{ "url": "https://xxxbp.tv", "auditedAt": "2026-07-23T20:37:08.206Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete agentic audit of five representative templates/journeys. Excluded: authenticated account interiors and actual media consumption beyond player readiness because they require credentials or extended playback.", "page": { "appType": "mpa", "framework": "server-rendered custom site with service worker/PWA", "notes": "Public adult media catalog with listing, category, video player, search, registration, and error templates." }, "evidenceUsed": [ "screenshot", "DOM/computed-style probe", "evaluate probe", "layout metrics/CLS/long-task observer", "HAR", "trace", "Lighthouse", "discoverability/raw HTML", "headers", "cookies", "trackers", "secrets", "images", "heap baseline/post comparison", "robots/sitemap inspection" ], "guidanceConsulted": [ "accessibility", "accessible-error-announcement", "adapt-scrollbar-to-contrast-preferences", "agentic-forms", "agentic-javascript-tools", "anchor-positioning-tab-underline", "animated-select-picker", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "apply-webgl-shaders", "autofill-address-form", "autofill-highlight-inputs", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "batch-analytics-events", "brand-consistent-forms", "branded-select-styling", "break-up-long-tasks", "calculate-event-differentials", "calculate-total-foreground-time", "calculate-with-intrinsic-sizes", "capture-location-agnostic-data", "carousel-slide-effects", "carousel-snap-highlights", "child-state-based-styling", "complex-shapes", "component-specific-light-dark-theme", "conditional-async-dependencies", "consistent-cross-document-transitions", "content-based-styling", "coordinate-global-events", "cross-document-transitions", "css", "css-layout", "customize-scrollbar-color-and-thickness", "custom-select-picker-layouts", "dark-mode", "declarative-dialog-popover-control", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "deliver-optimized-decorative-images", "deprioritize-background-fetches", "design-token-reactivity", "detect-initial-visibility-state", "directional-navigation-transitions", "dynamic-sibling-animations", "dynamic-sibling-styling", "efficient-background-processing", "export-html-media-from-canvas", "expose-canvas-content-to-browser-features", "faster-spa-view-transitions", "flicker-free-client-side-ab-testing", "fluid-scaling", "format-human-readable-durations", "form-fields-automatically-fit-contents", "forms", "full-session-analytics", "group-element-transitions", "highlight-text-ranges", "html", "identify-heavy-scripts", "identify-inp-causes", "improve-next-page-load-performance", "improve-text-layout-and-legibility", "individual-transform-properties", "interactions-in-complex-layouts", "interactive-content-in-3d-scenes", "interactive-content-reveal", "interest-triggered-action-previews", "interest-triggered-tooltips", "language-detection", "language-model", "light-dismiss-a-dialog", "manage-recurring-intervals", "model-partial-time-concepts", "move-dom-element-without-losing-state", "navigation-drawer", "optimize-image-priority", "optimize-preload-priority", "optimize-script-priority", "overflow-clipping-control", "parallax-scroll-effects", "passkey-authentication", "passkey-conditional-create", "passkey-management", "passkey-reauthentication", "passkey-registration", "passkeys", "performance", "persistent-app-tours", "persistent-toast-notifications", "persistent-top-layer-ui", "physics-based-easing", "platform-controls-dismiss-dialog", "position-aware-tooltips", "precise-text-alignment", "prevent-text-wrapping", "privacy", "pull-to-reveal", "reduce-style-repetition", "required-field-feedback", "resilient-context-menus-and-nested-dropdowns", "resolution-optimized-pseudo-elements", "rich-media-picker", "same-document-transitions", "schedule-tasks-by-priority", "scrollability-affordance-hints", "scroll-entry-exit-effects", "scroll-position-aware-elements", "scroll-progress-indicator", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "scrollytelling", "search-hidden-content", "security", "select-menu-interaction", "sequence-distributed-events", "shaped-cutouts", "shrinking-header-on-scroll", "size-aware-styling", "soft-edge-content-fade", "stabilize-reactive-state", "stack-drill-down", "style-parent-with-has", "summarizer", "support-global-calendar-systems", "swipe-to-remove", "translator", "validate-input-after-interaction", "visually-stable-font-fallbacks", "visually-stable-mixed-fonts", "visually-texture-content", "webmcp" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop.png", "findingIds": [ "F-be-internationalised-locale-aware-data" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile.png", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "home dark.png", "condition": "prefers-color-scheme: dark", "findingIds": [ "F-respect-user-preferences-respects-color-scheme" ] }, { "type": "screenshot", "path": "evidence/home-high-contrast.png", "caption": "home high contrast.png", "condition": "forced-colors: active, prefers-contrast: more", "findingIds": [] }, { "type": "screenshot", "path": "evidence/category-mobile.png", "caption": "category mobile.png", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/video-desktop.png", "caption": "video desktop.png", "findingIds": [] }, { "type": "screenshot", "path": "evidence/register-mobile.png", "caption": "register mobile.png", "condition": "viewport: 360x800", "findingIds": [ "F-maximize-content-reduce-noise-no-intrusive-interruptions" ] }, { "type": "screenshot", "path": "evidence/search-desktop.png", "caption": "search desktop.png", "findingIds": [] }, { "type": "screenshot", "path": "evidence/404-mobile.png", "caption": "404 mobile.png", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered.png", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler.png", "findingIds": [] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom.json", "findingIds": [] }, { "type": "other", "path": "evidence/home-probe.json", "caption": "home probe.json", "findingIds": [] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "home mobile layout.json", "condition": "viewport: 360x800", "findingIds": [ "F-provide-guided-navigation-scroll-state-aware-chrome" ] }, { "type": "layout", "path": "evidence/register-layout.json", "caption": "register