{ "url": "https://www.nfse.gov.br", "auditedAt": "2026-07-22T05:42:05.375Z", "mode": "report", "status": "completed", "statusDetail": "Atomic coverage complete across five representative paths; no source was supplied, so no fixes were applied.", "page": { "appType": "mpa", "framework": "Plone/gov.br templates plus a separate server-rendered consultation application", "notes": "www.nfse.gov.br redirects to gov.br/nfse/pt-br. Representative coverage included homepage, listing, article, public lookup form, and 404 recovery. Authenticated issuer/municipal areas, successful invoice lookup with real taxpayer data, and destructive/account changes were not covered because they require credentials or sensitive identifiers." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "discoverability", "har", "trace", "heap-summary comparison", "security headers", "cookies", "trackers", "secrets", "Lighthouse", "curl robots/sitemap/headers", "Modern Web Guidance 0.0.172" ], "guidanceConsulted": [ "dark-mode", "light-dismiss-a-dialog", "declarative-dialog-popover-control", "performance", "optimize-image-priority", "identify-heavy-scripts", "accessibility", "html", "forms", "required-field-feedback", "security", "privacy", "webmcp", "agentic-forms", "deliver-optimized-decorative-images", "efficient-background-processing", "directional-navigation-transitions", "scroll-position-aware-elements" ], "artifacts": [ { "type": "screenshot", "path": "evidence/article-discoverability-crawler.png", "caption": "article discoverability crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/article-discoverability-rendered.png", "caption": "article discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/article-discoverability.json", "caption": "article discoverability", "findingIds": [ "F012" ] }, { "type": "screenshot", "path": "evidence/article-mobile.png", "caption": "article mobile", "findingIds": [ "F001" ] }, { "type": "screenshot", "path": "evidence/consultation-discoverability-crawler.png", "caption": "consultation discoverability crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/consultation-discoverability-rendered.png", "caption": "consultation discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/consultation-discoverability.json", "caption": "consultation discoverability", "findingIds": [] }, { "type": "screenshot", "path": "evidence/consultation-invalid-mobile.png", "caption": "consultation invalid mobile", "findingIds": [ "F006" ] }, { "type": "layout", "path": "evidence/consultation-layout-mobile.json", "caption": "consultation layout mobile", "findingIds": [] }, { "type": "other", "path": "evidence/consultation-probe.json", "caption": "consultation probe", "findingIds": [ "F006", "F011", "F014", "F015", "F017" ] }, { "type": "screenshot", "path": "evidence/consultation.png", "caption": "consultation", "findingIds": [ "F011" ] }, { "type": "screenshot", "path": "evidence/docs.png", "caption": "docs", "findingIds": [] }, { "type": "other", "path": "evidence/home-cookies.json", "caption": "home cookies", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark", "findingIds": [ "F003" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [ "F001", "F002", "F003" ] }, { "type": "screenshot", "path": "evidence/home-discoverability-crawler.png", "caption": "home discoverability crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-discoverability-rendered.png", "caption": "home discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/home-discoverability.json", "caption": "home discoverability", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [ "F014" ] }, { "type": "other", "path": "evidence/home-focus-target-probe.json", "caption": "home focus target probe", "findingIds": [ "F010", "F019" ] }, { "type": "other", "path": "evidence/home-headers.json", "caption": "home headers", "findingIds": [ "F013" ] }, { "type": "heap", "path": "evidence/home-heap-baseline.json", "caption": "home heap baseline", "findingIds": [] }, { "type": "heap", "path": "evidence/home-heap-post.json", "caption": "home heap post", "findingIds": [] }, { "type": "layout", "path": "evidence/home-layout-mobile.json", "caption": "home layout mobile", "findingIds": [ "F004", "F008" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [ "F001", "F004", "F019" ] }, { "type": "other", "path": "evidence/home-platform-probe.json", "caption": "home platform probe", "findingIds": [ "F002", "F004", "F005", "F012", "F017" ] }, { "type": "other", "path": "evidence/home-secrets.json", "caption": "home secrets", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F007", "F009", "F016", "F018" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F007" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace", "findingIds": [] }, { "type": "other", "path": "evidence/home-trackers.json", "caption": "home trackers", "findingIds": [ "F018" ] }, { "type": "har", "path": "evidence/home.har", "caption": "home", "findingIds": [ "F007", "F009", "F016" ] }, { "type": "other", "path": "evidence/http-indexing.txt", "caption": "http indexing", "findingIds": [] }, { "type": "other", "path": "evidence/http-response-headers.txt", "caption": "http response headers", "findingIds": [ "F013" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "lighthouse home", "findingIds": [ "F007", "F008", "F009", "F010", "F012" ] }, { "type": "other", "path": "evidence/not-found-probe.json", "caption": "not found probe", "findingIds": [] }, { "type": "screenshot", "path": "evidence/not-found.png", "caption": "not found", "findingIds": [] }, { "type": "other", "path": "evidence/recon-evaluate.json", "caption": "recon evaluate", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "The dark-condition screenshot remains the same white/light-blue theme as the default, and the DOM/CSS probe found no adaptive dark surface behavior.