{ "url": "https://member.rakuten-sec.co.jp", "auditedAt": "2026-07-28T06:23:24.886Z", "mode": "report", "status": "completed", "statusDetail": "The requested member host redirects to the public www homepage. Public entry, login, product, support, account-opening and error-recovery templates were audited; authenticated account/dashboard/trading states were not covered because no credentials were provided.", "page": { "appType": "mpa", "framework": "legacy multi-page site with jQuery and third-party widgets", "notes": "Requested host redirects to https://www.rakuten-sec.co.jp/. Authenticated member-only surfaces are outside this unauthenticated run." }, "evidenceUsed": [ "screenshot", "DOM", "evaluate probes", "layout metrics", "trace", "HAR", "headers", "cookies", "trackers", "secrets scan", "images audit", "discoverability comparison", "Lighthouse", "heap summaries" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/desktop.png", "caption": "desktop" }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark", "findingIds": [ "F01", "F04", "F32" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [ "F04", "F05", "F06", "F07", "F16" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout", "findingIds": [ "F05", "F09", "F17", "F22" ] }, { "type": "screenshot", "path": "evidence/login.png", "caption": "login" }, { "type": "screenshot", "path": "evidence/login-mobile.png", "caption": "login mobile", "findingIds": [ "F05", "F16" ] }, { "type": "layout", "path": "evidence/login-mobile-layout.json", "caption": "login mobile layout", "findingIds": [ "F05", "F17" ] }, { "type": "screenshot", "path": "evidence/login-error.png", "caption": "login error", "findingIds": [ "F28" ] }, { "type": "other", "path": "evidence/login-error-probe.json", "caption": "login error probe", "findingIds": [ "F28" ] }, { "type": "screenshot", "path": "evidence/domestic-stock.png", "caption": "domestic stock" }, { "type": "screenshot", "path": "evidence/support.png", "caption": "support" }, { "type": "screenshot", "path": "evidence/account-open.png", "caption": "account open" }, { "type": "screenshot", "path": "evidence/404.png", "caption": "404" }, { "type": "other", "path": "evidence/404-probe.json", "caption": "404 probe" }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "platform probe", "findingIds": [ "F01", "F06", "F15", "F19", "F21", "F23", "F27" ] }, { "type": "other", "path": "evidence/login-probe.json", "caption": "login probe", "findingIds": [ "F21", "F28", "F29" ] }, { "type": "other", "path": "evidence/account-probe.json", "caption": "account probe", "findingIds": [ "F23", "F27" ] }, { "type": "other", "path": "evidence/domestic-probe.json", "caption": "domestic probe" }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "reduced motion", "findingIds": [ "F03" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace" }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F08", "F10" ] }, { "type": "har", "path": "evidence/home.har", "caption": "home.har", "findingIds": [ "F11" ] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F11", "F12", "F25", "F30", "F31", "F32" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F24", "F26" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies", "findingIds": [ "F24" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [ "F25", "F31" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets" }, { "type": "other", "path": "evidence/images.json", "caption": "images", "findingIds": [ "F09", "F13", "F19", "F30" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability", "findingIds": [ "F22" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered" }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler" }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "lighthouse home", "findingIds": [ "F02", "F07", "F08", "F10", "F12", "F13", "F14", "F15", "F17", "F18", "F19", "F20", "F22" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-login.json", "caption": "lighthouse login", "findingIds": [ "F07", "F13", "F15", "F18", "F20", "F21" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline.heapsnapshot", "findingIds": [ "F33" ] }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "heap post.heapsnapshot", "findingIds": [ "F33" ] }, { "type": "other", "path": "evidence/crawl-and-scripts.json", "caption": "crawl and scripts" }, { "type": "dom", "path": "evidence/dom.json", "caption": "dom" }, { "type": "other", "path": "evidence/recon.json", "caption": "recon" } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "medium", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Dark emulation leaves the complete homepage white/red and the probe reports colorScheme=\"normal\"; no system-driven dark theme is applied.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/home-dark.png", "evidence/platform-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "Under prefers-reduced-motion: reduce, getAnimations() returned zero active animations and no autoplay media was present.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/reduced-motion.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "issues", "confidence": "medium", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Lighthouse reports a failing color-contrast audit on the homepage; no forced-colors/high-contrast adaptation was found.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/lighthouse-home.json" ], "findingIds": [ "F02" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "low", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "The CSS/runtime probe found no View Transition usage while navigation and content state changes are instant full-page swaps.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/reduced-motion.json" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path interaction inventory.", "evidence": "No scroll-linked parallax, scrollytelling or reveal interaction was present on the representative paths.", "reason": "No scroll-linked parallax, scrollytelling or reveal interaction was present on the representative paths." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path interaction inventory.", "evidence": "No gesture-driven control requiring custom pull/swipe/physics behaviour was present on the sampled public desktop-style paths.", "reason": "No gesture-driven control requiring custom pull/swipe/physics behaviour was present on the sampled public desktop-style paths." }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "Representative pages provide persistent global navigation and breadcrumb/current-section cues without a JS scroll-toggle failure observed.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/domestic-stock.