{ "url": "https://rule34video.com", "auditedAt": "2026-07-27T08:05:00.000Z", "mode": "report", "status": "completed", "statusDetail": "Coverage-complete audit across six representative paths. The mandatory age-verification state was inspected but not bypassed; server-rendered DOM and direct routes supplied evidence for listing, search, detail, authentication and failure templates.", "page": { "appType": "mpa", "framework": "server-rendered KVS-style MPA", "notes": "Public adult media catalog with a third-party age-verification entry state, search/listing/detail templates, authentication and extensive advertising." }, "evidenceUsed": [ "screenshot", "dom", "layout-metrics", "evaluate-probe", "axe-core", "discoverability", "trace", "har", "headers", "cookies", "trackers", "images", "secrets", "heap-summary", "raw HTTP", "Lighthouse attempted (429, no scores used)" ], "guidanceConsulted": [ "dark-mode", "component-specific-light-dark-theme", "accessibility", "adapt-scrollbar-to-contrast-preferences", "same-document-transitions", "cross-document-transitions", "group-element-transitions", "faster-spa-view-transitions", "scrollytelling", "parallax-scroll-effects", "scroll-entry-exit-effects", "carousel-slide-effects", "physics-based-easing", "individual-transform-properties", "animate-element-entry-exit", "animate-to-from-top-layer", "animate-to-intrinsic-sizes", "dynamic-sibling-animations", "interactive-content-reveal", "pull-to-reveal", "swipe-to-remove", "shrinking-header-on-scroll", "scroll-progress-indicator", "scroll-position-aware-elements", "scroll-snap-realtime-feedback", "scroll-snap-state-sync", "scroll-target-on-load", "soft-edge-content-fade", "scrollability-affordance-hints", "anchor-positioning-tab-underline", "position-aware-tooltips", "interest-triggered-tooltips", "interest-triggered-action-previews", "directional-navigation-transitions", "carousel-snap-highlights", "navigation-drawer", "stack-drill-down", "persistent-app-tours", "persistent-toast-notifications", "light-dismiss-a-dialog", "platform-controls-dismiss-dialog", "declarative-dialog-popover-control", "animated-select-picker", "branded-select-styling", "brand-consistent-forms", "custom-select-picker-layouts", "rich-media-picker", "complex-shapes", "shaped-cutouts", "overflow-clipping-control", "visually-texture-content", "apply-webgl-shaders", "interactive-content-in-3d-scenes", "highlight-text-ranges", "prevent-text-wrapping", "customize-scrollbar-color-and-thickness", "export-html-media-from-canvas", "fluid-scaling", "calculate-with-intrinsic-sizes", "css-layout", "size-aware-styling", "content-based-styling", "child-state-based-styling", "design-token-reactivity", "dynamic-sibling-styling", "form-fields-automatically-fit-contents", "improve-text-layout-and-legibility", "forms", "accessible-error-announcement", "required-field-feedback", "validate-input-after-interaction", "identify-inp-causes", "schedule-tasks-by-priority", "optimize-preload-priority", "improve-next-page-load-performance", "interactions-in-complex-layouts", "performance", "visually-stable-font-fallbacks", "break-up-long-tasks", "identify-heavy-scripts", "optimize-script-priority", "defer-rendering-heavy-content", "defer-work-until-scroll-ends", "optimize-image-priority", "conditional-async-dependencies", "expose-canvas-content-to-browser-features", "move-dom-element-without-losing-state", "precise-text-alignment", "visually-stable-mixed-fonts", "css", "html", "reduce-style-repetition", "security", "privacy", "batch-analytics-events", "full-session-analytics", "calculate-total-foreground-time", "passkeys", "passkey-registration", "passkey-authentication", "passkey-reauthentication", "passkey-conditional-create", "passkey-management", "flicker-free-client-side-ab-testing", "consistent-cross-document-transitions", "stabilize-reactive-state", "resilient-context-menus-and-nested-dropdowns", "persistent-top-layer-ui", "detect-initial-visibility-state", "sequence-distributed-events", "translator", "language-detection", "support-global-calendar-systems", "capture-location-agnostic-data", "format-human-readable-durations", "manage-recurring-intervals", "calculate-event-differentials", "coordinate-global-events", "model-partial-time-concepts", "search-hidden-content", "select-menu-interaction", "style-parent-with-has", "autofill-address-form", "autofill-payment-form", "autofill-sign-in-form", "autofill-sign-up-form", "autofill-highlight-inputs", "deliver-optimized-decorative-images", "resolution-optimized-pseudo-elements", "deprioritize-background-fetches", "efficient-background-processing", "webmcp", "agentic-forms", "agentic-javascript-tools", "language-model", "summarizer" ], "artifacts": [ { "type": "screenshot", "path": "evidence/home-desktop.png", "caption": "Homepage at desktop width showing the mandatory age-verification state.", "condition": "viewport 1440x1000", "findingIds": [ "F05" ] }, { "type": "screenshot", "path": "evidence/home-mobile.png", "caption": "Homepage age-verification state on mobile.", "condition": "viewport 360x800", "findingIds": [ "F04", "F07", "F12" ] }, { "type": "screenshot", "path": "evidence/home-dark.png", "caption": "Homepage under dark preference.", "condition": "prefers-color-scheme: dark", "findingIds": [ "F01" ] }, { "type": "screenshot", "path": "evidence/home-high-contrast.png", "caption": "Homepage under forced colors and increased contrast.", "condition": "forced-colors: active; prefers-contrast: more", "findingIds": [] }, { "type": "layout", "path": "evidence/home-mobile-layout.json", "caption": "Mobile layout metrics and CLS/long-task observation.", "condition": "viewport 360x800", "findingIds": [ "F04" ] }, { "type": "dom", "path": "evidence/home-dom.json", "caption": "Rendered homepage DOM, CSS and computed styles.", "condition": "default", "findingIds": [ "F13" ] }, { "type": "other", "path": "evidence/recon.json", "caption": "Headings, links, forms, metadata and route recon.", "condition": "default", "findingIds": [ "F03", "F06", "F13", "F22", "F23" ] }, { "type": "other", "path": "evidence/ui-probe.json", "caption": "Focus, target-size and modern CSS feature probe.", "condition": "keyboard focus", "findingIds": [ "F01", "F03", "F07", "F08", "F13", "F14", "F22" ] }, { "type": "other", "path": "evidence/reduced-motion.json", "caption": "Animation probe under reduced motion.", "condition": "prefers-reduced-motion: reduce", "findingIds": [ "F02" ] }, { "type": "other", "path": "evidence/axe.json", "caption": "axe-core WCAG 2 A/AA results.", "condition": "default", "findingIds": [ "F08", "F11", "F12" ] }, { "type": "discoverability", "path": "evidence/discoverability", "caption": "Raw HTML versus rendered discoverability result.", "condition": "JavaScript and no-JavaScript", "findingIds": [] }, { "type": "screenshot", "path": "evidence/discoverability-crawler.png", "caption": "Crawler/no-JavaScript homepage view.", "condition": "JavaScript