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-desktop.png" ], "findingIds": [ "F003" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Under prefers-reduced-motion: reduce, matchMedia matched and getAnimations() returned no active animations.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Lighthouse accessibility audit passed the color-contrast checks on the sampled homepage.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "The CSS probe found zero view-transition rules and the MPA navigation has no transition affordance.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ], "findingIds": [ "F005" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "CSS/runtime probe found no custom animation timeline or scroll animation; scrolling remains browser-native with no main-thread scroll animation anti-pattern.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "The sampled portal uses native page scrolling and ordinary controls; no pointermove-driven gesture replacement or scroll-jacking was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "medium", "method": "Direct visual/objective evidence review for this registered check", "evidence": "The 5,474 px mobile homepage uses conventional static chrome; the platform probe found no scroll-timeline rules and screenshots show no progress or section cue.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json", "evidence/home-mobile.png", "evidence/home-platform-probe.json" ], "findingIds": [ "F004" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "No tooltip/menu overlay requiring anchored edge positioning appears in the primary content; ordinary navigation remained aligned at tested viewports.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Screenshots show a clear portal title, hero/news area, and labeled service cards that direct users to the main tasks.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "Desktop and 360 px screenshots show a fixed, dimming consent layer covering roughly half the viewport before any interaction; on mobile it blocks the article and primary service cards.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/article-mobile.png" ], "findingIds": [ "F001" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "The platform probe found one full-width fixed .br-cookiebar but zero dialog, popover, or details elements; screenshots show modal-like behavior.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json", "evidence/home-desktop.png" ], "findingIds": [ "F002" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "Desktop and 360 px screenshots show a fixed, dimming consent layer covering roughly half the viewport before any interaction; on mobile it blocks the article and primary service cards.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/article-mobile.png" ], "findingIds": [ "F001" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Layout at 360×800 measured scrollWidth 360, clientWidth 360, and 0 px horizontal overflow on both homepage and consultation.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Homepage and form components reflow to 360 px without horizontal overflow; mobile screenshots show stacked cards/fields.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-layout-mobile.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "The focus/target probe measured the menu at 28×28 px and several social/icon links at roughly 19–33 px; mobile screenshots show dense floating accessibility controls over content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-focus-target-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F019" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "The H1 identifies the NFS-e portal and prominent cards expose Emitir Nota Fiscal, Consultar Nota Fiscal, municipality and documentation tasks.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "All business fields report required=false despite visible asterisks; clicking submit at 360 px leaves the page at the form/captcha with no visible field-specific errors in the captured state.", "pathIds": [ "consultation" ], "artifacts": [ "evidence/consultation-probe.json", "evidence/consultation-invalid-mobile.png" ], "findingIds": [ "F006" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "All business fields report required=false despite visible asterisks; clicking submit at 360 px leaves the page at the form/captcha with no visible field-specific errors in the captured state.", "pathIds": [ "consultation" ], "artifacts": [ "evidence/consultation-probe.json", "evidence/consultation-invalid-mobile.png" ], "findingIds": [ "F006" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "Trace measured FCP 5.69 s and LCP 12.03 s; Lighthouse measured mobile LCP 23.3 s with performance 0.49; HAR recorded 13,419,727 transferred bytes, including 11,020,326 image bytes and individual PNGs up to 2.21 MB.