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path interaction inventory.", "evidence": "No tooltip or edge-positioned transient menu was exposed in the sampled states, so anchor positioning was not required for an observed control.", "reason": "No tooltip or edge-positioned transient menu was exposed in the sampled states, so anchor positioning was not required for an observed control." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "Breadcrumbs, headings and highlighted primary actions preserve orientation across home, product, login and account-opening paths.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/domestic-stock.png", "evidence/account-open.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "No load-time modal, consent wall or full-viewport interstitial obscured content in any initial screenshot.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/home-dark.png", "evidence/login.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "The DOM contains a native dialog and no ad-hoc full-screen overlay was exposed during load; ordinary disclosures remain inline.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "The first viewport is dominated by two promotion bands, category chips, a full-width campaign hero and five more campaign tiles before core informational content.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-mobile.png" ], "findingIds": [ "F04" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "At a requested 360x800 viewport Chrome lays out a 1280 CSS-pixel page at 0.28125 scale; layout reports no viewport meta and the page is a shrunken desktop canvas. Login behaves the same.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-mobile-layout.json", "evidence/login-mobile.png", "evidence/login-mobile-layout.json" ], "findingIds": [ "F05" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "The platform probe found zero container-query rules, and reused header/login/promotion components remain desktop-sized under a narrow viewport.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/platform-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Lighthouse fails target-size on both homepage and login; the shrunken desktop UI makes controls especially small on mobile.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/lighthouse-login.json", "evidence/home-mobile.png" ], "findingIds": [ "F07" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "Home clearly exposes Login and Account opening; login and account-opening pages state their purpose and next action prominently.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/home-dark.png", "evidence/login.png", "evidence/account-open.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "Public navigation reaches product details, login and the first account-opening choice; login offers both password and passkey routes without an avoidable interstitial.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/login.png", "evidence/account-open.png", "evidence/login-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "A deliberately invalid URL renders a Japanese 404 explanation and a direct home recovery link.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/404.png", "evidence/404-probe.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Lighthouse homepage performance is 0.15 with LCP 17.3s and TTI 34.6s; the controlled trace was faster (LCP 1.87s), showing severe variability.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Mobile layout observation records CLS 0.173 with a 0.170 shift; 87 of 100 audited images lack dimensions.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/images.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Lighthouse reports 6.1s main-thread work and 3.4s JavaScript execution; trace still finds two long tasks and 48ms TBT.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-trace-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "HAR records 227 requests/3.28MB, seven parser-inserted high-priority stylesheets, blocking scripts, redirects and missing cache headers.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "findingIds": [ "F11" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Lighthouse estimates 648KiB unused JavaScript and 111KiB unused CSS; HAR shows 65 scripts and 1.80MB script transfer.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-summary.json" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Lighthouse fails multiple ARIA/name rules and image-alt; the image audit finds 44 missing alts, and login also fails form labels/link names.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/lighthouse-login.json", "evidence/images.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Lighthouse reports insufficient foreground/background contrast on the homepage.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/lighthouse-home.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Homepage has an empty H1, no main landmark, malformed list/ARIA structures and 206 apparently unnamed anchors; login also lacks a main landmark.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/platform-probe.json", "evidence/lighthouse-home.json", "evidence/lighthouse-login.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "The 360px capture shrinks a 1280px desktop canvas to 28%, making body text and controls too small to read comfortably.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/home-mobile.png", "evidence/login-mobile.png" ], "findingIds": [ "F16" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Both audited templates omit a viewport meta tag, Lighthouse fails meta-viewport and target-size, and narrow rendering does not reflow.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/login-mobile-layout.json", "evidence/lighthouse-home.json" ], "findingIds": [ "F17" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Lighthouse reports browser errors logged to the console on both homepage and login.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/lighthouse-login.json" ], "findingIds": [ "F18" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Although doctype/UTF-8 are valid, Lighthouse finds incorrect image aspect ratios and the image audit finds 87 missing dimensions and 95 legacy-format images.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/platform-probe.json", "evidence/images.json", "evidence/lighthouse-home.json" ], "findingIds": [ "F19" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Lighthouse reports a deprecated API, inspector issues, BFCache blockers on login and substantial legacy/unused code.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/lighthouse-home.json", "evidence/lighthouse-login.