{ "url": "https://accounts.digitallocker.gov.in", "auditedAt": "2026-07-28T07:53:58.817Z", "mode": "report", "status": "partial", "statusDetail": "57 of 58 checks were judged conclusively. End-to-end account completion is blocked by the requirement for a real mobile/Aadhaar identity and OTP.", "page": { "appType": "mpa", "framework": "server-rendered multi-page site with jQuery, Bootstrap, Swiper and Owl Carousel", "notes": "The supplied accounts URL redirects anonymous users to the public www homepage. Login/signup then redirect back to a tokenized accounts.digitallocker.gov.in server-rendered form." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "discoverability", "headers", "cookies", "trackers", "secrets", "images", "heap-summary", "lighthouse", "direct HTTP crawl-signal probe" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/desktop.png", "caption": "desktop", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "condition": "viewport: 360x800", "findingIds": [ "F03", "F08" ] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout", "condition": "viewport: 360x800", "findingIds": [ "F08", "F13" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark", "condition": "prefers-color-scheme: dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-forced-colors.png", "caption": "home forced colors", "condition": "forced-colors: active", "findingIds": [] }, { "type": "other", "path": "evidence/preferences.json", "caption": "preferences", "findingIds": [ "F01" ] }, { "type": "other", "path": "evidence/reduced-motion-carousel.json", "caption": "reduced motion carousel", "findingIds": [] }, { "type": "dom", "path": "evidence/dom.json", "caption": "dom", "findingIds": [ "F04", "F18" ] }, { "type": "other", "path": "evidence/recon.json", "caption": "recon", "findingIds": [ "F20", "F26" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability", "findingIds": [ "F31" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler", "findingIds": [] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary", "findingIds": [ "F12" ] }, { "type": "har", "path": "evidence/home.har", "caption": "home", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary", "findingIds": [ "F03", "F14", "F15", "F30" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse", "findingIds": [ "F12", "F13", "F14", "F16", "F17", "F19", "F20", "F31" ] }, { "type": "lighthouse", "path": "evidence/lighthouse-selected.json", "caption": "lighthouse selected", "findingIds": [ "F18" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F22", "F24" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies", "findingIds": [] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets", "findingIds": [] }, { "type": "other", "path": "evidence/images.json", "caption": "images", "findingIds": [ "F13", "F16", "F18", "F30" ] }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "heap baseline", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post.json", "caption": "heap post", "findingIds": [] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "platform probe", "findingIds": [ "F02", "F04", "F05", "F07", "F09", "F10", "F14", "F15", "F17", "F25", "F26", "F31" ] }, { "type": "screenshot", "path": "evidence/login-mobile.png", "caption": "login mobile", "condition": "viewport: 360x800", "findingIds": [ "F06" ] }, { "type": "screenshot", "path": "evidence/signup-mobile.png", "caption": "signup mobile", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/login-dark.png", "caption": "login dark", "condition": "prefers-color-scheme: dark", "findingIds": [] }, { "type": "other", "path": "evidence/login-probe.json", "caption": "login probe", "findingIds": [ "F16", "F23", "F29" ] }, { "type": "other", "path": "evidence/signup-probe.json", "caption": "signup probe", "findingIds": [] }, { "type": "other", "path": "evidence/login-validation.json", "caption": "login validation", "findingIds": [ "F11", "F23", "F29" ] }, { "type": "screenshot", "path": "evidence/ecosystem-mobile.png", "caption": "ecosystem mobile", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "other", "path": "evidence/ecosystem-probe.json", "caption": "ecosystem probe", "findingIds": [ "F17" ] }, { "type": "screenshot", "path": "evidence/about-mobile.png", "caption": "about mobile", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "other", "path": "evidence/about-probe.json", "caption": "about probe", "findingIds": [ "F17" ] }, { "type": "other", "path": "evidence/crawl-signals.txt", "caption": "crawl signals", "findingIds": [ "F21" ] }, { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "404 mobile", "condition": "viewport: 360x800", "findingIds": [ "F27" ] }, { "type": "other", "path": "evidence/404-probe.json", "caption": "404 probe", "findingIds": [ "F27" ] }, { "type": "other", "path": "evidence/hindi-probe.json", "caption": "hindi probe", "findingIds": [ "F28" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 57, "blocked": 1, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": false }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The dark-mode screenshot is visually identical to light mode; the preference probe reports prefers-color-scheme: dark=true while body remains rgb(255,255,255) and computed color-scheme is normal.", "findingIds": [ "F01" ], "artifacts": [ "evidence/home-dark.png", "evidence/preferences.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "confidence": "high", "status": "pass", "method": "evaluate under prefers-reduced-motion: reduce", "evidence": "Reduced-motion probe sampled the carousel four times over 7.5s and its transform stayed unchanged; no Web Animations were active.", "artifacts": [ "evidence/reduced-motion-carousel.json", "evidence/preferences.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "confidence": "high", "status": "pass", "method": "forced-colors screenshot", "evidence": "Forced-colors mobile screenshot retains visible text, controls, borders and carousel actions.", "artifacts": [ "evidence/home-forced-colors.