{ "url": "https://ko.xhname.com", "auditedAt": "2026-07-22T06:54:41.394Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete agentic audit of five representative public templates plus a 404 recovery state.", "page": { "appType": "mpa", "framework": "server-rendered custom application", "notes": "Localized adult media catalogue; dark visual theme, SSR, PWA manifest/service worker, consent and age-verification surfaces." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "headers", "cookies", "trackers", "images", "secrets", "discoverability", "heap-summary", "lighthouse", "Modern Web Guidance" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/categories.png", "caption": "categories png", "findingIds": [ "F02" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies json", "findingIds": [ "F20" ] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler png", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered png", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability json", "findingIds": [] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers json", "findingIds": [ "F20" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline heapsnapshot", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "heap post heapsnapshot", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark png", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop png", "findingIds": [ "F03", "F05", "F21" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom json", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-forced-colors.png", "caption": "home forced colors png", "findingIds": [] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout json", "findingIds": [ "F07", "F23" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile png", "findingIds": [ "F07", "F08", "F23" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary json", "findingIds": [ "F11", "F21", "F27", "F28" ] }, { "type": "other", "path": "evidence/home-technical-probe.json", "caption": "home technical probe json", "findingIds": [ "F02", "F04", "F08", "F09", "F15", "F18", "F19", "F24" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary json", "findingIds": [ "F10" ] }, { "type": "other", "path": "evidence/images.json", "caption": "images json", "findingIds": [ "F17", "F26" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-summary.json", "caption": "lighthouse summary json", "findingIds": [ "F09", "F10", "F11", "F12", "F13", "F14", "F15", "F16", "F17", "F26", "F27" ] }, { "type": "other", "path": "evidence/memory-metrics.json", "caption": "memory metrics json", "findingIds": [] }, { "type": "screenshot", "path": "evidence/not-found.png", "caption": "not found png", "findingIds": [] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "platform probe json", "findingIds": [ "F24" ] }, { "type": "other", "path": "evidence/preferences-probe.json", "caption": "preferences probe json", "findingIds": [ "F01" ] }, { "type": "other", "path": "evidence/recon.json", "caption": "recon json", "findingIds": [ "F18" ] }, { "type": "other", "path": "evidence/resilience-probe.json", "caption": "resilience probe json", "findingIds": [] }, { "type": "other", "path": "evidence/search-probe.json", "caption": "search probe json", "findingIds": [] }, { "type": "screenshot", "path": "evidence/search.png", "caption": "search png", "findingIds": [ "F02" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets json", "findingIds": [] }, { "type": "other", "path": "evidence/service-worker-probe.json", "caption": "service worker probe json", "findingIds": [] }, { "type": "other", "path": "evidence/signup-email-probe.json", "caption": "signup email probe json", "findingIds": [ "F13", "F22", "F25" ] }, { "type": "other", "path": "evidence/signup-invalid-probe.json", "caption": "signup invalid probe json", "findingIds": [] }, { "type": "other", "path": "evidence/signup-probe.json", "caption": "signup probe json", "findingIds": [ "F06" ] }, { "type": "screenshot", "path": "evidence/signup.png", "caption": "signup png", "findingIds": [ "F06" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers json", "findingIds": [ "F21", "F28" ] }, { "type": "screenshot", "path": "evidence/video-detail.png", "caption": "video detail png", "findingIds": [] }, { "type": "other", "path": "evidence/video-links.json", "caption": "video links json", "findingIds": [] }, { "type": "other", "path": "evidence/video-probe.json", "caption": "video probe json", "findingIds": [ "F16", "F19" ] }, { "type": "har", "path": "evidence/home.har", "caption": "Initial-load network capture", "findingIds": [ "F11", "F21", "F28" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "Desktop load performance trace", "findingIds": [ "F10" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "Full mobile Lighthouse result", "findingIds": [ "F09", "F10", "F11", "F12", "F13", "F14", "F15", "F16", "F17", "F26", "F27" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "pass", "confidence": "high", "method": "Dark-mode screenshot plus CSS/media probe", "evidence": "The rendered surface is dark and remains coherent under emulated dark preference; CSS contains both light and dark media branches.