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse-home.json", "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "F007" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "Lighthouse measured CLS 0.144 and identified five layout-shift culprits, although the short post-load layout observer measured 0 after settling.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-layout-mobile.json" ], "findingIds": [ "F008" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Trace found one 87.81 ms long task and only 37.81 ms total blocking time; the dominant delay is network/media rather than sustained main-thread blocking.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "Trace measured FCP 5.69 s and LCP 12.03 s; Lighthouse measured mobile LCP 23.3 s with performance 0.49; HAR recorded 13,419,727 transferred bytes, including 11,020,326 image bytes and individual PNGs up to 2.21 MB. HAR recorded 19 stylesheets, 28 scripts and 16 fonts; Lighthouse flagged three large first-party scripts without valid source maps; Swiper 3.4.2 is loaded from a third-party CDN.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse-home.json", "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "F007", "F009" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "HAR recorded 19 stylesheets, 28 scripts and 16 fonts; Lighthouse flagged three large first-party scripts without valid source maps; Swiper 3.4.2 is loaded from a third-party CDN.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse-home.json", "evidence/home.har" ], "findingIds": [ "F009" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "Lighthouse found one unnamed button and seven links without discernible names, plus a visible-label/accessibility-name mismatch; the focus probe also recorded multiple visible links with empty text. The consultation probe found an empty html lang, zero headings, and no associated labels for the main text/select controls; its first visual content begins directly with a fieldset-like block.", "pathIds": [ "home", "consultation" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-focus-target-probe.json", "evidence/consultation-probe.json", "evidence/consultation.png" ], "findingIds": [ "F010", "F011" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Lighthouse accessibility score was 0.92 and did not report a color-contrast failure.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "Lighthouse found one unnamed button and seven links without discernible names, plus a visible-label/accessibility-name mismatch; the focus probe also recorded multiple visible links with empty text. The consultation probe found an empty html lang, zero headings, and no associated labels for the main text/select controls; its first visual content begins directly with a fieldset-like block.", "pathIds": [ "home", "consultation" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-focus-target-probe.json", "evidence/consultation-probe.json", "evidence/consultation.png" ], "findingIds": [ "F010", "F011" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Article and portal screenshots show readable text sizing, line spacing, and left alignment at desktop and 360 px.", "pathIds": [ "home" ], "artifacts": [ "evidence/article-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "The focus/target probe measured the menu at 28×28 px and several social/icon links at roughly 19–33 px; mobile screenshots show dense floating accessibility controls over content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-focus-target-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F019" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Lighthouse best-practices scored 1.0 and reported no runtime console-error audit failure.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "HAR recorded 19 stylesheets, 28 scripts and 16 fonts; Lighthouse flagged three large first-party scripts without valid source maps; Swiper 3.4.2 is loaded from a third-party CDN.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse-home.json", "evidence/home.har" ], "findingIds": [ "F009" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "HAR recorded 19 stylesheets, 28 scripts and 16 fonts; Lighthouse flagged three large first-party scripts without valid source maps; Swiper 3.4.2 is loaded from a third-party CDN.