disabled", "findingIds": [ "F06", "F23" ] }, { "type": "screenshot", "path": "evidence/discoverability-rendered.png", "caption": "Rendered homepage comparison view.", "condition": "JavaScript enabled", "findingIds": [] }, { "type": "trace", "path": "evidence/home-trace", "caption": "DevTools performance trace.", "condition": "load", "findingIds": [] }, { "type": "trace-summary", "path": "evidence/home-trace-summary.json", "caption": "Compact performance timing and long-task summary.", "condition": "load", "findingIds": [] }, { "type": "har", "path": "evidence/home-network", "caption": "HAR 1.2 network capture.", "condition": "load plus 6s", "findingIds": [] }, { "type": "har-summary", "path": "evidence/home-network-summary.json", "caption": "Compact network, third-party and resource summary.", "condition": "load plus 6s", "findingIds": [ "F09", "F10", "F19", "F26" ] }, { "type": "other", "path": "evidence/headers.json", "caption": "Security response header audit.", "condition": "main document", "findingIds": [ "F18", "F21" ] }, { "type": "other", "path": "evidence/cookies.json", "caption": "Cookie security audit.", "condition": "main document", "findingIds": [ "F18" ] }, { "type": "other", "path": "evidence/trackers.json", "caption": "Third-party and known-tracker inventory.", "condition": "load", "findingIds": [ "F10", "F19", "F23", "F26" ] }, { "type": "other", "path": "evidence/images.json", "caption": "Image dimensions, responsive-source, format and alt audit.", "condition": "homepage", "findingIds": [ "F09", "F15", "F25" ] }, { "type": "other", "path": "evidence/secrets.json", "caption": "Client-visible secret scan; no findings.", "condition": "homepage", "findingIds": [] }, { "type": "other", "path": "evidence/platform-probe.json", "caption": "Manifest, service worker, scripts and semantic primitive probe.", "condition": "homepage", "findingIds": [ "F05", "F09" ] }, { "type": "screenshot", "path": "evidence/detail-desktop.png", "caption": "Representative detail page entry state.", "condition": "viewport 1440x1000", "findingIds": [] }, { "type": "other", "path": "evidence/detail-metadata.json", "caption": "VideoObject, media track and share metadata probe.", "condition": "detail", "findingIds": [ "F14", "F17" ] }, { "type": "other", "path": "evidence/search-flow.json", "caption": "Search journey result DOM.", "condition": "q=test", "findingIds": [] }, { "type": "other", "path": "evidence/login-probe.json", "caption": "Login/autofill/WebAuthn probe.", "condition": "login", "findingIds": [ "F20", "F24" ] }, { "type": "screenshot", "path": "evidence/not-found-mobile.png", "caption": "Unknown-route entry state.", "condition": "viewport 360x800", "findingIds": [] }, { "type": "other", "path": "evidence/http-signals.txt", "caption": "robots, sitemap and HTTP status evidence.", "condition": "raw HTTP", "findingIds": [ "F16" ] }, { "type": "heap", "path": "evidence/heap-baseline", "caption": "Baseline heap summary.", "condition": "homepage after load", "findingIds": [] }, { "type": "heap", "path": "evidence/heap-post-scroll", "caption": "Heap summary after ten down/up scroll cycles.", "condition": "repeated interaction", "findingIds": [] }, { "type": "other", "path": "evidence/runtime-errors.json", "caption": "Five-second runtime error observation.", "condition": "post-load", "findingIds": [] }, { "type": "lighthouse", "path": "evidence/lighthouse.json", "caption": "Lighthouse attempt retained; target rate-limited with HTTP 429, so no Lighthouse scores were used.", "condition": "attempted load", "findingIds": [] } ], "config": { "loaded": false }, "coverage": { "catalogVersion": "modern-web-guidance@0.0.172", "catalogChecksum": "sha256:78ccfdb2d483f4c57d9dafed80fd86c6265585a56457c8dcfddc254b80fb44d7", "expected": 58, "recorded": 58, "judged": 58, "blocked": 0, "notRun": 0, "missing": 0, "unknown": 0, "duplicates": 0, "complete": true }, "checkOutcomes": [ { "principleId": "respect-user-preferences", "checkId": "respects-color-scheme", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The CSS probe found no color-scheme, prefers-color-scheme or light-dark() support; the computed root color-scheme is normal and the dark-emulated capture is unchanged.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-dark.png", "evidence/ui-probe.json" ], "findingIds": [ "F01" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-reduced-motion", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "With prefers-reduced-motion: reduce, four animations were still running, including infinite 8s, 10s and 1.5s animations; no reduced-motion rule was found.", "pathIds": [ "home" ], "artifacts": [ "evidence/reduced-motion.json" ], "findingIds": [ "F02" ] }, { "principleId": "respect-user-preferences", "checkId": "respects-contrast", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Forced-colors capture preserved readable text and a strong cyan focus boundary on the age gate.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-high-contrast.png" ] }, { "principleId": "implement-natural-interactions", "checkId": "view-transitions", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The CSS probe found no view-transition usage across an MPA whose primary task moves among listing, search and detail routes.", "pathIds": [ "home" ], "artifacts": [ "evidence/ui-probe.json", "evidence/recon.json" ], "findingIds": [ "F03" ] }, { "principleId": "implement-natural-interactions", "checkId": "scroll-driven-animations", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths.", "evidence": "No scroll-linked parallax, reveal or scrollytelling interaction was present on the representative paths.", "reason": "No scroll-linked parallax, reveal or scrollytelling interaction was present on the representative paths." }, { "principleId": "implement-natural-interactions", "checkId": "physical-gestures", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "CSS and DOM probes found native scrolling and controls with no custom pointermove-driven gesture layer fighting the platform.", "pathIds": [ "home" ], "artifacts": [ "evidence/ui-probe.json", "evidence/home-dom.json" ] }, { "principleId": "provide-guided-navigation", "checkId": "scroll-state-aware-chrome", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The homepage is about 4600px tall on mobile, while the CSS probe found no scroll-state, progress or scroll-position-aware treatment.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "findingIds": [ "F04" ] }, { "principleId": "provide-guided-navigation", "checkId": "anchored-positioning", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths.", "evidence": "No tooltip or edge-sensitive anchored overlay owned by the site was present in the audited public paths.", "reason": "No tooltip or edge-sensitive anchored overlay owned by the site was present in the audited public paths." }, { "principleId": "provide-guided-navigation", "checkId": "directs-attention", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Search results, tags and detail routes expose descriptive real links and clear result/detail headings in rendered DOM.