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/preferences-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Emulated media animation probe", "evidence": "Under prefers-reduced-motion: reduce, eight 2-second continuously running animations remained active and no reduced-motion media rule was found.", "pathIds": [ "home" ], "artifacts": [ "evidence/preferences-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Forced-colors screenshot review", "evidence": "Forced-colors and increased-contrast capture retained readable text, visible controls, and clear boundaries.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-forced-colors.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Route screenshots plus CSS feature probe", "evidence": "No view-transition CSS/API signal was present; navigation between homepage, category, search and detail surfaces is an abrupt document swap.", "pathIds": [ "home", "categories", "search" ], "artifacts": [ "evidence/home-technical-probe.json", "evidence/categories.png", "evidence/search.png" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Visual and CSS inspection", "evidence": "No scroll-linked parallax, scrollytelling, or reveal interaction was observed on the representative surfaces.", "artifacts": [ "evidence/home-technical-probe.json" ], "reason": "The audited templates do not use scroll-linked motion, so there is no implementation to assess." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Representative-path interaction review", "evidence": "The audited homepage, listing, search, signup and detail paths expose conventional links and controls rather than a gesture-dependent flow.", "artifacts": [ "evidence/home-desktop.png", "evidence/search.png" ], "reason": "No representative gesture-driven interaction was present in the audited paths." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Long-page screenshot and CSS feature inspection", "evidence": "Long listing pages retain static navigation chrome; no scroll-state query, progress indicator, or shrinking-header signal was found.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-technical-probe.json" ], "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "CSS feature and menu inspection", "evidence": "The site exposes dropdown/menu UI but no anchor-name or position-anchor CSS signal was found, so edge-aware anchoring is not implemented declaratively.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-technical-probe.json" ], "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Representative route screenshot comparison", "evidence": "Route changes and in-page navigation provide no transition or highlight cue showing where attention moved.", "pathIds": [ "categories", "search" ], "artifacts": [ "evidence/categories.png", "evidence/search.png" ], "findingIds": [ "F02" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Initial-load screenshot", "evidence": "A large cookie dialog covers most of the first desktop viewport and obscures the primary content before interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ], "findingIds": [ "F05" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "DOM probe of overlay semantics", "evidence": "The signup consent surface is a custom DIV with role=dialog rather than a native dialog/popover primitive; dismissal is manually wired.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-probe.json", "evidence/signup.png" ], "findingIds": [ "F06" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Desktop/category screenshot review", "evidence": "After consent, content cards occupy the main reading area and persistent chrome is limited to header, navigation and a sidebar appropriate to a catalogue.", "pathIds": [ "categories" ], "artifacts": [ "evidence/categories.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Mobile layout metrics and screenshot", "evidence": "At a 360x800 viewport the layout reports 1024px content width and 664px horizontal overflow, with desktop sidebar/navigation consuming most of the screen.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "findingIds": [ "F07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "CSS feature probe and mobile screenshot", "evidence": "No container-query signal was found and catalogue components retain desktop-sized structure in the narrow capture.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-technical-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F08" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Focus probe plus Lighthouse accessibility audit", "evidence": "Focused search controls compute to outline:none/0 and Lighthouse found insufficient target size/spacing.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-technical-probe.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F09" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "First-viewport and heading review", "evidence": "The homepage has a clear H1, prominent search field, catalogue cards and primary navigation that communicate the service and next actions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/recon.