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse-home.json", "evidence/home.har" ], "findingIds": [ "F009" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "The platform probe returned description:null and Lighthouse failed the meta-description SEO audit; article pages do include descriptions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json", "evidence/lighthouse-home.json", "evidence/article-discoverability.json" ], "findingIds": [ "F012" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Raw HTML contains the H1/title and descriptive href links; both main templates have viewport metadata and mobile layouts have no overflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Homepage has a canonical URL; robots.txt permits this section and advertises a sitemap; the section sitemap returned 200 with current article URLs.", "pathIds": [ "home" ], "artifacts": [ "evidence/http-indexing.txt" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Homepage probe found two JSON-LD blocks and seven Open Graph properties; the article content and title are present in raw HTML.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-platform-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "HTTPS is used and the final document headers include HSTS, nosniff, X-Frame-Options DENY, referrer policy, and frame-ancestors CSP.", "pathIds": [ "home" ], "artifacts": [ "evidence/http-response-headers.txt" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "Tracker/HAR capture found seven third-party origins and 84 of 86 requests classified cross-origin from the requested host, totaling 13.42 MB; no known analytics tracker was detected.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json" ], "findingIds": [ "F018" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "No permission prompt fired on load; account entry is a clearly labeled gov.br sign-in rather than an unsolicited permission flow.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "The final gov.br document response includes HTTPS, HSTS, nosniff, X-Frame-Options DENY, strict-origin-when-cross-origin and CSP frame-ancestors, but the CSP does not restrict script/style sources and no Permissions-Policy was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/http-response-headers.txt", "evidence/home-headers.json" ], "findingIds": [ "F013" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Discoverability measured 83% raw/rendered word coverage for homepage and article, 100% for consultation, with no empty SPA shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Server-rendered navigation and consultation form remained usable at desktop and 360 px with no horizontal overflow or runtime error.", "pathIds": [ "home" ], "artifacts": [ "evidence/consultation-layout-mobile.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Recon applicability judgement against the sampled site purpose and content", "evidence": "This informational portal and public lookup were not presented as installable/offline products; offline installation is contextual and not necessary to the audited purpose.", "reason": "This informational portal and public lookup were not presented as installable/offline products; offline installation is contextual and not necessary to the audited purpose." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "The deliberate missing route shows a Portuguese error H1, explanation, support link, and direct home recovery link.", "pathIds": [ "home" ], "artifacts": [ "evidence/not-found-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "The consultation DOM probe returned an empty html lang while the gov.br content templates correctly use pt-br.", "pathIds": [ "consultation" ], "artifacts": [ "evidence/consultation-probe.json", "evidence/home-dom.json" ], "findingIds": [ "F014" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Recon applicability judgement against the sampled site purpose and content", "evidence": "The sampled surfaces contain no locale-sensitive currency, numeric, duration, or calendar formatting requiring an alternate locale.", "reason": "The sampled surfaces contain no locale-sensitive currency, numeric, duration, or calendar formatting requiring an alternate locale." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon applicability judgement against the sampled site purpose and content", "evidence": "The sampled surfaces do not coordinate user-specific events or display time-zone-sensitive timestamps.", "reason": "The sampled surfaces do not coordinate user-specific events or display time-zone-sensitive timestamps." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Cookie choices present Reject and Accept with equal visual weight and a separate manage option; no confirmshaming or preselected paid choice was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "All business fields report required=false despite visible asterisks; clicking submit at 360 px leaves the page at the form/captcha with no visible field-specific errors in the captured state.", "pathIds": [ "consultation" ], "artifacts": [ "evidence/consultation-probe.json", "evidence/consultation-invalid-mobile.png" ], "findingIds": [ "F006" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "The consultation probe found empty autocomplete values on all business inputs, generic text input types, and no native required constraints.", "pathIds": [ "consultation" ], "artifacts": [ "evidence/consultation-probe.json" ], "findingIds": [ "F015" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "No commercial checkout exists; sign-in is clearly delegated to gov.br and no hidden subscription or payment commitment appears.