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The platform probe found no view-transition CSS and the representative routes are separate MPA documents.", "findingIds": [ "F02" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "confidence": "high", "status": "not-applicable", "method": "Applicability judgement from representative-path recon", "evidence": "No scroll-linked parallax, scrollytelling or reveal behavior exists on the representative pages, so there is no scroll-linked implementation to assess.", "reason": "No scroll-linked parallax, scrollytelling or reveal behavior exists on the representative pages, so there is no scroll-linked implementation to assess." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The HAR and DOM show Swiper plus Owl Carousel scripts and no scroll-driven CSS; the mobile screenshot shows custom carousel controls.", "findingIds": [ "F03" ], "artifacts": [ "evidence/home-summary.json", "evidence/home-mobile.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "DOM styles show a fixed-top header; platform CSS inspection found no scroll-state/container treatment or scroll timeline.", "findingIds": [ "F04" ], "artifacts": [ "evidence/dom.json", "evidence/platform-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The platform probe found two custom overlays, no popover/dialog elements, and no anchor positioning CSS.", "findingIds": [ "F05" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "confidence": "high", "status": "pass", "method": "mobile visual review and DOM", "evidence": "The ecosystem page presents a visible in-page section menu followed by a matching blue “Why DigiLocker?” heading; carousel actions are explicitly labeled.", "artifacts": [ "evidence/ecosystem-mobile.png", "evidence/ecosystem-probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The 360x800 login screenshot shows a fixed “DigiLocker is better on mobile app” banner occupying the bottom edge before interaction.", "findingIds": [ "F06" ], "artifacts": [ "evidence/login-mobile.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The platform probe counted custom .modal/.dropdown-menu overlays but zero dialog, popover, or details elements.", "findingIds": [ "F07" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "confidence": "high", "status": "pass", "method": "visual review across representative mobile and desktop pages", "evidence": "Homepage, content and login screenshots devote the dominant viewport area to task/content; persistent chrome is compact.", "artifacts": [ "evidence/desktop.png", "evidence/home-mobile.png", "evidence/about-mobile.png", "evidence/login-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The 360px layout capture reports scrollWidth 374px and horizontalOverflowPx 14.", "findingIds": [ "F08" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Live CSS inspection found no @container rules or container-type on the page.", "findingIds": [ "F09" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The focus probe focused header controls and CTAs; computed outline was none and box-shadow none. Several header buttons are only 30x30px.", "findingIds": [ "F10" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "confidence": "high", "status": "pass", "method": "representative screenshots and text probes", "evidence": "Homepage exposes Login/Register and document exploration; login page states “Login or Create Account” and asks for the single next input.", "artifacts": [ "evidence/desktop.png", "evidence/login-mobile.png", "evidence/login-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "confidence": "high", "status": "blocked", "method": "Attempted the public login journey through the required identity step", "evidence": "End-to-end account access requires a real Indian mobile/Aadhaar identity and OTP. The public flow was attempted through the required phone field, but no test credential was available.", "reason": "End-to-end account access requires a real Indian mobile/Aadhaar identity and OTP. The public flow was attempted through the required phone field, but no test credential was available.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-mobile.png", "evidence/login-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Submitting the empty required mobile field yields only the browser validationMessage; aria-invalid and aria-describedby remain absent and the page error region is empty.", "findingIds": [ "F11" ], "artifacts": [ "evidence/login-validation.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Lighthouse measured LCP 7.3s and CLS 0.342 (performance score 0.53); the independent trace measured LCP 2.16s, showing substantial run variability but corroborating late visual work.", "findingIds": [ "F12" ], "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Mobile layout observation measured CLS 0.158; Lighthouse measured 0.342 and identifies unsized carousel and accessibility-widget images as culprits. The image audit found 88 of 89 images without dimensions.", "findingIds": [ "F13" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/lighthouse.json", "evidence/images.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "confidence": "high", "status": "pass", "method": "trace and Lighthouse", "evidence": "Trace recorded one 57.76ms long task and only 7.76ms total blocking time; Lighthouse TBT was 0ms.", "artifacts": [ "evidence/home-trace-summary.json", "evidence/lighthouse.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "HAR shows five VeryHigh-priority parser stylesheets and a synchronous Swiper script in head; many large CDN resources have no cache header. Lighthouse reports a 2.795s longest dependency chain.", "findingIds": [ "F14" ], "artifacts": [ "evidence/home-summary.json", "evidence/platform-probe.json", "evidence/lighthouse.