "JavaScript disabled crawler view",
        "repeated scrolling"
      ],
      "result": "issues"
    },
    {
      "id": "not-found",
      "description": "Same-host HTTP failure/recovery surface for an unknown URL.",
      "url": "https://cdn.ak2yy.com/does-not-exist-audit",
      "conditions": [
        "default desktop"
      ],
      "result": "issues"
    }
  ],
  "findings": [
    {
      "id": "F1",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "respect-user-preferences",
      "principleCheckId": "respects-color-scheme",
      "guidanceId": "dark-mode",
      "guidanceCategory": "user-experience",
      "severity": "medium",
      "confidence": "high",
      "summary": "The page has no user-preference-driven dark theme.",
      "evidence": "The dark-condition screenshot is pixel-identical to the default screenshot; the computed probe reports color-scheme: normal and no prefers-color-scheme, color-scheme, or light-dark() CSS.",
      "artifacts": [
        "evidence/dark.png",
        "evidence/home-desktop.png",
        "evidence/page-probe.json",
        "evidence/style-detail.json"
      ],
      "suggestedFix": "Declare color-scheme: light dark and retint the page surfaces and text with prefers-color-scheme or light-dark(), preserving contrast in both schemes.",
      "effort": "small"
    },
    {
      "id": "F2",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "adapt-to-the-form-factor",
      "principleCheckId": "input-modality-aware",
      "guidanceId": "accessibility",
      "guidanceCategory": "accessibility",
      "severity": "high",
      "confidence": "high",
      "summary": "Keyboard focus is intentionally removed from every link.",
      "evidence": "The rendered CSS contains :focus { outline: 0 }, input:focus { outline: none }, and a:hover/a:active { outline: none }; the focus probe reports outlineStyle none for all nine links.",
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/page-probe.json"
      ],
      "suggestedFix": "Remove the global focus reset and add a high-contrast :focus-visible indicator with sufficient offset, while retaining native focus as fallback.",
      "effort": "trivial"
    },
    {
      "id": "F3",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "be-inclusive",
      "principleCheckId": "sufficient-contrast",
      "guidanceId": "accessibility",
      "guidanceCategory": "accessibility",
      "severity": "high",
      "confidence": "high",
      "summary": "Small body copy fails WCAG AA contrast.",
      "evidence": "Lighthouse reports #7d7d7d 12px text on #fff at 4.11:1, below the 4.5:1 minimum, across the explanatory copy and copyright.",
      "artifacts": [
        "evidence/lighthouse.json",
        "evidence/lighthouse-key-audits.json",
        "evidence/mobile-360.png",
        "evidence/style-detail.json"
      ],
      "suggestedFix": "Darken the secondary text color to achieve at least 4.5:1, and verify all link states and both preference themes.",
      "effort": "trivial"
    },
    {
      "id": "F4",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "be-inclusive",
      "principleCheckId": "structure-and-focus",
      "guidanceId": "accessibility",
      "guidanceCategory": "accessibility",
      "severity": "high",
      "confidence": "high",
      "summary": "The document has no heading structure and no visible focus state.",
      "evidence": "The DOM probe finds zero h1-h6 elements despite multiple visually styled titles, and the focus walk finds outlineStyle none on every link.",
      "artifacts": [
        "evidence/page-probe.json",
        "evidence/home-dom.json"
      ],
      "suggestedFix": "Use a descriptive h1 and nested h2 headings for the page sections, then restore a visible :focus-visible treatment and verify tab order.",
      "effort": "small"
    },
    {
      "id": "F5",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "be-inclusive",
      "principleCheckId": "names-roles-labels",
      "guidanceId": "accessibility",
      "guidanceCategory": "accessibility",
      "severity": "medium",
      "confidence": "high",
      "summary": "The only visible brand text is hidden from assistive technology, and an injected tracking image lacks alt.",
      "evidence": "The logo image renders the Surveza name but has alt=\"\" with no adjacent brand text; Lighthouse also flags the injected rtmark tracking img for having no alt attribute.",
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/images.json",
        "evidence/lighthouse-key-audits.json"
      ],
      "suggestedFix": "Give the brand image concise alt text such as “Surveza”; mark purely decorative/tracking images alt=\"\" at creation time.",
      "effort": "trivial"
    },
    {
      "id": "F6",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "be-discoverable",
      "principleCheckId": "title-and-description",
      "guidanceId": "search-hidden-content",
      "guidanceCategory": "user-experience",
      "severity": "medium",
      "confidence": "high",
      "summary": "Search metadata does not describe this domain disclaimer.",