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "HAR attributes 11.02 MB to 16 images, with seven PNG/JPEG assets between 0.83 MB and 2.21 MB; total transfer is 13.42 MB for a mostly informational landing page.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "F016" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Trace showed low total blocking time and no evidence of autoplay media or persistent idle/background processing in the sampled load.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct visual/objective evidence review for this registered check", "evidence": "HAR attributes 11.02 MB to 16 images, with seven PNG/JPEG assets between 0.83 MB and 2.21 MB; total transfer is 13.42 MB for a mostly informational landing page. Tracker/HAR capture found seven third-party origins and 84 of 86 requests classified cross-origin from the requested host, totaling 13.42 MB; no known analytics tracker was detected.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har", "evidence/home-trackers.json" ], "findingIds": [ "F016", "F018" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "issues", "confidence": "medium", "method": "Direct visual/objective evidence review for this registered check", "evidence": "The DOM/probe found conventional HTML links/forms but no WebMCP registration or agentic tool metadata; the consultation is a meaningful public task that agents could assist with while preserving confirmation and captcha boundaries.", "pathIds": [ "consultation" ], "artifacts": [ "evidence/home-platform-probe.json", "evidence/consultation-probe.json" ], "findingIds": [ "F017" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon applicability judgement against the sampled site purpose and content", "evidence": "No summarization, generation, or other AI feature is part of the portal’s stated task, so on-device inference is not applicable.", "reason": "No summarization, generation, or other AI feature is part of the portal’s stated task, so on-device inference is not applicable." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "After ten next/previous carousel cycles, heap size fell from 28,773,165 to 28,678,406 bytes and node count fell from 458,491 to 458,297, showing no retained-growth signal.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-post.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "Baseline heap was 28.77 MB for a media-rich portal; despite excessive network image bytes, live JS heap remained bounded and proportionate.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Cross-path visual review plus rendered DOM/evaluate probe", "evidence": "The repeated-interaction heap did not grow in nodes, closures, arrays, or total self size; no detached-DOM growth signal appeared in the summaries.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-heap-post.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F003" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F005" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F004" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F001", "F002" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F019" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F006" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F007", "F008", "F009" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F010", "F011", "F019" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F009" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F012" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F018", "F013" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F014" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F006", "F015" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F016", "F018" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "issues", "findingIds": [ "F017" ] }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Redirected landing page and primary service navigation; represents the portal homepage and global gov.br chrome.", "url": "https://www.nfse.gov.br", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "keyboard focus" ], "result": "issues" }, { "id": "docs", "description": "Technical-documentation listing; represents the library/listing template.", "url": "https://www.gov.br/nfse/pt-br/biblioteca/documentacao-tecnica", "conditions": [ "desktop" ], "result": "issues" }, { "id": "article", "description": "Current DANFSE news item; represents the article/content template.", "url": "https://www.gov.br/nfse/pt-br/noticias/danfse-novos-ajustes-de-leiaute-e-prorrogacao-do-prazo-para-adequacao", "conditions": [ "viewport: 360x800", "crawler without JavaScript" ], "result": "issues" }, { "id": "consultation", "description": "Public invoice consultation form; represents the primary unauthenticated transactional flow and invalid-submit state.", "url": "https://www.nfse.gov.br/consultapublica", "conditions": [ "desktop", "viewport: 360x800", "invalid submit", "crawler without JavaScript" ], "result": "issues" }, { "id": "not-found", "description": "Deliberately missing route; represents HTTP/navigation recovery.", "url": "https://www.gov.br/nfse/pt-br/rota-inexistente-web-uplift", "conditions": [ "desktop" ], "result": "pass" } ], "findings": [ { "id": "F001", "severity": "high", "confidence": "high", "summary": "The cookie consent layer obscures the primary content on every gov.br template tested.", "evidence": "Desktop and 360 px screenshots show a fixed, dimming consent layer covering roughly half the viewport before any interaction; on mobile it blocks the article and primary service cards.