{
  "url": "https://www.roblox.com",
  "auditedAt": "2026-07-24T06:52:21.594Z",
  "mode": "report",
  "status": "completed",
  "statusDetail": "Coverage-complete public-surface audit. Authenticated home, account settings, purchase/checkout, creation tools, native game launch completion, and destructive account flows were not covered because no test credentials or purchase authorization were supplied.",
  "page": {
    "appType": "hybrid",
    "framework": "React plus legacy AngularJS utilities",
    "notes": "Public MPA/hybrid templates with client-rendered listing and signup surfaces; game play transitions to the native Roblox client."
  },
  "evidenceUsed": [
    "screenshot",
    "dom",
    "layout-metrics",
    "evaluate-probe",
    "trace",
    "har",
    "discoverability",
    "headers",
    "cookies",
    "trackers",
    "images",
    "secrets",
    "heap-summary",
    "Lighthouse",
    "robots.txt",
    "sitemap.xml",
    "Modern Web Guidance 0.0.172"
  ],
  "guidanceConsulted": [
    "dark-mode",
    "accessibility",
    "fluid-scaling",
    "forms",
    "improve-text-layout-and-legibility",
    "optimize-script-priority",
    "identify-heavy-scripts",
    "security",
    "privacy",
    "agentic-forms",
    "webmcp",
    "passkeys",
    "autofill-sign-in-form",
    "accessible-error-announcement",
    "deliver-optimized-decorative-images",
    "same-document-transitions",
    "adapt-scrollbar-to-contrast-preferences",
    "declarative-dialog-popover-control",
    "size-aware-styling",
    "schedule-tasks-by-priority",
    "optimize-preload-priority",
    "break-up-long-tasks",
    "optimize-image-priority",
    "batch-analytics-events",
    "flicker-free-client-side-ab-testing",
    "translator",
    "coordinate-global-events",
    "validate-input-after-interaction",
    "manage-recurring-intervals",
    "html",
    "physics-based-easing",
    "efficient-background-processing"
  ],
  "artifacts": [
    {
      "type": "screenshot",
      "path": "evidence/charts-discoverability-crawler.png",
      "caption": "charts discoverability crawler",
      "findingIds": [
        "F12",
        "F16"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/charts-discoverability-rendered.png",
      "caption": "charts discoverability rendered"
    },
    {
      "type": "discoverability",
      "path": "evidence/charts-discoverability.json",
      "caption": "charts discoverability",
      "findingIds": [
        "F12"
      ]
    },
    {
      "type": "dom",
      "path": "evidence/charts-dom.json",
      "caption": "charts dom",
      "findingIds": [
        "F01"
      ]
    },
    {
      "type": "layout",
      "path": "evidence/charts-mobile-layout.json",
      "caption": "charts mobile layout",
      "condition": "viewport: 360x800"
    },
    {
      "type": "screenshot",
      "path": "evidence/charts.png",
      "caption": "charts",
      "findingIds": [
        "F03"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/game-discoverability-crawler.png",
      "caption": "game discoverability crawler"
    },
    {
      "type": "screenshot",
      "path": "evidence/game-discoverability-rendered.png",
      "caption": "game discoverability rendered"
    },
    {
      "type": "discoverability",
      "path": "evidence/game-discoverability.json",
      "caption": "game discoverability"
    },
    {
      "type": "dom",
      "path": "evidence/game-dom.json",
      "caption": "game dom",
      "findingIds": [
        "F02"
      ]
    },
    {
      "type": "layout",
      "path": "evidence/game-mobile-layout.json",
      "caption": "game mobile layout",
      "condition": "viewport: 360x800",
      "findingIds": [
        "F07"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/game.png",
      "caption": "game",
      "findingIds": [
        "F02"
      ]
    },
    {
      "type": "other",
      "path": "evidence/guidance-list.json",
      "caption": "guidance list"
    },
    {
      "type": "other",
      "path": "evidence/guidance-retrieved.md",
      "caption": "guidance retrieved"
    },
    {
      "type": "other",
      "path": "evidence/guidance-searches.txt",
      "caption": "guidance searches"
    },
    {
      "type": "dom",
      "path": "evidence/home-ar-dom.json",
      "caption": "home ar dom"
    },
    {
      "type": "screenshot",
      "path": "evidence/home-ar-mobile.png",
      "caption": "home ar mobile",
      "condition": "viewport: 360x800"
    },
    {
      "type": "other",
      "path": "evidence/home-cookies.json",
      "caption": "home cookies",
      "findingIds": [
        "F13"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/home-dark-reduced.png",
      "caption": "home dark reduced",
      "condition": "prefers-color-scheme: dark; prefers-reduced-motion: reduce"
    },
    {
      "type": "screenshot",
      "path": "evidence/home-discoverability-crawler.png",
      "caption": "home discoverability crawler",
      "findingIds": [
        "F05",
        "F12",
        "F16"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/home-discoverability-rendered.png",
      "caption": "home discoverability rendered"
    },
    {
      "type": "discoverability",
      "path": "evidence/home-discoverability.json",
      "caption": "home discoverability",
      "findingIds": [
        "F05",
        "F12"
      ]
    },
    {
      "type": "dom",
      "path": "evidence/home-dom.json",
      "caption": "home dom",
      "findingIds": [
        "F01",
        "F04",
        "F05",
        "F16",
        "F17"
      ]
    },
    {
      "type": "other",
      "path": "evidence/home-headers.json",
      "caption": "home headers",
      "findingIds": [
        "F14"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/home-high-contrast.png",
      "caption": "home high contrast",
      "condition": "prefers-contrast: more"
    },
    {
      "type": "other",
      "path": "evidence/home-images.json",
      "caption": "home images",
      "findingIds": [
        "F18"
      ]
    },
    {
      "type": "layout",
      "path": "evidence/home-layout.json",
      "caption": "home layout"
    },
    {
      "type": "layout",
      "path": "evidence/home-mobile-layout.json",
      "caption": "home mobile layout",
      "condition": "viewport: 360x800",
      "findingIds": [
        "F07"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/home-mobile.png",
      "caption": "home mobile",
      "condition": "viewport: 360x800",
      "findingIds": [
        "F03"