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Homepage metadata is descriptive, but the primary login template has no meta description.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/platform-probe.json", "evidence/login-probe.json", "evidence/lighthouse-login.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Raw content is crawlable, but both homepage and login omit viewport metadata and Lighthouse fails mobile viewport/link-name checks.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/discoverability.json", "evidence/home-mobile-layout.json", "evidence/lighthouse-home.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "Homepage/product expose canonicals; robots.txt is successful and points to a sitemap, and sampled public pages return content.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/crawl-and-scripts.json", "evidence/platform-probe.json", "evidence/domestic-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Homepage has Open Graph tags but no JSON-LD despite representing a financial-services organization; the account page has placeholder description \"Site Description\".", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/platform-probe.json", "evidence/account-probe.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "HTTPS/HSTS are present, but CSP and nosniff are absent; 5 cookies are not Secure and all 14 sampled cookies use SameSite=None.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Tracker capture finds 42 third-party origins and five known tracker families; HAR attributes 122 requests and 1.78MB to third parties.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "No permission prompt appeared on load, and the primary login visibly offers passkey authentication alongside passwords.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/login.png", "evidence/login-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "The main response lacks clickjacking protection, Referrer-Policy and Permissions-Policy as well as CSP; only HSTS is present.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "Discoverability comparison reports 86% raw-HTML coverage, no empty SPA mount and title/description available without JavaScript.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-crawler.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "Product, support, login and account-opening templates rendered stable usable initial states; no clipped overlay or blank shell was observed.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/domestic-stock.png", "evidence/support.png", "evidence/login.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path interaction inventory.", "evidence": "This regulated brokerage and authentication experience is intrinsically online; an installable/offline transaction flow is not an appropriate expectation.", "reason": "This regulated brokerage and authentication experience is intrinsically online; an installable/offline transaction flow is not an appropriate expectation." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "The tested 404 route gives an explicit explanation and a recovery link instead of a blank shell.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/404.png", "evidence/404-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Public pages set lang=ja, but the separate account-opening application has no document language; no explicit direction is set.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/account-probe.json", "evidence/platform-probe.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "Sampled Japanese public/product content presents Japanese labels and locally formatted financial text consistently.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/domestic-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path interaction inventory.", "evidence": "No cross-time-zone event scheduling or user-entered time concept appeared in the representative public paths.", "reason": "No cross-time-zone event scheduling or user-entered time concept appeared in the representative public paths." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "No confirmshaming, forced continuity, disguised control or consent wall was observed in the sampled public, login or account-opening states.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/login.png", "evidence/account-open.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Submitting the visible login form empty produced no invalid controls, alert role or visible error message; login inputs are not required.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/login-error.png", "evidence/login-error-probe.json", "evidence/login-probe.json" ], "findingIds": [ "F28" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Login ID has no autocomplete token and password uses generic autocomplete=\"on\" instead of username/current-password.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/login-probe.json" ], "findingIds": [ "F29" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "Account opening states three steps and distinguishes Rakuten members/non-members; login offers passkeys and recovery/security guidance.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/account-open.png", "evidence/login.png" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Of 100 images, 95 use legacy formats, 58 lack srcset, 39 below-fold images are not lazy and 8 are oversized.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ], "findingIds": [ "F30" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "The load starts 227 requests including 52 fetch/XHR requests and many duplicate advertising destinations before user interaction.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F31" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Third parties account for 1.78MB; Google Tag Manager/destination scripts alone dominate the largest transfer list while campaign imagery adds substantial decorative weight.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-dark.png" ], "findingIds": [ "F32" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path interaction inventory.", "evidence": "No declared agent-facing surface was found; emerging WebMCP exposure is optional and high-risk financial actions should not be inferred from scraping.", "reason": "No declared agent-facing surface was found; emerging WebMCP exposure is optional and high-risk financial actions should not be inferred from scraping." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and representative-path interaction inventory.", "evidence": "No user task on the sampled public/login paths called for on-device language-model or summarisation functionality.", "reason": "No user task on the sampled public/login paths called for on-device language-model or summarisation functionality." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "After ten full-page scroll down/up cycles, snapshot self size rose only 0.67MB (1.7%) and node count 0.6%; this does not show unbounded retained growth in the exercised interaction.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "issues", "confidence": "medium", "method": "Direct screenshot/probe and corroborating Lighthouse/CDP evidence as cited.", "evidence": "Baseline snapshot has 719,381 nodes and 39.1MB self size, growing to 723,804 nodes/39.8MB after repeated scrolling; this is heavy for a public landing page.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ], "findingIds": [ "F33" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Direct representative-path observation/probe under the cited condition.", "evidence": "Before/after heap summaries show no Detached* constructor among the retained top constructors and only modest aggregate growth after ten scroll cycles.", "pathIds": [ "entry-home", "login", "domestic-stock", "support", "account-open", "error-404" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "pass" }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F05", "F06", "F07" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass" }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09", "F10", "F11", "F12" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F13", "F14", "F15", "F16", "F17" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F18", "F19", "F20" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F21", "F22", "F23" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F24", "F25", "F26" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F27" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F28", "F29" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F30", "F31", "F32" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "All checks were judged not applicable from the representative-path context." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "issues", "findingIds": [ "F33" ] } ], "paths": [ { "id": "entry-home", "description": "Requested member host redirect and public homepage, representing the entry/navigation/login gateway.", "url": "https://member.rakuten-sec.co.jp", "conditions": [ "desktop 1440x900", "mobile 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "no JavaScript crawler" ], "result": "issues" }, { "id": "login", "description": "Primary authentication template, including password/passkey choices and blank-submit recovery.", "url": "https://www.rakuten-sec.co.jp/ITS/V_ACT_Login.html", "conditions": [ "desktop 1440x900", "mobile 360x800", "blank submit" ], "result": "issues" }, { "id": "domestic-stock", "description": "Representative product/detail content template.", "url": "https://www.rakuten-sec.co.jp/web/domestic/stock/", "conditions": [ "desktop 1440x900" ], "result": "issues" }, { "id": "support", "description": "Representative support/listing template.", "url": "https://www.rakuten-sec.co.jp/web/support/", "conditions": [ "desktop 1440x900" ], "result": "issues" }, { "id": "account-open", "description": "Primary account-opening journey entry and choice state.", "url": "https://www.rakuten-sec.co.jp/web/account/rsec.html", "conditions": [ "desktop 1440x900" ], "result": "issues" }, { "id": "error-404", "description": "Deliberately invalid route representing HTTP error and recovery state.", "url": "https://www.rakuten-sec.co.jp/web/definitely-not-a-real-page-web-uplift/", "conditions": [ "desktop 1440x900" ], "result": "pass" } ], "findings": [ { "id": "F01", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "severity": "high", "confidence": "medium", "summary": "Honours prefers-color-scheme: a usable dark mode exists and is driven by the user's preference (color-scheme / prefers-color-scheme / light-dark()), not hard-coded light only.", "evidence": "Dark emulation leaves the complete homepage white/red and the probe reports colorScheme=\"normal\"; no system-driven dark theme is applied.", "artifacts": [ "evidence/home-dark.png", "evidence/platform-probe.json" ], "suggestedFix": "Add `color-scheme: light dark` and theme surfaces/text with `light-dark()` or `prefers-color-scheme`.", "effort": "medium" }, { "id": "F02", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "respect-user-preferences", "principleCheckId": "respects-contrast", "guidanceId": "accessibility", "severity": "medium", "confidence": "medium", "summary": "Honours prefers-contrast / forced-colors: controls, text and scrollbars remain visible under high-contrast preferences.", "evidence": "Lighthouse reports a failing color-contrast audit on the homepage; no forced-colors/high-contrast adaptation was found.", "artifacts": [ "evidence/lighthouse-home.json" ], "suggestedFix": "Meet WCAG contrast minimums and add forced-colors/prefers-contrast adaptations for essential controls.", "effort": "medium" }, { "id": "F03", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "same-document-transitions", "severity": "low", "confidence": "low", "summary": "State and route changes use View Transitions (including same-document, cross-document and scroll-driven/staggered) rather than instant, jarring swaps.", "evidence": "The CSS/runtime probe found no View Transition usage while navigation and content state changes are instant full-page swaps.", "artifacts": [ "evidence/reduced-motion.json" ], "suggestedFix": "Use same-document or cross-document View Transitions for meaningful route/state changes, with reduced-motion handling.", "effort": "large" }, { "id": "F04", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "improve-text-layout-and-legibility", "severity": "medium", "confidence": "high", "summary": "Minimise non-content chrome and borders so the content is the focus, not the application frame; expressive/decorative visuals serve the content rather than crowd it.", "evidence": "The first viewport is dominated by two promotion bands, category chips, a full-width campaign hero and five more campaign tiles before core informational content.", "artifacts": [ "evidence/home-dark.png", "evidence/home-mobile.png" ], "suggestedFix": "Reduce duplicated promotional chrome and prioritise the login/account action and core service content.", "effort": "medium" }, { "id": "F05", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "severity": "critical", "confidence": "high", "summary": "Layout adapts to narrow viewports with no horizontal overflow and no fixed pixel widths forcing a desktop layout on mobile; viewport meta present; fluid scaling and intrinsic sizing rather than brittle