layout.json", "findingIds": [] }, { "type": "layout", "path": "evidence/video-mobile-layout.json", "caption": "video mobile layout.json", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers.json", "findingIds": [ "F-be-private-and-secure-defensive-browser-policies" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability.json", "findingIds": [] }, { "type": "other", "path": "evidence/robots.txt", "caption": "robots.txt", "findingIds": [] }, { "type": "other", "path": "evidence/sitemap.xml", "caption": "sitemap.xml", "findingIds": [] }, { "type": "har", "path": "evidence/home.har", "caption": "home.har", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-summary.json", "caption": "home summary.json", "findingIds": [ "F-be-fast-and-stable-efficient-resource-delivery" ] }, { "type": "trace", "path": "evidence/home-trace.json", "caption": "home trace.json", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "home trace summary.json", "findingIds": [] }, { "type": "other", "path": "evidence/images.json", "caption": "images.json", "findingIds": [ "F-follow-best-practices-sound-document-and-assets", "F-be-sustainable-optimised-assets", "F-be-sustainable-no-wasteful-work" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies.json", "findingIds": [ "F-be-private-and-secure-secure-transport-and-headers" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers.json", "findingIds": [ "F-be-private-and-secure-data-minimisation-and-third-parties", "F-be-sustainable-third-party-and-media-budget" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets.json", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-home.json", "caption": "lighthouse home.json", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-home-summary.json", "caption": "lighthouse home summary.json", "findingIds": [ "F-be-fast-and-stable-good-core-web-vitals", "F-be-fast-and-stable-trim-unused-and-duplicate-code", "F-be-inclusive-names-roles-labels", "F-be-inclusive-sufficient-contrast", "F-follow-best-practices-browser-platform-hygiene" ] }, { "type": "heap", "path": "evidence/heap-baseline.json", "caption": "heap baseline.json", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post-menu-valid.json", "caption": "heap post menu valid.json", "findingIds": [] }, { "type": "other", "path": "evidence/reduced-motion-probe.json", "caption": "reduced motion probe.json", "findingIds": [] }, { "type": "other", "path": "evidence/register-accessibility-probe.json", "caption": "register accessibility probe.json", "findingIds": [ "F-be-private-and-secure-in-context-permissions-and-modern-auth", "F-be-trustworthy-humane-error-handling" ] }, { "type": "other", "path": "evidence/register-visible-focus.json", "caption": "register visible focus.json", "findingIds": [ "F-adapt-to-the-form-factor-input-modality-aware", "F-be-inclusive-structure-and-focus" ] }, { "type": "other", "path": "evidence/runtime-manifest-probe.json", "caption": "runtime manifest probe.json", "findingIds": [ "F-implement-natural-interactions-view-transitions", "F-adapt-to-the-form-factor-component-level-responsiveness" ] }, { "type": "other", "path": "evidence/site.webmanifest", "caption": "site.webmanifest", "findingIds": [] }, { "type": "other", "path": "evidence/video-player-probe.json", "caption": "video player probe.json", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "The light and dark captures retain the same palette, and the DOM reports color-scheme: normal.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png" ], "findingIds": [ "F-respect-user-preferences-respects-color-scheme" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "evaluate under prefers-reduced-motion: reduce", "evidence": "The emulation matched reduce and getAnimations() returned no active animation, so no nonessential motion persisted.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion-probe.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "forced-colors/high-contrast screenshot", "evidence": "The forced-colors mobile capture retained readable text, visible controls, thumbnails, and clear boundaries.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-high-contrast.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "The runtime CSS probe found zero view-transition rules on this multi-route site.", "pathIds": [ "home", "video" ], "artifacts": [ "evidence/runtime-manifest-probe.json" ], "findingIds": [ "F-implement-natural-interactions-view-transitions" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "runtime stylesheet and visual inspection", "evidence": "No parallax, reveal, or other scroll-linked effect was observed, so there is no main-thread scroll-animation anti-pattern to replace.", "pathIds": [ "home", "video" ], "artifacts": [ "evidence/runtime-manifest-probe.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "mobile screenshots and DOM interaction review", "evidence": "The audited journeys use native scrolling, links, and buttons and did not install a custom gesture surface that fights platform behavior.", "pathIds": [ "home", "video" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "Mobile layout measured 32,716px of content while the header scrolls away and no scroll-state or timeline CSS was found.", "pathIds": [ "home", "video" ], "artifacts": [ "evidence/home-mobile-layout.json" ], "findingIds": [ "F-provide-guided-navigation-scroll-state-aware-chrome" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "pass", "confidence": "high", "method": "viewport screenshots of overlays/chrome", "evidence": "The install overlay stays attached to the viewport edge without clipping at desktop and mobile sizes; no drifting tooltip/menu was observed.", "pathIds": [ "home", "video" ], "artifacts": [ "evidence/home-mobile.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "homepage and player screenshots", "evidence": "Active sort tabs, the player title/breadcrumb, tag chips, and strong section headings visibly preserve orientation.", "pathIds": [ "home", "video" ], "artifacts": [ "evidence/video-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "Desktop, mobile, video, and registration screenshots show the PWA install card before user interaction; on registration it covers the email/password region.