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/article-mobile.png" ], "suggestedFix": "Use a compact, non-blocking consent notice for non-essential cookies and preserve immediate access to core content, following light-dismiss guidance.", "effort": "medium", "pathId": "home", "url": "https://www.nfse.gov.br", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience" }, { "id": "F002", "severity": "medium", "confidence": "high", "summary": "The blocking cookie layer is a custom fixed div rather than a semantic dialog or popover.", "evidence": "The platform probe found one full-width fixed .br-cookiebar but zero dialog, popover, or details elements; screenshots show modal-like behavior.", "artifacts": [ "evidence/home-platform-probe.json", "evidence/home-desktop.png" ], "suggestedFix": "Implement the consent surface with a semantic dialog/popover pattern, focus management, Escape/light dismiss where appropriate, and an accessible name.", "effort": "medium", "pathId": "home", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "user-experience" }, { "id": "F003", "severity": "medium", "confidence": "high", "summary": "The portal does not adapt its visual theme to the user’s dark color-scheme preference.", "evidence": "The dark-condition screenshot remains the same white/light-blue theme as the default, and the DOM/CSS probe found no adaptive dark surface behavior.", "artifacts": [ "evidence/home-dark.png", "evidence/home-desktop.png" ], "suggestedFix": "Declare color-scheme and define dark surface, text, border, and image treatments with prefers-color-scheme or light-dark().", "effort": "medium", "pathId": "home", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "user-experience" }, { "id": "F004", "severity": "low", "confidence": "medium", "summary": "Long portal pages provide no scroll-progress or scroll-state-aware navigation cue.", "evidence": "The 5,474 px mobile homepage uses conventional static chrome; the platform probe found no scroll-timeline rules and screenshots show no progress or section cue.", "artifacts": [ "evidence/home-layout-mobile.json", "evidence/home-mobile.png", "evidence/home-platform-probe.json" ], "suggestedFix": "Add a restrained scroll-progress or section-state affordance on long content, while honoring reduced motion.", "effort": "small", "pathId": "home", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "scroll-position-aware-elements", "guidanceCategory": "user-experience" }, { "id": "F005", "severity": "low", "confidence": "high", "summary": "Primary page/state changes do not use view transitions.", "evidence": "The CSS probe found zero view-transition rules and the MPA navigation has no transition affordance.", "artifacts": [ "evidence/home-platform-probe.json" ], "suggestedFix": "Progressively enhance same-origin navigation with cross-document view transitions, with a reduced-motion fallback.", "effort": "medium", "pathId": "home", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "directional-navigation-transitions", "guidanceCategory": "user-experience" }, { "id": "F006", "severity": "high", "confidence": "high", "summary": "The public consultation form does not expose native required-state or usable invalid-submit feedback.", "evidence": "All business fields report required=false despite visible asterisks; clicking submit at 360 px leaves the page at the form/captcha with no visible field-specific errors in the captured state.", "artifacts": [ "evidence/consultation-probe.json", "evidence/consultation-invalid-mobile.png" ], "suggestedFix": "Mark required controls with required/aria-required, validate after interaction, place specific errors beside fields, announce an error summary, and move focus to it.", "effort": "medium", "pathId": "consultation", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "required-field-feedback", "guidanceCategory": "forms" }, { "id": "F007", "severity": "high", "confidence": "high", "summary": "Homepage loading is very slow and transfers 13.4 MB, mostly oversized PNG imagery.", "evidence": "Trace measured FCP 5.69 s and LCP 12.03 s; Lighthouse measured mobile LCP 23.3 s with performance 0.49; HAR recorded 13,419,727 transferred bytes, including 11,020,326 image bytes and individual PNGs up to 2.21 MB.", "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse-home.json", "evidence/home-summary.json", "evidence/home.har" ], "suggestedFix": "Resize and transcode hero/news images, serve responsive sources, prioritize only the LCP image, lazy-load below-fold media, and consolidate render-blocking CSS/JS.", "effort": "large", "pathId": "home", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "optimize-image-priority", "guidanceCategory": "performance" }, { "id": "F008", "severity": "medium", "confidence": "high", "summary": "The homepage is not visually stable during a throttled mobile load.", "evidence": "Lighthouse measured CLS 0.144 and identified five layout-shift culprits, although the short post-load layout observer measured 0 after settling.