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "Representative journey walkthrough", "evidence": "Search produced a populated result page, a catalogue card led to a detail page, and signup exposed social and email options.", "pathIds": [ "search", "video", "signup" ], "artifacts": [ "evidence/search.png", "evidence/video-detail.png", "evidence/signup-email-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Invalid-form and 404 probes", "evidence": "Invalid signup submission produced specific Korean required/password messages, and an unknown URL returned a branded 404 with recovery navigation.", "pathIds": [ "signup", "not-found" ], "artifacts": [ "evidence/signup-invalid-probe.json", "evidence/not-found.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Lighthouse and DevTools trace summaries", "evidence": "Mobile Lighthouse measured LCP 3.1s, outside the good <=2.5s range; desktop trace LCP was 1.26s, showing a mobile-specific gap.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Layout-shift observer", "evidence": "The mobile layout observer recorded CLS 0 with no shift entries during the capture window.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Trace summary and Lighthouse", "evidence": "The trace found two long tasks, 159ms total blocking time and a 167ms longest task; this is bounded and Lighthouse still scored performance 0.91.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "HAR and Lighthouse network diagnostics", "evidence": "The load made 141 requests; Lighthouse estimated 118KiB cache-lifetime savings and the HAR found three parser-blocking stylesheets plus uncompressed SVG assets.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse-summary.json", "evidence/home.har" ], "findingIds": [ "F11" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Lighthouse code coverage diagnostics", "evidence": "Lighthouse estimated 56KiB unused CSS, 26KiB unused JS and 11KiB legacy JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Lighthouse accessibility audit and signup DOM probe", "evidence": "Lighthouse found an unnamed button, role misuse on a list item, label/name mismatches, and malformed list semantics; the expanded email field also lacked a label/ARIA name.", "pathIds": [ "home", "signup" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/signup-email-probe.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Lighthouse contrast audit", "evidence": "Lighthouse measured key age-verification text at 2.15:1 and 1.75:1 against green, below the 4.5:1 requirement, plus low-contrast metadata and indistinct links.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-summary.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Keyboard focus probe and Lighthouse structure audits", "evidence": "Search controls show no computed focus outline; Lighthouse also found invalid list structure and an inappropriate button role.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-technical-probe.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Multi-condition screenshot review", "evidence": "Body and heading text in desktop, mobile and forced-colors captures is generally readable, consistently aligned, and not clipped vertically.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-forced-colors.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Lighthouse viewport/target audits and detail probe", "evidence": "Lighthouse found user-scalable=no, undersized/overlapping touch targets, and the video detail exposed no caption track in the inspected player markup.", "pathIds": [ "home", "video" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/video-probe.json" ], "findingIds": [ "F16" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse best-practices audit", "evidence": "Lighthouse best-practices scored 1.0 and reported no console-error or uncaught-exception failure.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "DOM, image primitive and Lighthouse", "evidence": "The document has a valid doctype and UTF-8 charset, but image inspection found 29 images missing dimensions and 12 oversized images; Lighthouse independently flagged unsized images.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-technical-probe.json", "evidence/images.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F17" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Lighthouse and interaction review", "evidence": "Lighthouse best-practices scored 1.0; no load-time permission prompt or paste-prevention behavior was observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Rendered DOM metadata probes", "evidence": "Homepage, search and video detail each expose descriptive localized titles and meta descriptions.", "pathIds": [ "home", "search", "video" ], "artifacts": [ "evidence/home-technical-probe.json", "evidence/search-probe.json", "evidence/video-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "DOM/robots recon and Lighthouse SEO", "evidence": "Links use real href values, viewport metadata is present, robots permits public surfaces, and Lighthouse SEO scored 1.0.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/lighthouse-home.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Metadata and crawler recon", "evidence": "Canonical URLs point to the different ko.xhamster2.com host, no hreflang links are exposed despite many localized hosts, and /sitemap.xml returned 404.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-technical-probe.json", "evidence/recon.