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/register-mobile.png" ], "findingIds": [ "F-maximize-content-reduce-noise-no-intrusive-interruptions" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "pass", "confidence": "high", "method": "DOM overlay probe", "evidence": "The install surface has role=dialog, aria-modal, aria-labelledby, and an explicit Close button; disclosure/navigation controls use native buttons.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "desktop and mobile screenshots", "evidence": "Outside the install prompt finding, the listing gives most viewport area to thumbnails/content and collapses desktop navigation on mobile.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/home-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "layout at 360px on listing, player, and registration", "evidence": "All three mobile layouts reported 0px horizontal overflow and a viewport meta tag.", "pathIds": [ "home", "category", "video", "register" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "The stylesheet runtime probe found zero @container rules despite cards appearing across grid, sidebar, and single-column contexts.", "pathIds": [ "home", "category", "video", "register" ], "artifacts": [ "evidence/runtime-manifest-probe.json" ], "findingIds": [ "F-adapt-to-the-form-factor-component-level-responsiveness" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "Focused visible login, email, password, Create account, Country, install, and menu controls all computed to outline: none and box-shadow: none while matching :focus-visible.", "pathIds": [ "home", "category", "video", "register" ], "artifacts": [ "evidence/register-visible-focus.json" ], "findingIds": [ "F-adapt-to-the-form-factor-input-modality-aware" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "first-viewport screenshots", "evidence": "The listing H1 states the page purpose, search and sort controls are prominent, and the player presents a central Play action.", "pathIds": [ "home", "video", "not-found" ], "artifacts": [ "evidence/video-desktop.png" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "listing-to-player journey and player probe", "evidence": "A representative listing item resolves to a loaded 11:15 video with readyState 4 and a visible Play control.", "pathIds": [ "home", "video", "not-found" ], "artifacts": [ "evidence/video-player-probe.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "intentional 404 route screenshot", "evidence": "The 404 state clearly says the page was not found and provides a Return to Homepage recovery link.", "pathIds": [ "home", "video", "not-found" ], "artifacts": [ "evidence/404-mobile.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "Lighthouse measured FCP 9.9s, LCP 17.2s, and performance 0.56; the separate trace measured LCP 2.89s, showing high run variability but a clear slow-path failure.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-be-fast-and-stable-good-core-web-vitals" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "layout shift observers on three templates", "evidence": "CLS was 0.034 on home, 0.032 on registration, and 0 on the mobile player, all within the good range.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "trace and long-task observers", "evidence": "The trace recorded one 53.86ms long task and 3.86ms TBT; mobile layout observed only one 51ms task.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "HAR recorded 202 requests and 2.76MB transferred, including 145 image requests; Lighthouse reported 7.98s redirect savings and cache/image-delivery opportunities.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-summary.json" ], "findingIds": [ "F-be-fast-and-stable-efficient-resource-delivery" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "Lighthouse reported about 32KiB unused CSS, 22KiB unused JS, 74KiB unminified JS savings, and 18KiB legacy-JS savings.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-be-fast-and-stable-trim-unused-and-duplicate-code" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "Lighthouse failed dialog-name, image-alt, and form-label audits; the DOM probe also found icon-only buttons without accessible text.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-be-inclusive-names-roles-labels" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "Lighthouse failed the color-contrast audit; the forced-colors screenshot remains operable but does not repair ordinary-theme contrast failures.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-be-inclusive-sufficient-contrast" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "The direct focus probe found :focus-visible elements with no outline or box shadow, although landmarks and headings are present.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/register-visible-focus.json" ], "findingIds": [ "F-be-inclusive-structure-and-focus" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "desktop/mobile screenshots", "evidence": "Body copy, titles, and form labels reflow without clipping or horizontal overflow and use readable line lengths in audited states.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/register-mobile.png" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "pass", "confidence": "high", "method": "viewport DOM and mobile layout/screenshots", "evidence": "The direct DOM has width=device-width, initial-scale=1.0 without a scaling prohibition, and audited templates reflow at 360px with large primary buttons.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/register-layout.json" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Lighthouse runtime audit", "evidence": "Lighthouse did not report the errors-in-console audit among failed audits, and all representative pages completed navigation.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "The image primitive found 99 of 100 images without width/height and 99 without srcset; 98 use legacy formats.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F-follow-best-practices-sound-document-and-assets" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "Lighthouse reported three deprecation warnings and a failed inspector-issues audit.", "pathIds": [ "home" ], "artifacts": [ "evidence/lighthouse-home-summary.json" ], "findingIds": [ "F-follow-best-practices-browser-platform-hygiene" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "rendered/raw DOM metadata probe", "evidence": "The homepage exposes a descriptive title and meta description in both rendered and raw HTML.