breakpoints.", "evidence": "At a requested 360x800 viewport Chrome lays out a 1280 CSS-pixel page at 0.28125 scale; layout reports no viewport meta and the page is a shrunken desktop canvas. Login behaves the same.", "artifacts": [ "evidence/home-mobile.png", "evidence/home-mobile-layout.json", "evidence/login-mobile.png", "evidence/login-mobile-layout.json" ], "suggestedFix": "Add a valid width=device-width viewport and rebuild key templates with intrinsic, fluid layouts that reflow at narrow widths.", "effort": "large" }, { "id": "F06", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "severity": "medium", "confidence": "high", "summary": "Components adapt to their container with container queries (incl. anchored container queries) and content/state-based styling where reused at different sizes, not only global viewport breakpoints.", "evidence": "The platform probe found zero container-query rules, and reused header/login/promotion components remain desktop-sized under a narrow viewport.", "artifacts": [ "evidence/platform-probe.json", "evidence/home-mobile.png" ], "suggestedFix": "Give reusable components containment and size-aware `@container` adaptations instead of relying on a fixed desktop canvas.", "effort": "large" }, { "id": "F07", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Touch targets are adequately sized and hover-only affordances have a non-hover fallback, and keyboard focus is visible, so the UI works for touch, pointer and keyboard alike.", "evidence": "Lighthouse fails target-size on both homepage and login; the shrunken desktop UI makes controls especially small on mobile.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/lighthouse-login.json", "evidence/home-mobile.png" ], "suggestedFix": "Use at least 24x24 CSS-pixel targets with spacing, preserve visible focus, and provide non-hover paths.", "effort": "medium" }, { "id": "F08", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "severity": "critical", "confidence": "high", "summary": "Core Web Vitals are in the good range: LCP is fast, interaction latency (INP) is low, and CLS is minimal; work is prioritised and deferred sensibly.", "evidence": "Lighthouse homepage performance is 0.15 with LCP 17.3s and TTI 34.6s; the controlled trace was faster (LCP 1.87s), showing severe variability.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Prioritise the LCP resource, remove redirect latency, defer non-critical work and monitor field LCP/INP/CLS.", "effort": "large" }, { "id": "F09", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-fast-and-stable", "principleCheckId": "visual-stability", "guidanceId": "visually-stable-font-fallbacks", "severity": "high", "confidence": "high", "summary": "No cumulative layout shift from late content (images, banners, fonts) that arrives without reserved space.", "evidence": "Mobile layout observation records CLS 0.173 with a 0.170 shift; 87 of 100 audited images lack dimensions.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/images.json" ], "suggestedFix": "Reserve image/banner space with dimensions or aspect-ratio and stabilise late campaign/font insertion.", "effort": "medium" }, { "id": "F10", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-main-thread", "guidanceId": "break-up-long-tasks", "severity": "high", "confidence": "high", "summary": "The main thread is not blocked by long tasks or heavy scripting; work is deferred, chunked, prioritised, or moved off-thread.", "evidence": "Lighthouse reports 6.1s main-thread work and 3.4s JavaScript execution; trace still finds two long tasks and 48ms TBT.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-trace-summary.json" ], "suggestedFix": "Remove unnecessary script, split long tasks and schedule non-critical work by priority.", "effort": "large" }, { "id": "F11", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-script-priority", "severity": "high", "confidence": "high", "summary": "Critical resources are delivered efficiently: cache headers are useful, render-blocking chains are short, fonts do not block or shift text, HTTP delivery is modern, and network dependency trees do not delay the main content.", "evidence": "HAR records 227 requests/3.28MB, seven parser-inserted high-priority stylesheets, blocking scripts, redirects and missing cache headers.", "artifacts": [ "evidence/home-summary.json", "evidence/home.har" ], "suggestedFix": "Collapse critical CSS, defer scripts, fix cache headers and shorten dependency/redirect chains.", "effort": "large" }, { "id": "F12", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "severity": "high", "confidence": "high", "summary": "The page does not ship large unused or duplicated JavaScript/CSS, avoidable legacy bundles, or third-party code that dominates the load without user value.", "evidence": "Lighthouse estimates 648KiB unused JavaScript and 111KiB unused CSS; HAR shows 65 scripts and 1.80MB script transfer.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/home-summary.json" ], "suggestedFix": "Use coverage to remove unused/duplicate bundles and load feature and analytics code conditionally.", "effort": "large" }, { "id": "F13", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "severity": "critical", "confidence": "high", "summary": "Interactive elements have accessible names, correct roles, and form fields have labels; images have alt text where meaningful; canvas/expressive content is exposed to assistive technology.", "evidence": "Lighthouse fails multiple ARIA/name rules and image-alt; the image audit finds 44 missing alts, and login also fails form labels/link names.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/lighthouse-login.json", "evidence/images.json" ], "suggestedFix": "Repair accessible names/roles, label all controls, and provide meaningful or explicitly empty alt text.", "effort": "large" }, { "id": "F14", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Text and essential UI meet WCAG colour-contrast minimums against their background.", "evidence": "Lighthouse reports insufficient foreground/background contrast on the homepage.", "artifacts": [ "evidence/lighthouse-home.json" ], "suggestedFix": "Adjust foreground and surface tokens to meet WCAG AA in every state.", "effort": "medium" }, { "id": "F15", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "severity": "high", "confidence": "high", "summary": "Heading and landmark structure is logical, focus order follows reading order, keyboard focus is always visible, and interactive state survives DOM moves.", "evidence": "Homepage has an empty H1, no main landmark, malformed list/ARIA structures and 206 apparently unnamed anchors; login also lacks a main