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "HAR records Swiper and Owl Carousel plus jQuery, Bootstrap, Popper, Font Awesome, chatbot and accessibility bundles; script transfer is 207KB and a 158KB icon font is loaded.", "findingIds": [ "F15" ], "artifacts": [ "evidence/home-summary.json", "evidence/platform-probe.json" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Lighthouse reports an unnamed accessibility-widget close button, an unlabeled menu checkbox and an image without alt; the image audit found six missing alt attributes. The login mobile field has no associated label.", "findingIds": [ "F16" ], "artifacts": [ "evidence/lighthouse.json", "evidence/images.json", "evidence/login-probe.json" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "confidence": "high", "status": "pass", "method": "Lighthouse and forced-colors visual review", "evidence": "Lighthouse color-contrast audit passed and forced-colors screenshot preserves readable text/control boundaries.", "artifacts": [ "evidence/lighthouse-selected.json", "evidence/home-forced-colors.png" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Lighthouse reports no main landmark, nonsequential heading order, role=presentation conflicts and tabindex=1. The home page has no h1; content pages also omit main landmarks.", "findingIds": [ "F17" ], "artifacts": [ "evidence/lighthouse.json", "evidence/platform-probe.json", "evidence/about-probe.json", "evidence/ecosystem-probe.json" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "confidence": "high", "status": "pass", "method": "visual review at 360x800", "evidence": "Mobile screenshots show readable body text, clear spacing, and no clipping on content/login templates.", "artifacts": [ "evidence/about-mobile.png", "evidence/ecosystem-mobile.png", "evidence/login-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "confidence": "high", "status": "pass", "method": "Lighthouse plus viewport probes", "evidence": "Viewport allows scaling, Lighthouse meta-viewport and target-size audits pass, and login/content templates have no horizontal overflow at 360px. No time-based media requiring captions appears.", "artifacts": [ "evidence/lighthouse-selected.json", "evidence/login-probe.json", "evidence/about-probe.json" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "confidence": "high", "status": "pass", "method": "Lighthouse runtime audit", "evidence": "Lighthouse errors-in-console audit passed with no logged errors.", "artifacts": [ "evidence/lighthouse-selected.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Lighthouse confirms doctype/charset and aspect-ratio rendering, but the dedicated image audit found 88/89 images without dimensions, 11 oversized images and 23 without responsive sources.", "findingIds": [ "F18" ], "artifacts": [ "evidence/images.json", "evidence/dom.json", "evidence/lighthouse-selected.json" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Lighthouse’s inspector-issues audit identifies a cookie issue on the aistore.myscheme.in embedded resource.", "findingIds": [ "F19" ], "artifacts": [ "evidence/lighthouse.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "confidence": "high", "status": "pass", "method": "DOM and discoverability", "evidence": "Homepage has a descriptive title and meta description in both raw and rendered HTML.", "artifacts": [ "evidence/recon.json", "evidence/discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Lighthouse reports javascript:void(0) anchors; recon enumerates multiple empty-text links and social links implemented as script-triggered placeholders.", "findingIds": [ "F20" ], "artifacts": [ "evidence/lighthouse.json", "evidence/recon.json" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Direct requests to both /robots.txt and /sitemap.xml return HTTP 403 AccessDenied while the page declares index,follow.", "findingIds": [ "F21" ], "artifacts": [ "evidence/crawl-signals.txt" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "confidence": "high", "status": "pass", "method": "rendered head inspection", "evidence": "Homepage includes accurate WebSite, GovernmentOrganization and GovernmentService JSON-LD plus Open Graph and Twitter metadata matching visible DigiLocker content.", "artifacts": [ "evidence/recon.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Header inspection finds a CSP but script-src includes unsafe-eval and style-src includes unsafe-inline, weakening XSS protection on an identity service.", "findingIds": [ "F22" ], "artifacts": [ "evidence/headers.json" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "confidence": "high", "status": "pass", "method": "trackers, secrets, cookies and HAR", "evidence": "Network capture found no known trackers, no exposed secrets and one secure first-party preference cookie; observed third parties are DigiLocker/government service infrastructure.", "artifacts": [ "evidence/trackers.json", "evidence/secrets.json", "evidence/cookies.json", "evidence/home-summary.json" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The login page exposes only a telephone form; source probe found no navigator.credentials/WebAuthn integration. No permission prompt fires on load.", "findingIds": [ "F23" ], "artifacts": [ "evidence/login-probe.json", "evidence/login-validation.json" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Although HSTS, nosniff, X-Frame-Options, Referrer-Policy and Permissions-Policy are present, CSP frame-ancestors permits numerous wildcard domains and the policy relies on unsafe-eval/unsafe-inline.", "findingIds": [ "F24" ], "artifacts": [ "evidence/headers.json" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "confidence": "high", "status": "pass", "method": "discoverability comparison", "evidence": "Raw HTML is a substantive 71KB document with 68% rendered-word coverage, title and description; crawler screenshot retains the main public content rather than an empty JS shell.", "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-crawler.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The live DOM contains custom modal/dropdown UI but no dialog, popover or anchor-positioning primitives.", "findingIds": [ "F25" ], "artifacts": [ "evidence/platform-probe.