{ "url": "https://homepage.vivo.com", "auditedAt": "2026-07-24T07:23:07.503Z", "mode": "report", "status": "completed", "statusDetail": "Coverage complete. The target is a single hash-routed OEM browser start portal; no additional internal routes, sitemap, or links were exposed. The public entry rendered a live failure state, which was audited rather than treated as a bot block.", "page": { "appType": "spa", "framework": "Vue (compiled Vux/Vue-style scoped CSS and #app shell)", "notes": "Single #/ route. Desktop and mobile, search input state, forced colors, dark/reduced-motion preferences, no-JS crawler view, network/security, performance, and repeated input memory behaviour were covered. No distinct listing/detail/account/checkout route exists in the rendered DOM; robots.txt and sitemap.xml return 404." }, "evidenceUsed": [ "screenshot", "dom", "evaluate-probe", "layout-metrics", "trace", "har", "discoverability", "images", "headers", "cookies", "trackers", "secrets", "heap-summary", "lighthouse (including axe-core accessibility audits)", "Modern Web Guidance 0.0.172 search/retrieve" ], "guidanceConsulted": [ "accessibility", "accessible-error-announcement", "adapt-scrollbar-to-contrast-preferences", "agentic-forms", "agentic-javascript-tools", "anchor-positioning-tab-underline", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "animated-select-picker", "apply-webgl-shaders", "autofill-address-form", "autofill-highlight-inputs", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "batch-analytics-events", "brand-consistent-forms", "branded-select-styling", "break-up-long-tasks", "calculate-event-differentials", "calculate-total-foreground-time", "calculate-with-intrinsic-sizes", "capture-location-agnostic-data", "carousel-slide-effects", "carousel-snap-highlights", "child-state-based-styling", "complex-shapes", "component-specific-light-dark-theme", "conditional-async-dependencies", "consistent-cross-document-transitions", "content-based-styling", "coordinate-global-events", "cross-document-transitions", "css", "css-layout", "custom-select-picker-layouts", "customize-scrollbar-color-and-thickness", "dark-mode", "declarative-button-actions", "declarative-dialog-popover-control", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "deliver-optimized-decorative-images", "deprioritize-background-fetches", "design-token-reactivity", "detect-initial-visibility-state", "directional-navigation-transitions", "dynamic-sibling-animations", "dynamic-sibling-styling", "efficient-background-processing", "export-html-media-from-canvas", "expose-canvas-content-to-browser-features", "faster-spa-view-transitions", "flicker-free-client-side-ab-testing", "fluid-scaling", "form-fields-automatically-fit-contents", "format-human-readable-durations", "forms", "full-session-analytics", "group-element-transitions", "highlight-text-ranges", "html", "identify-heavy-scripts", "identify-inp-causes", "improve-next-page-load-performance", "improve-text-layout-and-legibility", "individual-transform-properties", "interactions-in-complex-layouts", "interactive-content-in-3d-scenes", "interactive-content-reveal", "interest-triggered-action-previews", "interest-triggered-tooltips", "language-detection", "language-model", "light-dismiss-a-dialog", "manage-recurring-intervals", "model-partial-time-concepts", "move-dom-element-without-losing-state", "navigation-drawer", "optimize-image-priority", "optimize-preload-priority", "optimize-script-priority", "overflow-clipping-control", "parallax-scroll-effects", "passkey-authentication", "passkey-conditional-create", "passkey-management", "passkey-reauthentication", "passkey-registration", "passkeys", "performance", "persistent-app-tours", "persistent-toast-notifications", "persistent-top-layer-ui", "physics-based-easing", "platform-controls-dismiss-dialog", "position-aware-tooltips", "precise-text-alignment", "prevent-text-wrapping", "privacy", "pull-to-reveal", "reduce-style-repetition", "required-field-feedback", "resilient-context-menus-and-nested-dropdowns", "resolution-optimized-pseudo-elements", "rich-media-picker", "same-document-transitions", "schedule-tasks-by-priority", "scroll-entry-exit-effects", "scroll-position-aware-elements", "scroll-progress-indicator", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "scrollability-affordance-hints", "scrollytelling", "search-hidden-content", "security", "select-menu-interaction", "sequence-distributed-events", "shaped-cutouts", "shrinking-header-on-scroll", "size-aware-styling", "soft-edge-content-fade", "stabilize-reactive-state", "stack-drill-down", "style-parent-with-has", "summarizer", "support-global-calendar-systems", "swipe-to-remove", "translator", "validate-input-after-interaction", "visually-stable-font-fallbacks", "visually-stable-mixed-fonts", "visually-texture-content", "webmcp" ], "artifacts": [ { "type": "screenshot", "path": "evidence/contrast-mobile.png", "caption": "contrast mobile", "condition": "forced-colors: active / prefers-contrast: more", "findingIds": [] }, { "type": "other", "path": "evidence/cookies.json", "caption": "cookies", "findingIds": [ "F23" ] }, { "type": "screenshot", "path": "evidence/dark-mobile.png", "caption": "dark mobile", "condition": "prefers-color-scheme: dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "discoverability crawler", "findingIds": [ "F27", "F29" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "discoverability rendered", "findingIds": [ "F27" ] }, { "type": "discoverability", "path": "evidence/discoverability.json", "caption": "discoverability", "findingIds": [ "F27" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "headers", "findingIds": [ "F23", "F26" ] }, { "type": "heap", "path": "evidence/heap-baseline.heapsnapshot", "caption": "heap baseline", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post.heapsnapshot", "caption": "heap post", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "home desktop", "findingIds": [ "F03", "F14" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "home dom", "findingIds": [] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "home mobile", "condition": "viewport: 360x800", "findingIds": [ "F05", "F06", "F07", "F12", "F18", "F25", "F28", "F30" ] }, { "type": "other", "path": "evidence/images.json", "caption": "images", "findingIds": [ "F17", "F33" ] }, { "type": "layout", "path": "evidence/layout-mobile.json", "caption": "layout mobile", "condition": "viewport: 360x800", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse-summary.json", "caption": "lighthouse