{ "url": "https://corp.sbi.bank.in", "auditedAt": "2026-07-22T23:14:28.673Z", "mode": "report", "status": "completed", "statusDetail": "Coverage complete across 58 catalog checks and four representative paths. Authentication systems on separate origins were not covered.", "page": { "appType": "mpa", "framework": "Server-rendered HTML with Bootstrap/jQuery; separate legacy fixed-width and current-account templates.", "notes": "Coverage includes the public gateway, corporate landing, FAQ content template, and current-account start journey. External YONO login, authenticated banking, payment completion, and destructive account actions were excluded because they cross origin and require credentials." }, "evidenceUsed": [ "screenshot", "dom+computed-css", "layout-metrics", "evaluate-probe", "trace", "har", "discoverability", "headers", "cookies", "trackers", "images", "secrets", "heap-summary", "lighthouse" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "other", "path": "evidence/accessibility-probe.json", "caption": "accessibility probe", "findingIds": [ "F05", "F07", "F11", "F17", "F18", "F23", "F24" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies", "findingIds": [ "F27" ] }, { "type": "dom", "path": "evidence/corporate-home-dom.json", "caption": "corporate home dom", "findingIds": [ "F04", "F10", "F18", "F19", "F31" ] }, { "type": "screenshot", "path": "evidence/corporate-home.png", "caption": "corporate home", "findingIds": [ "F08" ] }, { "type": "screenshot", "path": "evidence/current-account-after-start.png", "caption": "current account after start", "findingIds": [] }, { "type": "dom", "path": "evidence/current-account-dom-probe.json", "caption": "current account dom probe", "findingIds": [ "F31" ] }, { "type": "layout", "path": "evidence/current-account-mobile-layout.json", "caption": "current account mobile layout", "findingIds": [] }, { "type": "other", "path": "evidence/current-account-registration-probe.json", "caption": "current account registration probe", "findingIds": [ "F12" ] }, { "type": "screenshot", "path": "evidence/current-account-registration.png", "caption": "current account registration", "findingIds": [ "F12", "F29", "F32" ] }, { "type": "screenshot", "path": "evidence/current-account.png", "caption": "current account", "findingIds": [ "F32" ] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered", "findingIds": [] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability", "findingIds": [] }, { "type": "layout", "path": "evidence/faq-mobile-layout.json", "caption": "faq mobile layout", "findingIds": [ "F09", "F14", "F19", "F20", "F24" ] }, { "type": "screenshot", "path": "evidence/faq.png", "caption": "faq", "findingIds": [ "F03", "F04", "F19" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F27", "F28" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "heap post", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [ "F06", "F08" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [ "F01", "F05" ] }, { "type": "screenshot", "path": "evidence/home-high-contrast.png", "caption": "home high contrast", "findingIds": [] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout", "findingIds": [ "F09" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "findingIds": [ "F06", "F09" ] }, { "type": "other", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F15", "F33", "F34", "F35" ] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F13" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace", "findingIds": [ "F13" ] }, { "type": "har", "path": "evidence/home.har", "caption": "home", "findingIds": [ "F15", "F33" ] }, { "type": "other", "path": "evidence/images.json", "caption": "images", "findingIds": [ "F17", "F22", "F33", "F34" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse", "findingIds": [ "F11", "F13", "F15", "F16", "F17", "F20", "F21", "F22", "F23", "F24" ] }, { "type": "other", "path": "evidence/recon.json", "caption": "recon", "findingIds": [] }, { "type": "other", "path": "evidence/reduced-motion-probe.json", "caption": "reduced motion probe", "findingIds": [ "F02" ] }, { "type": "other", "path": "evidence/runtime-memory.json", "caption": "runtime memory", "findingIds": [] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets", "findingIds": [] }, { "type": "other", "path": "evidence/site-signals.json", "caption": "site signals", "findingIds": [ "F03", "F10", "F15", "F25", "F26", "F30" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [ "F35" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The dark-mode screenshot is visually identical to the light capture, and computed styles report color-scheme: normal with white surfaces.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The reduced-motion probe matched prefers-reduced-motion: reduce but still found a running 60,000 ms marquee animation.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion-probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "The prefers-contrast: more screenshot retained visible text, controls, borders, and links.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-high-contrast.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "CSS inspection found no view-transition rules, while the representative site uses cross-document navigation and accordion/state changes.", "pathIds": [ "faq" ], "artifacts": [ "evidence/site-signals.json", "evidence/faq.png" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/feature inspection across representative paths.", "evidence": "No parallax, scroll-linked reveal, scrollytelling, or other scroll-driven animation exists on the representative pages.", "reason": "No parallax, scroll-linked reveal, scrollytelling, or other scroll-driven animation exists on the representative pages.", "pathIds": [ "home" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/feature inspection across representative paths.", "evidence": "No swipe, pull-to-reveal, drag, or gesture-driven interaction exists on the representative pages.", "reason": "No swipe, pull-to-reveal, drag, or gesture-driven interaction exists on the representative pages.", "pathIds": [ "home" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "Desktop screenshots and CSS inspection show fixed/static navigation with no scroll-state container rules or progress cue on long pages.", "pathIds": [ "faq" ], "artifacts": [ "evidence/faq.png", "evidence/corporate-home-dom.json" ], "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "DOM/CSS inspection found Bootstrap menu/dialog structures and no anchor-name, position-anchor, or position-try usage.