      ]
    },
    {
      "type": "other",
      "path": "evidence/home-probe.json",
      "caption": "home probe"
    },
    {
      "type": "other",
      "path": "evidence/home-secrets.json",
      "caption": "home secrets"
    },
    {
      "type": "har-summary",
      "path": "evidence/home-summary.json",
      "caption": "home summary",
      "findingIds": [
        "F08",
        "F09",
        "F15",
        "F19",
        "F20"
      ]
    },
    {
      "type": "trace-summary",
      "path": "evidence/home-trace-summary.json",
      "caption": "home trace summary",
      "findingIds": [
        "F06"
      ]
    },
    {
      "type": "trace",
      "path": "evidence/home-trace.json",
      "caption": "home trace",
      "findingIds": [
        "F06"
      ]
    },
    {
      "type": "other",
      "path": "evidence/home-trackers.json",
      "caption": "home trackers",
      "findingIds": [
        "F15",
        "F19"
      ]
    },
    {
      "type": "har",
      "path": "evidence/home.har",
      "caption": "home",
      "findingIds": [
        "F08"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/home.png",
      "caption": "home",
      "findingIds": [
        "F03",
        "F04"
      ]
    },
    {
      "type": "lighthouse",
      "path": "evidence/lighthouse.json",
      "caption": "lighthouse",
      "findingIds": [
        "F06",
        "F08",
        "F09",
        "F10",
        "F11",
        "F18",
        "F20",
        "F21"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/login-discoverability-crawler.png",
      "caption": "login discoverability crawler"
    },
    {
      "type": "screenshot",
      "path": "evidence/login-discoverability-rendered.png",
      "caption": "login discoverability rendered"
    },
    {
      "type": "discoverability",
      "path": "evidence/login-discoverability.json",
      "caption": "login discoverability"
    },
    {
      "type": "dom",
      "path": "evidence/login-dom.json",
      "caption": "login dom"
    },
    {
      "type": "other",
      "path": "evidence/login-focus-diff.json",
      "caption": "login focus diff"
    },
    {
      "type": "other",
      "path": "evidence/login-focus-probe.json",
      "caption": "login focus probe"
    },
    {
      "type": "other",
      "path": "evidence/login-form-probe.json",
      "caption": "login form probe",
      "findingIds": [
        "F17"
      ]
    },
    {
      "type": "heap",
      "path": "evidence/login-heap-baseline.json",
      "caption": "login heap baseline",
      "findingIds": [
        "F21"
      ]
    },
    {
      "type": "heap",
      "path": "evidence/login-heap-post.json",
      "caption": "login heap post"
    },
    {
      "type": "screenshot",
      "path": "evidence/login-invalid.png",
      "caption": "login invalid"
    },
    {
      "type": "layout",
      "path": "evidence/login-mobile-layout.json",
      "caption": "login mobile layout",
      "condition": "viewport: 360x800",
      "findingIds": [
        "F07"
      ]
    },
    {
      "type": "screenshot",
      "path": "evidence/login.png",
      "caption": "login",
      "findingIds": [
        "F03"
      ]
    },
    {
      "type": "other",
      "path": "evidence/reduced-motion-probe.json",
      "caption": "reduced motion probe"
    },
    {
      "type": "other",
      "path": "evidence/robots-headers.txt",
      "caption": "robots headers"
    },
    {
      "type": "other",
      "path": "evidence/robots.txt",
      "caption": "robots"
    },
    {
      "type": "other",
      "path": "evidence/sitemap-headers.txt",
      "caption": "sitemap headers"
    },
    {
      "type": "other",
      "path": "evidence/sitemap.xml",
      "caption": "sitemap"
    }
  ],
  "config": {
    "loaded": false
  },
  "coverage": {
    "catalogVersion": "modern-web-guidance@0.0.172",
    "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7",
    "expected": 58,
    "recorded": 58,
    "judged": 58,
    "blocked": 0,
    "notRun": 0,
    "missing": 0,
    "unknown": 0,
    "duplicates": 0,
    "complete": true
  },
  "checkOutcomes": [
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-color-scheme",
      "status": "pass",
      "confidence": "high",
      "method": "emulated-media screenshots, computed-style/animation probe and CSS inspection",
      "evidence": "The dark-preference screenshot uses dark surfaces and computed color-scheme is “light dark”; CSS contains prefers-color-scheme rules.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dark-reduced.png"
      ]
    },
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-reduced-motion",
      "status": "pass",
      "confidence": "high",
      "method": "emulated-media screenshots, computed-style/animation probe and CSS inspection",
      "evidence": "Under emulated reduce, matchMedia is true, no active animations remain, and captured CSS includes prefers-reduced-motion rules.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dark-reduced.png"
      ]
    },
    {
      "principleId": "respect-user-preferences",
      "checkId": "respects-contrast",
      "status": "pass",
      "confidence": "high",
      "method": "emulated-media screenshots, computed-style/animation probe and CSS inspection",
      "evidence": "Lighthouse contrast audit passed and the prefers-contrast screenshot keeps text and controls legible against dark surfaces.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-dark-reduced.png"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "view-transitions",
      "status": "issues",
      "confidence": "high",
      "method": "DOM/CSS feature inspection and carousel screenshot review",
      "evidence": "DOM and CSS captures across the home, charts, login, and game templates contain no view-transition-name, @view-transition, or View Transition API use.",
      "pathIds": [
        "home",
        "game-detail"
      ],
      "artifacts": [
        "evidence/game-dom.json"
      ],
      "findingIds": [
        "F01"
      ]
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "scroll-driven-animations",
      "status": "not-applicable",
      "confidence": "high",
      "method": "DOM/CSS feature inspection and carousel screenshot review",
      "evidence": "The audited templates do not present scrollytelling, parallax, or other scroll-linked animation to evaluate.",
      "reason": "The audited templates do not present scrollytelling, parallax, or other scroll-linked animation to evaluate."