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Metadata probes", "evidence": "No Open Graph tags or JSON-LD were present on the homepage, and the representative video detail exposed no VideoObject JSON-LD.", "pathIds": [ "home", "video" ], "artifacts": [ "evidence/home-technical-probe.json", "evidence/video-probe.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Headers and cookies primitives", "evidence": "HTTPS and HSTS are present, but CSP only declares frame-ancestors, nosniff and Referrer-Policy are missing, and two first-party cookies lack Secure while two use SameSite=None.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "HAR, tracker and initial-load consent evidence", "evidence": "Before consent, 116 of 141 requests and 1.70MB of 1.89MB were classified third-party; an ad request included a persistent stats UID and page keywords in its query.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/home-desktop.png" ], "findingIds": [ "F21" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Signup walkthrough and platform probe", "evidence": "No permission prompt fired on load, but the account/signup surface offered password and social sign-in with no passkey/WebAuthn option or signal.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-probe.json", "evidence/platform-probe.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Security-header inspection", "evidence": "Clickjacking protection and HSTS exist, but the CSP provides no script/style policy, Referrer-Policy and nosniff are missing, and Permissions-Policy is narrowly configured.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Discoverability/no-JS comparison", "evidence": "Raw HTML returned 200 with 80% rendered-content coverage and retained title, H1 and description; the page is not a JS shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-rendered.png", "evidence/discoverability-crawler.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Mobile screenshot and layout metrics", "evidence": "At narrow width, overlays/navigation remain tied to a 1024px desktop layout and are cut off rather than repositioning within the 360px viewport.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-mobile-layout.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "pass", "confidence": "high", "method": "Manifest, registration and worker-source probes", "evidence": "A manifest with start_url/icons/display exists and an active service worker contains fetch, cache and offline/fallback handling.", "pathIds": [ "home" ], "artifacts": [ "evidence/resilience-probe.json", "evidence/service-worker-probe.json" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "404 fetch and screenshot", "evidence": "A representative unknown route returned an intentional HTTP 404 with a localized branded error view and navigation, rather than a blank shell.", "pathIds": [ "not-found" ], "artifacts": [ "evidence/resilience-probe.json", "evidence/not-found.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "DOM/CSS metadata probes", "evidence": "The root lang=ko is correct, but no hreflang links are exposed and stylesheet inspection counted 599 physical left/right declarations, reducing writing-mode resilience.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-technical-probe.json", "evidence/platform-probe.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Representative content inspection", "evidence": "The audited surfaces show catalogue durations/count labels but no currency, calendar date, address or user-entered locale-sensitive value whose formatting could be exercised.", "artifacts": [ "evidence/recon.json" ], "reason": "No locale-sensitive data flow was present in the selected public paths." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Representative content inspection", "evidence": "No scheduled event, timestamp entry or cross-zone recurring-time flow appeared in the representative paths.", "artifacts": [ "evidence/platform-probe.json" ], "reason": "The audited public surfaces do not expose a time-zone-sensitive task." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Consent/signup screenshot and Lighthouse audit", "evidence": "Consent offers equally prominent approve/reject actions and signup disclosure states data use and links terms/privacy; third-party content is labelled in the accessibility tree.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/signup-email-probe.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "Invalid-form interaction probe", "evidence": "Submitting incomplete signup data produced specific Korean required-field and minimum-password messages rather than a generic failure.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-invalid-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Expanded signup DOM probe", "evidence": "The email signup field uses autocomplete=off instead of email, while the password correctly uses new-password; this obstructs autofill for a primary account flow.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-probe.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Signup walkthrough", "evidence": "Signup explains terms and data use, but the relevant account flow offers no phishing-resistant passkey option and relies on passwords/social identity.", "pathIds": [ "signup" ], "artifacts": [ "evidence/signup-email-probe.