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dom.json", "evidence/accessibility-probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "Breadcrumbs on the FAQ and clearly separated account-opening cards provide visible orientation and next-step cues.", "pathIds": [ "home" ], "artifacts": [ "evidence/faq.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The first viewport contains two full-width warning banners plus a continuously moving announcement before the personal-banking action.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "findingIds": [ "F06" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The accessibility probe found six div-based role=dialog modals and 18 javascript: links rather than native dialog/popover/details controls.", "pathIds": [ "home" ], "artifacts": [ "evidence/accessibility-probe.json" ], "findingIds": [ "F07" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The corporate template screenshot shows a dense tab bar, banner, announcement panels, decorative imagery, and compact 12 px text around the primary login action.", "pathIds": [ "corporate-home" ], "artifacts": [ "evidence/corporate-home.png", "evidence/home-desktop.png" ], "findingIds": [ "F08" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The gateway overflows by 33 px at 360 px. The FAQ lacks a viewport meta tag and renders a 980 px desktop canvas scaled to fit.", "pathIds": [ "faq" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/faq-mobile-layout.json", "evidence/home-mobile.png" ], "findingIds": [ "F09" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "CSS inspection found zero container rules; the corporate template includes fixed widths such as #wrapper { width: 980px } and many fixed-size panels.", "pathIds": [ "corporate-home" ], "artifacts": [ "evidence/site-signals.json", "evidence/corporate-home-dom.json" ], "findingIds": [ "F10" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The focus probe found the navigation toggle with outline:none and counted 23 controls below 24 px in at least one dimension; Lighthouse also failed target-size.", "pathIds": [ "home" ], "artifacts": [ "evidence/accessibility-probe.json", "evidence/lighthouse.json" ], "findingIds": [ "F11" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "The gateway clearly labels Personal Banking and Corporate Banking login actions, and the account page presents three explicit next actions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "Following Start New Application leads directly to “Your session has expired” instead of the registration form, before any user input.", "pathIds": [ "current-account" ], "artifacts": [ "evidence/current-account-registration.png", "evidence/current-account-registration-probe.json" ], "findingIds": [ "F12" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "The expired-session state is explicit and offers separate continuation links for relationship managers and customers.", "pathIds": [ "home" ], "artifacts": [ "evidence/current-account-registration.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "Lighthouse measured LCP/FCP at 4.4 s; the raw-CDP trace measured LCP/FCP at 8.23 s under the observed run.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json", "evidence/home-trace.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The 360 px FAQ layout run recorded CLS 0.139, including a 0.137 shift around 6.1 seconds.", "pathIds": [ "faq" ], "artifacts": [ "evidence/faq-mobile-layout.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "Raw-CDP trace and layout captures observed no long tasks and 0 ms total blocking time in the measured load.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "HAR/Lighthouse found four VeryHigh-priority blocking stylesheets, four synchronous head scripts, uncompressed HTML/CSS/JS, weak cache lifetimes, and an estimated 3.27 s render-blocking saving.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/site-signals.json", "evidence/lighthouse.json" ], "findingIds": [ "F15" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "Lighthouse estimated 264 KiB unused CSS and 96 KiB unused JavaScript, alongside unminified CSS/JS opportunities.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F16" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "Lighthouse failed link-name and label-content-name-mismatch; the image audit also found one image without alt text.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/images.json", "evidence/accessibility-probe.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "Lighthouse reported no failed color-contrast audit, and the high-contrast capture retained readable controls and text.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The gateway toggle computes outline:none when focused, while the legacy corporate pages omit a main landmark and even a visible h1 in the inspected DOM.", "pathIds": [ "corporate-home" ], "artifacts": [ "evidence/accessibility-probe.json", "evidence/corporate-home-dom.