summary", "findingIds": [ "F08", "F09", "F10", "F11", "F12", "F13", "F14", "F15", "F16", "F18", "F19", "F25", "F28", "F31", "F34" ] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "lighthouse", "findingIds": [ "F08" ] }, { "type": "har-summary", "path": "evidence/load-summary.json", "caption": "load summary", "findingIds": [ "F09", "F10", "F24", "F34", "F35" ] }, { "type": "trace-summary", "path": "evidence/load-trace-summary.json", "caption": "load trace summary", "findingIds": [ "F08" ] }, { "type": "trace", "path": "evidence/load-trace.json", "caption": "load trace", "findingIds": [] }, { "type": "har", "path": "evidence/load.har", "caption": "load", "findingIds": [] }, { "type": "other", "path": "evidence/probe.json", "caption": "probe", "findingIds": [ "F01", "F02", "F04", "F05", "F11", "F13", "F15", "F19", "F20", "F21", "F22", "F29", "F31", "F32" ] }, { "type": "other", "path": "evidence/recon.json", "caption": "recon", "findingIds": [ "F20", "F21", "F29" ] }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "reduced motion", "findingIds": [] }, { "type": "other", "path": "evidence/runtime-detail.json", "caption": "runtime detail", "findingIds": [ "F01", "F03", "F06", "F07", "F28", "F30" ] }, { "type": "other", "path": "evidence/search-flow.json", "caption": "search flow", "findingIds": [ "F02", "F04", "F06" ] }, { "type": "other", "path": "evidence/secret-context.json", "caption": "secret context", "findingIds": [ "F23" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "secrets", "findingIds": [ "F23" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "trackers", "findingIds": [ "F24", "F35" ] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The dark-mode capture is pixel-identical to the light mobile capture and computed color-scheme is normal; both stylesheets contain no prefers-color-scheme rule.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/dark-mobile.png", "evidence/probe.json", "evidence/runtime-detail.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "Under prefers-reduced-motion: reduce, the active page reported zero Web Animations; the current error/search state had no running non-essential motion.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/reduced-motion.json" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "The forced-colors/high-contrast screenshot retained visible text, search affordance, error illustration, and Refresh text against the system black canvas.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/contrast-mobile.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "The only exercised state change, typing in search, updated the search affordance without relocating content or producing an abrupt route swap; the site exposes no internal route links.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/search-flow.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "The page has no scroll-linked visual effect to implement; CSS inspection found no animation-timeline usage, and layout/trace found no long task during load.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/runtime-detail.json", "evidence/layout-mobile.json" ] }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "DOM and visual inspection found no swipe, drag, carousel, pull-to-refresh, or custom pointer-driven surface that fights native scrolling.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/home-mobile.png", "evidence/probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "At 360x800 the content size equals the viewport and exposes no scroll-dependent navigation chrome; there is no hidden scroll state requiring a cue.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/layout-mobile.json", "evidence/home-mobile.png" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "DOM inspection found no dialog, popover, tooltip, menu, or anchored overlay on the only page surface.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/probe.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The error recovery is a non-focusable DIV and the search button is a non-focusable DIV; the search-flow probe leaves focus on the 20px input with no programmatic cue to the failed content.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/search-flow.json", "evidence/probe.json" ], "findingIds": [ "F02" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "Desktop and mobile load screenshots show no modal, consent wall, interstitial, or content-obscuring banner.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-desktop.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "DOM inspection found zero dialog, popover, or disclosure surfaces, so there is no ad-hoc overlay implementation on the audited page.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/probe.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "Screenshots show a sparse content-first canvas with a search field, shortcuts, and one error state rather than a heavy application frame.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-desktop.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "At 360x800, layout measured scrollWidth=clientWidth=360 and horizontalOverflowPx=0; viewport meta is present.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/layout-mobile.json" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "At 1440px, the phone-specific message and sparse mobile controls stretch across the full width while content stays tiny; CSS inspection found no container queries.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/home-desktop.png", "evidence/runtime-detail.json" ], "findingIds": [ "F03" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The only focusable control is a 170x20 input with outline none; search and Refresh are DIVs without role/tabindex, so keyboard users cannot activate them.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/probe.json", "evidence/search-flow.json" ], "findingIds": [ "F04" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Both viewports lead with a location instruction, empty shortcut placeholders, and “Unable to open web page”; there is no heading or descriptive primary action.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/home-mobile.png", "evidence/probe.json" ], "findingIds": [ "F05" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The init endpoint returns {retcode:20000}; the rendered page says “Unable to open web page”. Search submission is a DIV unavailable to keyboard users.