landmark.", "artifacts": [ "evidence/platform-probe.json", "evidence/lighthouse-home.json", "evidence/lighthouse-login.json" ], "suggestedFix": "Provide one meaningful H1/main landmark, logical headings/lists, valid ARIA and a tested keyboard focus sequence.", "effort": "large" }, { "id": "F16", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-inclusive", "principleCheckId": "legible-text", "guidanceId": "improve-text-layout-and-legibility", "severity": "high", "confidence": "high", "summary": "Text is legible and inclusively rendered: comfortable line layout, precise alignment, stable rendering across mixed fonts, no clipping or cramped wrapping that harms comprehension.", "evidence": "The 360px capture shrinks a 1280px desktop canvas to 28%, making body text and controls too small to read comfortably.", "artifacts": [ "evidence/home-mobile.png", "evidence/login-mobile.png" ], "suggestedFix": "Reflow instead of scaling; use readable responsive type, line length and spacing.", "effort": "large" }, { "id": "F17", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "severity": "critical", "confidence": "high", "summary": "The experience remains usable when zoomed or reflowed, touch targets are large enough, media has captions or equivalents where needed, and the viewport does not prevent user scaling.", "evidence": "Both audited templates omit a viewport meta tag, Lighthouse fails meta-viewport and target-size, and narrow rendering does not reflow.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/login-mobile-layout.json", "evidence/lighthouse-home.json" ], "suggestedFix": "Allow user scaling, set width=device-width and ensure content reflows without loss at narrow/zoomed conditions.", "effort": "large" }, { "id": "F18", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "guidanceId": "html", "severity": "medium", "confidence": "high", "summary": "The page loads without console errors or uncaught exceptions.", "evidence": "Lighthouse reports browser errors logged to the console on both homepage and login.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/lighthouse-login.json" ], "suggestedFix": "Remove uncaught/runtime and failed-resource errors, and enforce clean-console smoke tests.", "effort": "medium" }, { "id": "F19", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "severity": "high", "confidence": "high", "summary": "Valid doctype and charset, images sized with correct aspect ratio, no deprecated APIs misused, and CSS/HTML are well structured and not needlessly repetitive. (HTTPS, CSP and permission hygiene are judged under be-private-and-secure, not here.)", "evidence": "Although doctype/UTF-8 are valid, Lighthouse finds incorrect image aspect ratios and the image audit finds 87 missing dimensions and 95 legacy-format images.", "artifacts": [ "evidence/platform-probe.json", "evidence/images.json", "evidence/lighthouse-home.json" ], "suggestedFix": "Declare intrinsic image dimensions/aspect ratios and modernise responsive asset markup.", "effort": "large" }, { "id": "F20", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "severity": "medium", "confidence": "high", "summary": "The page uses the platform cleanly: no deprecated APIs, no avoidable BFCache blockers, no broken source maps or inspector issues, no stale vulnerable libraries, no paste-prevention on inputs, and no notification/geolocation prompts on load.", "evidence": "Lighthouse reports a deprecated API, inspector issues, BFCache blockers on login and substantial legacy/unused code.", "artifacts": [ "evidence/lighthouse-home.json", "evidence/lighthouse-login.json" ], "suggestedFix": "Remove deprecated APIs and BFCache blockers, resolve DevTools Issues and update stale dependencies.", "effort": "large" }, { "id": "F21", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "guidanceId": "html", "severity": "medium", "confidence": "high", "summary": "The page has a unique, descriptive and a meta description.", "evidence": "Homepage metadata is descriptive, but the primary login template has no meta description.", "artifacts": [ "evidence/platform-probe.json", "evidence/login-probe.json", "evidence/lighthouse-login.json" ], "suggestedFix": "Add a unique, accurate meta description to the login and every indexed template.", "effort": "small" }, { "id": "F22", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "severity": "high", "confidence": "high", "summary": "Links are crawlable (real href), there is a viewport meta tag, robots does not block indexing, and link text is descriptive.", "evidence": "Raw content is crawlable, but both homepage and login omit viewport metadata and Lighthouse fails mobile viewport/link-name checks.", "artifacts": [ "evidence/discoverability.json", "evidence/home-mobile-layout.json", "evidence/lighthouse-home.json" ], "suggestedFix": "Add mobile viewport metadata and ensure all links have descriptive accessible text and real hrefs.", "effort": "medium" }, { "id": "F23", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "severity": "medium", "confidence": "high", "summary": "Where the page represents an article, product, organization, event, place or other rich entity, structured data and share-preview metadata accurately describe the visible content.", "evidence": "Homepage has Open Graph tags but no JSON-LD despite representing a financial-services organization; the account page has placeholder description \"Site Description\".", "artifacts": [ "evidence/platform-probe.json", "evidence/account-probe.json" ], "suggestedFix": "Add accurate Organization/FinancialService JSON-LD and complete share metadata on key templates.", "effort": "medium" }, { "id": "F24", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "severity": "critical", "confidence": "high", "summary": "Served over HTTPS with a sensible Content-Security-Policy and secure, SameSite cookies; no mixed content or obvious transport/header smells.", "evidence": "HTTPS/HSTS are present, but CSP and nosniff are absent; 5 cookies are not Secure and all 14 sampled cookies use SameSite=None.