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "Computed styles show 12 px Tahoma throughout the fixed 980 px corporate template; on mobile the whole FAQ canvas is scaled down rather than reflowed.", "pathIds": [ "faq" ], "artifacts": [ "evidence/corporate-home-dom.json", "evidence/faq-mobile-layout.json", "evidence/faq.png" ], "findingIds": [ "F19" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The FAQ has no viewport meta and exposes a 980 px layout at a 360 px condition; Lighthouse failed touch-target sizing.", "pathIds": [ "faq" ], "artifacts": [ "evidence/faq-mobile-layout.json", "evidence/lighthouse.json" ], "findingIds": [ "F20" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "Lighthouse’s errors-in-console audit failed for the tested navigation.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json" ], "findingIds": [ "F21" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The image probe found 23 of 24 images without explicit dimensions, 23 legacy-format images, and one oversized image; Lighthouse also failed unsized-images.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json", "evidence/lighthouse.json" ], "findingIds": [ "F22" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "Lighthouse failed the inspector-issues audit; the DOM also contains 18 javascript: pseudo-links that bypass native link/button behavior.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse.json", "evidence/accessibility-probe.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "The gateway has a descriptive title and meta description (“State Bank of India”), both present in raw HTML.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The DOM probe found 18 javascript: links, Lighthouse failed crawlable-anchors, and the FAQ template lacks viewport metadata.", "pathIds": [ "faq" ], "artifacts": [ "evidence/accessibility-probe.json", "evidence/lighthouse.json", "evidence/faq-mobile-layout.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "No canonical URL was present; /robots.txt and /sitemap.xml both returned branded 404 rejection pages.", "pathIds": [ "home" ], "artifacts": [ "evidence/site-signals.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The metadata probe found zero JSON-LD blocks and no Open Graph tags on the organization/service gateway.", "pathIds": [ "home" ], "artifacts": [ "evidence/site-signals.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The header audit found no HSTS or nosniff and a CSP allowing unsafe-inline; all four observed cookies use SameSite=None, with one not HttpOnly.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "findingIds": [ "F27" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "Tracker inspection found no known tracker domains, only one zero-byte third-party image request, and the secrets scan found no exposed credentials.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/feature inspection across representative paths.", "evidence": "This host presents no permission request or authentication form; authentication is delegated to separate YONO origins outside the requested host scope.", "reason": "This host presents no permission request or authentication form; authentication is delegated to separate YONO origins outside the requested host scope.", "pathIds": [ "home" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "No frame-ancestors/X-Frame-Options, Referrer-Policy, or Permissions-Policy was observed, and the CSP lacks the documented clickjacking defense.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F28" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "Discoverability comparison found 96% rendered-content coverage in raw HTML, with title, h1, and description available without JavaScript.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "A fresh navigation to Start New Application immediately rendered a session-expired state, showing that initial session state is not stabilized.", "pathIds": [ "current-account" ], "artifacts": [ "evidence/current-account-registration.png" ], "findingIds": [ "F29" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/feature inspection across representative paths.", "evidence": "This public banking gateway delegates intrinsically online transactions and is not an installable app surface; offline account operations would be inappropriate.", "reason": "This public banking gateway delegates intrinsically online transactions and is not an installable app surface; offline account operations would be inappropriate.", "pathIds": [ "home" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "Both robots.txt and sitemap.xml returned 404 pages saying the URL was rejected and offered only a support ID, with no recovery navigation.", "pathIds": [ "home" ], "artifacts": [ "evidence/site-signals.json" ], "findingIds": [ "F30" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The multilingual current-account pages have an empty html lang attribute, and legacy CSS uses extensive physical left/right properties and fixed positioning.", "pathIds": [ "current-account" ], "artifacts": [ "evidence/current-account-dom-probe.json", "evidence/corporate-home-dom.json" ], "findingIds": [ "F31" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/feature inspection across representative paths.", "evidence": "The audited public pages display no user-facing dates, currencies, durations, or locale-sensitive numeric data to format.", "reason": "The audited public pages display no user-facing dates, currencies, durations, or locale-sensitive numeric data to format.", "pathIds": [ "home" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/feature inspection across representative paths.", "evidence": "The audited paths expose no events, schedules, timestamps, or recurring-time data.", "reason": "The audited paths expose no events, schedules, timestamps, or recurring-time data.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "No consent wall, forced continuity, disguised advertisement, or confirmshaming was observed across the four representative paths.