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Images primitive and Lighthouse image diagnostics", "evidence": "Image inspection found 12 oversized images, 16 legacy-format assets, 29 without dimensions and eight below-fold images not lazy-loaded; Lighthouse estimated 54KiB image savings.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "HAR and Lighthouse coverage diagnostics", "evidence": "The initial load ships 62 script requests and Lighthouse identifies unused CSS/JS plus legacy code, indicating avoidable transfer and parse work.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "HAR and tracker summaries", "evidence": "Third parties account for 116 requests and 1.70MB of 1.89MB transferred, including Google identity and ad/media origins before a consent choice.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F28" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Discoverability and platform probe", "evidence": "The public catalogue is crawlable server-rendered content, but recon found no declared agent-facing transaction or productivity capability requiring WebMCP tools.", "artifacts": [ "evidence/discoverability.json", "evidence/platform-probe.json" ], "reason": "No agent-facing capability is declared or necessary for the representative public browsing paths; this emerging check is contextual." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Representative feature inspection", "evidence": "No summarization, generation, translation-assistance or other inference task is exposed by the audited pages.", "artifacts": [ "evidence/platform-probe.json" ], "reason": "There is no user task in the selected paths that would benefit from site-provided on-device inference." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "high", "method": "Repeated interaction metrics and paired heap summaries", "evidence": "After ten language-menu open/close cycles, DOM nodes and animation count stayed exactly 1794 and 8; JS heap increased only ~314KB. Independent heap summaries differed by ~0.9%, not an unbounded signal.", "pathIds": [ "home" ], "artifacts": [ "evidence/memory-metrics.json", "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Heap and DOM metrics", "evidence": "The loaded catalogue retained about 36MB self-size for 1,794 rendered DOM nodes, proportionate to a media catalogue with 141 network resources.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/memory-metrics.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Paired heap summaries and repeated metrics", "evidence": "Repeated interaction did not increase DOM node count or animation count, and no Detached* constructor appeared among the largest heap constructors.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot", "evidence/memory-metrics.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F03", "F04", "F02" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F05", "F06" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08", "F09" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass" }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F10", "F11", "F12" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F13", "F14", "F15", "F16" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F17" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F18", "F19" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F20", "F21", "F22" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F23" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F24" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F25", "F22" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F26", "F27", "F28" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No agent-facing capability is declared or necessary for the representative public browsing paths; this emerging check is contextual. There is no user task in the selected paths that would benefit from site-provided on-device inference." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Homepage/catalogue entry, global navigation, consent, preferences, performance, security and responsive behavior.", "url": "https://ko.xhname.com", "conditions": [ "desktop", "viewport 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active", "keyboard focus" ], "result": "issues" }, { "id": "categories", "description": "Category-index archetype representing listing/taxonomy navigation.", "url": "https://ko.xhname.com/categories", "conditions": [ "desktop" ], "result": "issues" }, { "id": "search", "description": "Primary search-results journey and filter/listing archetype.", "url": "https://ko.xhname.com/search/test", "conditions": [ "desktop" ], "result": "issues" }, { "id": "video", "description": "Representative media detail/playback archetype and rich-metadata/media-alternative review.", "url": "https://ko.xhname.com/videos/he-says-were-going-to-watch-netflix-but-he-doesnt-have-a-tv-xh3iGUm", "conditions": [ "desktop", "playback paused" ], "result": "issues" }, { "id": "signup", "description": "Primary account/signup flow including expanded email fields and invalid submission.", "url": "https://ko.xhname.com/signup?source=menuSignup", "conditions": [ "desktop", "invalid input" ], "result": "issues" }, { "id": "not-found", "description": "Representative HTTP failure/recovery state.", "url": "https://ko.xhname.com/web-uplift-definitely-missing-404", "conditions": [ "desktop" ], "result": "pass" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "pathId": "home", "summary": "Continuous animation ignores reduced-motion preference", "evidence": "Eight 2-second looping animations remained active under reduce, with no matching CSS media rule.", "suggestedFix": "Add a prefers-reduced-motion: reduce branch that removes nonessential iterations/transitions and pauses auto-advance.", "artifacts": [ "evidence/preferences-probe.json" ], "effort": "small" }, { "id": "F02", "severity": "low", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "pathId": "home", "summary": "Navigation changes are abrupt", "evidence": "No view-transition signal was found across homepage, category and search changes.", "suggestedFix": "Add progressive same/cross-document View Transitions for route and filter-state changes, with reduced-motion handling.", "artifacts": [ "evidence/home-technical-probe.json", "evidence/categories.png", "evidence/search.png" ], "effort": "medium" }, { "id": "F03", "severity": "low", "confidence": "high", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "persistent-top-layer-ui", "pathId": "home", "summary": "Long pages provide no scroll-state guidance", "evidence": "The long catalogue keeps static chrome and exposes no progress/shrinking header behavior.", "suggestedFix": "Use a compact sticky header and scroll-state/progress affordance that preserves content space.", "artifacts": [ "evidence/home-desktop.png" ], "effort": "medium" }, { "id": "F04", "severity": "low", "confidence": "high", "principleId": "provide-guided-navigation", "principleCheckId": "anchored-positioning", "guidanceId": "position-aware-tooltips", "pathId": "home", "summary": "Dropdown positioning is not declaratively anchored", "evidence": "Menu UI exists but no anchor-name/position-anchor/position-try CSS was found.", "suggestedFix": "Adopt CSS anchor positioning and position-try fallbacks for dropdowns/tooltips near viewport edges.", "artifacts": [ "evidence/home-technical-probe.json" ], "effort": "small" }, { "id": "F05", "severity": "medium", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "pathId": "home", "summary": "Cookie consent obscures the first viewport", "evidence": "The initial desktop screenshot shows consent covering most content.", "suggestedFix": "Use a compact, non-obscuring consent surface where legally possible, preserve equally clear reject/accept actions, and avoid blocking content reading.", "artifacts": [ "evidence/home-desktop.png" ], "effort": "medium" }, { "id": "F06", "severity": "low", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "pathId": "signup", "summary": "Consent/signup overlay uses a custom dialog DIV", "evidence": "DOM inspection found DIV role=dialog rather than native dialog/popover.", "suggestedFix": "Move modal flows to with showModal/close and transient UI to popover, retaining accessible labels and focus restoration.", "artifacts": [ "evidence/signup-probe.json", "evidence/signup.png" ], "effort": "medium" }, { "id": "F07", "severity": "high", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "pathId": "home", "summary": "Mobile layout is a 1024px desktop canvas", "evidence": "At 360px, measured horizontal overflow is 664px and the sidebar crowds out primary content.", "suggestedFix": "Remove fixed desktop widths, use intrinsic/fluid tracks and collapse navigation so scrollWidth equals the visual viewport.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "effort": "large" }, { "id": "F08", "severity": "medium", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "pathId": "home", "summary": "Reusable catalogue components do not adapt at component level", "evidence": "No container queries were found and narrow cards retain desktop structure.", "suggestedFix": "Define container-type on catalogue regions and use @container breakpoints for card/nav composition.", "artifacts": [ "evidence/home-technical-probe.json", "evidence/home-mobile.png" ], "effort": "medium" }, { "id": "F09", "severity": "high", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "pathId": "home", "summary": "Keyboard focus and touch targeting are inadequate", "evidence": "Focused search controls computed no outline; Lighthouse found undersized/overlapping targets.", "suggestedFix": "Add strong :focus-visible indicators and ensure all targets have at least 24x24 CSS px safe space, preferably 44x44 for primary controls.", "artifacts": [ "evidence/home-technical-probe.json", "evidence/lighthouse-summary.json" ], "effort": "medium" }, { "id": "F10", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "pathId": "home", "summary": "Mobile LCP misses the good threshold", "evidence": "Lighthouse mobile LCP was 3.1s versus the <=2.5s good range.", "suggestedFix": "Profile the mobile LCP candidate, prioritize its resource, and defer lower-value scripts/styles until after critical content.