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-layout-mobile.json" ], "suggestedFix": "Reserve dimensions for banners, images, embeds, and late UI; use stable font fallbacks and avoid injecting chrome above existing content.", "effort": "medium", "pathId": "home", "principleId": "be-fast-and-stable", "principleCheckId": "visual-stability", "guidanceId": "performance", "guidanceCategory": "performance" }, { "id": "F009", "severity": "medium", "confidence": "high", "summary": "The page ships a fragmented, partly legacy resource graph.", "evidence": "HAR recorded 19 stylesheets, 28 scripts and 16 fonts; Lighthouse flagged three large first-party scripts without valid source maps; Swiper 3.4.2 is loaded from a third-party CDN.", "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse-home.json", "evidence/home.har" ], "suggestedFix": "Audit route-level usage, remove unused Plone bundles, consolidate critical styles, modernize legacy libraries, and publish valid production source maps where policy allows.", "effort": "large", "pathId": "home", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance" }, { "id": "F010", "severity": "high", "confidence": "high", "summary": "Interactive controls and links lack accessible names.", "evidence": "Lighthouse found one unnamed button and seven links without discernible names, plus a visible-label/accessibility-name mismatch; the focus probe also recorded multiple visible links with empty text.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-focus-target-probe.json" ], "suggestedFix": "Give every icon button and image/card link a programmatic name matching its visible purpose; remove empty duplicate links from the tab order.", "effort": "medium", "pathId": "home", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "accessibility" }, { "id": "F011", "severity": "high", "confidence": "high", "summary": "The consultation form lacks basic document and form structure.", "evidence": "The consultation probe found an empty html lang, zero headings, and no associated labels for the main text/select controls; its first visual content begins directly with a fieldset-like block.", "artifacts": [ "evidence/consultation-probe.json", "evidence/consultation.png" ], "suggestedFix": "Set lang=\"pt-BR\", add one descriptive h1, use fieldset/legend for the query mode, and explicitly associate every label and error with its control.", "effort": "small", "pathId": "consultation", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "accessibility" }, { "id": "F012", "severity": "medium", "confidence": "high", "summary": "The homepage has no meta description.", "evidence": "The platform probe returned description:null and Lighthouse failed the meta-description SEO audit; article pages do include descriptions.", "artifacts": [ "evidence/home-platform-probe.json", "evidence/lighthouse-home.json", "evidence/article-discoverability.json" ], "suggestedFix": "Add a concise, page-specific Portuguese meta description describing the NFS-e portal and its primary services.", "effort": "trivial", "pathId": "home", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "guidanceCategory": "html" }, { "id": "F013", "severity": "medium", "confidence": "high", "summary": "Security policy headers are only partially defensive.", "evidence": "The final gov.br document response includes HTTPS, HSTS, nosniff, X-Frame-Options DENY, strict-origin-when-cross-origin and CSP frame-ancestors, but the CSP does not restrict script/style sources and no Permissions-Policy was observed.", "artifacts": [ "evidence/http-response-headers.txt", "evidence/home-headers.json" ], "suggestedFix": "Deploy a nonce/hash-based CSP covering script/style/connect/image sources and an explicit least-privilege Permissions-Policy while retaining HSTS and anti-framing controls.", "effort": "large", "pathId": "home", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "security" }, { "id": "F014", "severity": "medium", "confidence": "high", "summary": "The standalone consultation application does not declare its content language.", "evidence": "The consultation DOM probe returned an empty html lang while the gov.br content templates correctly use pt-br.", "artifacts": [ "evidence/consultation-probe.json", "evidence/home-dom.json" ], "suggestedFix": "Set html lang=\"pt-BR\" and use logical CSS properties so future bidirectional/localized variants remain viable.", "effort": "trivial", "pathId": "consultation", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "html", "guidanceCategory": "html" }, { "id": "F015", "severity": "medium", "confidence": "high", "summary": "Consultation fields provide little browser-native input assistance.", "evidence": "The consultation probe found empty autocomplete values on all business inputs, generic text input types, and no native required constraints.", "artifacts": [ "evidence/consultation-probe.json" ], "suggestedFix": "Use