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/feature inspection across representative paths.", "evidence": "No editable form could be reached on this host: the application route expired before rendering fields, so there was no form-validation interaction to judge.", "reason": "No editable form could be reached on this host: the application route expired before rendering fields, so there was no form-validation interaction to judge.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/feature inspection across representative paths.", "evidence": "No sign-in, address, payment, or signup fields were rendered on the audited host; those flows are delegated or blocked before fields appear.", "reason": "No sign-in, address, payment, or signup fields were rendered on the audited host; those flows are delegated or blocked before fields appear.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The advertised Start New Application action immediately reports an expired session on a fresh visit, preventing account setup.", "pathIds": [ "current-account" ], "artifacts": [ "evidence/current-account.png", "evidence/current-account-registration.png" ], "findingIds": [ "F32" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The HAR transferred 5.44 MB, of which 4.84 MB was images; 23 images use legacy JPG/PNG, 23 lack dimensions, and responsive srcset is absent.", "pathIds": [ "home" ], "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/images.json" ], "findingIds": [ "F33" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "The network run downloaded 32 images and multiple 1,140–1,920 px banners, including many hidden slides, during initial load.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/images.json" ], "findingIds": [ "F34" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct visual, DOM, runtime, network, or diagnostic evidence gathered on representative paths.", "evidence": "Although known trackers were absent, first-party images alone transferred 4.84 MB for a page whose core task is choosing a login or service link.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "findingIds": [ "F35" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/feature inspection across representative paths.", "evidence": "No declared agent-facing intent or safe transaction-tool surface was found; this emerging capability is optional for the audited banking gateway.", "reason": "No declared agent-facing intent or safe transaction-tool surface was found; this emerging capability is optional for the audited banking gateway.", "pathIds": [ "home" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and DOM/feature inspection across representative paths.", "evidence": "No summarisation or language-model task is part of the audited gateway’s core experience, so on-device inference is not applicable.", "reason": "No summarisation or language-model task is part of the audited gateway’s core experience, so on-device inference is not applicable.", "pathIds": [ "home" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "After ten menu open/close cycles, heap self-size changed from 5.09 MB to 5.36 MB with no Detached constructor among leading populations; this is modest warm-up, not evidence of unbounded growth.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-post.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "The measured page used about 2.59 MB live JS heap, 647 DOM nodes, and a 5.09 MB snapshot self-size, proportionate to this gateway.", "pathIds": [ "home" ], "artifacts": [ "evidence/runtime-memory.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, or diagnostic verification.", "evidence": "Baseline/post heap summaries showed no Detached constructor in the leading populations and stable jQuery wrapper counts after repeated menu toggles.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F04", "F05" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07", "F08" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F10", "F11" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F12" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F13", "F14", "F15", "F16" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F17", "F18", "F19", "F20" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F21", "F22", "F23" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F24", "F25", "F26" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F27", "F28" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F29", "F30" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F31" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F32" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F33", "F34", "F35" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No declared agent-facing intent or safe transaction-tool surface was found; this emerging capability is optional for the audited banking gateway. No summarisation or language-model task is part of the audited gateway’s core experience, so on-device inference is not applicable." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Public gateway homepage, representative of navigation and the personal/corporate login entry points.", "url": "https://corp.sbi.bank.in/", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "prefers-contrast: more", "keyboard focus" ], "result": "issues" }, { "id": "corporate-home", "description": "Legacy corporate banking homepage, representative of the older fixed-width corporate template.", "url": "https://corp.sbi.bank.in/corporate/sbi/sbi_home.html", "conditions": [ "desktop", "DOM/CSS inspection" ], "result": "issues" }, { "id": "faq", "description": "Corporate FAQ listing, representative of content/disclosure pages and the legacy mobile/reflow behavior.", "url": "https://corp.sbi.bank.in/corporate/sbi/corp_faq.html", "conditions": [ "desktop", "viewport: 360x800" ], "result": "issues" }, { "id": "current-account", "description": "Current-account application landing and Start New Application