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "DOM links, robots.txt, and mobile layout", "evidence": "Internal navigation uses real href URLs, viewport metadata is present, and robots.txt allows the homepage/content routes while excluding private/filter surfaces.", "pathIds": [ "home" ], "artifacts": [ "evidence/robots.txt" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "pass", "confidence": "high", "method": "canonical, robots, sitemap, and raw HTTP evidence", "evidence": "The page returned 200, declares a canonical and hreflang links, and robots.txt points to a populated sitemap without blocking the audited public URLs.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "pass", "confidence": "high", "method": "DOM metadata probe", "evidence": "Open Graph/Twitter metadata and JSON-LD WebSite, Organization, and ItemList entities agree with visible content.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "All five observed cookies lacked Secure and used SameSite=None; session_id also lacked HttpOnly. CSP and X-Content-Type-Options were absent.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/cookies.json" ], "findingIds": [ "F-be-private-and-secure-secure-transport-and-headers" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "Tracker evidence found 11 third-party origins, while the HAR recorded 202 requests; no consent or minimization control appeared before those requests.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/trackers.json" ], "findingIds": [ "F-be-private-and-secure-data-minimisation-and-third-parties" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "The registration path contains username, email, and new-password fields; no WebAuthn/passkey affordance was observed. No permission prompt fired on load.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/register-accessibility-probe.json" ], "findingIds": [ "F-be-private-and-secure-in-context-permissions-and-modern-auth" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "Header evidence found no CSP/frame-ancestors, X-Frame-Options, Referrer-Policy, or Permissions-Policy; HSTS was present.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F-be-private-and-secure-defensive-browser-policies" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "raw-vs-rendered discoverability capture", "evidence": "Non-JS raw HTML contains 85% of rendered content words, plus title, H1, and description; it is not a JS shell.", "pathIds": [ "home", "not-found" ], "artifacts": [ "evidence/discoverability.json" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "multi-template screenshots and runtime probes", "evidence": "Listing, player, registration, and 404 templates rendered complete UI at both form factors without clipped horizontal content or blank shells.", "pathIds": [ "home", "not-found" ], "artifacts": [ "evidence/category-mobile.png" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "pass", "confidence": "high", "method": "manifest/runtime service-worker probe", "evidence": "A valid manifest is linked and the page is controlled by an active service worker, satisfying installability/offline infrastructure for this app-like site.", "pathIds": [ "home", "not-found" ], "artifacts": [ "evidence/site.webmanifest" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "404 recovery test", "evidence": "A nonexistent route renders a specific error message and Return to Homepage action instead of a blank shell.", "pathIds": [ "home", "not-found" ], "artifacts": [ "evidence/404-mobile.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "pass", "confidence": "high", "method": "DOM and metadata inspection", "evidence": "The document declares lang=en and publishes x-default plus locale-specific hreflang alternatives; audited text order is correct for the LTR English surface.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-probe.json" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "The UI offers country and hreflang variants but listing metadata remains phrases such as “2 days ago” and “A month ago” with no localized output observed.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png" ], "findingIds": [ "F-be-internationalised-locale-aware-data" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and representative journey applicability review", "evidence": "No applicable surface was found.", "reason": "The audited site shows relative publication ages but no scheduled events, cross-zone coordination, booking, or stored user times for which DST/time-zone modeling applies.", "pathIds": [ "home" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "commercial/UI screenshot review", "evidence": "Ads are labeled Advertising or Live, the install prompt has a clear close control, and no confirmshaming or hidden pricing was observed on audited public paths.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/video-desktop.png" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "The register DOM marks login, email, and password as required:false; an empty submit navigated away rather than yielding inspectable in-place recovery.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/register-accessibility-probe.json" ], "findingIds": [ "F-be-trustworthy-humane-error-handling" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "pass", "confidence": "high", "method": "registration DOM probe", "evidence": "Registration uses autocomplete=username, email, and new-password with visible labels for each account field.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/register-accessibility-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "high", "method": "registration screenshot and DOM review", "evidence": "The free registration surface states what the account unlocks, presents a single Create account action, and links terms and privacy policy.", "pathIds": [ "home", "register" ], "artifacts": [ "evidence/register-mobile.png" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "The image audit found 98 legacy-format images and 99 without srcset; the HAR transferred 2.21MB across 145 image requests.