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/home-mobile.png", "evidence/runtime-detail.json", "evidence/search-flow.json" ], "findingIds": [ "F06" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The page gives no failure cause or alternate path, and Refresh is a non-focusable DIV with no role or keyboard activation.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/home-mobile.png", "evidence/runtime-detail.json" ], "findingIds": [ "F07" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Lighthouse measured LCP 5.6s (score 0.17), although the unthrottled trace measured 1.67s; the error illustration became the LCP.", "pathIds": [ "global-network" ], "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json", "evidence/load-trace-summary.json" ], "findingIds": [ "F08" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "Layout measured CLS 0.022 and Lighthouse measured 0.021, both within the good range.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/layout-mobile.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "The trace recorded zero long tasks and 0 ms total blocking time; Lighthouse TBT was 28.5 ms.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/load-trace-summary.json", "evidence/lighthouse-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "HAR found ten resources without useful cache headers and an uncompressed 40KB ad SDK; Lighthouse says the LCP image is not initial-document discoverable or fetch-prioritised.", "pathIds": [ "global-network" ], "artifacts": [ "evidence/load-summary.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Lighthouse estimates 323KiB unused JavaScript; HAR shows 468,797 of 639,530 transferred bytes are third-party, led by DoubleClick and GTM.", "pathIds": [ "global-network" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/load-summary.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Lighthouse found 11 images without alt, an unlabeled search input, and no main landmark; Refresh/search actions are generic DIVs.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/probe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Lighthouse measured contrast ratios 2.84:1 and 2.92:1 for the location instruction and error message against white, below 4.5:1.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The page has no headings or landmarks; focusing the only input yields outline none and no box shadow, while action DIVs cannot receive focus.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/probe.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The location text is 13px at 2.84:1 and the error text is 14px at 2.92:1; on desktop it remains visually tiny amid a very wide canvas.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/home-desktop.png", "evidence/lighthouse-summary.json" ], "findingIds": [ "F14" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Viewport content includes maximum-scale=1 and user-scalable=no; Lighthouse fails meta-viewport and the focus probe measures a 20px-high search input.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/probe.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F15" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Lighthouse captured TypeError: Cannot read properties of null (reading exposeLink) in home.aa123ac2.js.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/lighthouse-summary.json" ], "findingIds": [ "F16" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The images primitive found 11/11 images without width/height; the 548px error PNG is displayed at 180px and has no responsive source.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F17" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Lighthouse geolocation-on-start fails at home.aa123ac2.js; the page immediately instructs users to enable positioning before an intentional user action.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png" ], "findingIds": [ "F18" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The title is only “Homepage” and no meta description is present.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/probe.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Rendered DOM contains zero anchors, while the viewport disables scaling; robots.txt returns a branded nginx 404.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/recon.json", "evidence/probe.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "No canonical or hreflang is present; robots.txt and sitemap.xml both return 404.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/recon.json", "evidence/probe.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Probe found zero Open Graph tags and zero JSON-LD blocks despite a public branded start page.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/probe.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The bundle exposes an API_KEY plus SECRET used to derive weather access keys. All four cookies use SameSite=None and three analytics cookies lack Secure; CSP and HSTS are absent.", "pathIds": [ "global-network" ], "artifacts": [ "evidence/secrets.json", "evidence/secret-context.json", "evidence/cookies.json", "evidence/headers.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Tracker capture found nine third-party origins including DoubleClick, GTM and Google Analytics; HAR attributes 73% of transferred bytes to third parties.", "pathIds": [ "global-network" ], "artifacts": [ "evidence/trackers.json", "evidence/load-summary.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Lighthouse directly flags geolocation-on-start before the user chooses weather or location functionality; authentication is not present and does not affect this failure.", "pathIds": [ "global-network" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png" ], "findingIds": [ "F25" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Headers inspection found no CSP, HSTS, nosniff, frame protection, Referrer-Policy, or Permissions-Policy.", "pathIds": [ "global-network" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Discoverability found 0% rendered-word coverage in raw HTML; the crawler screenshot is blank while the browser view contains the error/search UI.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-crawler.png", "evidence/discoverability-rendered.png" ], "findingIds": [ "F27" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "A null exposeLink access throws during load and the init API returns only retcode 20000, leaving empty shortcut placeholders and a failed shell.