journey, representative of the primary transactional flow.", "url": "https://corp.sbi.bank.in/oaorevamp/oaolanding.htm", "conditions": [ "desktop", "viewport: 360x800", "follow Start New Application" ], "result": "issues" } ], "findings": [ { "id": "F01", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "The gateway ignores the user’s dark color-scheme preference.", "evidence": "The dark-mode screenshot is visually identical to the light capture, and computed styles report color-scheme: normal with white surfaces.", "artifacts": [ "evidence/home-dark.png", "evidence/home-dom.json" ], "suggestedFix": "Declare color-scheme and provide preference-driven light/dark surface and text tokens.", "effort": "medium" }, { "id": "F02", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "The scrolling announcement keeps animating when reduced motion is requested.", "evidence": "The reduced-motion probe matched prefers-reduced-motion: reduce but still found a running 60,000 ms marquee animation.", "artifacts": [ "evidence/reduced-motion-probe.json" ], "suggestedFix": "Disable the marquee animation under prefers-reduced-motion: reduce and expose the announcement as static text.", "effort": "medium" }, { "id": "F03", "pathId": "faq", "url": "https://corp.sbi.bank.in/", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "guidanceCategory": "modern-web-guidance", "severity": "low", "confidence": "high", "summary": "Navigation and state changes use abrupt swaps rather than view transitions.", "evidence": "CSS inspection found no view-transition rules, while the representative site uses cross-document navigation and accordion/state changes.", "artifacts": [ "evidence/site-signals.json", "evidence/faq.png" ], "suggestedFix": "Use same-document or cross-document View Transitions for meaningful route and disclosure changes, with reduced-motion fallbacks.", "effort": "small" }, { "id": "F04", "pathId": "faq", "url": "https://corp.sbi.bank.in/", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "guidanceCategory": "modern-web-guidance", "severity": "low", "confidence": "high", "summary": "Navigation chrome is static and does not respond to scroll position.", "evidence": "Desktop screenshots and CSS inspection show fixed/static navigation with no scroll-state container rules or progress cue on long pages.", "artifacts": [ "evidence/faq.png", "evidence/corporate-home-dom.json" ], "suggestedFix": "Add a restrained sticky header or scroll-position cue where it helps users retain context.", "effort": "small" }, { "id": "F05", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "provide-guided-navigation", "principleCheckId": "anchored-positioning", "guidanceId": "position-aware-tooltips", "guidanceCategory": "modern-web-guidance", "severity": "low", "confidence": "high", "summary": "Menus and overlays rely on legacy Bootstrap/manual positioning rather than resilient anchored placement.", "evidence": "DOM/CSS inspection found Bootstrap menu/dialog structures and no anchor-name, position-anchor, or position-try usage.", "artifacts": [ "evidence/home-dom.json", "evidence/accessibility-probe.json" ], "suggestedFix": "Use native popover plus CSS anchor positioning and fallback positions for transient menus and tooltips.", "effort": "small" }, { "id": "F06", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Stacked notices and a moving announcement dominate the gateway before core content.", "evidence": "The first viewport contains two full-width warning banners plus a continuously moving announcement before the personal-banking action.", "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png" ], "suggestedFix": "Consolidate urgent messaging into one concise, static, dismissible notice and preserve the primary task hierarchy.", "effort": "medium" }, { "id": "F07", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Transient UI is implemented with custom Bootstrap div dialogs and JavaScript links.", "evidence": "The accessibility probe found six div-based role=dialog modals and 18 javascript: links rather than native dialog/popover/details controls.", "artifacts": [ "evidence/accessibility-probe.json" ], "suggestedFix": "Replace custom modal/disclosure wiring with dialog, popover, details, and real buttons or links as appropriate.", "effort": "medium" }, { "id": "F08", "pathId": "corporate-home", "url": "https://corp.sbi.bank.in/", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "css-layout", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Dense legacy chrome competes with core banking actions.", "evidence": "The corporate template screenshot shows a dense tab bar, banner, announcement panels, decorative imagery, and compact 12 px text around the primary login action.", "artifacts": [ "evidence/corporate-home.png", "evidence/home-desktop.png" ], "suggestedFix": "Reduce decorative framing and repeated navigation, enlarge core content, and establish a clearer action hierarchy.", "effort": "medium" }, { "id": "F09", "pathId": "faq", "url": "https://corp.sbi.bank.in/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Representative pages do not reliably reflow on mobile.", "evidence": "The gateway overflows by 33 px at 360 px. The FAQ lacks a viewport meta tag and renders a 980 px desktop canvas scaled to fit.