    },
    {
      "principleId": "implement-natural-interactions",
      "checkId": "physical-gestures",
      "status": "issues",
      "confidence": "high",
      "method": "DOM/CSS feature inspection and carousel screenshot review",
      "evidence": "The game DOM contains Back/Next carousel controls, while captured CSS has no scroll-snap or overscroll-behavior rules.",
      "pathIds": [
        "home",
        "game-detail"
      ],
      "artifacts": [
        "evidence/game-dom.json"
      ],
      "findingIds": [
        "F02"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "scroll-state-aware-chrome",
      "status": "pass",
      "confidence": "high",
      "method": "cross-template screenshot and DOM review",
      "evidence": "Screenshots show persistent global navigation across home, login, charts and detail templates without covering content.",
      "pathIds": [
        "home",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/charts.png"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "anchored-positioning",
      "status": "pass",
      "confidence": "high",
      "method": "cross-template screenshot and DOM review",
      "evidence": "Charts filter controls and carousel controls remain attached and within the viewport in desktop and 360px captures; no overlay drift was observed.",
      "pathIds": [
        "home",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/charts.png"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "checkId": "directs-attention",
      "status": "pass",
      "confidence": "high",
      "method": "cross-template screenshot and DOM review",
      "evidence": "Clear headings, selected filters, See All links, and prominent login/signup actions establish the next step on each template.",
      "pathIds": [
        "home",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/charts.png"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "no-intrusive-interruptions",
      "status": "issues",
      "confidence": "high",
      "method": "first-viewport screenshots and semantic DOM inspection",
      "evidence": "Desktop screenshots show the notice covering roughly the lower half of the signup, login, charts, and game surfaces; on 360px it occupies much of the first viewport.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home.png"
      ],
      "findingIds": [
        "F03"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "semantic-dismissible-primitives",
      "status": "issues",
      "confidence": "high",
      "method": "first-viewport screenshots and semantic DOM inspection",
      "evidence": "Rendered DOM contains no <dialog>, role=dialog, or aria-modal element even though the cookie panel visually overlays and blocks underlying content.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home.png"
      ],
      "findingIds": [
        "F04"
      ]
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "checkId": "reduced-chrome",
      "status": "issues",
      "confidence": "high",
      "method": "first-viewport screenshots and semantic DOM inspection",
      "evidence": "Desktop screenshots show the notice covering roughly the lower half of the signup, login, charts, and game surfaces; on 360px it occupies much of the first viewport.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home.png"
      ],
      "findingIds": [
        "F03"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "responsive-no-horizontal-scroll",
      "status": "pass",
      "confidence": "high",
      "method": "360x800 layout metrics, screenshots and focus-style probe",
      "evidence": "All four 360px layout captures report horizontalOverflowPx 0.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home-mobile-layout.json"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "component-level-responsiveness",
      "status": "pass",
      "confidence": "high",
      "method": "360x800 layout metrics, screenshots and focus-style probe",
      "evidence": "The signup, navigation, charts and detail layouts reflow to 360px without horizontal overflow and with reordered controls.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home-mobile-layout.json"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "checkId": "input-modality-aware",
      "status": "pass",
      "confidence": "high",
      "method": "360x800 layout metrics, screenshots and focus-style probe",
      "evidence": "Focused login controls visibly change border color and the login button receives a 1px auto outline; mobile controls are at least about 36–44px high.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home-mobile-layout.json"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "clear-purpose-and-primary-action",
      "status": "pass",
      "confidence": "high",
      "method": "task-path screenshots and form DOM inspection",
      "evidence": "The first view clearly labels signup or login and charts/detail pages use explicit H1 headings and actions.",
      "pathIds": [
        "home",
        "login"
      ],
      "artifacts": [
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "primary-flow-completion",
      "status": "issues",
      "confidence": "high",
      "method": "task-path screenshots and form DOM inspection",
      "evidence": "The home DOM has signup inputs and a type=button submit control but no containing <form>; the no-JS crawler receives only 1% of rendered content.",
      "pathIds": [
        "home",
        "login"
      ],
      "artifacts": [
        "evidence/home-dom.json"
      ],
      "findingIds": [
        "F05"
      ]
    },
    {
      "principleId": "support-core-task-success",
      "checkId": "clear-system-state-and-recovery",
      "status": "pass",
      "confidence": "high",
      "method": "task-path screenshots and form DOM inspection",
      "evidence": "Login DOM includes a polite live region adjacent to password feedback and the site exposes explicit login, signup and navigation recovery paths.",
      "pathIds": [
        "home",
        "login"
      ],
      "artifacts": [
        "evidence/home-dom.json"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "good-core-web-vitals",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse, trace, HAR and layout observers",
      "evidence": "Lighthouse measured FCP 5.3s, LCP 23.3s, TBT 310ms and performance 0.50; the independent trace measured LCP 11.43s.",
      "pathIds": [
        "home",
        "login",
        "game-detail"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ],
      "findingIds": [
        "F06"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "visual-stability",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse, trace, HAR and layout observers",
      "evidence": "The layout primitive observed CLS 0.327 on home, 0.321 on login, and 0.302 on the game detail page at 360px.",
      "pathIds": [
        "home",
        "login",
        "game-detail"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ],
      "findingIds": [
        "F07"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "efficient-main-thread",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse, trace, HAR and layout observers",
      "evidence": "Lighthouse measured FCP 5.3s, LCP 23.3s, TBT 310ms and performance 0.50; the independent trace measured LCP 11.43s.",
      "pathIds": [
        "home",
        "login",
        "game-detail"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ],
      "findingIds": [
        "F06"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "efficient-resource-delivery",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse, trace, HAR and layout observers",
      "evidence": "HAR captured 211 requests and 4,761,272 transferred bytes, including 114 scripts (3,472,865 bytes) and 26 stylesheets; Lighthouse estimates 3,060ms render-blocking savings.",
      "pathIds": [
        "home",
        "login",
        "game-detail"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ],
      "findingIds": [
        "F08"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "checkId": "trim-unused-and-duplicate-code",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse, trace, HAR and layout observers",
      "evidence": "Lighthouse estimates 1,526 KiB unused JavaScript and 118 KiB unused CSS; AngularJsUtilities alone wastes about 466 KiB while React bundles are also loaded.",
      "pathIds": [
        "home",
        "login",
        "game-detail"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ],
      "findingIds": [
        "F09"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "names-roles-labels",
      "status": "pass",
      "confidence": "high",
      "method": "Lighthouse accessibility, DOM labels, focus probe and visual review",
      "evidence": "Lighthouse accessibility scored 1.00; login fields have associated sr-only labels and navigation icon buttons have aria-labels.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "sufficient-contrast",
      "status": "pass",
      "confidence": "high",
      "method": "Lighthouse accessibility, DOM labels, focus probe and visual review",
      "evidence": "Lighthouse color-contrast audit passed and visual captures show strong text/control contrast.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "structure-and-focus",
      "status": "pass",
      "confidence": "high",
      "method": "Lighthouse accessibility, DOM labels, focus probe and visual review",
      "evidence": "Lighthouse accessibility and heading checks passed; DOM includes H1s, a Skip to Main Content control, and focused controls show a border/outline change.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "legible-text",