      "evidence": "The title is only “Surveza” and there is no meta description; Lighthouse SEO scores 0.82 and fails meta-description.",
      "artifacts": [
        "evidence/page-probe.json",
        "evidence/lighthouse.json",
        "evidence/discoverability.json"
      ],
      "suggestedFix": "Use a descriptive title such as “Surveza survey infrastructure domain” and add a concise meta description matching the visible disclaimer.",
      "effort": "trivial"
    },
    {
      "id": "F7",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "be-discoverable",
      "principleCheckId": "canonical-and-indexing-signals",
      "guidanceId": "search-hidden-content",
      "guidanceCategory": "user-experience",
      "severity": "low",
      "confidence": "high",
      "summary": "The public page provides no canonical, robots.txt, or sitemap indexing signals.",
      "evidence": "The DOM probe finds no canonical or robots meta, while /robots.txt and /sitemap.xml both return the generic nginx 404 response.",
      "artifacts": [
        "evidence/page-probe.json",
        "evidence/robots.txt-headers.txt",
        "evidence/robots.txt.txt",
        "evidence/sitemap.xml-headers.txt",
        "evidence/sitemap.xml.txt"
      ],
      "suggestedFix": "Add a self-referencing canonical, a valid robots.txt, and a minimal sitemap containing the public disclaimer URL.",
      "effort": "small"
    },
    {
      "id": "F8",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "be-private-and-secure",
      "principleCheckId": "secure-transport-and-headers",
      "guidanceId": "security",
      "guidanceCategory": "security",
      "severity": "high",
      "confidence": "high",
      "summary": "Browser-enforced security headers are largely absent, and HSTS is effectively disabled.",
      "evidence": "The headers primitive finds no CSP, clickjacking policy, Referrer-Policy, or Permissions-Policy; HSTS is max-age=1 second. HTTPS and nosniff are present.",
      "artifacts": [
        "evidence/headers.json"
      ],
      "suggestedFix": "Deploy a restrictive CSP including frame-ancestors, set durable HSTS after validating subdomains, and add Referrer-Policy plus a least-privilege Permissions-Policy.",
      "effort": "small"
    },
    {
      "id": "F9",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "be-private-and-secure",
      "principleCheckId": "data-minimisation-and-third-parties",
      "guidanceId": "privacy",
      "guidanceCategory": "privacy",
      "severity": "high",
      "confidence": "high",
      "summary": "Full-session analytics and cookie syncing start before any consent or user action.",
      "evidence": "The DOM initializes Yandex Metrika with webvisor:true, clickmap:true, and trackLinks:true on load. HAR records 15/21 third-party requests and 125,641/156,183 transferred bytes; cookie and Lighthouse evidence shows first-party SameSite=None analytics cookies plus 16 third-party cookies, while no consent UI appears.",
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home-summary.json",
        "evidence/home.har",
        "evidence/cookies.json",
        "evidence/trackers.json",
        "evidence/lighthouse-key-audits.json",
        "evidence/home-desktop.png"
      ],
      "suggestedFix": "Do not start Webvisor/cookie-sync tracking before informed consent. Prefer privacy-preserving aggregate analytics, collect only necessary events, batch them, and document retention and recipients.",
      "effort": "medium"
    },
    {
      "id": "F10",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "be-fast-and-stable",
      "principleCheckId": "good-core-web-vitals",
      "guidanceId": "performance",
      "guidanceCategory": "performance",
      "severity": "medium",
      "confidence": "high",
      "summary": "Throttled mobile LCP is outside the good Core Web Vitals range.",
      "evidence": "Lighthouse measures LCP 3.5s and FCP 2.6s (performance 0.87), while the unthrottled trace is fast at 794ms with 0ms blocking, indicating network dependencies rather than main-thread work.",
      "artifacts": [
        "evidence/lighthouse.json",
        "evidence/home-trace-summary.json",
        "evidence/home-trace.json"
      ],
      "suggestedFix": "Prioritize the first-view content, self-host or remove the render-blocking font, and defer non-essential analytics so LCP stays at or below 2.5s under mobile throttling.",
      "effort": "small"
    },
    {
      "id": "F11",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "be-fast-and-stable",
      "principleCheckId": "visual-stability",
      "guidanceId": "optimize-image-priority",
      "guidanceCategory": "performance",
      "severity": "low",
      "confidence": "high",
      "summary": "The logo has no intrinsic dimensions and contributes to measurable layout shift.",
      "evidence": "Both the images primitive and Lighthouse flag the logo as missing width/height; layout records CLS 0.021 desktop and 0.041 mobile.",
      "artifacts": [
        "evidence/images.json",
        "evidence/home-layout.json",
        "evidence/mobile-layout.json",