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/faq-mobile-layout.json", "evidence/home-mobile.png" ], "suggestedFix": "Add a valid viewport declaration to every template, remove fixed 980 px wrappers, and use fluid intrinsic layouts.", "effort": "medium" }, { "id": "F10", "pathId": "corporate-home", "url": "https://corp.sbi.bank.in/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Components depend on fixed widths and viewport-era styling rather than adapting to their containers.", "evidence": "CSS inspection found zero container rules; the corporate template includes fixed widths such as #wrapper { width: 980px } and many fixed-size panels.", "artifacts": [ "evidence/site-signals.json", "evidence/corporate-home-dom.json" ], "suggestedFix": "Refactor reusable cards, navigation, and content regions with intrinsic sizing and container queries.", "effort": "medium" }, { "id": "F11", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Keyboard focus and touch-target support are inconsistent.", "evidence": "The focus probe found the navigation toggle with outline:none and counted 23 controls below 24 px in at least one dimension; Lighthouse also failed target-size.", "artifacts": [ "evidence/accessibility-probe.json", "evidence/lighthouse.json" ], "suggestedFix": "Provide a strong :focus-visible treatment and enlarge or space interactive targets to at least the recommended minimum.", "effort": "medium" }, { "id": "F12", "pathId": "current-account", "url": "https://corp.sbi.bank.in/oaorevamp/caoregistration.htm", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "guidanceId": "forms", "guidanceCategory": "modern-web-guidance", "severity": "critical", "confidence": "high", "summary": "The current-account application journey dead-ends immediately.", "evidence": "Following Start New Application leads directly to “Your session has expired” instead of the registration form, before any user input.", "artifacts": [ "evidence/current-account-registration.png", "evidence/current-account-registration-probe.json" ], "suggestedFix": "Start a fresh application session on entry, preserve it through the flow, and test the journey end to end without stale-session state.", "effort": "large" }, { "id": "F13", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "performance", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "The gateway’s main content paints too slowly.", "evidence": "Lighthouse measured LCP/FCP at 4.4 s; the raw-CDP trace measured LCP/FCP at 8.23 s under the observed run.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json", "evidence/home-trace.json" ], "suggestedFix": "Prioritize the actual LCP, remove render blockers, compress delivery, and defer noncritical carousel assets.", "effort": "medium" }, { "id": "F14", "pathId": "faq", "url": "https://corp.sbi.bank.in/", "principleId": "be-fast-and-stable", "principleCheckId": "visual-stability", "guidanceId": "visually-stable-font-fallbacks", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "The FAQ template has a material load-time layout shift.", "evidence": "The 360 px FAQ layout run recorded CLS 0.139, including a 0.137 shift around 6.1 seconds.", "artifacts": [ "evidence/faq-mobile-layout.json" ], "suggestedFix": "Reserve space for late content and imagery and remove moving/late layout changes from the FAQ template.", "effort": "medium" }, { "id": "F15", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-image-priority", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Render-blocking, uncompressed, poorly cached resources delay the page.", "evidence": "HAR/Lighthouse found four VeryHigh-priority blocking stylesheets, four synchronous head scripts, uncompressed HTML/CSS/JS, weak cache lifetimes, and an estimated 3.27 s render-blocking saving.", "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/site-signals.json", "evidence/lighthouse.json" ], "suggestedFix": "Compress text, set durable immutable caching for versioned assets, inline only critical CSS, and defer noncritical scripts/styles.", "effort": "medium" }, { "id": "F16", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "The page ships substantial unused CSS and JavaScript.", "evidence": "Lighthouse estimated 264 KiB unused CSS and 96 KiB unused JavaScript, alongside unminified CSS/JS opportunities.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Remove unused Bootstrap/plugin code per template, split bundles by feature, and minify production assets.", "effort": "medium" }, { "id": "F17", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Some links lack reliable accessible names.", "evidence": "Lighthouse failed link-name and label-content-name-mismatch; the image audit also found one image without alt text.", "artifacts": [ "evidence/lighthouse.json", "evidence/images.json", "evidence/accessibility-probe.json" ], "suggestedFix": "Give every interactive element a programmatic name matching its visible label and meaningful images accurate alt text.", "effort": "medium" }, { "id": "F18", "pathId": "corporate-home", "url": "https://corp.sbi.bank.in/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Focus visibility and semantic structure are inconsistent across templates.", "evidence": "The gateway toggle computes outline:none when focused, while the legacy corporate pages omit a main landmark and even a visible h1 in the inspected DOM.", "artifacts": [ "evidence/accessibility-probe.json", "evidence/corporate-home-dom.json" ], "suggestedFix": "Use consistent landmarks and heading hierarchy, and add a high-contrast :focus-visible indicator to every control.", "effort": "medium" }, { "id": "F19", "pathId": "faq", "url": "https://corp.sbi.bank.in/", "principleId": "be-inclusive", "principleCheckId": "legible-text", "guidanceId": "improve-text-layout-and-legibility", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Legacy pages use cramped, fixed 12 px typography and scaled desktop layouts.", "evidence": "Computed styles show 12 px Tahoma throughout the fixed 980 px corporate template; on mobile the whole FAQ canvas is scaled down rather than reflowed.", "artifacts": [ "evidence/corporate-home-dom.json", "evidence/faq-mobile-layout.json", "evidence/faq.png" ], "suggestedFix": "Use fluid, user-scalable type with comfortable line height and responsive measures instead of shrinking a desktop canvas.", "effort": "medium" }, { "id": "F20", "pathId": "faq", "url": "https://corp.sbi.bank.in/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "fluid-scaling", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Zoom/reflow