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png", "evidence/runtime-detail.json" ], "findingIds": [ "F28" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "DOM/runtime probes found no manifest, no service-worker controller, and raw HTML contains no usable fallback content.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/recon.json", "evidence/probe.json", "evidence/discoverability-crawler.png" ], "findingIds": [ "F29" ] }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The init response is {retcode:20000}; the page renders “Unable to open web page” with a non-semantic Refresh DIV and no alternative core route.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/runtime-detail.json", "evidence/home-mobile.png" ], "findingIds": [ "F30" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Both DOM probe and Lighthouse show an empty html lang attribute; assistive technology cannot determine the English page language.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/probe.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F31" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "The init request sends language=en-GB rather than hard-coding a display locale; no successfully rendered dates, currencies, or durations contradicted this.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/runtime-detail.json" ] }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and surface inventory", "evidence": "The only locale-sensitive surface is weather, which did not render; the audited page exposes no events, recurring times, or cross-zone scheduling to test.", "reason": "The only locale-sensitive surface is weather, which did not render; the audited page exposes no events, recurring times, or cross-zone scheduling to test.", "pathIds": [ "home-mobile" ] }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "Visual and DOM review found no consent wall, subscription, upsell, disguised ad control, confirmshaming, or forced-continuity flow.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/home-mobile.png", "evidence/probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "The only input is a free-form search field with no required/validity constraints; no premature validation or blame-oriented form error is present.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/home-mobile.png", "evidence/probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "The only search input explicitly sets autocomplete=off and has no label or placeholder, reducing recognition and browser assistance.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/probe.json" ], "findingIds": [ "F32" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "not-applicable", "confidence": "high", "method": "Recon and surface inventory", "evidence": "The single-page start portal exposes no checkout, subscription, authentication, consent-management, or account flow.", "reason": "The single-page start portal exposes no checkout, subscription, authentication, consent-management, or account flow.", "pathIds": [ "home-mobile" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "All 11 images lack dimensions; the 548px PNG error asset is rendered at 180px with no srcset and no modern-format alternative.", "pathIds": [ "global-network" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F33" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "HAR transfers 468,797 third-party bytes and Lighthouse identifies 323KiB unused JavaScript while the core content remains an error shell.", "pathIds": [ "global-network" ], "artifacts": [ "evidence/load-summary.json", "evidence/lighthouse-summary.json" ], "findingIds": [ "F34" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Multi-modal evidence review against the mapped check and consulted guidance", "evidence": "Eleven third-party requests transfer 468,797 of 639,530 bytes; DoubleClick alone transfers 262,404 bytes on a sparse failed page.", "pathIds": [ "global-network" ], "artifacts": [ "evidence/load-summary.json", "evidence/trackers.json" ], "findingIds": [ "F35" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and surface inventory", "evidence": "This OEM browser start portal exposes search/news/weather, but no agent-facing transaction or productivity capability where WebMCP tooling would be expected.", "reason": "This OEM browser start portal exposes search/news/weather, but no agent-facing transaction or productivity capability where WebMCP tooling would be expected.", "pathIds": [ "home-mobile" ] }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and surface inventory", "evidence": "No summarisation, generation, or other inference task is present in the audited start-page experience.", "reason": "No summarisation, generation, or other inference task is present in the audited start-page experience.", "pathIds": [ "home-mobile" ] }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "After ten representative focus/type/clear/blur cycles, heap self size was 9.04 MB versus 8.90 MB baseline (+1.6%) and node count +0.4%; closure count fell, with no evidence of unbounded retained growth.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "Heap summaries measured 8.90-9.04 MB self size for the loaded portal, a proportionate bounded footprint despite third-party scripts.", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "medium", "method": "Direct visual, DOM, runtime, layout, trace, or heap evidence targeted to this check", "evidence": "Neither heap summary listed a Detached* constructor among retained populations; ten input cycles did not increase closure count (13,936 to 13,918).", "pathIds": [ "home-mobile" ], "artifacts": [ "evidence/heap-baseline.heapsnapshot", "evidence/heap-post.heapsnapshot" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "pass" }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F02" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "pass" }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F03", "F04" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "issues", "findingIds": [ "F05", "F06", "F07" ] }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F08", "F09", "F10" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12", "F13", "F14", "F15" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F16", "F17", "F18" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F19", "F20", "F21", "F22" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F23", "F24", "F25", "F26" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "issues", "findingIds": [ "F27", "F28", "F29", "F30" ] }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F31" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F32" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F33", "F34", "F35" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "All checks were judged not applicable to this portal based on its observed surfaces." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home-desktop", "description": "Public entry at a wide viewport, representing desktop form-factor adaptation.", "url": "https://homepage.vivo.com/", "conditions": [ "viewport: 1440x900" ], "result": "issues" }, { "id": "home-mobile", "description": "Primary OEM start-page route and live failure/recovery state at mobile size.", "url": "https://homepage.vivo.com/#/", "conditions": [ "viewport: 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active", "keyboard focus" ], "result": "issues" }, { "id": "search-flow", "description": "Representative primary interaction: focus and type into search; inspect submission control semantics and state.", "url": "https://homepage.vivo.com/#/", "conditions": [ "keyboard-only", "10 repeated focus/type/clear cycles for memory" ], "result": "issues" }, { "id": "crawler-no-js", "description": "Raw HTML and JavaScript-disabled crawler representation of the only public route.", "url": "https://homepage.vivo.com/", "conditions": [ "JavaScript disabled", "crawler user agent" ], "result": "issues" }, { "id": "global-network", "description": "Global load, performance, transport, headers, cookies, third parties, credentials, assets, and runtime health.", "url": "https://homepage.vivo.com/", "conditions": [ "mobile Lighthouse throttling", "6-second HAR/trace window" ], "result": "issues" } ], "findings": [ { "id": "F01", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "severity": "medium", "confidence": "high", "summary": "Dark preference is ignored", "evidence": "The dark-mode capture is pixel-identical to the light mobile capture and computed color-scheme is normal; both stylesheets contain no prefers-color-scheme rule.", "artifacts": [ "evidence/dark-mobile.png", "evidence/probe.json", "evidence/runtime-detail.json" ], "suggestedFix": "Declare color-scheme and provide preference-driven dark surface/text tokens with a usable light fallback.", "effort": "small", "guidanceId": "dark-mode" }, { "id": "F02", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "provide-guided-navigation", "principleCheckId": "directs-attention", "severity": "medium", "confidence": "high", "summary": "Recovery and search state changes do not guide keyboard attention", "evidence": "The error recovery is a non-focusable DIV and the search button is a non-focusable DIV; the search-flow probe leaves focus on the 20px input with no programmatic cue to the failed content.", "artifacts": [ "evidence/search-flow.json", "evidence/probe.json" ], "suggestedFix": "Use semantic buttons/links, move or announce focus when state changes, and expose clear directional recovery.", "effort": "small", "guidanceId": "persistent-toast-notifications" }, { "id": "F03", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "severity": "medium", "confidence": "high", "summary": "Desktop is a stretched mobile layout rather than an adapted form factor", "evidence": "At 1440px, the phone-specific message and sparse mobile controls stretch across the full width while content stays tiny; CSS inspection found no container queries.", "artifacts": [ "evidence/home-desktop.png", "evidence/runtime-detail.json" ], "suggestedFix": "Introduce responsive component containers and cap/recompose the start-page layout for wide screens.", "effort": "small", "guidanceId": "size-aware-styling" }, { "id": "F04", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "severity": "high", "confidence": "high", "summary": "Primary controls are too small and not keyboard operable", "evidence": "The only focusable control is a 170x20 input with outline none; search and Refresh are DIVs without role/tabindex, so keyboard users cannot activate them.", "artifacts": [ "evidence/probe.json", "evidence/search-flow.json" ], "suggestedFix": "Use button elements for search and Refresh, provide visible :focus-visible styles, and make targets at least 24x24 CSS px (prefer 44x44 for primary touch actions).", "effort": "medium", "guidanceId": "accessibility" }, { "id": "F05", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "support-core-task-success", "principleCheckId": "clear-purpose-and-primary-action", "severity": "high", "confidence": "high", "summary": "The entry page does not communicate a working purpose", "evidence": "Both viewports lead with a location instruction, empty shortcut placeholders, and “Unable to open web page”; there is no heading or descriptive primary action.", "artifacts": [ "evidence/home-mobile.png", "evidence/probe.json" ], "suggestedFix": "Render a clear start-page heading and working search/news shortcuts even when weather or personalisation APIs fail.", "effort": "medium", "guidanceId": "improve-text-layout-and-legibility" }, { "id": "F06", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "support-core-task-success", "principleCheckId": "primary-flow-completion", "severity": "critical", "confidence": "high", "summary": "The public entry experience fails its core load and search action is pointer-only", "evidence": "The init endpoint returns {retcode:20000}; the rendered page says “Unable to open web page”. Search submission is a DIV unavailable to keyboard users.", "artifacts": [ "evidence/home-mobile.png", "evidence/runtime-detail.json", "evidence/search-flow.json" ], "suggestedFix": "Fix the init response/handling so core content loads independently of device metadata, and implement search with a semantic form and submit button.", "effort": "medium", "guidanceId": "forms" }, { "id": "F07", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "support-core-task-success", "principleCheckId": "clear-system-state-and-recovery", "severity": "high", "confidence": "high", "summary": "Failure recovery is vague and inaccessible", "evidence": "The page gives no failure cause or alternate path, and Refresh is a non-focusable DIV with no role or keyboard activation.", "artifacts": [ "evidence/home-mobile.png", "evidence/runtime-detail.json" ], "suggestedFix": "Explain what failed, preserve search access, and provide a semantic Retry button with an announced loading/error/result