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F-be-sustainable-optimised-assets" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "Of 100 audited images, 96 below-fold images were not lazy-loaded; HAR captured 145 image requests on initial load.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F-be-sustainable-no-wasteful-work" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Direct multimodal evidence against the mapped check and retrieved guidance", "evidence": "The initial load contacted 11 third-party origins and sent 202 requests; multiple live/ad units render alongside the primary grid.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json" ], "findingIds": [ "F-be-sustainable-third-party-and-media-budget" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and representative journey applicability review", "evidence": "No applicable surface was found.", "reason": "No declared agent-facing intent exists; this public media catalog does not expose transactional or productivity capabilities that need WebMCP tools.", "pathIds": [ "home" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and representative journey applicability review", "evidence": "No applicable surface was found.", "reason": "No summarization, generation, language-model, or other inference task is part of the representative user journeys.", "pathIds": [ "home" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "high", "method": "baseline/post heap snapshots around 20 menu toggles", "evidence": "After 20 menu toggles, snapshot self-size fell from 11,955,725 to 11,917,574 bytes; node count changed by only 658 (0.36%), with no monotonic retained-growth signal.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-post-menu-valid.json" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "heap summary and Performance memory probe", "evidence": "The loaded long feed used about 11.96MB heap self-size, 5.73MB live JS heap, and 3,042 DOM elements, proportionate to its 100-card media listing.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline.json" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "before/after heap constructor summaries", "evidence": "Neither heap summary reported Detached* among constructors, and repeated toggling produced only a 0.36% node-count delta rather than unbounded accumulation.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-post-menu-valid.json" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F-respect-user-preferences-respects-color-scheme" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F-implement-natural-interactions-view-transitions" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F-provide-guided-navigation-scroll-state-aware-chrome" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F-maximize-content-reduce-noise-no-intrusive-interruptions" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F-adapt-to-the-form-factor-component-level-responsiveness", "F-adapt-to-the-form-factor-input-modality-aware" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass", "findingIds": [] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F-be-fast-and-stable-good-core-web-vitals", "F-be-fast-and-stable-efficient-resource-delivery", "F-be-fast-and-stable-trim-unused-and-duplicate-code" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F-be-inclusive-names-roles-labels", "F-be-inclusive-sufficient-contrast", "F-be-inclusive-structure-and-focus" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F-follow-best-practices-sound-document-and-assets", "F-follow-best-practices-browser-platform-hygiene" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "pass", "findingIds": [] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F-be-private-and-secure-secure-transport-and-headers", "F-be-private-and-secure-data-minimisation-and-third-parties", "F-be-private-and-secure-in-context-permissions-and-modern-auth", "F-be-private-and-secure-defensive-browser-policies" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass", "findingIds": [] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F-be-internationalised-locale-aware-data" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F-be-trustworthy-humane-error-handling" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F-be-sustainable-optimised-assets", "F-be-sustainable-no-wasteful-work", "F-be-sustainable-third-party-and-media-budget" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "findingIds": [], "reason": "This emerging agent-facing principle is contextual and neither representative journey requires an agent tool or on-device inference capability." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass", "findingIds": [] } ], "paths": [ { "id": "home", "description": "Homepage and primary listing template; audited desktop/mobile, preferences, performance, privacy, crawlability, and memory.", "url": "https://xxxbp.tv", "conditions": [ "desktop", "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active" ], "result": "issues" }, { "id": "category", "description": "Category/listing archetype representing taxonomy browsing.", "url": "https://xxxbp.tv/x/indian", "conditions": [ "viewport: 360x800" ], "result": "issues" }, { "id": "video", "description": "Detail/player archetype and primary watch journey.", "url": "https://xxxbp.tv/video/923278/priya-engagement-anal-pounding", "conditions": [ "desktop", "viewport: 360x800" ], "result": "issues" }, { "id": "search", "description": "Search results archetype reached from the primary search control.", "url": "https://xxxbp.tv/search?q=sample", "conditions": [ "desktop" ], "result": "issues" }, { "id": "register", "description": "Primary account creation form and input/focus-assistance journey.", "url": "https://xxxbp.tv/member/register", "conditions": [ "viewport: 360x800", "keyboard focus", "empty submit attempt" ], "result": "issues" }, { "id": "not-found", "description": "Network/HTTP recovery archetype using an intentionally nonexistent route.", "url": "https://xxxbp.tv/this-route-should-not-exist-audit", "conditions": [ "viewport: 360x800" ], "result": "pass" } ], "findings": [ { "id": "F-respect-user-preferences-respects-color-scheme", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "severity": "medium", "confidence": "high", "guidanceId": "dark-mode", "guidanceCategory": "user-experience", "summary": "The