      "status": "pass",
      "confidence": "high",
      "method": "Lighthouse accessibility, DOM labels, focus probe and visual review",
      "evidence": "Desktop, mobile and Arabic screenshots show readable text sizes, line lengths and spacing without clipping.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ]
    },
    {
      "principleId": "be-inclusive",
      "checkId": "zoom-reflow-targets-and-media",
      "status": "pass",
      "confidence": "high",
      "method": "Lighthouse accessibility, DOM labels, focus probe and visual review",
      "evidence": "Viewport metadata is present and all tested 360px layouts reflow without horizontal overflow; no timed media requiring captions is present.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "no-console-errors",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse best-practices and DOM inspection",
      "evidence": "Lighthouse captured a realtime CORS failure, ERR_FAILED, and a 401 from rotating-client-service during a clean load.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ],
      "findingIds": [
        "F10"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "sound-document-and-assets",
      "status": "pass",
      "confidence": "high",
      "method": "Lighthouse best-practices and DOM inspection",
      "evidence": "Lighthouse confirms a valid doctype and image aspect ratios; DOM captures include viewport metadata and structured headings.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ]
    },
    {
      "principleId": "follow-best-practices",
      "checkId": "browser-platform-hygiene",
      "status": "issues",
      "confidence": "high",
      "method": "Lighthouse best-practices and DOM inspection",
      "evidence": "Lighthouse reports an unload event listener in Sentry.js and two bfcache failure reasons, including UnloadHandlerExistsInMainFrame.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/lighthouse.json"
      ],
      "findingIds": [
        "F11"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "title-and-description",
      "status": "pass",
      "confidence": "high",
      "method": "discoverability primitive, raw metadata, robots and sitemap inspection",
      "evidence": "Home, login, charts and game detail all expose route-specific titles or a clear brand title and meta descriptions in raw HTML.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home-discoverability.json"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "crawlable-and-mobile-friendly",
      "status": "issues",
      "confidence": "high",
      "method": "discoverability primitive, raw metadata, robots and sitemap inspection",
      "evidence": "Discoverability captures found only 1% raw-content coverage on home and 2% on Charts; Charts renders only a navigation shell and “Please enable Javascript” without JS.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home-discoverability.json"
      ],
      "findingIds": [
        "F12"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "canonical-and-indexing-signals",
      "status": "pass",
      "confidence": "high",
      "method": "discoverability primitive, raw metadata, robots and sitemap inspection",
      "evidence": "Home has canonical and hreflang links; robots.txt is valid and declares localized and games sitemaps; audited responses returned 200.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home-discoverability.json"
      ]
    },
    {
      "principleId": "be-discoverable",
      "checkId": "structured-and-shareable-metadata",
      "status": "pass",
      "confidence": "high",
      "method": "discoverability primitive, raw metadata, robots and sitemap inspection",
      "evidence": "Home includes Organization JSON-LD plus Open Graph/Twitter metadata, while the game route preserves title, H1 and description in raw HTML.",
      "pathIds": [
        "home",
        "login",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home-discoverability.json"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "secure-transport-and-headers",
      "status": "issues",
      "confidence": "high",
      "method": "headers, cookies, trackers, HAR, secrets and DOM auth inspection",
      "evidence": "Cookie audit found 5 insecure cookies, including GuestData and RBXEventTrackerV2 without Secure and with 400-day lifetimes; the page is HTTPS.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-headers.json"
      ],
      "findingIds": [
        "F13"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "data-minimisation-and-third-parties",
      "status": "issues",
      "confidence": "high",
      "method": "headers, cookies, trackers, HAR, secrets and DOM auth inspection",
      "evidence": "Tracker evidence observed 16 non-main origins, PerimeterX endpoints, Sentry, metrics and heartbeat requests; HAR attributes 203 requests and 4.74MB to origins classified outside www.roblox.com, mostly Roblox CDNs plus external services.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-headers.json"
      ],
      "findingIds": [
        "F15"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "in-context-permissions-and-modern-auth",
      "status": "pass",
      "confidence": "high",
      "method": "headers, cookies, trackers, HAR, secrets and DOM auth inspection",
      "evidence": "No permission prompt fired on load; login metadata and autocomplete include WebAuthn/passkey support and the secrets scan found no exposed sensitive credentials.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-headers.json"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "checkId": "defensive-browser-policies",
      "status": "issues",
      "confidence": "high",
      "method": "headers, cookies, trackers, HAR, secrets and DOM auth inspection",
      "evidence": "Headers evidence found CSP with unsafe-inline, no X-Content-Type-Options, no Referrer-Policy, and no Permissions-Policy.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-headers.json"
      ],
      "findingIds": [
        "F14"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "progressive-enhancement",
      "status": "issues",
      "confidence": "high",
      "method": "JavaScript-disabled crawler captures and runtime DOM review",
      "evidence": "No-JS captures show home and Charts as near-empty shells (1% and 2% raw coverage); signup has no native form submission path.",
      "pathIds": [
        "home",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home-discoverability-crawler.png"
      ],
      "findingIds": [
        "F16"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "resilient-runtime-behaviour",
      "status": "pass",
      "confidence": "high",
      "method": "JavaScript-disabled crawler captures and runtime DOM review",
      "evidence": "Repeated route captures rendered stable navigation and controls; charts and detail templates remained usable after asynchronous content loading.",
      "pathIds": [
        "home",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home-discoverability-crawler.png"
      ]
    },
    {
      "principleId": "be-resilient",
      "checkId": "offline-and-installable",
      "status": "not-applicable",
      "confidence": "high",
      "method": "JavaScript-disabled crawler captures and runtime DOM review",
      "evidence": "Roblox is a networked game platform whose audited public web entry routes are not intended as an offline or installable PWA.",
      "reason": "Roblox is a networked game platform whose audited public web entry routes are not intended as an offline or installable PWA."
    },
    {
      "principleId": "be-resilient",
      "checkId": "network-and-http-failure-states",
      "status": "pass",
      "confidence": "high",
      "method": "JavaScript-disabled crawler captures and runtime DOM review",
      "evidence": "Login form includes an aria-live feedback region and public routes preserve navigation and alternate account paths when a task cannot proceed.",
      "pathIds": [
        "home",
        "charts",
        "game-detail"
      ],
      "artifacts": [
        "evidence/home-discoverability-crawler.png"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "lang-dir-and-logical-properties",
      "status": "pass",
      "confidence": "high",
      "method": "localized Arabic route screenshot/DOM and hreflang inspection",
      "evidence": "English pages use lang=en; /ar uses lang=ar and the 360px Arabic screenshot correctly mirrors and aligns the interface RTL.",
      "pathIds": [
        "home",
        "arabic-home"
      ],
      "artifacts": [
        "evidence/home-ar-mobile.png"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "locale-aware-data",
      "status": "pass",
      "confidence": "high",
      "method": "localized Arabic route screenshot/DOM and hreflang inspection",
      "evidence": "The site publishes 17 localized alternates and the Arabic route localizes labels, placeholders and consent copy rather than merely translating isolated text.",
      "pathIds": [
        "home",
        "arabic-home"
      ],
      "artifacts": [
        "evidence/home-ar-mobile.png"
      ]
    },
    {
      "principleId": "be-internationalised",
      "checkId": "time-zone-correctness",
      "status": "not-applicable",
      "confidence": "high",
      "method": "localized Arabic route screenshot/DOM and hreflang inspection",
      "evidence": "No event scheduling, local-time promise, or user-visible time-zone-sensitive data appears on the audited public templates.",
      "reason": "No event scheduling, local-time promise, or user-visible time-zone-sensitive data appears on the audited public templates."