state.", "effort": "medium", "guidanceId": "persistent-toast-notifications" }, { "id": "F08", "pathId": "global-network", "url": "https://homepage.vivo.com/", "principleId": "be-fast-and-stable", "principleCheckId": "good-core-web-vitals", "severity": "high", "confidence": "high", "summary": "LCP is slow under Lighthouse mobile conditions", "evidence": "Lighthouse measured LCP 5.6s (score 0.17), although the unthrottled trace measured 1.67s; the error illustration became the LCP.", "artifacts": [ "evidence/lighthouse.json", "evidence/lighthouse-summary.json", "evidence/load-trace-summary.json" ], "suggestedFix": "Make the LCP resource discoverable in initial HTML, prioritise it when it is meaningful, and avoid delaying core content on device/API initialisation.", "effort": "medium", "guidanceId": "optimize-image-priority" }, { "id": "F09", "pathId": "global-network", "url": "https://homepage.vivo.com/", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "severity": "medium", "confidence": "high", "summary": "Critical delivery and cache hygiene are weak", "evidence": "HAR found ten resources without useful cache headers and an uncompressed 40KB ad SDK; Lighthouse says the LCP image is not initial-document discoverable or fetch-prioritised.", "artifacts": [ "evidence/load-summary.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Add immutable caching for hashed assets, compression for text, and expose/prioritise the LCP candidate without blocking core content.", "effort": "small", "guidanceId": "optimize-preload-priority" }, { "id": "F10", "pathId": "global-network", "url": "https://homepage.vivo.com/", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "severity": "high", "confidence": "high", "summary": "Unused ad and analytics JavaScript dominates the small page", "evidence": "Lighthouse estimates 323KiB unused JavaScript; HAR shows 468,797 of 639,530 transferred bytes are third-party, led by DoubleClick and GTM.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/load-summary.json" ], "suggestedFix": "Remove non-essential ad/analytics vendors, conditionally load remaining scripts after core content, and split the page bundle.", "effort": "medium", "guidanceId": "identify-heavy-scripts" }, { "id": "F11", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "severity": "high", "confidence": "high", "summary": "The accessibility tree lacks names and semantics", "evidence": "Lighthouse found 11 images without alt, an unlabeled search input, and no main landmark; Refresh/search actions are generic DIVs.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/probe.json" ], "suggestedFix": "Add meaningful or empty alt text, a label for search, semantic buttons, and a main landmark.", "effort": "medium", "guidanceId": "accessibility" }, { "id": "F12", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "severity": "high", "confidence": "high", "summary": "Status text fails WCAG contrast", "evidence": "Lighthouse measured contrast ratios 2.84:1 and 2.92:1 for the location instruction and error message against white, below 4.5:1.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png" ], "suggestedFix": "Use darker status text tokens that meet at least 4.5:1 in normal mode while retaining forced-colors support.", "effort": "medium", "guidanceId": "accessibility" }, { "id": "F13", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "severity": "high", "confidence": "high", "summary": "There is no semantic structure or visible keyboard focus", "evidence": "The page has no headings or landmarks; focusing the only input yields outline none and no box shadow, while action DIVs cannot receive focus.", "artifacts": [ "evidence/probe.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Add a logical h1/main structure and visible :focus-visible treatment; use native controls in reading order.", "effort": "medium", "guidanceId": "accessibility" }, { "id": "F14", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-inclusive", "principleCheckId": "legible-text", "severity": "medium", "confidence": "high", "summary": "Tiny low-contrast status text harms readability", "evidence": "The location text is 13px at 2.84:1 and the error text is 14px at 2.92:1; on desktop it remains visually tiny amid a very wide canvas.", "artifacts": [ "evidence/home-desktop.png", "evidence/lighthouse-summary.json" ], "suggestedFix": "Increase status text size/line-height, constrain line length, and use compliant color tokens.", "effort": "small", "guidanceId": "improve-text-layout-and-legibility" }, { "id": "F15", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "severity": "high", "confidence": "high", "summary": "The viewport disables zoom and the primary input target is only 20px high", "evidence": "Viewport content includes maximum-scale=1 and user-scalable=no; Lighthouse fails meta-viewport and the focus probe measures a 20px-high search input.", "artifacts": [ "evidence/probe.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Remove user-scalable=no/maximum-scale, preserve reflow at zoom, and enlarge interactive targets.", "effort": "medium", "guidanceId": "fluid-scaling" }, { "id": "F16", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "follow-best-practices", "principleCheckId": "no-console-errors", "severity": "medium", "confidence": "high", "summary": "The page throws during load", "evidence": "Lighthouse captured TypeError: Cannot read properties of null (reading exposeLink) in home.aa123ac2.js.", "artifacts": [ "evidence/lighthouse-summary.json" ], "suggestedFix": "Null-check the ad/link object and prevent optional integrations from throwing during core page setup.", "effort": "small", "guidanceId": "html" }, { "id": "F17", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "severity": "medium", "confidence": "high", "summary": "Images lack intrinsic dimensions and one is oversized", "evidence": "The images primitive found 11/11 images without width/height; the 548px error PNG is displayed at 180px and has no responsive source.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Set intrinsic width/height or aspect-ratio and serve an appropriately sized modern-format error image.", "effort": "small", "guidanceId": "html" }, { "id": "F18", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "follow-best-practices", "principleCheckId": "browser-platform-hygiene", "severity": "high", "confidence": "high", "summary": "Geolocation is requested on page load", "evidence": "Lighthouse geolocation-on-start fails at home.aa123ac2.js; the page immediately instructs users to enable positioning before an intentional user action.