fixed black/yellow palette does not respond to the user’s color-scheme preference.", "evidence": "The light and dark captures retain the same palette, and the DOM reports color-scheme: normal.", "artifacts": [ "evidence/home-dark.png" ], "suggestedFix": "Declare color-scheme and provide preference-driven surface and text tokens with prefers-color-scheme or light-dark().", "effort": "small" }, { "id": "F-implement-natural-interactions-view-transitions", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "severity": "low", "confidence": "high", "guidanceId": "same-document-transitions", "guidanceCategory": "user-experience", "summary": "Route and state changes have no View Transition treatment.", "evidence": "The runtime CSS probe found zero view-transition rules on this multi-route site.", "artifacts": [ "evidence/runtime-manifest-probe.json" ], "suggestedFix": "Use same-document and cross-document View Transitions for route and major state changes, with reduced-motion handling.", "effort": "small" }, { "id": "F-provide-guided-navigation-scroll-state-aware-chrome", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "severity": "medium", "confidence": "high", "guidanceId": "scroll-progress-indicator", "guidanceCategory": "user-experience", "summary": "The very long feed has no scroll-aware navigation or progress cue.", "evidence": "Mobile layout measured 32,716px of content while the header scrolls away and no scroll-state or timeline CSS was found.", "artifacts": [ "evidence/home-mobile-layout.json" ], "suggestedFix": "Keep essential navigation available and add a lightweight declarative scroll progress or scroll-state affordance.", "effort": "small" }, { "id": "F-maximize-content-reduce-noise-no-intrusive-interruptions", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "maximize-content-reduce-noise", "principleCheckId": "no-intrusive-interruptions", "severity": "high", "confidence": "high", "guidanceId": "light-dismiss-a-dialog", "guidanceCategory": "user-experience", "summary": "An unsolicited install dialog obscures core content and form fields on load.", "evidence": "Desktop, mobile, video, and registration screenshots show the PWA install card before user interaction; on registration it covers the email/password region.", "artifacts": [ "evidence/register-mobile.png" ], "suggestedFix": "Do not show the install prompt on load. Offer install after demonstrated intent and use a semantic, light-dismissible dialog without covering the active task.", "effort": "medium" }, { "id": "F-adapt-to-the-form-factor-component-level-responsiveness", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "severity": "low", "confidence": "high", "guidanceId": "size-aware-styling", "guidanceCategory": "css", "summary": "Reusable cards adapt only at viewport level, with no component-level query support.", "evidence": "The stylesheet runtime probe found zero @container rules despite cards appearing across grid, sidebar, and single-column contexts.", "artifacts": [ "evidence/runtime-manifest-probe.json" ], "suggestedFix": "Give reusable card/list containers container-type and use size-aware @container rules where component layout changes.", "effort": "small" }, { "id": "F-adapt-to-the-form-factor-input-modality-aware", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "severity": "high", "confidence": "high", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Keyboard focus is not visibly indicated on primary controls and fields.", "evidence": "Focused visible login, email, password, Create account, Country, install, and menu controls all computed to outline: none and box-shadow: none while matching :focus-visible.", "artifacts": [ "evidence/register-visible-focus.json" ], "suggestedFix": "Add a high-contrast :focus-visible ring with adequate offset; retain large touch targets and non-hover states.", "effort": "medium" }, { "id": "F-be-fast-and-stable-good-core-web-vitals", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "severity": "critical", "confidence": "high", "guidanceId": "performance", "guidanceCategory": "performance", "summary": "The measured mobile load misses the LCP performance bar by a wide margin.", "evidence": "Lighthouse measured FCP 9.9s, LCP 17.2s, and performance 0.56; the separate trace measured LCP 2.89s, showing high run variability but a clear slow-path failure.", "artifacts": [ "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Remove redirect latency, prioritize the LCP image, and reduce eager network work; verify with repeated lab and field CWV measurements.", "effort": "medium" }, { "id": "F-be-fast-and-stable-efficient-resource-delivery", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "severity": "high", "confidence": "high", "guidanceId": "optimize-image-priority", "guidanceCategory": "performance", "summary": "The page sends an excessive request/image payload and has inefficient cache and redirect behavior.", "evidence": "HAR recorded 202 requests and 2.76MB transferred, including 145 image requests; Lighthouse reported 7.98s redirect savings and cache/image-delivery opportunities.", "artifacts": [ "evidence/home-summary.json" ], "suggestedFix": "Eliminate redirect chains, load only initial-viewport imagery eagerly, set durable cache headers, and prioritize only the LCP resource.", "effort": "medium" }, { "id": "F-be-fast-and-stable-trim-unused-and-duplicate-code", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "severity": "medium", "confidence": "high", "guidanceId": "identify-heavy-scripts", "guidanceCategory": "performance", "summary": "The page ships avoidable unused, legacy, and unminified code.", "evidence": "Lighthouse reported about 32KiB unused CSS, 22KiB unused JS, 74KiB unminified JS savings, and 18KiB legacy-JS savings.", "artifacts": [ "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Remove unused rules and scripts, minify production assets, and avoid sending legacy code to modern browsers.", "effort": "small" }, { "id": "F-be-inclusive-names-roles-labels", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "severity": "high", "confidence": "high", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Some controls, images, and the on-load dialog lack robust accessible naming.", "evidence": "Lighthouse failed