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The platform probe found zero service-worker registrations and recon found no web app manifest, despite mobile-web-app-capable metadata.", "findingIds": [ "F26" ], "artifacts": [ "evidence/platform-probe.json", "evidence/recon.json" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "A representative bad route renders a bare XML AccessDenied response with no title, navigation, explanation, or route back to DigiLocker.", "findingIds": [ "F27" ], "artifacts": [ "evidence/404-mobile.png", "evidence/404-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "confidence": "high", "status": "pass", "method": "DOM and platform inspection", "evidence": "The document declares html lang=en, exposes 13 Indian language options, and CSS inspection found logical properties.", "artifacts": [ "evidence/recon.json", "evidence/platform-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "After activating the Hindi option and waiting, html lang remained en and “Last Updated” remained in English.", "findingIds": [ "F28" ], "artifacts": [ "evidence/hindi-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "confidence": "high", "status": "not-applicable", "method": "Applicability judgement from representative-path recon", "evidence": "Representative public pages contain no event scheduling, time-zone conversion, recurring event or partial-time concept.", "reason": "Representative public pages contain no event scheduling, time-zone conversion, recurring event or partial-time concept." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "confidence": "high", "status": "pass", "method": "login visual/task review", "evidence": "The public login entry states the action and Terms of Service before continuation; OTP/Aadhaar alternatives and app-promo dismissal are visible, with no preselected paid continuity.", "artifacts": [ "evidence/login-mobile.png", "evidence/login-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Submitting the empty required mobile field yields only the browser validationMessage; aria-invalid and aria-describedby remain absent and the page error region is empty.", "findingIds": [ "F11" ], "artifacts": [ "evidence/login-validation.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The login probe reports autocomplete=off and an empty labels collection for the required telephone field.", "findingIds": [ "F29" ], "artifacts": [ "evidence/login-probe.json", "evidence/login-validation.json" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The login page exposes only a telephone form; source probe found no navigator.credentials/WebAuthn integration. No permission prompt fires on load.", "findingIds": [ "F23" ], "artifacts": [ "evidence/login-probe.json", "evidence/login-validation.json" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "The image audit found 11 oversized images, 21 legacy-format images and 23 images without srcset; four 2280px JPEG banners transfer about 890KB combined.", "findingIds": [ "F30" ], "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "confidence": "high", "status": "pass", "method": "trace, HAR and tracker review", "evidence": "Trace observed negligible blocking work and tracker scan found no known analytics trackers; the load performs three task-related fetches without ongoing media playback.", "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-summary.json", "evidence/trackers.json" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "HAR records Swiper and Owl Carousel plus jQuery, Bootstrap, Popper, Font Awesome, chatbot and accessibility bundles; script transfer is 207KB and a 158KB icon font is loaded. The image audit found 11 oversized images, 21 legacy-format images and 23 images without srcset; four 2280px JPEG banners transfer about 890KB combined.", "findingIds": [ "F15", "F30" ], "artifacts": [ "evidence/home-summary.json", "evidence/platform-probe.json", "evidence/images.json" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "confidence": "high", "status": "issues", "method": "Active evidence review against the mapped guidance", "evidence": "Discoverability shows content is crawlable, but the platform probe found no WebMCP registration and Lighthouse agentic-browsing scored 0.17.", "findingIds": [ "F31" ], "artifacts": [ "evidence/platform-probe.json", "evidence/discoverability.json", "evidence/lighthouse.json" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "confidence": "high", "status": "not-applicable", "method": "Applicability judgement from representative-path recon", "evidence": "No summarisation or generative feature is presented to users; introducing on-device inference would not currently serve an identified task.", "reason": "No summarisation or generative feature is presented to users; introducing on-device inference would not currently serve an identified task." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "confidence": "high", "status": "pass", "method": "baseline/post heap comparison", "evidence": "After ten menu open/close cycles, heap self-size fell from 12,186,171 to 12,034,364 bytes and node count fell from 184,871 to 184,836.", "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "confidence": "high", "status": "pass", "method": "heap summary", "evidence": "Single-page heap is about 12.2MB across 184,871 snapshot nodes, proportionate to this image/card landing page.", "artifacts": [ "evidence/heap-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "confidence": "high", "status": "pass", "method": "baseline/post heap comparison", "evidence": "Ten menu cycles produced no node-count growth (35 fewer nodes) and no growing Detached* constructor appears in top constructor summaries.", "artifacts": [ "evidence/heap-baseline.json", "evidence/heap-post.