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-trace-summary.json" ], "effort": "medium" }, { "id": "F11", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "pathId": "home", "summary": "Resource delivery has avoidable cache and critical-path cost", "evidence": "141 requests, 118KiB cache savings, three parser-blocking stylesheets and uncompressed SVGs were observed.", "suggestedFix": "Extend immutable caching for versioned assets, compress SVG, inline only critical CSS and defer remaining styles.", "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse-summary.json", "evidence/home.har" ], "effort": "medium" }, { "id": "F12", "severity": "low", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "pathId": "home", "summary": "Unused and legacy code ships on first load", "evidence": "Lighthouse estimates 56KiB unused CSS, 26KiB unused JS and 11KiB legacy JS.", "suggestedFix": "Split page bundles by feature, conditionally import optional modules and remove legacy transforms for Baseline targets.", "artifacts": [ "evidence/lighthouse-summary.json" ], "effort": "medium" }, { "id": "F13", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "pathId": "home", "summary": "Controls and lists have accessibility-tree defects", "evidence": "Unnamed button, role misuse, name mismatch, malformed lists and an unlabeled email input were observed.", "suggestedFix": "Give every control a stable accessible name, restore valid list children/roles, and associate explicit labels with signup inputs.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/signup-email-probe.json" ], "effort": "medium" }, { "id": "F14", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "pathId": "home", "summary": "Important text fails contrast minimums", "evidence": "Age-verification text measured 2.15:1 and 1.75:1; metadata and links also fail.", "suggestedFix": "Adjust foreground/background tokens to at least 4.5:1 for normal text and distinguish inline links beyond color.", "artifacts": [ "evidence/lighthouse-summary.json" ], "effort": "small" }, { "id": "F15", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "pathId": "home", "summary": "Focus is invisible and semantic structure is invalid", "evidence": "Search controls have no focus outline; list children and a list-item button role are invalid.", "suggestedFix": "Implement :focus-visible across controls and replace clickable list-item role hacks with valid links/buttons in valid list markup.", "artifacts": [ "evidence/home-technical-probe.json", "evidence/lighthouse-summary.json" ], "effort": "medium" }, { "id": "F16", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "pathId": "video", "summary": "Zoom, touch targeting and media alternatives are incomplete", "evidence": "Lighthouse found user-scalable=no and target-size failures; no caption track appeared on the detail path.", "suggestedFix": "Remove user-scalable=no, fix reflow/targets, and provide captions or equivalent text tracks for spoken media.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/video-probe.json" ], "effort": "large" }, { "id": "F17", "severity": "medium", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "optimize-image-priority", "pathId": "home", "summary": "Many images lack dimensions or are oversized", "evidence": "29 images lack dimensions and 12 exceed 2x display width; Lighthouse flags unsized images.", "suggestedFix": "Emit width/height or aspect-ratio and right-sized srcset/sizes candidates for every thumbnail.", "artifacts": [ "evidence/images.json", "evidence/lighthouse-summary.json" ], "effort": "medium" }, { "id": "F18", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "pathId": "home", "summary": "Localized indexing signals are inconsistent", "evidence": "Canonical targets a different host, hreflang is absent, and sitemap.xml is 404.", "suggestedFix": "Choose a stable canonical host, add reciprocal hreflang for localized equivalents, and publish/reference a valid sitemap.", "artifacts": [ "evidence/home-technical-probe.json", "evidence/recon.json" ], "effort": "medium" }, { "id": "F19", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "pathId": "video", "summary": "Video/content pages lack rich and share metadata", "evidence": "No Open Graph or JSON-LD was found; detail page lacks VideoObject data.", "suggestedFix": "Add accurate OG/Twitter metadata and schema.org VideoObject JSON-LD matching visible title, thumbnail, duration and availability.", "artifacts": [ "evidence/home-technical-probe.json", "evidence/video-probe.json" ], "effort": "medium" }, { "id": "F20", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "pathId": "home", "summary": "Security policy and cookie hardening are incomplete", "evidence": "CSP only sets frame-ancestors; nosniff/Referrer-Policy are missing; two cookies lack Secure.", "suggestedFix": "Deploy a nonce/hash-based CSP, nosniff and strict-origin-when-cross-origin, then mark every HTTPS cookie Secure with least-permissive SameSite.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "effort": "medium" }, { "id": "F21", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "pathId": "home", "summary": "Third-party data flows start before consent", "evidence": "116 third-party requests transfer 1.70MB before choice; an ad URL carries stats UID and page keywords.", "suggestedFix": "Gate nonessential identity/ad/analytics requests on consent, minimize query identifiers and batch first-party measurement.