and target sizing fail on representative pages.", "evidence": "The FAQ has no viewport meta and exposes a 980 px layout at a 360 px condition; Lighthouse failed touch-target sizing.", "artifacts": [ "evidence/faq-mobile-layout.json", "evidence/lighthouse.json" ], "suggestedFix": "Make every template reflow at narrow/zoomed widths and enlarge controls without disabling user zoom.", "effort": "medium" }, { "id": "F21", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "The gateway logs browser errors during load.", "evidence": "Lighthouse’s errors-in-console audit failed for the tested navigation.", "artifacts": [ "evidence/lighthouse.json" ], "suggestedFix": "Resolve the logged network/runtime errors and add production monitoring for uncaught exceptions.", "effort": "medium" }, { "id": "F22", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Image and document assets are not consistently soundly authored.", "evidence": "The image probe found 23 of 24 images without explicit dimensions, 23 legacy-format images, and one oversized image; Lighthouse also failed unsized-images.", "artifacts": [ "evidence/images.json", "evidence/lighthouse.json" ], "suggestedFix": "Set intrinsic width/height, preserve aspect ratio, and serve responsive modern-format sources.", "effort": "medium" }, { "id": "F23", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "DevTools reports platform hygiene issues.", "evidence": "Lighthouse failed the inspector-issues audit; the DOM also contains 18 javascript: pseudo-links that bypass native link/button behavior.", "artifacts": [ "evidence/lighthouse.json", "evidence/accessibility-probe.json" ], "suggestedFix": "Clear DevTools Issues and replace javascript: URLs with semantic buttons or crawlable href links.", "effort": "medium" }, { "id": "F24", "pathId": "faq", "url": "https://corp.sbi.bank.in/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Important navigation is not fully crawlable or consistently mobile-friendly.", "evidence": "The DOM probe found 18 javascript: links, Lighthouse failed crawlable-anchors, and the FAQ template lacks viewport metadata.", "artifacts": [ "evidence/accessibility-probe.json", "evidence/lighthouse.json", "evidence/faq-mobile-layout.json" ], "suggestedFix": "Use real href URLs for navigation and add correct viewport metadata to all public templates.", "effort": "medium" }, { "id": "F25", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Canonical, robots, and sitemap indexing signals are incomplete.", "evidence": "No canonical URL was present; /robots.txt and /sitemap.xml both returned branded 404 rejection pages.", "artifacts": [ "evidence/site-signals.json" ], "suggestedFix": "Publish a valid robots.txt and sitemap, add self-referencing canonicals where appropriate, and keep indexing policy consistent.", "effort": "medium" }, { "id": "F26", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "The public bank gateway lacks structured and social-preview metadata.", "evidence": "The metadata probe found zero JSON-LD blocks and no Open Graph tags on the organization/service gateway.", "artifacts": [ "evidence/site-signals.json" ], "suggestedFix": "Add accurate Organization/WebSite JSON-LD and Open Graph/Twitter metadata matching the visible page.", "effort": "medium" }, { "id": "F27", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Transport is HTTPS, but key security headers and cookie posture are incomplete.", "evidence": "The header audit found no HSTS or nosniff and a CSP allowing unsafe-inline; all four observed cookies use SameSite=None, with one not HttpOnly.", "artifacts": [ "evidence/headers.json", "evidence/cookies.json" ], "suggestedFix": "Enable HSTS and nosniff, tighten CSP away from unsafe-inline, and use the strictest viable SameSite/HttpOnly cookie settings.", "effort": "medium" }, { "id": "F28", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Browser-enforced defensive policies are largely absent.", "evidence": "No frame-ancestors/X-Frame-Options, Referrer-Policy, or Permissions-Policy was observed, and the CSP lacks the documented clickjacking defense.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Add frame-ancestors (and compatible X-Frame-Options), strict Referrer-Policy, least-privilege Permissions-Policy, and evaluate Trusted Types for sensitive flows.", "effort": "medium" }, { "id": "F29", "pathId": "current-account", "url": "https://corp.sbi.bank.in/oaorevamp/caoregistration.htm", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "guidanceId": "stabilize-reactive-state", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "The account flow starts in stale runtime state.", "evidence": "A fresh navigation to Start New Application immediately rendered a session-expired state, showing that initial session state is not stabilized.", "artifacts": [ "evidence/current-account-registration.png" ], "suggestedFix": "Create/refresh session state atomically before rendering the application route and preserve user context across navigation.", "effort": "medium" }, { "id": "F30", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "modern-web-guidance", "severity": "medium", "confidence": "high", "summary": "Missing infrastructure routes return a dead-end rejection page.", "evidence": "Both robots.txt and sitemap.xml returned 404 pages saying the URL was rejected and offered only a support ID, with no recovery navigation.", "artifacts": [ "evidence/site-signals.json" ], "suggestedFix": "Serve correct machine-readable routes and provide useful recovery/navigation on human-facing HTTP error pages.", "effort": "medium" }, { "id": "F31", "pathId": "current-account", "url": "https://corp.sbi.bank.in/", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Language and bidirectional layout foundations are inconsistent.", "evidence": "The multilingual current-account