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F02", "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F04", "F05" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F06", "F07" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09", "F10" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F11" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F12", "F13", "F14", "F15" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F16", "F17" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F18", "F19" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F20", "F21" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F22", "F23", "F24" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F25", "F26", "F27" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F28" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F29", "F23" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F30", "F15" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "issues", "findingIds": [ "F31" ] }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Original accounts URL redirect and public landing-page template; covers global navigation, discovery, preferences, performance, security and mobile layout.", "url": "https://accounts.digitallocker.gov.in", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active", "crawler without JavaScript" ], "result": "issues" }, { "id": "login", "description": "Primary login/signup journey through the required mobile-number step; represents authentication and form handling.", "url": "https://www.digilocker.gov.in/web/login", "conditions": [ "viewport: 360x800", "invalid empty submission", "prefers-color-scheme: dark" ], "result": "failed" }, { "id": "ecosystem", "description": "Section/listing-style explanatory template with in-page navigation; represents partner/capability content.", "url": "https://www.digilocker.gov.in/web/ecosystem", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "about", "description": "Long-form public content template; represents informational pages.", "url": "https://www.digilocker.gov.in/web/about/about-digilocker", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "error", "description": "Representative unknown route used to assess HTTP/runtime recovery.", "url": "https://www.digilocker.gov.in/not-a-real-route-web-uplift", "conditions": [ "viewport: 360x800" ], "result": "issues" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "guidanceCategory": "modern-web-guidance", "summary": "System dark-mode preference is ignored.", "evidence": "The dark-mode screenshot is visually identical to light mode; the preference probe reports prefers-color-scheme: dark=true while body remains rgb(255,255,255) and computed color-scheme is normal.", "suggestedFix": "Declare color-scheme: light dark and adapt surfaces and controls with prefers-color-scheme or light-dark(), while retaining the manual accessibility control.", "artifacts": [ "evidence/home-dark.png", "evidence/preferences.json" ], "effort": "small", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F02", "severity": "low", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "guidanceCategory": "modern-web-guidance", "summary": "Page changes are abrupt full-document navigations with no View Transition enhancement.", "evidence": "The platform probe found no view-transition CSS and the representative routes are separate MPA documents.", "suggestedFix": "Add @view-transition { navigation: auto } for same-origin routes, with reduced-motion handling.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "small", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F03", "severity": "low", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "physical-gestures", "guidanceId": "carousel-slide-effects", "guidanceCategory": "modern-web-guidance", "summary": "Carousel interaction is implemented by two JavaScript carousel libraries rather than platform scroll snap.", "evidence": "The HAR and DOM show Swiper plus Owl Carousel scripts and no scroll-driven CSS; the mobile screenshot shows custom carousel controls.", "suggestedFix": "Prefer CSS scroll snap and native overflow behavior for carousels, retaining accessible previous, pause and next controls.", "artifacts": [ "evidence/home-summary.json", "evidence/home-mobile.png" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F04", "severity": "low", "confidence": "high", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "shrinking-header-on-scroll", "guidanceCategory": "modern-web-guidance", "summary": "The fixed header does not adapt to scroll state.", "evidence": "DOM styles show a fixed-top header; platform CSS inspection found no scroll-state/container treatment or scroll timeline.", "suggestedFix": "Use a scroll-state container query or lightweight sticky-header state to reduce chrome after scrolling.", "artifacts": [ "evidence/dom.json", "evidence/platform-probe.json" ], "effort": "small", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F05", "severity": "low", "confidence": "high", "principleId": "provide-guided-navigation", "principleCheckId": "anchored-positioning", "guidanceId": "position-aware-tooltips", "guidanceCategory": "modern-web-guidance", "summary": "Dropdowns and overlays rely on custom/Bootstrap positioning rather than resilient anchored primitives.", "evidence": "The platform probe found two custom overlays, no popover/dialog elements, and no anchor positioning CSS.", "suggestedFix": "Use popover with CSS anchor positioning and position-try fallbacks for transient menus where support policy permits.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F06", "severity": "medium", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "modern-web-guidance", "summary": "The login page opens with a fixed app-download banner covering the bottom of the primary flow.", "evidence": "The 360x800 login screenshot shows a fixed “DigiLocker is better on mobile app” banner occupying the bottom edge before interaction.", "suggestedFix": "Do not show the app promotion until after task completion, or render it inline without covering the form.", "artifacts": [ "evidence/login-mobile.png" ], "effort": "small", "pathId": "login", "url": "https://accounts.digilocker.gov.in/v3/...--en" }, { "id": "F07", "severity": "medium", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "guidanceCategory": "modern-web-guidance", "summary": "Transient UI is built from custom modal/dropdown markup instead of semantic primitives.", "evidence": "The platform probe counted custom .modal/.dropdown-menu overlays but zero dialog, popover, or details elements.", "suggestedFix": "Migrate modal flows to dialog and transient controls to popover with declarative light-dismiss and correct focus management.