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Deploy a restrictive CSP and nosniff, then mark every HTTPS cookie Secure and use the least-permissive SameSite value.", "effort": "large" }, { "id": "F25", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "severity": "critical", "confidence": "high", "summary": "No over-collection of user data, no leaky third parties, and analytics/background data collection is minimised and batched rather than chatty or session-wide by default.", "evidence": "Tracker capture finds 42 third-party origins and five known tracker families; HAR attributes 122 requests and 1.78MB to third parties.", "artifacts": [ "evidence/trackers.json", "evidence/home-summary.json" ], "suggestedFix": "Inventory and remove non-essential trackers, gate optional analytics on consent, and minimise/batch retained telemetry.", "effort": "large" }, { "id": "F26", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "severity": "critical", "confidence": "high", "summary": "Browser-enforced defenses are configured where appropriate: HSTS, clickjacking protection (frame-ancestors / X-Frame-Options), Trusted Types for XSS-sensitive apps, origin isolation, privacy-preserving third-party cookie posture, and sensible Referrer-Policy / Permissions-Policy.", "evidence": "The main response lacks clickjacking protection, Referrer-Policy and Permissions-Policy as well as CSP; only HSTS is present.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Set CSP including frame-ancestors, Referrer-Policy, Permissions-Policy and nosniff; evaluate Trusted Types for XSS-sensitive authenticated surfaces.", "effort": "large" }, { "id": "F27", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "severity": "medium", "confidence": "high", "summary": "Correct lang and dir attributes, logical CSS properties (inline/block) rather than physical left/right, and translation-ready markup so the layout and reading order survive other languages and writing modes.", "evidence": "Public pages set lang=ja, but the separate account-opening application has no document language; no explicit direction is set.", "artifacts": [ "evidence/account-probe.json", "evidence/platform-probe.json" ], "suggestedFix": "Set the correct lang on every application/template, add direction support and prefer logical CSS properties.", "effort": "medium" }, { "id": "F28", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "guidanceId": "accessible-error-announcement", "severity": "high", "confidence": "high", "summary": "Forms prevent and recover from mistakes humanely: validate after interaction (not prematurely), give clear required-field feedback, announce errors accessibly, and signal invalid fields visibly rather than blaming the user.", "evidence": "Submitting the visible login form empty produced no invalid controls, alert role or visible error message; login inputs are not required.", "artifacts": [ "evidence/login-error.png", "evidence/login-error-probe.json", "evidence/login-probe.json" ], "suggestedFix": "Validate after submit/interaction, focus and announce a concise error summary, and mark invalid fields with accessible inline guidance.", "effort": "medium" }, { "id": "F29", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "severity": "high", "confidence": "high", "summary": "Input is assisted, not obstructed: correct autocomplete tokens so address, payment, sign-in and sign-up fields autofill, and inputs are highlighted/sized to help the user rather than trip them up.", "evidence": "Login ID has no autocomplete token and password uses generic autocomplete=\"on\" instead of username/current-password.", "artifacts": [ "evidence/login-probe.json" ], "suggestedFix": "Use autocomplete=username and autocomplete=current-password while retaining the passkey option.", "effort": "small" }, { "id": "F30", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "severity": "high", "confidence": "high", "summary": "Images and decorative assets are optimised and served at appropriate resolutions; decorative pseudo-element imagery and heavy decorative images are resolution-optimised rather than oversized.", "evidence": "Of 100 images, 95 use legacy formats, 58 lack srcset, 39 below-fold images are not lazy and 8 are oversized.", "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ], "suggestedFix": "Serve AVIF/WebP responsive sources, lazy-load below-fold media and right-size decorative assets.", "effort": "large" }, { "id": "F31", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "severity": "high", "confidence": "high", "summary": "Background work and fetching are not wasteful: background processing is efficient and de-prioritised, and the lightest technique that achieves the result is preferred over heavy or redundant work.", "evidence": "The load starts 227 requests including 52 fetch/XHR requests and many duplicate advertising destinations before user interaction.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Defer or eliminate non-essential background fetches and analytics until intent/consent; batch remaining telemetry.", "effort": "large" }, { "id": "F32", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "severity": "high", "confidence": "high", "summary": "Third-party scripts, fonts, video, audio, animation and heavy media are proportionate to the user value they provide; autoplay or background media is avoided unless essential and resource use is cached or deferred where possible.", "evidence": "Third parties account for 1.78MB; Google Tag Manager/destination scripts alone dominate the largest transfer list while campaign imagery adds substantial decorative weight.", "artifacts": [ "evidence/home-summary.json", "evidence/home-dark.png" ], "suggestedFix": "Set and enforce third-party/media budgets, defer campaign media, and remove redundant tag destinations.", "effort": "large" }, { "id": "F33", "pathId": "entry-home", "url": "https://www.rakuten-sec.co.jp/", "principleId": "be-memory-efficient", "principleCheckId": "bounded-footprint", "guidanceId": "identify-heavy-scripts", "severity": "medium", "confidence": "medium", "summary": "Heap size and DOM node count are reasonable for what the page is; the footprint is proportionate rather than bloated.", "evidence": "Baseline snapshot has 719,381 nodes and 39.1MB self size, growing to 723,804 nodes/39.8MB after repeated scrolling; this is heavy for a public landing page.", "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ], "suggestedFix": "Reduce DOM/script/third-party populations and set memory/DOM budgets for the public shell.", "effort": "large" } ], "taskList": [ { "id": "T01", "title": "Add a valid width=device-width viewport and rebuild key templates with intrinsic, fluid layouts that reflow at narrow widths.", "priority": 1, "findingIds": [ "F05" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T02", "title": "Prioritise the LCP resource, remove redirect latency, defer non-critical work and monitor field LCP/INP/CLS.", "priority": 2, "findingIds": [ "F08" ], "guidanceId": "performance", "status": "open" }, { "id": "T03", "title": "Repair accessible names/roles, label all controls, and provide meaningful or explicitly empty alt text.", "priority": 3, "findingIds": [ "F13" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T04", "title": "Allow user