appropriate inputmode/autocomplete tokens where standardized, constraints and examples for tax identifiers and invoice keys, without disabling paste.", "effort": "small", "pathId": "consultation", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "forms", "guidanceCategory": "forms" }, { "id": "F016", "severity": "high", "confidence": "high", "summary": "Image delivery is far beyond a proportionate sustainability budget.", "evidence": "HAR attributes 11.02 MB to 16 images, with seven PNG/JPEG assets between 0.83 MB and 2.21 MB; total transfer is 13.42 MB for a mostly informational landing page.", "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "suggestedFix": "Generate AVIF/WebP variants and responsive srcset/sizes, cap source dimensions to display needs, and enforce an image/page-weight budget in publishing.", "effort": "large", "pathId": "home", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "user-experience" }, { "id": "F017", "severity": "medium", "confidence": "medium", "summary": "Public service capabilities are not exposed in a structured agent-readable form.", "evidence": "The DOM/probe found conventional HTML links/forms but no WebMCP registration or agentic tool metadata; the consultation is a meaningful public task that agents could assist with while preserving confirmation and captcha boundaries.", "artifacts": [ "evidence/home-platform-probe.json", "evidence/consultation-probe.json" ], "suggestedFix": "Expose safe, read-only discovery and form-assistance capabilities through progressive WebMCP/agentic-form metadata, requiring explicit user confirmation for submissions.", "effort": "large", "pathId": "consultation", "principleId": "be-agent-ready", "principleCheckId": "structured-agent-capabilities", "guidanceId": "agentic-forms", "guidanceCategory": "webmcp" }, { "id": "F018", "severity": "medium", "confidence": "high", "summary": "The page relies on a large third-party delivery footprint even before consent.", "evidence": "Tracker/HAR capture found seven third-party origins and 84 of 86 requests classified cross-origin from the requested host, totaling 13.42 MB; no known analytics tracker was detected.", "artifacts": [ "evidence/home-trackers.json", "evidence/home-summary.json" ], "suggestedFix": "Self-host or consolidate stable assets where practical, defer optional cross-origin services until needed/consented, and document each third party’s data purpose.", "effort": "large", "pathId": "home", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "guidanceCategory": "privacy" }, { "id": "F019", "severity": "medium", "confidence": "high", "summary": "Several primary interactive targets are smaller than recommended touch dimensions.", "evidence": "The focus/target probe measured the menu at 28×28 px and several social/icon links at roughly 19–33 px; mobile screenshots show dense floating accessibility controls over content.", "artifacts": [ "evidence/home-focus-target-probe.json", "evidence/home-mobile.png" ], "suggestedFix": "Provide at least 44×44 CSS-pixel hit areas (or equivalent spacing) for primary icon controls and prevent floating utilities from covering content.", "effort": "small", "pathId": "home", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "accessibility" } ], "taskList": [ { "id": "T001", "title": "Optimize and budget responsive image delivery", "priority": 1, "findingIds": [ "F007", "F008", "F016" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T002", "title": "Make the consultation form structurally accessible and recoverable", "priority": 2, "findingIds": [ "F006", "F011", "F014", "F015" ], "guidanceId": "required-field-feedback", "status": "open" }, { "id": "T003", "title": "Remove unnamed and undersized interactive targets", "priority": 3, "findingIds": [ "F010", "F019" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T004", "title": "Replace the blocking custom cookie layer with a semantic non-intrusive pattern", "priority": 4, "findingIds": [ "F001", "F002" ], "guidanceId": "light-dismiss-a-dialog", "status": "open" }, { "id": "T005", "title": "Reduce and modernize the CSS, JavaScript, font, and third-party graph", "priority": 5, "findingIds": [ "F009", "F018" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T006", "title": "Add adaptive dark theme support", "priority": 6, "findingIds": [ "F003" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T007", "title": "Strengthen CSP and least-privilege browser policies", "priority": 7, "findingIds": [ "F013" ], "guidanceId": "security", "status": "open" }, { "id": "T008", "title": "Complete homepage discovery metadata", "priority": 8, "findingIds": [ "F012" ], "guidanceId": "html", "status": "open" }, { "id": "T009", "title": "Progressively expose safe agent-readable service capabilities", "priority": 9, "findingIds": [ "F017" ], "guidanceId": "agentic-forms", "status": "open" }, { "id": "T010", "title": "Add restrained modern navigation transitions and long-page state cues", "priority": 10, "findingIds": [ "F004", "F005" ], "guidanceId": "directional-navigation-transitions", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-22T05-42-05-375Z" }