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F08", "severity": "medium", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "responsive-no-horizontal-scroll", "guidanceId": "fluid-scaling", "guidanceCategory": "modern-web-guidance", "summary": "The home page overflows horizontally on a narrow viewport.", "evidence": "The 360px layout capture reports scrollWidth 374px and horizontalOverflowPx 14.", "suggestedFix": "Remove the element forcing the 14px overflow and use intrinsic/fluid sizing; verify at 320–400px widths.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "effort": "small", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F09", "severity": "low", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "guidanceCategory": "modern-web-guidance", "summary": "Reusable cards and carousels respond only to viewport breakpoints.", "evidence": "Live CSS inspection found no @container rules or container-type on the page.", "suggestedFix": "Add container queries to reusable cards/carousels so they adapt to their actual allocated width.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F10", "severity": "high", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Keyboard focus is not visibly indicated on primary controls.", "evidence": "The focus probe focused header controls and CTAs; computed outline was none and box-shadow none. Several header buttons are only 30x30px.", "suggestedFix": "Add a strong :focus-visible treatment and enlarge pointer targets to at least 44 CSS px where practical.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "small", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F11", "severity": "medium", "confidence": "high", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "guidanceId": "accessible-error-announcement", "guidanceCategory": "modern-web-guidance", "summary": "Invalid login input is not exposed as an actionable accessible error.", "evidence": "Submitting the empty required mobile field yields only the browser validationMessage; aria-invalid and aria-describedby remain absent and the page error region is empty.", "suggestedFix": "After interaction, show specific inline feedback, set aria-invalid, connect it with aria-describedby, and announce the error.", "artifacts": [ "evidence/login-validation.json" ], "effort": "small", "pathId": "login", "url": "https://accounts.digilocker.gov.in/v3/...--en" }, { "id": "F12", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "guidanceId": "identify-inp-causes", "guidanceCategory": "modern-web-guidance", "summary": "Cold mobile performance is outside the good Core Web Vitals range.", "evidence": "Lighthouse measured LCP 7.3s and CLS 0.342 (performance score 0.53); the independent trace measured LCP 2.16s, showing substantial run variability but corroborating late visual work.", "suggestedFix": "Prioritize and eagerly load the actual LCP image, reserve layout space, and shorten critical resource chains.", "artifacts": [ "evidence/lighthouse.json", "evidence/home-trace-summary.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F13", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "visual-stability", "guidanceId": "visually-stable-font-fallbacks", "guidanceCategory": "modern-web-guidance", "summary": "Unsized images and late widget/carousel insertion cause visible layout shift.", "evidence": "Mobile layout observation measured CLS 0.158; Lighthouse measured 0.342 and identifies unsized carousel and accessibility-widget images as culprits. The image audit found 88 of 89 images without dimensions.", "suggestedFix": "Set width/height or aspect-ratio on images and reserve fixed space for the accessibility widget and dynamic carousel/card regions.", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/lighthouse.json", "evidence/images.json" ], "effort": "small", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F14", "severity": "high", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-image-priority", "guidanceCategory": "modern-web-guidance", "summary": "The critical path includes blocking scripts/styles and ineffective caching.", "evidence": "HAR shows five VeryHigh-priority parser stylesheets and a synchronous Swiper script in head; many large CDN resources have no cache header. Lighthouse reports a 2.795s longest dependency chain.", "suggestedFix": "Defer noncritical scripts, inline only critical CSS, consolidate carousel libraries, preload only the LCP asset, and serve versioned CDN assets with long immutable caching.", "artifacts": [ "evidence/home-summary.json", "evidence/platform-probe.json", "evidence/lighthouse.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F15", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "modern-web-guidance", "summary": "Two carousel libraries and broad UI bundles are shipped for one landing page.", "evidence": "HAR records Swiper and Owl Carousel plus jQuery, Bootstrap, Popper, Font Awesome, chatbot and accessibility bundles; script transfer is 207KB and a 158KB icon font is loaded.", "suggestedFix": "Standardize on one lightweight carousel or CSS scroll snap and subset/replace the icon font.", "artifacts": [ "evidence/home-summary.json", "evidence/platform-probe.