scaling, set width=device-width and ensure content reflows without loss at narrow/zoomed conditions.", "priority": 4, "findingIds": [ "F17" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T05", "title": "Deploy a restrictive CSP and nosniff, then mark every HTTPS cookie Secure and use the least-permissive SameSite value.", "priority": 5, "findingIds": [ "F24" ], "guidanceId": "security", "status": "open" }, { "id": "T06", "title": "Inventory and remove non-essential trackers, gate optional analytics on consent, and minimise/batch retained telemetry.", "priority": 6, "findingIds": [ "F25" ], "guidanceId": "privacy", "status": "open" }, { "id": "T07", "title": "Set CSP including frame-ancestors, Referrer-Policy, Permissions-Policy and nosniff; evaluate Trusted Types for XSS-sensitive authenticated surfaces.", "priority": 7, "findingIds": [ "F26" ], "guidanceId": "security", "status": "open" }, { "id": "T08", "title": "Add `color-scheme: light dark` and theme surfaces/text with `light-dark()` or `prefers-color-scheme`.", "priority": 8, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T09", "title": "Use at least 24x24 CSS-pixel targets with spacing, preserve visible focus, and provide non-hover paths.", "priority": 9, "findingIds": [ "F07" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T10", "title": "Reserve image/banner space with dimensions or aspect-ratio and stabilise late campaign/font insertion.", "priority": 10, "findingIds": [ "F09" ], "guidanceId": "visually-stable-font-fallbacks", "status": "open" }, { "id": "T11", "title": "Remove unnecessary script, split long tasks and schedule non-critical work by priority.", "priority": 11, "findingIds": [ "F10" ], "guidanceId": "break-up-long-tasks", "status": "open" }, { "id": "T12", "title": "Collapse critical CSS, defer scripts, fix cache headers and shorten dependency/redirect chains.", "priority": 12, "findingIds": [ "F11" ], "guidanceId": "optimize-script-priority", "status": "open" }, { "id": "T13", "title": "Use coverage to remove unused/duplicate bundles and load feature and analytics code conditionally.", "priority": 13, "findingIds": [ "F12" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T14", "title": "Adjust foreground and surface tokens to meet WCAG AA in every state.", "priority": 14, "findingIds": [ "F14" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T15", "title": "Provide one meaningful H1/main landmark, logical headings/lists, valid ARIA and a tested keyboard focus sequence.", "priority": 15, "findingIds": [ "F15" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T16", "title": "Reflow instead of scaling; use readable responsive type, line length and spacing.", "priority": 16, "findingIds": [ "F16" ], "guidanceId": "improve-text-layout-and-legibility", "status": "open" }, { "id": "T17", "title": "Declare intrinsic image dimensions/aspect ratios and modernise responsive asset markup.", "priority": 17, "findingIds": [ "F19" ], "guidanceId": "html", "status": "open" }, { "id": "T18", "title": "Add mobile viewport metadata and ensure all links have descriptive accessible text and real hrefs.", "priority": 18, "findingIds": [ "F22" ], "guidanceId": "html", "status": "open" }, { "id": "T19", "title": "Validate after submit/interaction, focus and announce a concise error summary, and mark invalid fields with accessible inline guidance.", "priority": 19, "findingIds": [ "F28" ], "guidanceId": "accessible-error-announcement", "status": "open" }, { "id": "T20", "title": "Use autocomplete=username and autocomplete=current-password while retaining the passkey option.", "priority": 20, "findingIds": [ "F29" ], "guidanceId": "autofill-sign-in-form", "status": "open" }, { "id": "T21", "title": "Serve AVIF/WebP responsive sources, lazy-load below-fold media and right-size decorative assets.", "priority": 21, "findingIds": [ "F30" ], "guidanceId": "deliver-optimized-decorative-images", "status": "open" }, { "id": "T22", "title": "Defer or eliminate non-essential background fetches and analytics until intent/consent; batch remaining telemetry.", "priority": 22, "findingIds": [ "F31" ], "guidanceId": "deprioritize-background-fetches", "status": "open" }, { "id": "T23", "title": "Set and enforce third-party/media budgets, defer campaign media, and remove redundant tag destinations.", "priority": 23, "findingIds": [ "F32" ], "guidanceId": "efficient-background-processing", "status": "open" }, { "id": "T24", "title": "Meet WCAG contrast minimums and add forced-colors/prefers-contrast adaptations for essential controls.", "priority": 24, "findingIds": [ "F02" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T25", "title": "Reduce duplicated promotional chrome and prioritise the login/account action and core service content.", "priority": 25, "findingIds": [ "F04" ], "guidanceId": "improve-text-layout-and-legibility", "status": "open" }, { "id": "T26", "title": "Give reusable components containment and size-aware `@container` adaptations instead of relying on a fixed desktop canvas.", "priority": 26, "findingIds": [ "F06" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T27", "title": "Remove uncaught/runtime and failed-resource errors, and enforce clean-console smoke tests.", "priority": 27, "findingIds": [ "F18" ], "guidanceId": "html", "status": "open" }, { "id": "T28", "title": "Remove deprecated APIs and BFCache blockers, resolve DevTools Issues and update stale dependencies.", "priority": 28, "findingIds": [ "F20" ], "guidanceId": "html", "status": "open" }, { "id": "T29", "title": "Add a unique, accurate meta description to the login and every indexed template.", "priority": 29, "findingIds": [ "F21" ], "guidanceId": "html", "status": "open" }, { "id": "T30", "title": "Add accurate Organization/FinancialService JSON-LD and complete share metadata on key templates.", "priority": 30, "findingIds": [ "F23" ], "guidanceId": "html", "status": "open" }, { "id": "T31", "title": "Set the correct lang on every application/template, add direction support and prefer logical CSS properties.", "priority": 31, "findingIds": [ "F27" ], "guidanceId": "translator", "status": "open" }, { "id": "T32", "title": "Reduce DOM/script/third-party populations and set memory/DOM budgets for the public shell.", "priority": 32, "findingIds": [ "F33" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T33", "title": "Use same-document or cross-document View Transitions for meaningful route/state changes, with reduced-motion handling.", "priority": 33, "findingIds": [ "F03" ], "guidanceId": "same-document-transitions", "status": "open" } ], "budget": { "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-28T06-23-24-886Z" }