dialog-name, image-alt, and form-label audits; the DOM probe also found icon-only buttons without accessible text.", "artifacts": [ "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Use native elements and explicit labels; give every icon-only action and dialog an accessible name, and meaningful images accurate alt text.", "effort": "medium" }, { "id": "F-be-inclusive-sufficient-contrast", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "severity": "high", "confidence": "high", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Some text and essential UI fail minimum color contrast.", "evidence": "Lighthouse failed the color-contrast audit; the forced-colors screenshot remains operable but does not repair ordinary-theme contrast failures.", "artifacts": [ "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Adjust foreground/background tokens to meet WCAG contrast and preserve forced-colors behavior.", "effort": "medium" }, { "id": "F-be-inclusive-structure-and-focus", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "severity": "high", "confidence": "high", "guidanceId": "accessibility", "guidanceCategory": "accessibility", "summary": "Visible keyboard focus is absent across the primary navigation and registration form.", "evidence": "The direct focus probe found :focus-visible elements with no outline or box shadow, although landmarks and headings are present.", "artifacts": [ "evidence/register-visible-focus.json" ], "suggestedFix": "Implement a consistent :focus-visible treatment and test the full tab order on listing, player, and registration paths.", "effort": "medium" }, { "id": "F-follow-best-practices-sound-document-and-assets", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "severity": "medium", "confidence": "high", "guidanceId": "html", "guidanceCategory": "html", "summary": "Image assets lack intrinsic sizing and responsive delivery metadata.", "evidence": "The image primitive found 99 of 100 images without width/height and 99 without srcset; 98 use legacy formats.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Emit width and height, responsive srcset/sizes, and modern encoded variants from the image pipeline.", "effort": "small" }, { "id": "F-follow-best-practices-browser-platform-hygiene", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "severity": "medium", "confidence": "high", "guidanceId": "html", "guidanceCategory": "html", "summary": "Deprecated API and DevTools inspector issues remain in production.", "evidence": "Lighthouse reported three deprecation warnings and a failed inspector-issues audit.", "artifacts": [ "evidence/lighthouse-home-summary.json" ], "suggestedFix": "Replace deprecated APIs, resolve browser Issues-panel diagnostics, and keep dependencies current.", "effort": "small" }, { "id": "F-be-private-and-secure-secure-transport-and-headers", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "severity": "critical", "confidence": "high", "guidanceId": "security", "guidanceCategory": "security", "summary": "Session cookies and key browser security headers are unsafe or absent.", "evidence": "All five observed cookies lacked Secure and used SameSite=None; session_id also lacked HttpOnly. CSP and X-Content-Type-Options were absent.", "artifacts": [ "evidence/cookies.json" ], "suggestedFix": "Set Secure, HttpOnly for session cookies, an appropriate SameSite policy, a restrictive CSP, and nosniff while retaining HTTPS/HSTS.", "effort": "medium" }, { "id": "F-be-private-and-secure-data-minimisation-and-third-parties", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "severity": "high", "confidence": "high", "guidanceId": "privacy", "guidanceCategory": "privacy", "summary": "The initial page load contacts a broad advertising/tracking surface.", "evidence": "Tracker evidence found 11 third-party origins, while the HAR recorded 202 requests; no consent or minimization control appeared before those requests.", "artifacts": [ "evidence/trackers.json" ], "suggestedFix": "Remove nonessential partners, defer third parties until intent/consent, and document/minimize data sent to each origin.", "effort": "medium" }, { "id": "F-be-private-and-secure-in-context-permissions-and-modern-auth", "pathId": "home", "url": "https://xxxbp.tv/member/register", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "severity": "medium", "confidence": "high", "guidanceId": "passkeys", "guidanceCategory": "security", "summary": "Account creation exposes password-only authentication with no passkey path.", "evidence": "The registration path contains username, email, and new-password fields; no WebAuthn/passkey affordance was observed. No permission prompt fired on load.", "artifacts": [ "evidence/register-accessibility-probe.json" ], "suggestedFix": "Add passkey registration and authentication as the preferred path, retaining password fallback where required.", "effort": "small" }, { "id": "F-be-private-and-secure-defensive-browser-policies", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "severity": "high", "confidence": "high", "guidanceId": "security", "guidanceCategory": "security", "summary": "Clickjacking, referrer, and permissions defenses are not configured in response headers.", "evidence": "Header evidence found no CSP/frame-ancestors, X-Frame-Options, Referrer-Policy, or Permissions-Policy; HSTS was present.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Set frame-ancestors (and a legacy X-Frame-Options fallback where needed), Referrer-Policy, and a least-privilege Permissions-Policy.", "effort": "medium" }, { "id": "F-be-internationalised-locale-aware-data", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-internationalised", "principleCheckId": "locale-aware-data", "severity": "medium", "confidence": "high", "guidanceId": "translator", "guidanceCategory": "internationalization", "summary": "Locale-varying pages expose English-only relative dates and interface text.", "evidence": "The UI offers country and hreflang variants but listing metadata remains phrases such as “2 days ago” and “A month ago” with no localized output observed.", "artifacts": [ "evidence/home-desktop.png" ], "suggestedFix": "Render relative dates and other locale-sensitive values with Intl APIs and localized message