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/search-flow.json", "evidence/detail-metadata.json" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "no-intrusive-interruptions", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "The only full-viewport interruption is the clearly worded, legally relevant age-verification step; it has one primary action and survives mobile/high-contrast conditions.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-desktop.png", "evidence/home-mobile.png", "evidence/home-high-contrast.png" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "semantic-dismissible-primitives", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The platform probe found zero dialog, popover and details elements; filtering and the full-viewport age-verification state are custom/third-party UI.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json", "evidence/home-desktop.png" ], "findingIds": [ "F05" ] }, { "principleId": "maximize-content-reduce-noise", "checkId": "reduced-chrome", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The crawler capture shows outbound promotional links such as “AI Jerk Off” and ThePornDude styled beside Tags, Login and Signup, competing with the content task.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability-crawler.png", "evidence/recon.json" ], "findingIds": [ "F06" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "responsive-no-horizontal-scroll", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "At 360x800 the layout primitive measured scrollWidth=clientWidth=360, zero horizontal overflow, and a viewport meta tag.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "component-level-responsiveness", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The responsive probe found no @container/container-type usage across reused listing and filter components, although narrow layout itself had no overflow.", "pathIds": [ "home" ], "artifacts": [ "evidence/ui-probe.json", "evidence/home-mobile.png" ], "findingIds": [ "F07" ] }, { "principleId": "adapt-to-the-form-factor", "checkId": "input-modality-aware", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "A scripted focus walk found outline:none and no focus box shadow on menu, search and many navigation controls; several icon buttons also had no text.", "pathIds": [ "home" ], "artifacts": [ "evidence/ui-probe.json", "evidence/axe.json" ], "findingIds": [ "F08" ] }, { "principleId": "support-core-task-success", "checkId": "clear-purpose-and-primary-action", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Crawler and rendered DOM show a clear newest-video catalog, descriptive item links, search, tags and filtering.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability-crawler.png", "evidence/recon.json" ] }, { "principleId": "support-core-task-success", "checkId": "primary-flow-completion", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "A GET search for test returned 1,595 results and the selected detail URL exposed its h1, video and metadata end to end.", "pathIds": [ "home" ], "artifacts": [ "evidence/search-flow.json", "evidence/detail-metadata.json" ] }, { "principleId": "support-core-task-success", "checkId": "clear-system-state-and-recovery", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "The search route names its result state and an unknown route returned a real HTTP 404 with a dedicated Page not Found document.", "pathIds": [ "home" ], "artifacts": [ "evidence/search-flow.json", "evidence/http-signals.txt", "evidence/not-found-mobile.png" ] }, { "principleId": "be-fast-and-stable", "checkId": "good-core-web-vitals", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Trace measured FCP/LCP 1377ms, 25.88ms total blocking time, and layout measured CLS 0.000028; these lab signals are in good ranges.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/home-mobile-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "visual-stability", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Mobile layout observation measured CLS 0.000028 with only one tiny shift.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile-layout.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-main-thread", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Trace found two long tasks, longest 68.11ms, with only 25.88ms total blocking time over the capture.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json" ] }, { "principleId": "be-fast-and-stable", "checkId": "efficient-resource-delivery", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "HAR recorded 63 requests and 837,392 transferred bytes. A synchronous parser-inserted AgeVerif script is in the head, and the images audit found 20 missing dimensions and 35 images without srcset.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-network-summary.json", "evidence/images.json", "evidence/platform-probe.json" ], "findingIds": [ "F09" ] }, { "principleId": "be-fast-and-stable", "checkId": "trim-unused-and-duplicate-code", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "HAR recorded 20 script requests and 431,807 script bytes; Google Tag Manager alone transferred 169,277 bytes, and third parties transferred 355,031 bytes overall.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-network-summary.json", "evidence/trackers.json" ], "findingIds": [ "F10" ] }, { "principleId": "be-inclusive", "checkId": "names-roles-labels", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "axe found critical button-name failures for the burger and search buttons, serious frame-title failures for two iframes, a critical unlabeled selector, and three unnamed links.", "pathIds": [ "home" ], "artifacts": [ "evidence/axe.json" ], "findingIds": [ "F11" ] }, { "principleId": "be-inclusive", "checkId": "sufficient-contrast", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "axe reported six serious color-contrast failures with another 44 nodes requiring review, including buttons, body copy and header text.", "pathIds": [ "home" ], "artifacts": [ "evidence/axe.json", "evidence/home-mobile.png" ], "findingIds": [ "F12" ] }, { "principleId": "be-inclusive", "checkId": "structure-and-focus", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "Rendered DOM has no h1, main or nav landmark, and the focus probe shows outlines removed from the first core controls.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/ui-probe.json", "evidence/home-dom.json" ], "findingIds": [ "F13" ] }, { "principleId": "be-inclusive", "checkId": "legible-text", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Mobile and forced-colors captures show readable line lengths and no clipping or horizontal overflow; specific contrast failures are recorded separately.