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "no-dark-patterns",
      "status": "pass",
      "confidence": "high",
      "method": "signup/login/consent flow and form semantics review",
      "evidence": "Cookie Decline All and Accept All actions have comparable prominence, gender is explicitly optional, and no confirm-shaming copy was observed.",
      "pathIds": [
        "home",
        "login"
      ],
      "artifacts": [
        "evidence/login-form-probe.json"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "humane-error-handling",
      "status": "pass",
      "confidence": "high",
      "method": "signup/login/consent flow and form semantics review",
      "evidence": "Login inputs have labels and a nearby aria-live=polite feedback region; signup guidance avoids real-name use and communicates password length before submission.",
      "pathIds": [
        "home",
        "login"
      ],
      "artifacts": [
        "evidence/login-form-probe.json"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "trustworthy-input-assistance",
      "status": "issues",
      "confidence": "high",
      "method": "signup/login/consent flow and form semantics review",
      "evidence": "Login username correctly uses “username webauthn”, but password has no autocomplete=current-password; signup username uses the nonstandard token signup-username.",
      "pathIds": [
        "home",
        "login"
      ],
      "artifacts": [
        "evidence/login-form-probe.json"
      ],
      "findingIds": [
        "F17"
      ]
    },
    {
      "principleId": "be-trustworthy",
      "checkId": "safe-commercial-and-account-flows",
      "status": "pass",
      "confidence": "high",
      "method": "signup/login/consent flow and form semantics review",
      "evidence": "Login is a dedicated form with username WebAuthn autocomplete, alternate one-time-code/account recovery paths, and no hidden charge or forced purchase in audited flows.",
      "pathIds": [
        "home",
        "login"
      ],
      "artifacts": [
        "evidence/login-form-probe.json"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "optimised-assets",
      "status": "issues",
      "confidence": "high",
      "method": "HAR, images audit, Lighthouse and tracker review",
      "evidence": "Images audit found 9/9 without width and height, all 9 below-fold images not lazy-loaded, 8 without srcset, and two oversized store badges; Lighthouse separately estimated 206 KiB image savings.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-summary.json"
      ],
      "findingIds": [
        "F18"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "no-wasteful-work",
      "status": "issues",
      "confidence": "high",
      "method": "HAR, images audit, Lighthouse and tracker review",
      "evidence": "HAR and tracker evidence include pageHeartbeat and analytics requests during initial load while 114 scripts are fetched and LCP remains delayed.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-summary.json"
      ],
      "findingIds": [
        "F19"
      ]
    },
    {
      "principleId": "be-sustainable",
      "checkId": "third-party-and-media-budget",
      "status": "issues",
      "confidence": "high",
      "method": "HAR, images audit, Lighthouse and tracker review",
      "evidence": "The HAR records 4.76MB across 211 requests before signup, with 3.47MB of scripts and 0.79MB of images; Lighthouse total-byte-weight is only 0.50.",
      "pathIds": [
        "home"
      ],
      "artifacts": [
        "evidence/home-summary.json"
      ],
      "findingIds": [
        "F20"
      ]
    },
    {
      "principleId": "be-agent-ready",
      "checkId": "structured-agent-capabilities",
      "status": "not-applicable",
      "confidence": "high",
      "method": "task applicability judgement plus DOM/source capability inspection",
      "evidence": "The primary product task launches interactive 3D experiences in a native client; exposing autonomous WebMCP actions on the audited public routes is not an appropriate requirement.",
      "reason": "The primary product task launches interactive 3D experiences in a native client; exposing autonomous WebMCP actions on the audited public routes is not an appropriate requirement."
    },
    {
      "principleId": "be-agent-ready",
      "checkId": "on-device-inference",
      "status": "not-applicable",
      "confidence": "high",
      "method": "task applicability judgement plus DOM/source capability inspection",
      "evidence": "The audited signup, login, charts and game-detail routes have no user task that requires on-device language-model or summarization capability.",
      "reason": "The audited signup, login, charts and game-detail routes have no user task that requires on-device language-model or summarization capability."
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "no-leak-under-repeated-interaction",
      "status": "pass",
      "confidence": "high",
      "method": "baseline/post-interaction heap-summary comparison",
      "evidence": "After ten programmatic login submissions, heap self-size decreased from 58,962,813 to 57,566,365 bytes; no retained-growth signal appeared.",
      "pathIds": [
        "login"
      ],
      "artifacts": [
        "evidence/login-heap-baseline.json"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "bounded-footprint",
      "status": "issues",
      "confidence": "high",
      "method": "baseline/post-interaction heap-summary comparison",
      "evidence": "Baseline heap summary contains 865,301 nodes, 3,604,843 edges, and 58,962,813 bytes self-size before a login attempt.",
      "pathIds": [
        "login"
      ],
      "artifacts": [
        "evidence/login-heap-baseline.json"
      ],
      "findingIds": [
        "F21"
      ]
    },
    {
      "principleId": "be-memory-efficient",
      "checkId": "no-detached-dom-or-unbounded-listeners",
      "status": "pass",
      "confidence": "high",
      "method": "baseline/post-interaction heap-summary comparison",
      "evidence": "Baseline/post heap constructor summaries showed no Detached* constructor among top retainers and total self-size fell after repeated interaction.",
      "pathIds": [
        "login"
      ],
      "artifacts": [
        "evidence/login-heap-baseline.json"
      ]
    }
  ],
  "principleOutcomes": [
    {
      "principleId": "respect-user-preferences",
      "expectation": "default",
      "status": "pass"
    },
    {
      "principleId": "implement-natural-interactions",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F01",
        "F02"
      ]
    },
    {
      "principleId": "provide-guided-navigation",
      "expectation": "default",
      "status": "pass"
    },
    {
      "principleId": "maximize-content-reduce-noise",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F03",
        "F04"
      ]
    },
    {
      "principleId": "adapt-to-the-form-factor",
      "expectation": "default",
      "status": "pass"
    },
    {
      "principleId": "support-core-task-success",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F05"
      ]
    },
    {
      "principleId": "be-fast-and-stable",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F06",
        "F07",
        "F08",
        "F09"
      ]
    },
    {
      "principleId": "be-inclusive",
      "expectation": "default",
      "status": "pass"
    },
    {
      "principleId": "follow-best-practices",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F10",
        "F11"
      ]
    },
    {
      "principleId": "be-discoverable",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F12"
      ]
    },
    {
      "principleId": "be-private-and-secure",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F13",
        "F15",
        "F14"
      ]
    },
    {
      "principleId": "be-resilient",
      "expectation": "contextual",
      "status": "issues",
      "findingIds": [
        "F16"
      ]
    },
    {
      "principleId": "be-internationalised",
      "expectation": "contextual",
      "status": "pass"
    },
    {
      "principleId": "be-trustworthy",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F17"
      ]
    },
    {
      "principleId": "be-sustainable",
      "expectation": "contextual",
      "status": "issues",
      "findingIds": [
        "F18",
        "F19",
        "F20"
      ]
    },
    {
      "principleId": "be-agent-ready",
      "expectation": "contextual",
      "status": "not-applicable",
      "reason": "The primary product task launches interactive 3D experiences in a native client; exposing autonomous WebMCP actions on the audited public routes is not an appropriate requirement."
