{ "url": "https://www.betano.bet.ar", "auditedAt": "2026-07-28T05:18:05.370Z", "mode": "report", "status": "blocked", "statusDetail": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "page": { "appType": "unknown", "framework": "unknown", "notes": "The intended site could not be profiled. The delivered top-level document is an iframe-only restriction splash." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "discoverability", "har", "headers", "cookies", "trackers", "secrets", "curl-http-recon", "modern-web-guidance" ], "guidanceConsulted": [ "dark-mode", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "scrollytelling", "physics-based-easing", "shrinking-header-on-scroll", "anchor-positioning-tab-underline", "directional-navigation-transitions", "light-dismiss-a-dialog", "declarative-dialog-popover-control", "complex-shapes", "fluid-scaling", "size-aware-styling", "touch target size hover fallback pointer input focus-visible", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "identify-inp-causes", "visually-stable-font-fallbacks", "break-up-long-tasks", "optimize-image-priority", "identify-heavy-scripts", "accessibility", "color contrast WCAG text legibility", "move-dom-element-without-losing-state", "improve-text-layout-and-legibility", "accessibility", "avoid console errors uncaught exceptions", "css", "html", "page title meta description seo", "crawlable links viewport meta robots descriptive link text", "canonical hreflang http status robots sitemap noindex seo indexing", "structured data schema.org json-ld open graph social preview metadata", "security", "privacy", "passkeys", "security", "flicker-free-client-side-ab-testing", "resilient-context-menus-and-nested-dropdowns", "offline fallback service worker web app manifest installable pwa", "persistent-toast-notifications", "translator", "support-global-calendar-systems", "coordinate-global-events", "search-hidden-content", "forms", "autofill-address-form", "autofill-payment-form", "deliver-optimized-decorative-images", "deprioritize-background-fetches", "deliver-optimized-decorative-images", "webmcp", "language-model", "memory leak retained heap growth under repeated interaction long single-page-app session", "bounded memory footprint javascript heap size page weight proportionate allocations", "manage-recurring-intervals" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Desktop viewport shows the security/compliance restriction splash.", "condition": "viewport: 1440x900", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Mobile viewport shows the same restriction splash; intended mobile application was not reached.", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark-reduced.png", "caption": "Dark/reduced-motion emulation still reached only the restriction splash.", "condition": "prefers-color-scheme: dark; prefers-reduced-motion: reduce", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Top-level DOM is an iframe-only Betano Splash Screen wrapper.", "condition": "default", "findingIds": [] }, { "type": "layout", "path": "evidence/home-layout-mobile.json", "caption": "Layout metrics for the restriction wrapper, not the intended application.", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "other", "path": "evidence/home-profile.json", "caption": "Evaluate recon found no top-level text, links, headings, or dialogs.", "condition": "default", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "Raw crawler fetch returned HTTP 403; rendered top-level document was empty.", "condition": "crawler and browser comparison", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Browser-view capture produced during discoverability attempt.", "condition": "JavaScript enabled", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler-view capture produced after raw HTTP 403.", "condition": "JavaScript disabled", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "Network capture of the restricted response.", "condition": "5 second load", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "Compact network summary: 8 requests, including two HTTP 403 responses.", "condition": "5 second load", "findingIds": [] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security headers observed on the restricted response; not assumed representative of the application.", "condition": "default", "findingIds": [] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie inventory for the restricted response.", "condition": "default", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party origin inventory for the restricted response.", "condition": "default", "findingIds": [] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Secrets scan of the restricted response.", "condition": "default", "findingIds": [] }, { "type": "other", "path": "evidence/http-recon.txt", "caption": "Direct HTTP attempts for main URL, robots.txt, and sitemap.xml.", "condition": "curl HEAD requests", "findingIds": [] }, { "type": "other", "path": "evidence/guidance-catalog.json", "caption": "Pinned Modern Web Guidance catalog consulted before judgement.", "condition": "modern-web-guidance@0.0.172", "findingIds": [] }, { "type": "other", "path": "evidence/guidance-consulted/index.json", "caption": "One relevant live guidance retrieval/search recorded for each of 58 checks.", "condition": "modern-web-guidance@0.0.172", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 0, "blocked": 58, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": false }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "blocked", "confidence": "high", "method": "Attempted a screenshot or computed background under an emulated prefers-color-scheme: dark condition will reveal whether surfaces re-tint; the page CSS / a color-scheme declaration is corroborating evidence. The model chooses the method. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "blocked", "confidence": "high", "method": "Attempted a transition video, or an in-page probe of getAnimations()/computed animation under an emulated prefers-reduced-motion: reduce condition, can show whether motion stops. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "blocked", "confidence": "high", "method": "Attempted a screenshot under emulated prefers-contrast: more / forced-colors, or an axe/contrast probe, can show whether controls and text survive. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "blocked", "confidence": "high", "method": "Attempted a transition video of a route/state change shows whether it animates; the page source / ::view-transition usage corroborates. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "blocked", "confidence": "high", "method": "Attempted source/CSS inspection for animation-timeline: scroll()/view(); a long-task / scroll-handler probe can flag the main-thread anti-pattern. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "blocked", "confidence": "high", "method": "Attempted CSS inspection for scroll-snap / overscroll-behavior / physics-based easing vs custom pointermove listeners. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "blocked", "confidence": "high", "method": "Attempted a transition video of scrolling, or CSS inspection for scroll-state container queries. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "blocked", "confidence": "high", "method": "Attempted CSS inspection for anchor-name / position-anchor / position-try on overlays; a screenshot of an open overlay near a viewport edge can show drift. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "blocked", "confidence": "high", "method": "Attempted CSS inspection for ::highlight / scroll-marker; a transition video can show whether attention is cued after navigation. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "blocked", "confidence": "high", "method": "Attempted a screenshot on load, or a DOM probe for full-viewport overlays present before interaction. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "blocked", "confidence": "high", "method": "Attempted DOM/source inspection for popover / /
vs custom overlay divs with manual dismiss handling. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "blocked", "confidence": "high", "method": "Attempted a screenshot plus layout metrics can show the proportion of the viewport given to chrome vs content. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "blocked", "confidence": "high", "method": "Attempted layout metrics (scrollWidth vs innerWidth) and a screenshot at an emulated narrow mobile viewport reveal overflow. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "blocked", "confidence": "high", "method": "Attempted CSS inspection for @container / container-type; a computed-style probe of the same component in a wide vs narrow container shows whether it adapts. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "blocked", "confidence": "high", "method": "Attempted a focus probe (focus an element, read the computed outline) or an axe target-size check; a screenshot of a focused control corroborates. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "blocked", "confidence": "high", "method": "Attempted screenshot the first viewport and key scrolled states; inspect heading structure, nav labels, button text, and visual hierarchy; a task walkthrough can show whether the next action is obvious. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "blocked", "confidence": "high", "method": "Attempted run the flow manually with screenshots/DOM snapshots at each step; compare expected vs actual path length; inspect form requirements, navigation continuity, and blockers. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "blocked", "confidence": "high", "method": "Attempted exercise network delay/failure, invalid input, empty data and success states; screenshot the state messaging and recovery controls; inspect whether browser history and focus remain sensible. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "blocked", "confidence": "high", "method": "Attempted Lighthouse reports LCP/CLS/TBT directly and the model may run it; layout metrics + a layout-shift observer + a long-task observer (the evidence primitives) give the same signal first-party. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "blocked", "confidence": "high", "method": "Attempted the layout primitive's CLS observer captures shifts; a transition video of the first seconds shows content jumping. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "blocked", "confidence": "high", "method": "Attempted the layout primitive records long tasks; a heap summary shows the object population; Lighthouse reports TBT. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "blocked", "confidence": "high", "method": "Attempted a HAR summary can reveal cache headers, redirects, render-blocking candidates, weight offenders and dependency shape; a trace/Lighthouse insight report can corroborate LCP discovery, render-blocking, font-display and document latency. The m Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "blocked", "confidence": "high", "method": "Attempted Lighthouse/trace/code-coverage style evidence can flag unused JS/CSS, duplicated JavaScript and legacy code; a HAR summary shows third-party byte cost and request count. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "blocked", "confidence": "high", "method": "Attempted axe-core (injectable via the evaluate primitive) or Lighthouse's a11y audits enumerate these; a DOM probe of the accessibility-relevant attributes is a first-party alternative. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "blocked", "confidence": "high", "method": "Attempted axe contrast rules, a Lighthouse contrast audit, or an in-page probe computing contrast ratios from computed colours. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "blocked", "confidence": "high", "method": "Attempted axe/Lighthouse structural audits; a focus-walk probe (tab through, read activeElement + computed outline) is a first-party alternative. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "blocked", "confidence": "high", "method": "Attempted a screenshot of body and heading text, plus CSS inspection for text-wrap / text alignment / font fallback handling. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "blocked", "confidence": "high", "method": "Attempted Lighthouse/axe target-size, meta-viewport and media-caption audits are useful signals; screenshots at narrow and zoomed conditions plus DOM/media inspection can corroborate. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "blocked", "confidence": "high", "method": "Attempted capture Runtime/Log CDP events, or a probe that reads collected errors; Lighthouse reports this too. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "blocked", "confidence": "high", "method": "Attempted a DOM/source probe for doctype/charset/img dimensions; CSS inspection for repetition; Lighthouse best-practices audits cover the rest. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "blocked", "confidence": "high", "method": "Attempted Lighthouse best-practices audits and DevTools inspector/deprecation signals can surface these; DOM/source probes can verify paste handlers and prompt timing. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "blocked", "confidence": "high", "method": "Attempted a DOM probe reads and meta[name=description]; Lighthouse SEO audits cover the same ground. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "blocked", "confidence": "high", "method": "Attempted a DOM probe for anchor hrefs, viewport meta, and robots; Lighthouse SEO audits corroborate. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "blocked", "confidence": "high", "method": "Attempted inspect response status and headers, <link rel=canonical>, hreflang links, robots meta, robots.txt and sitemap.xml; Lighthouse SEO audits cover several of these. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "blocked", "confidence": "high", "method": "Attempted inspect JSON-LD/microdata and social preview tags against visible content; Lighthouse has a manual structured-data audit, and ad-hoc probes can parse schema.org blocks. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "blocked", "confidence": "high", "method": "Attempted inspect response headers / page protocol via an evaluate probe or the network layer; Lighthouse best-practices flags HTTPS and CSP issues. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "blocked", "confidence": "high", "method": "Attempted inspect network requests and third-party origins; a probe of analytics/beacon calls. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "blocked", "confidence": "high", "method": "Attempted a probe for permission requests fired on load; source inspection for passkey / WebAuthn / navigator.credentials usage in auth flows. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "blocked", "confidence": "high", "method": "Attempted inspect response headers and browser security state; Lighthouse/DevTools security audits can corroborate HSTS, clickjacking, Trusted Types, origin isolation and third-party cookie findings. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "blocked", "confidence": "high", "method": "Attempted load with scripting disabled or compare a no-JS fetch of the HTML against the rendered page; check for Baseline-aware fallbacks in source. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "blocked", "confidence": "high", "method": "Attempted exercise menus near viewport edges with a screenshot; a probe of async/visibility behaviour. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "blocked", "confidence": "high", "method": "Attempted a probe for a service worker registration and a web app manifest; test behaviour offline. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "blocked", "confidence": "high", "method": "Attempted simulate failed fetches/offline mode or inspect representative 404/500 routes; screenshots and DOM snapshots of error/loading/empty states show whether recovery is possible. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "blocked", "confidence": "high", "method": "Attempted a DOM probe for <html lang>/dir and CSS inspection for logical vs physical properties. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "blocked", "confidence": "high", "method": "Attempted source inspection for Intl.* usage vs hand-rolled formatting; a probe of rendered dates/numbers under a different locale. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "blocked", "confidence": "high", "method": "Attempted source inspection for time-zone-aware date handling vs naive local Date math. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "blocked", "confidence": "high", "method": "Attempted a screenshot of consent/upsell/cancel flows; source inspection for declarative button actions vs misleading controls. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "blocked", "confidence": "high", "method": "Attempted exercise a form, submit invalid input, and observe timing and clarity of errors via a screenshot or a :user-invalid / aria-invalid probe. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "blocked", "confidence": "high", "method": "Attempted source/DOM inspection for autocomplete attributes on form fields; a probe of autofill affordances. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "blocked", "confidence": "high", "method": "Attempted walkthrough checkout/subscription/auth/account flows when present; screenshot pricing, confirmation, cancellation and reauthentication states; inspect passkey/autocomplete support for sign-in and payment. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "blocked", "confidence": "high", "method": "Attempted inspect transferred image bytes vs displayed size; source inspection for modern formats and resolution handling. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "blocked", "confidence": "high", "method": "Attempted a long-task / network probe for background fetches and processing while idle or backgrounded. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "blocked", "confidence": "high", "method": "Attempted a HAR summary shows third-party bytes, font/media weight and caching; screenshots/video reveal autoplay and decorative media; trace/layout evidence shows whether media/animation keeps work running. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "blocked", "confidence": "high", "method": "Attempted source inspection for WebMCP / agentic-tool registration and agent-readable affordances. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "blocked", "confidence": "high", "method": "Attempted source inspection for built-in AI (language model / summariser) usage. The model chooses. Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "blocked", "confidence": "high", "method": "Attempted compare heap snapshots for retained growth - a baseline, then one taken after repeating the interaction with `--interact` about 10x (the memory-tracer methodology: baseline -> repeat -> post -> compare). Performance.getMetrics (JSHeapUsedSi Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "blocked", "confidence": "high", "method": "Attempted a single `heap` summary's totals (nodeCount, totalSelfSizeBytes, constructor population) plus Performance.getMetrics (Nodes, JSHeapUsedSize) give the current footprint to judge against the page's purpose. Chrome DevTools MCP heap snapshots Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "blocked", "confidence": "high", "method": "Attempted the `heap` summary by constructor (Detached* nodes) compared across a before/after pair shows a growing detached-DOM population; an `evaluate` probe can sample listener/timer counts (e.g. getEventListeners-style counting, or instrumenting a Recon used desktop/mobile/preference screenshots, DOM and evaluate probes, layout metrics, raw HTTP/discoverability, and network/security primitives.", "evidence": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "reason": "The requested URL returned a security/compliance restriction splash instead of the betting application. The top-level DOM contains only a cross-origin iframe, no content text, headings, links, navigation, forms, or discoverable product routes, and raw fetches returned HTTP 403. This external access restriction prevented inspection of the intended application.", "pathIds": [ "home-entry" ], "artifacts": [ "evidence/home-desktop.png" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "incomplete", "reason": "All 3 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "incomplete", "reason": "All 3 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "incomplete", "reason": "All 3 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "incomplete", "reason": "All 3 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "incomplete", "reason": "All 3 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "support-core-task-success", "expectation": "default", "status": "incomplete", "reason": "All 3 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "incomplete", "reason": "All 5 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "be-inclusive", "expectation": "default", "status": "incomplete", "reason": "All 5 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "follow-best-practices", "expectation": "default", "status": "incomplete", "reason": "All 3 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "be-discoverable", "expectation": "default", "status": "incomplete", "reason": "All 4 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "incomplete", "reason": "All 4 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "be-resilient", "expectation": "contextual", "status": "incomplete", "reason": "All 4 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "incomplete", "reason": "All 3 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "be-trustworthy", "expectation": "default", "status": "incomplete", "reason": "All 4 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "incomplete", "reason": "All 3 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "incomplete", "reason": "All 2 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "incomplete", "reason": "All 3 registered checks were blocked by the security/compliance restriction response before the intended application or representative routes could be reached." } ], "paths": [ { "id": "home-entry", "description": "Entry URL and intended homepage/application. Attempted desktop, mobile, dark/reduced-motion, DOM, layout, crawler and network inspection; a security/compliance restriction splash blocked access. Candidate product, listing, event, registration, login, deposit and betting-flow archetypes were not selected because route discovery was impossible.", "url": "https://www.betano.bet.ar/", "conditions": [ "viewport: 1440x900", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "crawler without JavaScript", "raw HTTP" ], "result": "failed" } ], "findings": [], "taskList": [], "budget": { "pathCount": 1, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-28T05-18-05-370Z" }