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-mobile.png", "evidence/home-high-contrast.png", "evidence/home-mobile-layout.json" ] }, { "principleId": "be-inclusive", "checkId": "zoom-reflow-targets-and-media", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The representative detail page contains a video element with zero track elements; several footer links also measured only 17px high.", "pathIds": [ "home" ], "artifacts": [ "evidence/detail-metadata.json", "evidence/ui-probe.json" ], "findingIds": [ "F14" ] }, { "principleId": "follow-best-practices", "checkId": "no-console-errors", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "A five-second active post-load observation captured window errors, unhandled rejections and console.error calls and recorded none.", "pathIds": [ "home" ], "artifacts": [ "evidence/runtime-errors.json" ] }, { "principleId": "follow-best-practices", "checkId": "sound-document-and-assets", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The images audit found 20 images without width/height, 19 oversized images, 20 legacy-format images and no modern-format images among 55 inspected images.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F15" ] }, { "principleId": "follow-best-practices", "checkId": "browser-platform-hygiene", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "The page did not request notification or geolocation during repeated loads; controls remained paste-capable and public routes used normal HTTPS navigation. Lighthouse was attempted but rate-limited.", "pathIds": [ "home" ], "artifacts": [ "evidence/platform-probe.json", "evidence/lighthouse.json" ] }, { "principleId": "be-discoverable", "checkId": "title-and-description", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Homepage and video detail expose descriptive titles and meta descriptions; detail title is content-specific.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/detail-metadata.json" ] }, { "principleId": "be-discoverable", "checkId": "crawlable-and-mobile-friendly", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Links use real href values, viewport meta is present, and robots.txt allows public content while restricting private/action routes.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/home-dom.json", "evidence/http-signals.txt" ] }, { "principleId": "be-discoverable", "checkId": "canonical-and-indexing-signals", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "/sitemap.xml returned 404 while a nonstandard /sitemap/ endpoint returned XML; robots.txt does not advertise that endpoint. Canonicals and successful public pages otherwise worked.", "pathIds": [ "home" ], "artifacts": [ "evidence/http-signals.txt" ], "findingIds": [ "F16" ] }, { "principleId": "be-discoverable", "checkId": "structured-and-shareable-metadata", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The detail page has useful VideoObject JSON-LD but zero Open Graph tags, so shared previews cannot reliably represent its title, thumbnail and canonical URL.", "pathIds": [ "detail" ], "artifacts": [ "evidence/detail-metadata.json" ], "findingIds": [ "F17" ] }, { "principleId": "be-private-and-secure", "checkId": "secure-transport-and-headers", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "Ten of 12 observed cookies lacked Secure; several use SameSite=None. HSTS is absent and CSP only upgrades insecure requests rather than restricting script sources.", "pathIds": [ "home" ], "artifacts": [ "evidence/cookies.json", "evidence/headers.json" ], "findingIds": [ "F18" ] }, { "principleId": "be-private-and-secure", "checkId": "data-minimisation-and-third-parties", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "Tracker evidence found 14 third-party origins including Google Analytics; HAR counted 26 third-party requests and 355,031 bytes. Request URLs expose detailed device, plugin, canvas, locale and graphics signals to ad domains.", "pathIds": [ "home" ], "artifacts": [ "evidence/trackers.json", "evidence/home-network-summary.json" ], "findingIds": [ "F19" ] }, { "principleId": "be-private-and-secure", "checkId": "in-context-permissions-and-modern-auth", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The login page exposes email and password fields with no autocomplete tokens and no WebAuthn/PublicKeyCredential integration.", "pathIds": [ "login" ], "artifacts": [ "evidence/login-probe.json" ], "findingIds": [ "F20" ] }, { "principleId": "be-private-and-secure", "checkId": "defensive-browser-policies", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "Headers include X-Frame-Options, nosniff and Referrer-Policy, but omit HSTS and Permissions-Policy; CSP contains only upgrade-insecure-requests.", "pathIds": [ "home" ], "artifacts": [ "evidence/headers.json" ], "findingIds": [ "F21" ] }, { "principleId": "be-resilient", "checkId": "progressive-enhancement", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Discoverability fetch measured 100% rendered-word coverage in raw HTML, with title and description present and no empty JS shell.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability", "evidence/discoverability-crawler.png", "evidence/discoverability-rendered.png" ] }, { "principleId": "be-resilient", "checkId": "resilient-runtime-behaviour", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Search, taxonomy and detail templates rendered server-side and remained usable despite aborted ad/stat requests recorded by HAR.", "pathIds": [ "home" ], "artifacts": [ "evidence/search-flow.json", "evidence/home-network-summary.json", "evidence/detail-metadata.json" ] }, { "principleId": "be-resilient", "checkId": "offline-and-installable", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths.", "evidence": "This public media catalog is not presented as an installable app; offline video access is not a proportionate requirement. The malformed manifest is noted in evidence but not penalised here.", "reason": "This public media catalog is not presented as an installable app; offline video access is not a proportionate requirement. The malformed manifest is noted in evidence but not penalised here." }, { "principleId": "be-resilient", "checkId": "network-and-http-failure-states", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "An unknown route returned HTTP 404 and a dedicated Page not Found document rather than a 200 shell or blank screen.", "pathIds": [ "home" ], "artifacts": [ "evidence/http-signals.txt", "evidence/not-found-mobile.png" ] }, { "principleId": "be-internationalised", "checkId": "lang-dir-and-logical-properties", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The document correctly declares lang=en, but the CSS probe found no logical inline/block properties and the root has no explicit direction.", "pathIds": [ "home" ], "artifacts": [ "evidence/recon.json", "evidence/ui-probe.json" ], "findingIds": [ "F22" ] }, { "principleId": "be-internationalised", "checkId": "locale-aware-data", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths.", "evidence": "The audited public task does not accept or present locale-sensitive currencies, editable numbers, or user dates requiring locale formatting.", "reason": "The audited public task does not accept or present locale-sensitive currencies, editable numbers, or user dates requiring locale formatting." }, { "principleId": "be-internationalised", "checkId": "time-zone-correctness", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths.", "evidence": "No scheduling, event coordination or user-entered time-zone data exists in the representative paths.", "reason": "No scheduling, event coordination or user-entered time-zone data exists in the representative paths." }, { "principleId": "be-trustworthy", "checkId": "no-dark-patterns", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The rendered crawler view places promotional outbound destinations among Tags, Login and Signup, while ad iframes are untitled and ad scripts come from opaque domains.", "pathIds": [ "home" ], "artifacts": [ "evidence/discoverability-crawler.png", "evidence/recon.json", "evidence/trackers.json" ], "findingIds": [ "F23" ] }, { "principleId": "be-trustworthy", "checkId": "humane-error-handling", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "The login entry labels Email and Password and exposes Forgot password and missing-confirmation recovery links; no premature inline blame was observed before interaction.", "pathIds": [ "home" ], "artifacts": [ "evidence/login-probe.json" ] }, { "principleId": "be-trustworthy", "checkId": "trustworthy-input-assistance", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "The login probe found empty autocomplete values on both the email and password fields.", "pathIds": [ "home" ], "artifacts": [ "evidence/login-probe.json" ], "findingIds": [ "F24" ] }, { "principleId": "be-trustworthy", "checkId": "safe-commercial-and-account-flows", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "The authentication entry clearly distinguishes Login, free Signup, forgot-password and confirmation-email recovery actions.", "pathIds": [ "home" ], "artifacts": [ "evidence/login-probe.json" ] }, { "principleId": "be-sustainable", "checkId": "optimised-assets", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "Of 55 images, 19 were more than twice their display width, 35 lacked srcset, 20 used legacy formats and none used a modern format.", "pathIds": [ "home" ], "artifacts": [ "evidence/images.json" ], "findingIds": [ "F25" ] }, { "principleId": "be-sustainable", "checkId": "no-wasteful-work", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "Trace showed low total blocking time and repeated scrolling did not grow heap, indicating no observed runaway foreground processing during the tested session.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-trace-summary.json", "evidence/heap-baseline", "evidence/heap-post-scroll" ] }, { "principleId": "be-sustainable", "checkId": "third-party-and-media-budget", "status": "issues", "confidence": "high", "method": "Active browser evidence and artifact comparison on representative paths.", "evidence": "Third parties account for 355,031 of 837,392 transferred bytes and 26 requests, including analytics and multiple advertising/fingerprinting domains before a core task is attempted.", "pathIds": [ "home" ], "artifacts": [ "evidence/home-network-summary.json", "evidence/trackers.json" ], "findingIds": [ "F26" ] }, { "principleId": "be-agent-ready", "checkId": "structured-agent-capabilities", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths.", "evidence": "No declared agent-facing commerce or productivity capability; emerging WebMCP exposure is not required for this public media catalog.", "reason": "No declared agent-facing commerce or productivity capability; emerging WebMCP exposure is not required for this public media catalog." }, { "principleId": "be-agent-ready", "checkId": "on-device-inference", "status": "not-applicable", "confidence": "high", "method": "Recon and applicability judgement across representative paths.", "evidence": "No summarisation, generation or language-model task was present where on-device inference would improve the core experience.", "reason": "No summarisation, generation or language-model task was present where on-device inference would improve the core experience." }, { "principleId": "be-memory-efficient", "checkId": "no-leak-under-repeated-interaction", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "After ten full-page down/up scroll cycles, heap decreased from 63,880,132 to 63,524,786 bytes and nodes from 225,181 to 223,384.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline", "evidence/heap-post-scroll" ] }, { "principleId": "be-memory-efficient", "checkId": "bounded-footprint", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "The loaded listing, age-verification integration and ads retained about 63.9MB in the baseline heap; this is substantial but proportionate enough to avoid a confident bloat finding without field comparison.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline" ] }, { "principleId": "be-memory-efficient", "checkId": "no-detached-dom-or-unbounded-listeners", "status": "pass", "confidence": "high", "method": "Direct browser inspection using the cited artifact on representative paths.", "evidence": "After repeated scrolling, node, closure, Array and Object populations were stable or lower; no Detached constructor appeared among top retained constructors.", "pathIds": [ "home" ], "artifacts": [ "evidence/heap-baseline", "evidence/heap-post-scroll" ] } ], "principleOutcomes": [ { "principleId": "respect-user-preferences", "expectation": "default", "status": "issues", "findingIds": [ "F01", "F02" ] }, { "principleId": "implement-natural-interactions", "expectation": "default", "status": "issues", "findingIds": [ "F03" ] }, { "principleId": "provide-guided-navigation", "expectation": "default", "status": "issues", "findingIds": [ "F04" ] }, { "principleId": "maximize-content-reduce-noise", "expectation": "default", "status": "issues", "findingIds": [ "F05", "F06" ] }, { "principleId": "adapt-to-the-form-factor", "expectation": "default", "status": "issues", "findingIds": [ "F07", "F08" ] }, { "principleId": "support-core-task-success", "expectation": "default", "status": "pass" }, { "principleId": "be-fast-and-stable", "expectation": "default", "status": "issues", "findingIds": [ "F09", "F10" ] }, { "principleId": "be-inclusive", "expectation": "default", "status": "issues", "findingIds": [ "F11", "F12", "F13", "F14" ] }, { "principleId": "follow-best-practices", "expectation": "default", "status": "issues", "findingIds": [ "F15" ] }, { "principleId": "be-discoverable", "expectation": "default", "status": "issues", "findingIds": [ "F16", "F17" ] }, { "principleId": "be-private-and-secure", "expectation": "default", "status": "issues", "findingIds": [ "F18", "F19", "F20", "F21" ] }, { "principleId": "be-resilient", "expectation": "contextual", "status": "pass" }, { "principleId": "be-internationalised", "expectation": "contextual", "status": "issues", "findingIds": [ "F22" ] }, { "principleId": "be-trustworthy", "expectation": "default", "status": "issues", "findingIds": [ "F23", "F24" ] }, { "principleId": "be-sustainable", "expectation": "contextual", "status": "issues", "findingIds": [ "F25", "F26" ] }, { "principleId": "be-agent-ready", "expectation": "contextual", "status": "not-applicable", "reason": "No declared agent-facing commerce or productivity capability; emerging WebMCP exposure is not required for this public media catalog. No summarisation, generation or language-model task was present where on-device inference would improve the core experience." }, { "principleId": "be-memory-efficient", "expectation": "default", "status": "pass" } ], "paths": [ { "id": "home", "description": "Homepage and newest-video listing; represents global chrome, discovery, filtering and the mandatory age-verification entry state.", "url": "https://rule34video.com/", "conditions": [ "desktop 1440x1000", "mobile 360x800", "prefers-color-scheme: dark", "prefers-reduced-motion: reduce", "forced-colors: active", "keyboard focus" ], "result": "issues" }, { "id": "detail", "description": "Representative video detail and playback page selected from the homepage.", "url": "https://rule34video.com/video/4512093/evy-s-anal-destruction/", "conditions": [ "desktop 1440x1000", "metadata and media inspection" ], "result": "issues" }, { "id": "tags", "description": "Tag index representing taxonomy/listing templates.", "url": "https://rule34video.com/tags/", "conditions": [ "mobile 360x800" ], "result": "issues" }, { "id": "search", "description": "Primary search journey, exercised with q=test to verify submission and result continuity.", "url": "https://rule34video.com/search/?q=test", "conditions": [ "rendered DOM" ], "result": "pass" }, { "id": "login", "description": "Authentication entry inspected for labels, autocomplete and modern authentication.", "url": "https://rule34video.com/login/", "conditions": [ "rendered DOM" ], "result": "issues" }, { "id": "not-found", "description": "Unknown route used to inspect HTTP failure handling and recovery surface.", "url": "https://rule34video.com/definitely-not-a-real-route-uplift/", "conditions": [ "mobile 360x800", "HTTP status" ], "result": "pass" } ], "findings": [ { "id": "F01", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-color-scheme", "guidanceId": "dark-mode", "summary": "The interface does not respond to the user color-scheme preference.", "evidence": "The CSS probe found no color-scheme, prefers-color-scheme or light-dark() support; the computed root color-scheme is normal and the dark-emulated capture is unchanged.", "suggestedFix": "Declare supported color schemes and express surfaces with preference-aware tokens.", "effort": "small", "artifacts": [ "evidence/home-dark.png", "evidence/ui-probe.json" ], "pathId": "home" }, { "id": "F02", "severity": "medium", "confidence": "high", "principleId": "respect-user-preferences", "principleCheckId": "respects-reduced-motion", "guidanceId": "accessibility", "summary": "Continuous animation remains active under reduced motion.", "evidence": "With prefers-reduced-motion: reduce, four animations were still running, including infinite 8s, 10s and 1.5s animations; no reduced-motion rule was found.", "suggestedFix": "Add a reduced-motion media query that removes non-essential animation and stops auto-repeating decorative effects.", "effort": "small", "artifacts": [ "evidence/reduced-motion.json" ], "pathId": "home" }, { "id": "F03", "severity": "low", "confidence": "high", "principleId": "implement-natural-interactions", "principleCheckId": "view-transitions", "guidanceId": "cross-document-transitions", "summary": "Route changes have no transition continuity.", "evidence": "The CSS probe found no view-transition usage across an MPA whose primary task moves among listing, search and detail routes.", "suggestedFix": "Use same-origin cross-document View Transitions with a reduced-motion fallback for listing-to-detail navigation.", "effort": "medium", "artifacts": [ "evidence/ui-probe.json", "evidence/recon.json" ], "pathId": "home" }, { "id": "F04", "severity": "low", "confidence": "high", "principleId": "provide-guided-navigation", "principleCheckId": "scroll-state-aware-chrome", "guidanceId": "scroll-position-aware-elements", "summary": "Long listings provide no scroll-state guidance.", "evidence": "The homepage is about 4600px tall on mobile, while the CSS probe found no scroll-state, progress or scroll-position-aware treatment.", "suggestedFix": "Add a lightweight scroll-position cue or responsive sticky chrome only where it helps orientation.", "effort": "small", "artifacts": [ "evidence/home-mobile-layout.json", "evidence/home-mobile.png" ], "pathId": "home" }, { "id": "F05", "severity": "medium", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "semantic-dismissible-primitives", "guidanceId": "declarative-dialog-popover-control", "summary": "Rich controls and overlays are not built from semantic platform primitives.", "evidence": "The platform probe found zero dialog, popover and details elements; filtering and the full-viewport age-verification state are custom/third-party UI.", "suggestedFix": "Use dialog for required modal flows and details/popover for disclosure and transient controls, preserving the legally required age gate.", "effort": "medium", "artifacts": [ "evidence/platform-probe.json", "evidence/home-desktop.png" ], "pathId": "home" }, { "id": "F06", "severity": "high", "confidence": "high", "principleId": "maximize-content-reduce-noise", "principleCheckId": "reduced-chrome", "guidanceId": "reduce-style-repetition", "summary": "Advertising is visually mixed into primary navigation and content chrome.", "evidence": "The crawler capture shows outbound promotional links such as “AI Jerk Off” and ThePornDude styled beside Tags, Login and Signup, competing with the content task.", "suggestedFix": "Clearly label and visually separate advertising, and reduce promotional chrome around search and content discovery.", "effort": "medium", "artifacts": [ "evidence/discoverability-crawler.png", "evidence/recon.json" ], "pathId": "home" }, { "id": "F07", "severity": "low", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "component-level-responsiveness", "guidanceId": "size-aware-styling", "summary": "Components adapt only at the viewport level.", "evidence": "The responsive probe found no @container/container-type usage across reused listing and filter components, although narrow layout itself had no overflow.", "suggestedFix": "Add container queries where card/filter components appear in multiple available