pages have an empty html lang attribute, and legacy CSS uses extensive physical left/right properties and fixed positioning.", "artifacts": [ "evidence/current-account-dom-probe.json", "evidence/corporate-home-dom.json" ], "suggestedFix": "Set the correct lang/dir per locale and migrate layout rules to logical inline/block properties.", "effort": "medium" }, { "id": "F32", "pathId": "current-account", "url": "https://corp.sbi.bank.in/oaorevamp/caoregistration.htm", "principleId": "be-trustworthy", "principleCheckId": "safe-commercial-and-account-flows", "guidanceId": "forms", "guidanceCategory": "modern-web-guidance", "severity": "critical", "confidence": "high", "summary": "The account-opening flow is not dependable or continuous.", "evidence": "The advertised Start New Application action immediately reports an expired session on a fresh visit, preventing account setup.", "artifacts": [ "evidence/current-account.png", "evidence/current-account-registration.png" ], "suggestedFix": "Repair session initiation and add end-to-end checks for start, resume, expiry recovery, confirmation, and safe reauthentication.", "effort": "large" }, { "id": "F33", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "The gateway transfers a large set of unoptimized carousel images.", "evidence": "The HAR transferred 5.44 MB, of which 4.84 MB was images; 23 images use legacy JPG/PNG, 23 lack dimensions, and responsive srcset is absent.", "artifacts": [ "evidence/home.har", "evidence/home-summary.json", "evidence/images.json" ], "suggestedFix": "Convert banners to AVIF/WebP, generate responsive srcset/sizes, set dimensions, and fetch only the active/nearby slide.", "effort": "medium" }, { "id": "F34", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "Hidden carousel media is eagerly downloaded without immediate user value.", "evidence": "The network run downloaded 32 images and multiple 1,140–1,920 px banners, including many hidden slides, during initial load.", "artifacts": [ "evidence/home-summary.json", "evidence/images.json" ], "suggestedFix": "Lazy-load nonvisible slides, cap prefetching to the next slide, and deprioritize decorative/background work.", "effort": "medium" }, { "id": "F35", "pathId": "home", "url": "https://corp.sbi.bank.in/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "efficient-background-processing", "guidanceCategory": "modern-web-guidance", "severity": "high", "confidence": "high", "summary": "The media budget is disproportionate to the simple gateway task.", "evidence": "Although known trackers were absent, first-party images alone transferred 4.84 MB for a page whose core task is choosing a login or service link.", "artifacts": [ "evidence/home-summary.json", "evidence/trackers.json" ], "suggestedFix": "Set and enforce a media/page-weight budget, defer nonessential banners, and cache optimized variants durably.", "effort": "medium" } ], "taskList": [ { "id": "T01", "title": "Repair fresh-session initialization and verify the current-account journey end to end.", "priority": 1, "findingIds": [ "F12", "F29", "F32" ], "guidanceId": "forms", "status": "open" }, { "id": "T02", "title": "Replace fixed-width legacy templates with fluid, reflowing layouts and consistent viewport metadata.", "priority": 2, "findingIds": [ "F09", "F10", "F19", "F20" ], "guidanceId": "fluid-scaling", "status": "open" }, { "id": "T03", "title": "Cut the initial image payload and render-blocking chain, with responsive modern images, compression, caching, and deferred scripts.", "priority": 3, "findingIds": [ "F13", "F15", "F16", "F22", "F33", "F34", "F35" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T04", "title": "Restore accessible names, semantic landmarks, visible focus, and adequately sized controls.", "priority": 4, "findingIds": [ "F11", "F17", "F18" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T05", "title": "Harden response headers, CSP, cookie attributes, clickjacking defenses, referrer policy, and permissions policy.", "priority": 5, "findingIds": [ "F27", "F28" ], "guidanceId": "security", "status": "open" }, { "id": "T06", "title": "Publish valid crawlable links, robots.txt, sitemap, canonical URLs, and structured/social metadata.", "priority": 6, "findingIds": [ "F24", "F25", "F26" ], "guidanceId": "html", "status": "open" }, { "id": "T07", "title": "Consolidate page notices and migrate custom modal/menu controls to native semantic primitives.", "priority": 7, "findingIds": [ "F05", "F06", "F07", "F08" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T08", "title": "Honor dark mode and reduced-motion preferences while preserving contrast.", "priority": 8, "findingIds": [ "F01", "F02" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T09", "title": "Reserve late content space and remove the FAQ layout shift.", "priority": 9, "findingIds": [ "F14" ], "guidanceId": "visually-stable-font-fallbacks", "status": "open" }, { "id": "T10", "title": "Set correct language metadata and replace physical left/right CSS with logical properties.", "priority": 10, "findingIds": [ "F31" ], "guidanceId": "translator", "status": "open" }, { "id": "T11", "title": "Resolve console and DevTools issues and replace javascript pseudo-links with native controls.", "priority": 11, "findingIds": [ "F21", "F23" ], "guidanceId": "html", "status": "open" }, { "id": "T12", "title": "Add restrained state and route transition cues where they improve orientation.", "priority": 12, "findingIds": [ "F03", "F04" ], "guidanceId": "cross-document-transitions", "status": "open" }, { "id": "T13", "title": "Serve useful recovery for HTTP failures and machine-readable infrastructure routes.", "priority": 13, "findingIds": [ "F30" ], "guidanceId": "persistent-toast-notifications", "status": "open" } ], "budget": { "wallClockSeconds": 1500, "pathCount": 4, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-22T23-14-28-673Z" }