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png" ], "suggestedFix": "Request location only after a user activates a clearly explained weather feature; keep search and core content independent.", "effort": "medium", "guidanceId": "security" }, { "id": "F19", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-discoverable", "principleCheckId": "title-and-description", "severity": "medium", "confidence": "high", "summary": "Metadata is generic and incomplete", "evidence": "The title is only “Homepage” and no meta description is present.", "artifacts": [ "evidence/probe.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Use a unique descriptive title and concise description explaining the Vivo start/search experience.", "effort": "small", "guidanceId": "html" }, { "id": "F20", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-discoverable", "principleCheckId": "crawlable-and-mobile-friendly", "severity": "high", "confidence": "high", "summary": "The page has no crawlable links and blocks user zoom", "evidence": "Rendered DOM contains zero anchors, while the viewport disables scaling; robots.txt returns a branded nginx 404.", "artifacts": [ "evidence/recon.json", "evidence/probe.json" ], "suggestedFix": "Use real href links for shortcuts, permit zoom, and publish a valid robots.txt.", "effort": "medium", "guidanceId": "html" }, { "id": "F21", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "severity": "medium", "confidence": "high", "summary": "Canonical, sitemap, and language indexing signals are absent", "evidence": "No canonical or hreflang is present; robots.txt and sitemap.xml both return 404.", "artifacts": [ "evidence/recon.json", "evidence/probe.json" ], "suggestedFix": "Publish canonical and locale signals, plus consistent robots.txt and sitemap.xml for the public page.", "effort": "small", "guidanceId": "html" }, { "id": "F22", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "severity": "low", "confidence": "high", "summary": "The public organization/start page has no share metadata", "evidence": "Probe found zero Open Graph tags and zero JSON-LD blocks despite a public branded start page.", "artifacts": [ "evidence/probe.json" ], "suggestedFix": "Add accurate Open Graph metadata and minimal Organization/WebSite JSON-LD matching visible content.", "effort": "small", "guidanceId": "html" }, { "id": "F23", "pathId": "global-network", "url": "https://homepage.vivo.com/", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "severity": "critical", "confidence": "high", "summary": "Client credentials and cookie/header defenses are unsafe", "evidence": "The bundle exposes an API_KEY plus SECRET used to derive weather access keys. All four cookies use SameSite=None and three analytics cookies lack Secure; CSP and HSTS are absent.", "artifacts": [ "evidence/secrets.json", "evidence/secret-context.json", "evidence/cookies.json", "evidence/headers.json" ], "suggestedFix": "Rotate the exposed credential, move request signing server-side, set Secure/SameSite cookies, and deploy CSP and HSTS.", "effort": "medium", "guidanceId": "security" }, { "id": "F24", "pathId": "global-network", "url": "https://homepage.vivo.com/", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "severity": "high", "confidence": "high", "summary": "Tracking and ad vendors dominate network use without visible consent", "evidence": "Tracker capture found nine third-party origins including DoubleClick, GTM and Google Analytics; HAR attributes 73% of transferred bytes to third parties.", "artifacts": [ "evidence/trackers.json", "evidence/load-summary.json" ], "suggestedFix": "Remove unnecessary trackers and ad bidders, gate optional analytics on informed consent, and batch/minimise telemetry.", "effort": "medium", "guidanceId": "privacy" }, { "id": "F25", "pathId": "global-network", "url": "https://homepage.vivo.com/", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "severity": "high", "confidence": "high", "summary": "Location permission is requested out of context on load", "evidence": "Lighthouse directly flags geolocation-on-start before the user chooses weather or location functionality; authentication is not present and does not affect this failure.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png" ], "suggestedFix": "Defer geolocation until a user invokes weather/location and explain the benefit immediately before the browser prompt.", "effort": "medium", "guidanceId": "privacy" }, { "id": "F26", "pathId": "global-network", "url": "https://homepage.vivo.com/", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "severity": "high", "confidence": "high", "summary": "The response omits all inspected browser defense headers", "evidence": "Headers inspection found no CSP, HSTS, nosniff, frame protection, Referrer-Policy, or Permissions-Policy.", "artifacts": [ "evidence/headers.json" ], "suggestedFix": "Deploy a restrictive CSP (including frame-ancestors), HSTS, nosniff, strict referrer policy, and a least-privilege Permissions-Policy.", "effort": "medium", "guidanceId": "security" }, { "id": "F27", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-resilient", "principleCheckId": "progressive-enhancement", "severity": "high", "confidence": "high", "summary": "Core content disappears without JavaScript", "evidence": "Discoverability found 0% rendered-word coverage in raw HTML; the crawler screenshot is blank while the browser view contains the error/search UI.", "artifacts": [ "evidence/discoverability.json", "evidence/discoverability-crawler.png", "evidence/discoverability-rendered.png" ], "suggestedFix": "Server-render the core search/navigation and failure content, then hydrate enhancements progressively.", "effort": "medium", "guidanceId": "stabilize-reactive-state" }, { "id": "F28", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-resilient", "principleCheckId": "resilient-runtime-behaviour", "severity": "high", "confidence": "high", "summary": "Optional integrations can break runtime behaviour", "evidence": "A null exposeLink access throws during load and the init API returns only retcode 20000, leaving empty shortcut placeholders and a failed shell.", "artifacts": [ "evidence/lighthouse-summary.json", "evidence/home-mobile.png", "evidence/runtime-detail.json" ], "suggestedFix": "Isolate optional ads/weather/news, guard null data, and render stable fallback shortcuts/search when integrations