    },
    {
      "principleId": "be-memory-efficient",
      "expectation": "default",
      "status": "issues",
      "findingIds": [
        "F21"
      ]
    }
  ],
  "paths": [
    {
      "id": "home",
      "description": "Guest landing and signup archetype; primary acquisition journey and global consent surface.",
      "url": "https://www.roblox.com/",
      "conditions": [
        "desktop",
        "viewport: 360x800",
        "prefers-color-scheme: dark",
        "prefers-reduced-motion: reduce",
        "prefers-contrast: more",
        "JavaScript disabled"
      ],
      "result": "issues"
    },
    {
      "id": "login",
      "description": "Authentication form archetype; labels, autofill, focus, feedback and repeated-interaction memory test.",
      "url": "https://www.roblox.com/login",
      "conditions": [
        "desktop",
        "viewport: 360x800",
        "JavaScript disabled",
        "keyboard focus"
      ],
      "result": "issues"
    },
    {
      "id": "charts",
      "description": "Public listing/index archetype representing discovery feeds and filter navigation.",
      "url": "https://www.roblox.com/charts",
      "conditions": [
        "desktop",
        "viewport: 360x800",
        "JavaScript disabled"
      ],
      "result": "issues"
    },
    {
      "id": "game-detail",
      "description": "Public experience detail archetype, media carousel and launch entry surface.",
      "url": "https://www.roblox.com/games/72763503064951/Would-You-Rather-Teamwork-Outfit-Tower",
      "conditions": [
        "desktop",
        "viewport: 360x800",
        "JavaScript disabled"
      ],
      "result": "issues"
    },
    {
      "id": "arabic-home",
      "description": "Arabic localized landing template for RTL and translation readiness.",
      "url": "https://www.roblox.com/ar",
      "conditions": [
        "viewport: 360x800",
        "RTL locale"
      ],
      "result": "pass"
    }
  ],
  "findings": [
    {
      "id": "F01",
      "severity": "low",
      "confidence": "high",
      "principleId": "implement-natural-interactions",
      "principleCheckId": "view-transitions",
      "guidanceId": "same-document-transitions",
      "guidanceCategory": "user-experience",
      "summary": "Navigations do not preserve visual continuity.",
      "evidence": "DOM and CSS captures across the home, charts, login, and game templates contain no view-transition-name, @view-transition, or View Transition API use.",
      "suggestedFix": "Add cross-document View Transitions to same-origin MPA navigation, with reduced-motion fallbacks.",
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/charts-dom.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F02",
      "severity": "low",
      "confidence": "high",
      "principleId": "implement-natural-interactions",
      "principleCheckId": "physical-gestures",
      "guidanceId": "physics-based-easing",
      "guidanceCategory": "user-experience",
      "summary": "The media carousel exposes buttons but no native swipe or snap affordance.",
      "evidence": "The game DOM contains Back/Next carousel controls, while captured CSS has no scroll-snap or overscroll-behavior rules.",
      "suggestedFix": "Implement the carousel as an overflow scroller with scroll-snap and retain accessible previous/next controls.",
      "artifacts": [
        "evidence/game-dom.json",
        "evidence/game.png"
      ],
      "effort": "medium",
      "pathId": "game-detail",
      "url": "https://www.roblox.com/games/72763503064951/Would-You-Rather-Teamwork-Outfit-Tower"
    },
    {
      "id": "F03",
      "severity": "medium",
      "confidence": "high",
      "principleId": "maximize-content-reduce-noise",
      "principleCheckId": "no-intrusive-interruptions",
      "guidanceId": "light-dismiss-a-dialog",
      "guidanceCategory": "user-experience",
      "summary": "The cookie notice dominates and obscures the primary task on every public template.",
      "evidence": "Desktop screenshots show the notice covering roughly the lower half of the signup, login, charts, and game surfaces; on 360px it occupies much of the first viewport.",
      "suggestedFix": "Use a compact, content-first consent treatment where legally permitted, preserve equal Decline/Accept prominence, and avoid covering the primary form.",
      "artifacts": [
        "evidence/home.png",
        "evidence/home-mobile.png",
        "evidence/login.png",
        "evidence/charts.png"
      ],
      "effort": "small",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F04",
      "severity": "medium",
      "confidence": "high",
      "principleId": "maximize-content-reduce-noise",
      "principleCheckId": "semantic-dismissible-primitives",
      "guidanceId": "declarative-dialog-popover-control",
      "guidanceCategory": "user-experience",
      "summary": "The blocking cookie notice is not exposed as a semantic dialog.",
      "evidence": "Rendered DOM contains no <dialog>, role=dialog, or aria-modal element even though the cookie panel visually overlays and blocks underlying content.",
      "suggestedFix": "Use a semantic dialog when interaction is modal, manage initial/return focus, and preserve the equally prominent Decline All action.",
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home.png"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F05",
      "severity": "high",
      "confidence": "high",
      "principleId": "support-core-task-success",
      "principleCheckId": "primary-flow-completion",
      "guidanceId": "forms",
      "guidanceCategory": "forms",
      "summary": "Signup is not a native form and depends entirely on JavaScript.",
      "evidence": "The home DOM has signup inputs and a type=button submit control but no containing <form>; the no-JS crawler receives only 1% of rendered content.",
      "suggestedFix": "Wrap signup controls in a real form with an action/method or progressively enhanced submit handler, native submit button, labels, and server-side fallback.",
      "artifacts": [
        "evidence/home-dom.json",
        "evidence/home-discoverability.json",
        "evidence/home-discoverability-crawler.png"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F06",
      "severity": "high",
      "confidence": "high",
      "principleId": "be-fast-and-stable",
      "principleCheckId": "good-core-web-vitals",
      "guidanceId": "schedule-tasks-by-priority",
      "guidanceCategory": "performance",
      "summary": "The unauthenticated landing experience loads far too slowly.",
      "evidence": "Lighthouse measured FCP 5.3s, LCP 23.3s, TBT 310ms and performance 0.50; the independent trace measured LCP 11.43s.",
      "suggestedFix": "Prioritize the LCP resource, shorten the critical request chain, defer nonessential bundles, and schedule noncritical work after initial rendering.",
      "artifacts": [
        "evidence/lighthouse.json",
        "evidence/home-trace-summary.json",
        "evidence/home-trace.json"
      ],
      "effort": "large",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F07",
      "severity": "high",
      "confidence": "high",
      "principleId": "be-fast-and-stable",
      "principleCheckId": "visual-stability",
      "guidanceId": "optimize-image-priority",
      "guidanceCategory": "performance",
      "summary": "Late rendering causes severe layout movement on key templates.",