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json", "evidence/home-desktop.png" ], "effort": "large" }, { "id": "F22", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "pathId": "signup", "summary": "Account flow lacks a phishing-resistant sign-in option", "evidence": "Signup offers password and federated identity but no passkey/WebAuthn option.", "suggestedFix": "Offer passkey registration/authentication alongside existing methods and use passkeys for sensitive reauthentication.", "artifacts": [ "evidence/signup-email-probe.json" ], "effort": "large" }, { "id": "F23", "severity": "high", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "guidanceId": "persistent-top-layer-ui", "pathId": "home", "summary": "Top-layer/navigation UI is cut off on narrow screens", "evidence": "A 360px viewport renders a 1024px layout with content and controls outside view.", "suggestedFix": "Make top-layer and navigation components viewport-constrained with intrinsic sizing and responsive fallback placement.", "artifacts": [ "evidence/home-mobile.png", "evidence/home-mobile-layout.json" ], "effort": "large" }, { "id": "F24", "severity": "medium", "confidence": "high", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "pathId": "home", "summary": "Localized layout is not writing-mode resilient", "evidence": "No hreflang links and 599 physical left/right CSS declarations were detected.", "suggestedFix": "Add reciprocal locale links and migrate component layout to inline/block logical properties, testing RTL locales.", "artifacts": [ "evidence/home-technical-probe.json", "evidence/platform-probe.json" ], "effort": "large" }, { "id": "F25", "severity": "medium", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-up-form", "pathId": "signup", "summary": "Email signup disables autofill", "evidence": "The visible email field reports autocomplete=off while password uses new-password.", "suggestedFix": "Use type=email and autocomplete=email (or username as appropriate), with explicit labels and stable names.", "artifacts": [ "evidence/signup-email-probe.json" ], "effort": "small" }, { "id": "F26", "severity": "medium", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "optimize-image-priority", "pathId": "home", "summary": "Thumbnail delivery wastes bytes", "evidence": "12 oversized, 16 legacy-format and eight non-lazy below-fold images were found; Lighthouse estimates 54KiB savings.", "suggestedFix": "Generate appropriately compressed AVIF/WebP candidates, correct sizes, dimensions and below-fold lazy loading.", "artifacts": [ "evidence/images.json", "evidence/lighthouse-summary.json" ], "effort": "medium" }, { "id": "F27", "severity": "medium", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "efficient-background-processing", "pathId": "home", "summary": "Initial bundles include avoidable work", "evidence": "62 scripts load initially while code diagnostics identify unused and legacy portions.", "suggestedFix": "Conditionally import optional features, remove legacy output and delay nonessential work until interaction/idle.", "artifacts": [ "evidence/home-summary.json", "evidence/lighthouse-summary.json" ], "effort": "medium" }, { "id": "F28", "severity": "high", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "pathId": "home", "summary": "Third-party cost dominates the page budget", "evidence": "Third parties account for 116/141 requests and 1.70MB/1.89MB transferred.", "suggestedFix": "Set a third-party budget, gate nonessential vendors, self-host stable dependencies where justified and defer media/ad fetches.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "effort": "large" } ], "taskList": [ { "id": "T01", "title": "Rebuild narrow-screen reflow and top-layer constraints", "priority": 1, "findingIds": [ "F07", "F08", "F23" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T02", "title": "Fix accessible names, semantics, contrast, focus, zoom and target sizing", "priority": 2, "findingIds": [ "F09", "F13", "F14", "F15", "F16" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T03", "title": "Gate and minimize third-party requests before consent", "priority": 3, "findingIds": [ "F21", "F28" ], "guidanceId": "privacy", "status": "open" }, { "id": "T04", "title": "Harden CSP, response headers and cookie flags", "priority": 4, "findingIds": [ "F20" ], "guidanceId": "security", "status": "open" }, { "id": "T05", "title": "Optimize critical delivery, bundles and media assets", "priority": 5, "findingIds": [ "F10", "F11", "F12", "F17", "F26", "F27" ], "guidanceId": "performance", "status": "open" }, { "id": "T06", "title": "Add reduced-motion handling", "priority": 6, "findingIds": [ "F01" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T07", "title": "Correct canonical, hreflang, sitemap and rich metadata", "priority": 7, "findingIds": [ "F18", "F19" ], "guidanceId": "html", "status": "open" }, { "id": "T08", "title": "Improve signup autofill and add passkeys", "priority": 8, "findingIds": [ "F22", "F25" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T09", "title": "Adopt native/anchored navigation and overlay primitives", "priority": 9, "findingIds": [ "F02", "F03", "F04", "F05", "F06" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T10", "title": "Migrate localized layout to logical properties", "priority": 10, "findingIds": [ "F24" ], "guidanceId": "translator", "status": "open" } ], "budget": { "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-22T06-54-41-394Z" }