catalogs.", "effort": "small" }, { "id": "F-be-trustworthy-humane-error-handling", "pathId": "home", "url": "https://xxxbp.tv/member/register", "principleId": "be-trustworthy", "principleCheckId": "humane-error-handling", "severity": "medium", "confidence": "high", "guidanceId": "forms", "guidanceCategory": "forms", "summary": "Registration fields do not expose client-side required constraints before submission.", "evidence": "The register DOM marks login, email, and password as required:false; an empty submit navigated away rather than yielding inspectable in-place recovery.", "artifacts": [ "evidence/register-accessibility-probe.json" ], "suggestedFix": "Declare required constraints, validate after interaction, keep entered values, and announce an actionable error summary in place.", "effort": "small" }, { "id": "F-be-sustainable-optimised-assets", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "severity": "high", "confidence": "high", "guidanceId": "deliver-optimized-decorative-images", "guidanceCategory": "performance", "summary": "The image-heavy feed does not use modern, responsive delivery.", "evidence": "The image audit found 98 legacy-format images and 99 without srcset; the HAR transferred 2.21MB across 145 image requests.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Generate AVIF/WebP variants, responsive sources, intrinsic dimensions, and appropriate quality/resolution tiers.", "effort": "medium" }, { "id": "F-be-sustainable-no-wasteful-work", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "severity": "high", "confidence": "high", "guidanceId": "deprioritize-background-fetches", "guidanceCategory": "performance", "summary": "Almost the entire long feed is fetched eagerly before it is needed.", "evidence": "Of 100 audited images, 96 below-fold images were not lazy-loaded; HAR captured 145 image requests on initial load.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Lazy-load below-fold media and defer/background-prioritize nonessential fetches until proximity or intent.", "effort": "medium" }, { "id": "F-be-sustainable-third-party-and-media-budget", "pathId": "home", "url": "https://xxxbp.tv", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "severity": "high", "confidence": "high", "guidanceId": "efficient-background-processing", "guidanceCategory": "performance", "summary": "Third-party advertising and media consume a disproportionate initial-load budget.", "evidence": "The initial load contacted 11 third-party origins and sent 202 requests; multiple live/ad units render alongside the primary grid.", "artifacts": [ "evidence/trackers.json" ], "suggestedFix": "Set a third-party budget, defer live/ad media, and load each integration only after it delivers clear user value.", "effort": "medium" } ], "taskList": [ { "id": "T1", "title": "Secure headers and session cookies", "priority": 1, "findingIds": [ "F-be-private-and-secure-secure-transport-and-headers", "F-be-private-and-secure-data-minimisation-and-third-parties", "F-be-private-and-secure-in-context-permissions-and-modern-auth", "F-be-private-and-secure-defensive-browser-policies" ], "guidanceId": "security", "status": "open" }, { "id": "T2", "title": "Stop eager media and optimize responsive image delivery", "priority": 2, "findingIds": [ "F-be-fast-and-stable-good-core-web-vitals", "F-be-fast-and-stable-efficient-resource-delivery", "F-be-fast-and-stable-trim-unused-and-duplicate-code", "F-follow-best-practices-sound-document-and-assets", "F-follow-best-practices-browser-platform-hygiene", "F-be-sustainable-optimised-assets", "F-be-sustainable-no-wasteful-work", "F-be-sustainable-third-party-and-media-budget" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T3", "title": "Remove the on-load install interruption", "priority": 3, "findingIds": [ "F-maximize-content-reduce-noise-no-intrusive-interruptions" ], "guidanceId": "light-dismiss-a-dialog", "status": "open" }, { "id": "T4", "title": "Restore names, labels, contrast, and visible keyboard focus", "priority": 4, "findingIds": [ "F-adapt-to-the-form-factor-component-level-responsiveness", "F-adapt-to-the-form-factor-input-modality-aware", "F-be-inclusive-names-roles-labels", "F-be-inclusive-sufficient-contrast", "F-be-inclusive-structure-and-focus" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T5", "title": "Remove redirect and production-code overhead", "priority": 5, "findingIds": [ "F-be-fast-and-stable-good-core-web-vitals", "F-be-fast-and-stable-efficient-resource-delivery", "F-be-fast-and-stable-trim-unused-and-duplicate-code", "F-follow-best-practices-sound-document-and-assets", "F-follow-best-practices-browser-platform-hygiene" ], "guidanceId": "performance", "status": "open" }, { "id": "T6", "title": "Reduce and defer third-party advertising traffic", "priority": 6, "findingIds": [ "F-be-private-and-secure-secure-transport-and-headers", "F-be-private-and-secure-data-minimisation-and-third-parties", "F-be-private-and-secure-in-context-permissions-and-modern-auth", "F-be-private-and-secure-defensive-browser-policies", "F-be-sustainable-optimised-assets", "F-be-sustainable-no-wasteful-work", "F-be-sustainable-third-party-and-media-budget" ], "guidanceId": "privacy", "status": "open" }, { "id": "T7", "title": "Add passkeys and humane in-place registration errors", "priority": 7, "findingIds": [ "F-be-private-and-secure-secure-transport-and-headers", "F-be-private-and-secure-data-minimisation-and-third-parties", "F-be-private-and-secure-in-context-permissions-and-modern-auth", "F-be-private-and-secure-defensive-browser-policies", "F-be-trustworthy-humane-error-handling" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T8", "title": "Add preference-driven theming and modern navigation transitions", "priority": 8, "findingIds": [ "F-respect-user-preferences-respects-color-scheme", "F-implement-natural-interactions-view-transitions", "F-provide-guided-navigation-scroll-state-aware-chrome", "F-adapt-to-the-form-factor-component-level-responsiveness", "F-adapt-to-the-form-factor-input-modality-aware" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T9", "title": "Localize relative date text", "priority": 9, "findingIds": [ "F-be-internationalised-locale-aware-data" ], "guidanceId": "translator", "status": "open" } ], "budget": { "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-23T20-37-08-206Z" }