      "evidence": "The layout primitive observed CLS 0.327 on home, 0.321 on login, and 0.302 on the game detail page at 360px.",
      "suggestedFix": "Reserve space for delayed UI and images, render consent space predictably, and prevent late template injections from moving content.",
      "artifacts": [
        "evidence/home-mobile-layout.json",
        "evidence/login-mobile-layout.json",
        "evidence/game-mobile-layout.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F08",
      "severity": "high",
      "confidence": "high",
      "principleId": "be-fast-and-stable",
      "principleCheckId": "efficient-resource-delivery",
      "guidanceId": "optimize-preload-priority",
      "guidanceCategory": "performance",
      "summary": "The landing page ships an excessive critical network graph.",
      "evidence": "HAR captured 211 requests and 4,761,272 transferred bytes, including 114 scripts (3,472,865 bytes) and 26 stylesheets; Lighthouse estimates 3,060ms render-blocking savings.",
      "suggestedFix": "Bundle by route, inline only critical CSS, defer noncritical styles/scripts, reduce parser-blocking dependencies, and validate resource priorities.",
      "artifacts": [
        "evidence/home.har",
        "evidence/home-summary.json",
        "evidence/lighthouse.json"
      ],
      "effort": "large",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F09",
      "severity": "high",
      "confidence": "high",
      "principleId": "be-fast-and-stable",
      "principleCheckId": "trim-unused-and-duplicate-code",
      "guidanceId": "identify-heavy-scripts",
      "guidanceCategory": "performance",
      "summary": "Most of the initial JavaScript and CSS is unused.",
      "evidence": "Lighthouse estimates 1,526 KiB unused JavaScript and 118 KiB unused CSS; AngularJsUtilities alone wastes about 466 KiB while React bundles are also loaded.",
      "suggestedFix": "Remove legacy framework code from the route, split feature bundles, and load challenge, purchase, presence, and other feature code only on demand.",
      "artifacts": [
        "evidence/lighthouse.json",
        "evidence/home-summary.json"
      ],
      "effort": "large",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F10",
      "severity": "medium",
      "confidence": "high",
      "principleId": "follow-best-practices",
      "principleCheckId": "no-console-errors",
      "guidanceId": "html",
      "guidanceCategory": "html",
      "summary": "The landing page logs runtime and network errors.",
      "evidence": "Lighthouse captured a realtime CORS failure, ERR_FAILED, and a 401 from rotating-client-service during a clean load.",
      "suggestedFix": "Prevent guest-only requests that require authorization, fix CORS configuration, and handle expected failures without console errors.",
      "artifacts": [
        "evidence/lighthouse.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F11",
      "severity": "medium",
      "confidence": "high",
      "principleId": "follow-best-practices",
      "principleCheckId": "browser-platform-hygiene",
      "guidanceId": "html",
      "guidanceCategory": "html",
      "summary": "Deprecated unload handling blocks the back/forward cache.",
      "evidence": "Lighthouse reports an unload event listener in Sentry.js and two bfcache failure reasons, including UnloadHandlerExistsInMainFrame.",
      "suggestedFix": "Replace unload with pagehide/visibilitychange where needed and remove the handler so navigation can use bfcache.",
      "artifacts": [
        "evidence/lighthouse.json"
      ],
      "effort": "small",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F12",
      "severity": "high",
      "confidence": "high",
      "principleId": "be-discoverable",
      "principleCheckId": "crawlable-and-mobile-friendly",
      "guidanceId": "html",
      "guidanceCategory": "html",
      "summary": "Important public listing content is invisible to non-JavaScript crawlers.",
      "evidence": "Discoverability captures found only 1% raw-content coverage on home and 2% on Charts; Charts renders only a navigation shell and “Please enable Javascript” without JS.",
      "suggestedFix": "Server-render or statically render public landing and chart content, including useful links and headings, then hydrate interactions.",
      "artifacts": [
        "evidence/home-discoverability.json",
        "evidence/home-discoverability-crawler.png",
        "evidence/charts-discoverability.json",
        "evidence/charts-discoverability-crawler.png"
      ],
      "effort": "large",
      "pathId": "charts",
      "url": "https://www.roblox.com/charts"
    },
    {
      "id": "F13",
      "severity": "high",
      "confidence": "high",
      "principleId": "be-private-and-secure",
      "principleCheckId": "secure-transport-and-headers",
      "guidanceId": "security",
      "guidanceCategory": "security",
      "summary": "Several first-party cookies are sent without Secure and use SameSite=None.",
      "evidence": "Cookie audit found 5 insecure cookies, including GuestData and RBXEventTrackerV2 without Secure and with 400-day lifetimes; the page is HTTPS.",
      "suggestedFix": "Mark all HTTPS cookies Secure, use Lax or Strict unless cross-site use is essential, minimize retention, and keep sensitive cookies HttpOnly.",
      "artifacts": [
        "evidence/home-cookies.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F14",
      "severity": "high",
      "confidence": "high",
      "principleId": "be-private-and-secure",
      "principleCheckId": "defensive-browser-policies",
      "guidanceId": "security",
      "guidanceCategory": "security",
      "summary": "Browser security policy coverage is incomplete and CSP permits inline script.",
      "evidence": "Headers evidence found CSP with unsafe-inline, no X-Content-Type-Options, no Referrer-Policy, and no Permissions-Policy.",
      "suggestedFix": "Deploy nonce/hash-based CSP without unsafe-inline, add nosniff, a strict referrer policy, and a least-privilege Permissions-Policy.",
      "artifacts": [
        "evidence/home-headers.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F15",
      "severity": "medium",
      "confidence": "high",
      "principleId": "be-private-and-secure",
      "principleCheckId": "data-minimisation-and-third-parties",
      "guidanceId": "privacy",
      "guidanceCategory": "privacy",
      "summary": "The guest landing page has a broad third-party and telemetry footprint.",
      "evidence": "Tracker evidence observed 16 non-main origins, PerimeterX endpoints, Sentry, metrics and heartbeat requests; HAR attributes 203 requests and 4.74MB to origins classified outside www.roblox.com, mostly Roblox CDNs plus external services.",
      "suggestedFix": "Audit each guest-page request, delay optional telemetry until consent, consolidate origins, and remove data collection not required for signup.",
      "artifacts": [
        "evidence/home-trackers.json",
        "evidence/home-summary.json"
      ],
      "effort": "large",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F16",
      "severity": "high",
      "confidence": "high",
      "principleId": "be-resilient",
      "principleCheckId": "progressive-enhancement",
      "guidanceId": "flicker-free-client-side-ab-testing",
      "guidanceCategory": "performance",
      "summary": "Core public and signup content has no useful JavaScript-free baseline.",