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F16", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Important controls and images lack accessible names or labels.", "evidence": "Lighthouse reports an unnamed accessibility-widget close button, an unlabeled menu checkbox and an image without alt; the image audit found six missing alt attributes. The login mobile field has no associated label.", "suggestedFix": "Give every control a programmatic name, associate a visible label with the phone field, and add meaningful or empty alt text as appropriate.", "artifacts": [ "evidence/lighthouse.json", "evidence/images.json", "evidence/login-probe.json" ], "effort": "small", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F17", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "move-dom-element-without-losing-state", "guidanceCategory": "modern-web-guidance", "summary": "Landmark, heading, role and focus structure is invalid.", "evidence": "Lighthouse reports no main landmark, nonsequential heading order, role=presentation conflicts and tabindex=1. The home page has no h1; content pages also omit main landmarks.", "suggestedFix": "Add one main landmark, a single descriptive h1 per template, sequential headings, native button roles and DOM-order tabindex=0 behavior.", "artifacts": [ "evidence/lighthouse.json", "evidence/platform-probe.json", "evidence/about-probe.json", "evidence/ecosystem-probe.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F18", "severity": "medium", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "css", "guidanceCategory": "modern-web-guidance", "summary": "Image markup is structurally incomplete despite a valid document shell.", "evidence": "Lighthouse confirms doctype/charset and aspect-ratio rendering, but the dedicated image audit found 88/89 images without dimensions, 11 oversized images and 23 without responsive sources.", "suggestedFix": "Add intrinsic image dimensions and responsive srcset/sizes; correct malformed image/link attributes visible in the rendered DOM.", "artifacts": [ "evidence/images.json", "evidence/dom.json", "evidence/lighthouse-selected.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F19", "severity": "low", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "guidanceId": "html", "guidanceCategory": "modern-web-guidance", "summary": "Chrome records an inspector issue from an embedded third-party response.", "evidence": "Lighthouse’s inspector-issues audit identifies a cookie issue on the aistore.myscheme.in embedded resource.", "suggestedFix": "Remove the unused embed or correct its cross-site cookie configuration and verify the DevTools Issues panel is clear.", "artifacts": [ "evidence/lighthouse.json" ], "effort": "small", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F20", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "Some links are not crawlable and many icon links have no descriptive text.", "evidence": "Lighthouse reports javascript:void(0) anchors; recon enumerates multiple empty-text links and social links implemented as script-triggered placeholders.", "suggestedFix": "Use real href URLs for navigation, buttons for actions, and accessible descriptive names for icon-only links.", "artifacts": [ "evidence/lighthouse.json", "evidence/recon.json" ], "effort": "small", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F21", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "robots.txt and sitemap.xml are inaccessible.", "evidence": "Direct requests to both /robots.txt and /sitemap.xml return HTTP 403 AccessDenied while the page declares index,follow.", "suggestedFix": "Publish a successful robots.txt and sitemap.xml consistent with canonical URLs and indexing intent.", "artifacts": [ "evidence/crawl-signals.txt" ], "effort": "small", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F22", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "summary": "The Content Security Policy permits unsafe script evaluation.", "evidence": "Header inspection finds a CSP but script-src includes unsafe-eval and style-src includes unsafe-inline, weakening XSS protection on an identity service.", "suggestedFix": "Remove unsafe-eval, migrate inline styles to nonce/hash-backed policy, and narrow wildcard source lists.", "artifacts": [ "evidence/headers.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F23", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "guidanceCategory": "modern-web-guidance", "summary": "The public authentication entry offers phone OTP only, with no phishing-resistant sign-in option.", "evidence": "The login page exposes only a telephone form; source probe found no navigator.credentials/WebAuthn integration. No permission prompt fires on load.", "suggestedFix": "Offer passkey/WebAuthn authentication and recovery alongside OTP, using conditional UI where supported.", "artifacts": [ "evidence/login-probe.json", "evidence/login-validation.json" ], "effort": "large", "pathId": "login", "url": "https://accounts.digilocker.gov.in/v3/...--en" }, { "id": "F24", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "guidanceCategory": "modern-web-guidance", "summary": "Browser defenses are broad rather than least-privilege.", "evidence": "Although HSTS, nosniff, X-Frame-Options, Referrer-Policy and Permissions-Policy are present, CSP frame-ancestors permits numerous wildcard domains and the policy relies on unsafe-eval/unsafe-inline.", "suggestedFix": "Narrow frame-ancestors to explicitly required origins, remove unsafe directives and consider Trusted Types for the authenticated application.", "artifacts": [ "evidence/headers.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F25", "severity": "medium", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "guidanceId": "resilient-context-menus-and-nested-dropdowns", "guidanceCategory": "modern-web-guidance", "summary": "Custom overlays are not using resilient top-layer and fallback positioning.", "evidence": "The live DOM contains custom modal/dropdown UI but no dialog, popover or anchor-positioning primitives.", "suggestedFix": "Move overlays to the top layer with dialog/popover, ensure edge-aware positioning and preserve state/focus across DOM changes.", "artifacts": [ "evidence/platform-probe.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F26", "severity": "medium", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "offline-and-installable", "guidanceId": "accessibility", "guidanceCategory": "modern-web-guidance", "summary": "The app-like service is neither installable nor backed by an offline fallback.", "evidence": "The platform probe found zero service-worker registrations and recon found no web app manifest, despite mobile-web-app-capable metadata.", "suggestedFix": "Add a valid web app manifest and a service worker that provides an honest offline shell/recovery page without caching sensitive documents.", "artifacts": [ "evidence/platform-probe.json", "evidence/recon.