        "evidence/lighthouse-key-audits.json"
      ],
      "suggestedFix": "Set the SVG logo width and height attributes (or a stable aspect-ratio) so its space is reserved before it loads.",
      "effort": "trivial"
    },
    {
      "id": "F12",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "be-fast-and-stable",
      "principleCheckId": "trim-unused-and-duplicate-code",
      "guidanceId": "identify-heavy-scripts",
      "guidanceCategory": "performance",
      "severity": "medium",
      "confidence": "high",
      "summary": "A large analytics bundle dominates this otherwise tiny static page and is mostly unused.",
      "evidence": "Lighthouse estimates 47 KiB of unused JavaScript in the 89 KiB Yandex Metrika bundle (53.9% unused); HAR shows it is the largest resource and third parties account for 80% of transferred bytes.",
      "artifacts": [
        "evidence/lighthouse-key-audits.json",
        "evidence/home-summary.json",
        "evidence/home.har"
      ],
      "suggestedFix": "Remove full-session analytics or load a minimal analytics path only after consent and when needed; avoid shipping the Webvisor feature set on this static disclaimer.",
      "effort": "small"
    },
    {
      "id": "F13",
      "pathId": "not-found",
      "url": "https://cdn.ak2yy.com/does-not-exist-audit",
      "principleId": "be-resilient",
      "principleCheckId": "network-and-http-failure-states",
      "guidanceId": "persistent-toast-notifications",
      "guidanceCategory": "user-experience",
      "severity": "medium",
      "confidence": "high",
      "summary": "Unknown URLs dead-end at an unbranded nginx error with no recovery action.",
      "evidence": "The tested missing URL correctly returns HTTP 404 but shows only “404 Not Found / nginx”, with no explanation, home link, support link, or route back to the disclaimer.",
      "artifacts": [
        "evidence/404.png",
        "evidence/does-not-exist-audit-headers.txt",
        "evidence/does-not-exist-audit.txt"
      ],
      "suggestedFix": "Serve a branded 404 that preserves the status code, explains what happened, and offers links to the homepage and support.",
      "effort": "small"
    },
    {
      "id": "F14",
      "pathId": "home",
      "url": "https://cdn.ak2yy.com/",
      "principleId": "be-discoverable",
      "principleCheckId": "structured-and-shareable-metadata",
      "guidanceId": "html",
      "guidanceCategory": "html",
      "severity": "low",
      "confidence": "high",
      "summary": "The public informational page has no social-preview or structured entity metadata.",
      "evidence": "The metadata probe finds no Open Graph fields and no JSON-LD despite the page representing the Surveza organization and its support contact.",
      "artifacts": [
        "evidence/page-probe.json"
      ],
      "suggestedFix": "Add accurate Open Graph title/description/image fields and a small schema.org Organization JSON-LD block matching visible content.",
      "effort": "small"
    }
  ],
  "taskList": [
    {
      "id": "T1",
      "title": "Gate or remove Webvisor and cookie-sync tracking; minimize analytics",
      "priority": 1,
      "findingIds": [
        "F9",
        "F12"
      ],
      "guidanceId": "privacy",
      "status": "open"
    },
    {
      "id": "T2",
      "title": "Restore visible keyboard focus and semantic heading/brand structure",
      "priority": 2,
      "findingIds": [
        "F2",
        "F4",
        "F5"
      ],
      "guidanceId": "accessibility",
      "status": "open"
    },
    {
      "id": "T3",
      "title": "Deploy CSP, durable HSTS, clickjacking, referrer and permissions policies",
      "priority": 3,
      "findingIds": [
        "F8"
      ],
      "guidanceId": "security",
      "status": "open"
    },
    {
      "id": "T4",
      "title": "Fix secondary text contrast and reading legibility",
      "priority": 4,
      "findingIds": [
        "F3"
      ],
      "guidanceId": "accessibility",
      "status": "open"
    },
    {
      "id": "T5",
      "title": "Reduce LCP dependencies and reserve logo dimensions",
      "priority": 5,
      "findingIds": [
        "F10",
        "F11"
      ],
      "guidanceId": "performance",
      "status": "open"
    },
    {
      "id": "T6",
      "title": "Add dark-theme preference support",
      "priority": 6,
      "findingIds": [
        "F1"
      ],
      "guidanceId": "dark-mode",
      "status": "open"
    },
    {
      "id": "T7",
      "title": "Add descriptive, canonical, crawl and share metadata",
      "priority": 7,
      "findingIds": [
        "F6",
        "F7",
        "F14"
      ],
      "guidanceId": "html",
      "status": "open"
    },
    {
      "id": "T8",
      "title": "Replace the nginx dead end with a recoverable branded 404",
      "priority": 8,
      "findingIds": [
        "F13"
      ],
      "guidanceId": "persistent-toast-notifications",
      "status": "open"
    }
  ],
  "budget": {
    "wallClockSeconds": 900,
    "pathCount": 2,
    "auditPasses": 1
  },
  "agent": "pi",
  "runId": "2026-07-22T02-42-43-420Z"
}