      "evidence": "No-JS captures show home and Charts as near-empty shells (1% and 2% raw coverage); signup has no native form submission path.",
      "suggestedFix": "Render core content and native forms in server HTML, then enhance them without replacing the baseline.",
      "artifacts": [
        "evidence/home-discoverability-crawler.png",
        "evidence/charts-discoverability-crawler.png",
        "evidence/home-dom.json"
      ],
      "effort": "large",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F17",
      "severity": "medium",
      "confidence": "high",
      "principleId": "be-trustworthy",
      "principleCheckId": "trustworthy-input-assistance",
      "guidanceId": "autofill-sign-in-form",
      "guidanceCategory": "forms",
      "summary": "Authentication autocomplete tokens are incomplete or invalid.",
      "evidence": "Login username correctly uses “username webauthn”, but password has no autocomplete=current-password; signup username uses the nonstandard token signup-username.",
      "suggestedFix": "Use autocomplete=username for signup identity, new-password for signup password, and current-password for login password.",
      "artifacts": [
        "evidence/login-form-probe.json",
        "evidence/home-dom.json"
      ],
      "effort": "small",
      "pathId": "login",
      "url": "https://www.roblox.com/login"
    },
    {
      "id": "F18",
      "severity": "medium",
      "confidence": "high",
      "principleId": "be-sustainable",
      "principleCheckId": "optimised-assets",
      "guidanceId": "deliver-optimized-decorative-images",
      "guidanceCategory": "performance",
      "summary": "Several images lack sizing, lazy loading, and responsive delivery.",
      "evidence": "Images audit found 9/9 without width and height, all 9 below-fold images not lazy-loaded, 8 without srcset, and two oversized store badges; Lighthouse separately estimated 206 KiB image savings.",
      "suggestedFix": "Add intrinsic dimensions, lazy-load below-fold images, provide responsive srcset/sizes, and convert/compress the oversized PNG asset.",
      "artifacts": [
        "evidence/home-images.json",
        "evidence/lighthouse.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F19",
      "severity": "medium",
      "confidence": "high",
      "principleId": "be-sustainable",
      "principleCheckId": "no-wasteful-work",
      "guidanceId": "efficient-background-processing",
      "guidanceCategory": "performance",
      "summary": "The guest page starts background telemetry and excessive work before the core task is usable.",
      "evidence": "HAR and tracker evidence include pageHeartbeat and analytics requests during initial load while 114 scripts are fetched and LCP remains delayed.",
      "suggestedFix": "Defer analytics and heartbeat work until idle/consent, batch events, and stop nonessential background work when hidden.",
      "artifacts": [
        "evidence/home-summary.json",
        "evidence/home-trackers.json"
      ],
      "effort": "medium",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F20",
      "severity": "high",
      "confidence": "high",
      "principleId": "be-sustainable",
      "principleCheckId": "third-party-and-media-budget",
      "guidanceId": "identify-heavy-scripts",
      "guidanceCategory": "performance",
      "summary": "The initial guest page exceeds a proportionate resource budget.",
      "evidence": "The HAR records 4.76MB across 211 requests before signup, with 3.47MB of scripts and 0.79MB of images; Lighthouse total-byte-weight is only 0.50.",
      "suggestedFix": "Set route-level budgets, cut initial script/image bytes, and hold optional third-party services outside the critical path.",
      "artifacts": [
        "evidence/home-summary.json",
        "evidence/lighthouse.json"
      ],
      "effort": "large",
      "pathId": "home",
      "url": "https://www.roblox.com/"
    },
    {
      "id": "F21",
      "severity": "medium",
      "confidence": "high",
      "principleId": "be-memory-efficient",
      "principleCheckId": "bounded-footprint",
      "guidanceId": "identify-heavy-scripts",
      "guidanceCategory": "performance",
      "summary": "The login route has a very large initial heap footprint.",
      "evidence": "Baseline heap summary contains 865,301 nodes, 3,604,843 edges, and 58,962,813 bytes self-size before a login attempt.",
      "suggestedFix": "Load only login-critical modules, remove legacy/duplicate framework code, and profile constructor growth after bundle splitting.",
      "artifacts": [
        "evidence/login-heap-baseline.json",
        "evidence/lighthouse.json"
      ],
      "effort": "large",
      "pathId": "login",
      "url": "https://www.roblox.com/login"
    }
  ],
  "taskList": [
    {
      "id": "T01",
      "title": "Cut route-level JavaScript, CSS and critical request chains",
      "priority": 1,
      "findingIds": [
        "F06",
        "F08",
        "F09",
        "F20",
        "F21"
      ],
      "guidanceId": "identify-heavy-scripts",
      "status": "open"
    },
    {
      "id": "T02",
      "title": "Server-render public content and progressively enhance native forms",
      "priority": 2,
      "findingIds": [
        "F05",
        "F12",
        "F16"
      ],
      "guidanceId": "html",
      "status": "open"
    },
    {
      "id": "T03",
      "title": "Eliminate late layout shifts across signup, login and detail templates",
      "priority": 3,
      "findingIds": [
        "F07"
      ],
      "guidanceId": "optimize-image-priority",
      "status": "open"
    },
    {
      "id": "T04",
      "title": "Harden cookies, CSP and browser policies",
      "priority": 4,
      "findingIds": [
        "F13",
        "F14"
      ],
      "guidanceId": "security",
      "status": "open"
    },
    {
      "id": "T05",
      "title": "Reduce and defer guest telemetry and third-party work",
      "priority": 5,
      "findingIds": [
        "F15",
        "F19"
      ],
      "guidanceId": "privacy",
      "status": "open"
    },
    {
      "id": "T06",
      "title": "Make consent compact and semantically modal",
      "priority": 6,
      "findingIds": [
        "F03",
        "F04"
      ],
      "guidanceId": "declarative-dialog-popover-control",
      "status": "open"
    },
    {
      "id": "T07",
      "title": "Fix authentication autocomplete tokens",
      "priority": 7,
      "findingIds": [
        "F17"
      ],
      "guidanceId": "autofill-sign-in-form",
      "status": "open"
    },
    {
      "id": "T08",
      "title": "Optimize below-fold and oversized imagery",
      "priority": 8,
      "findingIds": [
        "F18"
      ],
      "guidanceId": "deliver-optimized-decorative-images",
      "status": "open"
    },
    {
      "id": "T09",
      "title": "Remove console errors and unload handlers",
      "priority": 9,
      "findingIds": [
        "F10",
        "F11"
      ],
      "guidanceId": "html",
      "status": "open"
    },
    {
      "id": "T10",
      "title": "Add navigation continuity and native carousel gestures",
      "priority": 10,
      "findingIds": [
        "F01",
        "F02"
      ],
      "guidanceId": "same-document-transitions",
      "status": "open"
    }
  ],
  "budget": {
    "wallClockSeconds": 1800,
    "pathCount": 5,
    "auditPasses": 1
  },
  "agent": "pi",
  "runId": "2026-07-24T06-52-21-594Z"
}