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F27", "severity": "high", "confidence": "high", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "guidanceId": "persistent-toast-notifications", "guidanceCategory": "modern-web-guidance", "summary": "Unknown routes expose raw infrastructure errors with no recovery.", "evidence": "A representative bad route renders a bare XML AccessDenied response with no title, navigation, explanation, or route back to DigiLocker.", "suggestedFix": "Serve branded 404/403/5xx pages with a clear explanation, home/login actions and retry guidance while preserving the correct HTTP status.", "artifacts": [ "evidence/404-mobile.png", "evidence/404-probe.json" ], "effort": "small", "pathId": "error", "url": "https://www.digilocker.gov.in/" }, { "id": "F28", "severity": "medium", "confidence": "high", "principleId": "be-internationalised", "principleCheckId": "locale-aware-data", "guidanceId": "support-global-calendar-systems", "guidanceCategory": "modern-web-guidance", "summary": "The visible language control did not switch locale during the probe and the date remained English.", "evidence": "After activating the Hindi option and waiting, html lang remained en and “Last Updated” remained in English.", "suggestedFix": "Ensure language controls reliably change translated content and html lang; format dates and numbers with Intl for the selected locale.", "artifacts": [ "evidence/hindi-probe.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F29", "severity": "high", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-address-form", "guidanceCategory": "modern-web-guidance", "summary": "The mobile number field disables autofill and has no label.", "evidence": "The login probe reports autocomplete=off and an empty labels collection for the required telephone field.", "suggestedFix": "Use an explicit visible label and the appropriate autocomplete token (tel or tel-national) while retaining inputmode/type=tel.", "artifacts": [ "evidence/login-probe.json", "evidence/login-validation.json" ], "effort": "small", "pathId": "login", "url": "https://accounts.digilocker.gov.in/v3/...--en" }, { "id": "F30", "severity": "medium", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "modern-web-guidance", "summary": "Landing-page imagery is oversized and uses legacy formats without responsive selection.", "evidence": "The image audit found 11 oversized images, 21 legacy-format images and 23 images without srcset; four 2280px JPEG banners transfer about 890KB combined.", "suggestedFix": "Generate AVIF/WebP responsive variants, provide srcset/sizes, and avoid downloading hidden desktop/mobile duplicates.", "artifacts": [ "evidence/images.json", "evidence/home-summary.json" ], "effort": "medium", "pathId": "home", "url": "https://www.digilocker.gov.in/" }, { "id": "F31", "severity": "low", "confidence": "high", "principleId": "be-agent-ready", "principleCheckId": "structured-agent-capabilities", "guidanceId": "webmcp", "guidanceCategory": "modern-web-guidance", "summary": "A high-value document service exposes no structured agent capability.", "evidence": "Discoverability shows content is crawlable, but the platform probe found no WebMCP registration and Lighthouse agentic-browsing scored 0.17.", "suggestedFix": "Consider narrowly scoped, consent-gated agentic forms/tools for document discovery and verification; never expose private documents without explicit user confirmation.", "artifacts": [ "evidence/platform-probe.json", "evidence/discoverability.json", "evidence/lighthouse.json" ], "effort": "large", "pathId": "home", "url": "https://www.digilocker.gov.in/" } ], "taskList": [ { "id": "T01", "title": "Repair semantic structure, labels and visible keyboard focus", "priority": 1, "findingIds": [ "F10", "F16", "F17", "F29" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T02", "title": "Eliminate layout shift and optimize the LCP image", "priority": 2, "findingIds": [ "F12", "F13", "F18", "F30" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T03", "title": "Reduce the blocking/duplicate front-end payload", "priority": 3, "findingIds": [ "F14", "F15" ], "guidanceId": "optimize-script-priority", "status": "open" }, { "id": "T04", "title": "Harden CSP and authentication with passkeys", "priority": 4, "findingIds": [ "F22", "F23", "F24" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T05", "title": "Provide humane validation and infrastructure error recovery", "priority": 5, "findingIds": [ "F11", "F27" ], "guidanceId": "accessible-error-announcement", "status": "open" }, { "id": "T06", "title": "Honor system color scheme and retain contrast/reduced-motion support", "priority": 6, "findingIds": [ "F01" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T07", "title": "Publish robots.txt and sitemap, and replace scripted links", "priority": 7, "findingIds": [ "F20", "F21" ], "guidanceId": "html", "status": "open" }, { "id": "T08", "title": "Remove narrow viewport overflow and add component-level responsiveness", "priority": 8, "findingIds": [ "F08", "F09" ], "guidanceId": "size-aware-styling", "status": "open" }, { "id": "T09", "title": "Replace custom overlays and carousel mechanics with resilient platform primitives", "priority": 9, "findingIds": [ "F03", "F05", "F07", "F25" ], "guidanceId": "declarative-dialog-popover-control", "status": "open" }, { "id": "T10", "title": "Make the language switch reliable and locale-aware", "priority": 10, "findingIds": [ "F28" ], "guidanceId": "translator", "status": "open" }, { "id": "T11", "title": "Add privacy-safe install/offline and agent capability only where justified", "priority": 11, "findingIds": [ "F26", "F31" ], "guidanceId": "webmcp", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-28T07-53-58-817Z" }