widths.", "effort": "medium", "artifacts": [ "evidence/ui-probe.json", "evidence/home-mobile.png" ], "pathId": "home" }, { "id": "F08", "severity": "high", "confidence": "high", "principleId": "adapt-to-the-form-factor", "principleCheckId": "input-modality-aware", "guidanceId": "accessibility", "summary": "Keyboard focus is not visibly indicated on core controls.", "evidence": "A scripted focus walk found outline:none and no focus box shadow on menu, search and many navigation controls; several icon buttons also had no text.", "suggestedFix": "Add strong :focus-visible styles and accessible names while retaining at least 24 by 24 CSS pixel targets.", "effort": "small", "artifacts": [ "evidence/ui-probe.json", "evidence/axe.json" ], "pathId": "home" }, { "id": "F09", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "efficient-resource-delivery", "guidanceId": "optimize-image-priority", "summary": "Resource delivery includes avoidable blocking and weakly optimised assets.", "evidence": "HAR recorded 63 requests and 837,392 transferred bytes. A synchronous parser-inserted AgeVerif script is in the head, and the images audit found 20 missing dimensions and 35 images without srcset.", "suggestedFix": "Defer non-critical scripts where safe, reserve image space, and deliver responsive image candidates with explicit dimensions.", "effort": "medium", "artifacts": [ "evidence/home-network-summary.json", "evidence/images.json", "evidence/platform-probe.json" ], "pathId": "home" }, { "id": "F10", "severity": "medium", "confidence": "high", "principleId": "be-fast-and-stable", "principleCheckId": "trim-unused-and-duplicate-code", "guidanceId": "identify-heavy-scripts", "summary": "Third-party JavaScript dominates a substantial part of the initial load.", "evidence": "HAR recorded 20 script requests and 431,807 script bytes; Google Tag Manager alone transferred 169,277 bytes, and third parties transferred 355,031 bytes overall.", "suggestedFix": "Remove low-value vendors, load advertising and analytics after consent/intent, and conditionally load page-specific code.", "effort": "large", "artifacts": [ "evidence/home-network-summary.json", "evidence/trackers.json" ], "pathId": "home" }, { "id": "F11", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "names-roles-labels", "guidanceId": "accessibility", "summary": "Core controls and embedded advertising lack accessible names.", "evidence": "axe found critical button-name failures for the burger and search buttons, serious frame-title failures for two iframes, a critical unlabeled selector, and three unnamed links.", "suggestedFix": "Add programmatic names to icon buttons and links, labels to controls, and descriptive titles to iframes.", "effort": "small", "artifacts": [ "evidence/axe.json" ], "pathId": "home" }, { "id": "F12", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "sufficient-contrast", "guidanceId": "accessibility", "summary": "Text and controls fail minimum color contrast.", "evidence": "axe reported six serious color-contrast failures with another 44 nodes requiring review, including buttons, body copy and header text.", "suggestedFix": "Adjust foreground/background tokens to meet WCAG AA in default and interaction states.", "effort": "small", "artifacts": [ "evidence/axe.json", "evidence/home-mobile.png" ], "pathId": "home" }, { "id": "F13", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "structure-and-focus", "guidanceId": "accessibility", "summary": "The homepage lacks a strong semantic structure and visible focus order.", "evidence": "Rendered DOM has no h1, main or nav landmark, and the focus probe shows outlines removed from the first core controls.", "suggestedFix": "Add a single descriptive h1, main/nav landmarks, logical source order, and visible :focus-visible styling.", "effort": "medium", "artifacts": [ "evidence/recon.json", "evidence/ui-probe.json", "evidence/home-dom.json" ], "pathId": "home" }, { "id": "F14", "severity": "high", "confidence": "high", "principleId": "be-inclusive", "principleCheckId": "zoom-reflow-targets-and-media", "guidanceId": "accessibility", "summary": "Video has no caption or equivalent track.", "evidence": "The representative detail page contains a video element with zero track elements; several footer links also measured only 17px high.", "suggestedFix": "Provide captions or an equivalent transcript for video and enlarge undersized interactive targets.", "effort": "large", "artifacts": [ "evidence/detail-metadata.json", "evidence/ui-probe.json" ], "pathId": "home" }, { "id": "F15", "severity": "medium", "confidence": "high", "principleId": "follow-best-practices", "principleCheckId": "sound-document-and-assets", "guidanceId": "optimize-image-priority", "summary": "Image markup and delivery are not consistently sound.", "evidence": "The images audit found 20 images without width/height, 19 oversized images, 20 legacy-format images and no modern-format images among 55 inspected images.", "suggestedFix": "Emit width and height, responsive srcset/sizes, and AVIF/WebP variants while preserving alt text.", "effort": "medium", "artifacts": [ "evidence/images.json" ], "pathId": "home" }, { "id": "F16", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "canonical-and-indexing-signals", "guidanceId": "html", "summary": "Standard sitemap discovery is inconsistent.", "evidence": "/sitemap.xml returned 404 while a nonstandard /sitemap/ endpoint returned XML; robots.txt does not advertise that endpoint. Canonicals and successful public pages otherwise worked.", "suggestedFix": "Serve or redirect /sitemap.xml and declare the sitemap URL in robots.txt.", "effort": "small", "artifacts": [ "evidence/http-signals.txt" ], "pathId": "home" }, { "id": "F17", "severity": "medium", "confidence": "high", "principleId": "be-discoverable", "principleCheckId": "structured-and-shareable-metadata", "guidanceId": "html", "summary": "Video pages lack social share metadata.", "evidence": "The detail page has useful VideoObject JSON-LD but zero Open Graph tags, so shared previews cannot reliably represent its title, thumbnail and canonical URL.", "suggestedFix": "Add accurate Open Graph and Twitter Card metadata derived from the visible VideoObject fields.", "effort": "small", "artifacts": [ "evidence/detail-metadata.json" ], "pathId": "detail" }, { "id": "F18", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "secure-transport-and-headers", "guidanceId": "security", "summary": "Cookie and transport defenses are incomplete.", "evidence": "Ten of 12 observed cookies lacked Secure; several use SameSite=None. HSTS is absent and CSP only upgrades insecure requests rather than restricting script sources.", "suggestedFix": "Mark all HTTPS cookies Secure, use the strictest viable SameSite policy, deploy HSTS, and replace the upgrade-only CSP with an allowlist-based policy.", "effort": "medium", "artifacts": [ "evidence/cookies.json", "evidence/headers.json" ], "pathId": "home" }, { "id": "F19", "severity": "high", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "data-minimisation-and-third-parties", "guidanceId": "privacy", "summary": "The page sends a large, privacy-sensitive third-party footprint before user intent.", "evidence": "Tracker evidence found 14 third-party origins including Google Analytics; HAR counted 26 third-party requests and 355,031 bytes. Request URLs expose detailed device, plugin, canvas, locale and graphics signals to ad domains.", "suggestedFix": "Minimise vendors and fingerprinting parameters, gate non-essential analytics/ads behind meaningful consent or intent, and batch only necessary measurements.", "effort": "large", "artifacts": [ "evidence/trackers.json", "evidence/home-network-summary.json" ], "pathId": "home" }, { "id": "F20", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "in-context-permissions-and-modern-auth", "guidanceId": "passkeys", "summary": "Authentication is password-only and omits modern input semantics.", "evidence": "The login page exposes email and password fields with no autocomplete tokens and no WebAuthn/PublicKeyCredential integration.", "suggestedFix": "Add autocomplete=username and current-password immediately, then offer passkey authentication as a phishing-resistant option.", "effort": "medium", "artifacts": [ "evidence/login-probe.json" ], "pathId": "login" }, { "id": "F21", "severity": "medium", "confidence": "high", "principleId": "be-private-and-secure", "principleCheckId": "defensive-browser-policies", "guidanceId": "security", "summary": "Several browser-enforced policies are missing.", "evidence": "Headers include X-Frame-Options, nosniff and Referrer-Policy, but omit HSTS and Permissions-Policy; CSP contains only upgrade-insecure-requests.", "suggestedFix": "Add HSTS, an explicit Permissions-Policy, and a restrictive CSP with frame-ancestors and Trusted Types where applicable.", "effort": "medium", "artifacts": [ "evidence/headers.json" ], "pathId": "home" }, { "id": "F22", "severity": "low", "confidence": "high", "principleId": "be-internationalised", "principleCheckId": "lang-dir-and-logical-properties", "guidanceId": "translator", "summary": "Layout CSS is not prepared for bidirectional or translated content.", "evidence": "The document correctly declares lang=en, but the CSS probe found no logical inline/block properties and the root has no explicit direction.", "suggestedFix": "Retain the language declaration, add dir where content direction can vary, and replace physical left/right spacing and positioning with logical properties.", "effort": "medium", "artifacts": [ "evidence/recon.json", "evidence/ui-probe.json" ], "pathId": "home" }, { "id": "F23", "severity": "high", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "no-dark-patterns", "guidanceId": "custom-button-actions", "summary": "Outbound ads are presented like first-party navigation without clear disclosure.", "evidence": "The rendered crawler view places promotional outbound destinations among Tags, Login and Signup, while ad iframes are untitled and ad scripts come from opaque domains.", "suggestedFix": "Label advertising explicitly, separate it from first-party navigation, and make destination and commercial intent clear before activation.", "effort": "medium", "artifacts": [ "evidence/discoverability-crawler.png", "evidence/recon.json", "evidence/trackers.json" ], "pathId": "home" }, { "id": "F24", "severity": "medium", "confidence": "high", "principleId": "be-trustworthy", "principleCheckId": "trustworthy-input-assistance", "guidanceId": "autofill-sign-in-form", "summary": "Sign-in fields do not support standard autofill semantics.", "evidence": "The login probe found empty autocomplete values on both the email and password fields.", "suggestedFix": "Use autocomplete=username and autocomplete=current-password, and support passkey conditional UI when added.", "effort": "trivial", "artifacts": [ "evidence/login-probe.json" ], "pathId": "home" }, { "id": "F25", "severity": "medium", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "optimised-assets", "guidanceId": "deliver-optimized-decorative-images", "summary": "Listing imagery is oversized and lacks modern responsive delivery.", "evidence": "Of 55 images, 19 were more than twice their display width, 35 lacked srcset, 20 used legacy formats and none used a modern format.", "suggestedFix": "Generate appropriately sized AVIF/WebP candidates and responsive srcset/sizes; lazy-load truly below-fold images.", "effort": "medium", "artifacts": [ "evidence/images.json" ], "pathId": "home" }, { "id": "F26", "severity": "high", "confidence": "high", "principleId": "be-sustainable", "principleCheckId": "third-party-and-media-budget", "guidanceId": "deprioritize-background-fetches", "summary": "Third-party cost is disproportionate before content interaction.", "evidence": "Third parties account for 355,031 of 837,392 transferred bytes and 26 requests, including analytics and multiple advertising/fingerprinting domains before a core task is attempted.", "suggestedFix": "Set a third-party budget, remove low-value vendors, and defer non-essential third-party work until consent or interaction.", "effort": "large", "artifacts": [ "evidence/home-network-summary.json", "evidence/trackers.json" ], "pathId": "home" } ], "taskList": [ { "id": "T01", "title": "Reduce and gate third-party advertising, tracking and fingerprinting", "priority": 1, "findingIds": [ "F06", "F10", "F19", "F23", "F26" ], "guidanceId": "privacy", "status": "open" }, { "id": "T02", "title": "Repair keyboard, naming, landmark, contrast and caption accessibility", "priority": 2, "findingIds": [ "F08", "F11", "F12", "F13", "F14" ], "guidanceId": "accessibility", "status": "open" }, { "id": "T03", "title": "Harden cookies, CSP, HSTS and browser policies", "priority": 3, "findingIds": [ "F18", "F21" ], "guidanceId": "security", "status": "open" }, { "id": "T04", "title": "Optimise responsive images and resource delivery", "priority": 4, "findingIds": [ "F09", "F15", "F25" ], "guidanceId": "optimize-image-priority", "status": "open" }, { "id": "T05", "title": "Respect color and reduced-motion preferences", "priority": 5, "findingIds": [ "F01", "F02" ], "guidanceId": "dark-mode", "status": "open" }, { "id": "T06", "title": "Modernise sign-in with autocomplete and passkeys", "priority": 6, "findingIds": [ "F20", "F24" ], "guidanceId": "passkeys", "status": "open" }, { "id": "T07", "title": "Improve indexing and share metadata", "priority": 7, "findingIds": [ "F16", "F17" ], "guidanceId": "html", "status": "open" }, { "id": "T08", "title": "Adopt semantic responsive interaction primitives", "priority": 8, "findingIds": [ "F03", "F04", "F05", "F07", "F22" ], "guidanceId": "size-aware-styling", "status": "open" } ], "budget": { "pathCount": 6, "auditPasses": 1 }, "agent": "pi", "runId": "2026-07-27T07-57-20-398Z" }