fail.", "effort": "medium", "guidanceId": "conditional-async-dependencies" }, { "id": "F29", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-resilient", "principleCheckId": "offline-and-installable", "severity": "medium", "confidence": "high", "summary": "The app-like portal has no install or offline baseline", "evidence": "DOM/runtime probes found no manifest, no service-worker controller, and raw HTML contains no usable fallback content.", "artifacts": [ "evidence/recon.json", "evidence/probe.json", "evidence/discoverability-crawler.png" ], "suggestedFix": "Add a manifest and service worker only if installability is intended; regardless, cache and serve an offline search/navigation fallback.", "effort": "small", "guidanceId": "detect-initial-visibility-state" }, { "id": "F30", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-resilient", "principleCheckId": "network-and-http-failure-states", "severity": "high", "confidence": "high", "summary": "The live API failure collapses the page into a dead-end shell", "evidence": "The init response is {retcode:20000}; the page renders “Unable to open web page” with a non-semantic Refresh DIV and no alternative core route.", "artifacts": [ "evidence/runtime-detail.json", "evidence/home-mobile.png" ], "suggestedFix": "Handle API/network errors per feature, keep core navigation usable, and offer an accessible retry with actionable diagnostics.", "effort": "medium", "guidanceId": "persistent-toast-notifications" }, { "id": "F31", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "severity": "high", "confidence": "high", "summary": "Document language is missing", "evidence": "Both DOM probe and Lighthouse show an empty html lang attribute; assistive technology cannot determine the English page language.", "artifacts": [ "evidence/probe.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Set an accurate lang attribute from the active locale and use dir/logical properties for translated layouts.", "effort": "medium", "guidanceId": "translator" }, { "id": "F32", "pathId": "home-mobile", "url": "https://homepage.vivo.com/", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "severity": "medium", "confidence": "high", "summary": "Search disables browser input assistance", "evidence": "The only search input explicitly sets autocomplete=off and has no label or placeholder, reducing recognition and browser assistance.", "artifacts": [ "evidence/probe.json" ], "suggestedFix": "Label the search field and use an appropriate autocomplete/search configuration instead of blanket autocomplete=off.", "effort": "small", "guidanceId": "autofill-highlight-inputs" }, { "id": "F33", "pathId": "global-network", "url": "https://homepage.vivo.com/", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "severity": "medium", "confidence": "high", "summary": "Image delivery is not resolution-aware", "evidence": "All 11 images lack dimensions; the 548px PNG error asset is rendered at 180px with no srcset and no modern-format alternative.", "artifacts": [ "evidence/images.json" ], "suggestedFix": "Serve right-sized WebP/AVIF where appropriate and include dimensions/responsive sources.", "effort": "small", "guidanceId": "deliver-optimized-decorative-images" }, { "id": "F34", "pathId": "global-network", "url": "https://homepage.vivo.com/", "principleId": "be-sustainable", "principleCheckId": "no-wasteful-work", "severity": "high", "confidence": "high", "summary": "The failed page still loads substantial advertising and analytics work", "evidence": "HAR transfers 468,797 third-party bytes and Lighthouse identifies 323KiB unused JavaScript while the core content remains an error shell.", "artifacts": [ "evidence/load-summary.json", "evidence/lighthouse-summary.json" ], "suggestedFix": "Do not load ad bidders/analytics until core content succeeds and a relevant surface needs them; conditionally defer background work.", "effort": "medium", "guidanceId": "deprioritize-background-fetches" }, { "id": "F35", "pathId": "global-network", "url": "https://homepage.vivo.com/", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "severity": "high", "confidence": "high", "summary": "Third parties consume 73% of page bytes", "evidence": "Eleven third-party requests transfer 468,797 of 639,530 bytes; DoubleClick alone transfers 262,404 bytes on a sparse failed page.", "artifacts": [ "evidence/load-summary.json", "evidence/trackers.json" ], "suggestedFix": "Set a strict third-party byte budget, remove redundant ad/analytics vendors, and lazy-load any remaining integration after user value.", "effort": "medium", "guidanceId": "efficient-background-processing" } ], "taskList": [ { "id": "T01", "title": "Restore a resilient core start/search experience", "priority": 1, "findingIds": [ "F05", "F06", "F07", "F27", "F28", "F30" ], "guidanceId": "forms", "status": "open" }, { "id": "T02", "title": "Replace DIV actions with labelled keyboard and touch controls", "priority": 2, "findingIds": [ "F02", "F04", "F11", "F13", "F15" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T03", "title": "Remove exposed signing secrets and deploy browser security policies", "priority": 3, "findingIds": [ "F23", "F26" ], "guidanceId": "security", "status": "open" }, { "id": "T04", "title": "Reduce and defer tracking/ad JavaScript", "priority": 4, "findingIds": [ "F10", "F24", "F34", "F35" ], "guidanceId": "identify-heavy-scripts", "status": "open" }, { "id": "T05", "title": "Fix language, contrast, zoom, alt text, and landmarks", "priority": 5, "findingIds": [ "F11", "F12", "F13", "F14", "F15", "F31" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T06", "title": "Server-render crawlable core content and complete metadata", "priority": 6, "findingIds": [ "F19", "F20", "F21", "F22", "F27" ], "guidanceId": "html", "status": "open" }, { "id": "T07", "title": "Improve LCP, cache/compress hashed assets, and right-size images", "priority": 7, "findingIds": [ "F08", "F09", "F17", "F33" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T08", "title": "Defer geolocation until an intentional weather action", "priority": 8, "findingIds": [ "F18", "F25" ], "guidanceId": "privacy", "status": "open" }, { "id": "T09", "title": "Add preference-driven dark colors and wide-layout adaptation", "priority": 9, "findingIds": [ "F01", "F03" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T10", "title": "Label and re-enable appropriate search input assistance", "priority": 10, "findingIds": [ "F32" ], "guidanceId": "autofill-highlight-inputs", "status": "open" } ], "budget": { "pathCount": 5, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-24T07-14-52-036Z" }